$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: /wEGlMGN5e+ZIYVNXtCyvAttM9cYcFpIhCghNkJ8P4g= Subject key identifier: B0:33:FA:84:BD:39:E6:C9:86:39:86:A6:3F:05:1C:4B:F7:5B:9B:6B Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0AE9 Signing time: Wed 22 Oct 2025 20:40:54 +0000 Manifest this update: Wed 22 Oct 2025 20:40:54 +0000 Manifest next update: Wed 29 Oct 2025 20:40:54 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: hK9rf2Hwtgn0jcBwSxUaCvNFYkhv7Yg49zTULEDPU+I=) 2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: xTtZn9aZIB/fSzr6F1pFXv9qqXV1JjTBS40WClRRCIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 22 20:40:54 2025 GMT Not After : Oct 29 20:40:54 2025 GMT Subject: CN=68f94156-ea73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cc:65:6c:83:85:f8:73:f4:a4:f7:b2:28:38: c0:d3:0a:6b:a6:0a:4a:10:89:0b:d5:07:70:53:78: 03:38:73:1f:58:da:2e:e6:98:a9:f2:6d:83:45:05: 1b:17:6c:54:22:ed:2a:e7:02:78:78:a5:ec:fd:ee: 85:4d:23:a3:89:9a:50:e2:ed:9e:81:e7:8e:2f:88: 0d:d7:bc:65:6b:fd:60:42:dc:e1:5c:4b:64:8d:70: e3:fa:fc:3f:2a:43:22:62:fb:fa:4e:ec:bd:ff:c1: 3b:9f:4c:f3:01:11:aa:2a:7f:35:74:0d:60:9c:e8: 04:85:39:89:7b:b3:b5:dd:bb:ce:07:bb:06:11:83: a8:80:a2:a8:28:a1:00:a2:c5:c7:c5:80:e9:2d:ac: 45:4b:35:51:82:52:e8:0a:34:d2:33:a3:c2:83:45: 76:57:6f:cf:88:b9:69:c3:a1:01:7e:36:b8:4a:58: 55:a0:1f:94:d1:31:ed:cd:82:94:39:31:b5:a2:bf: 10:64:63:4c:83:19:e2:16:da:97:85:57:94:8b:b8: 34:c6:f5:90:4f:78:0a:01:d2:3e:05:f0:a6:a0:e1: 66:d5:de:0c:7d:13:31:6f:c7:3b:23:b3:ae:f2:16: bf:43:0f:de:fb:ed:a0:18:c5:af:33:3a:7b:1c:65: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:FA:84:BD:39:E6:C9:86:39:86:A6:3F:05:1C:4B:F7:5B:9B:6B X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:33:2e:bc:be:92:f0:84:d3:75:c9:b6:b2:fb:6f:fe:7d:c6: 04:18:02:bc:12:17:49:a7:ce:55:13:1f:7b:10:c2:8e:a1:c9: 73:7a:1c:a9:4d:e4:d8:f9:23:da:97:6c:f6:b8:37:6e:f4:3f: 27:03:2e:c9:63:8b:dc:3a:12:cf:22:8e:d3:90:f1:5f:df:69: 82:7a:28:c9:14:f4:cb:c8:65:72:5c:03:be:b7:fb:5f:c9:b1: 00:22:fa:78:99:47:44:88:21:0f:d9:02:50:15:1d:84:1a:fb: e4:2d:fc:9e:93:ee:d3:bd:87:4c:5f:b9:6e:71:c1:ee:6f:13: fe:55:1a:bf:e8:a9:a3:d2:30:8f:1f:b4:df:04:05:5a:3a:bf: 98:40:e9:52:2d:9d:43:27:33:77:25:fe:ac:59:0e:40:c8:8b: 47:b9:d0:85:de:7c:ed:d2:bf:42:c5:cc:96:c0:ca:99:a9:ac: 49:92:48:62:2c:67:e5:dd:7c:72:59:e1:5c:27:23:57:10:7a: f2:52:8a:d2:4c:68:be:da:7a:ab:71:db:1e:f9:02:3d:89:f5: af:29:8f:d5:6d:82:d6:46:93:41:73:09:68:ef:fb:0f:16:9b: e2:ec:84:0f:82:f3:f6:00:e9:0b:cf:54:54:d4:34:68:1c:7e: b8:b6:6f:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjUxMDIyMjA0MDU0WhcNMjUxMDI5MjA0MDU0WjAYMRYwFAYD VQQDEw02OGY5NDE1Ni1lYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA68xlbIOF+HP0pPeyKDjA0wprpgpKEIkL1QdwU3gDOHMfWNou5pip8m2DRQUb F2xUIu0q5wJ4eKXs/e6FTSOjiZpQ4u2egeeOL4gN17xla/1gQtzhXEtkjXDj+vw/ KkMiYvv6Tuy9/8E7n0zzARGqKn81dA1gnOgEhTmJe7O13bvOB7sGEYOogKKoKKEA osXHxYDpLaxFSzVRglLoCjTSM6PCg0V2V2/PiLlpw6EBfja4SlhVoB+U0THtzYKU OTG1or8QZGNMgxniFtqXhVeUi7g0xvWQT3gKAdI+BfCmoOFm1d4MfRMxb8c7I7Ou 8ha/Qw/e++2gGMWvMzp7HGXwCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAz+oS9 OebJhjmGpj8FHEv3W5trMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMMy68vpLwhNN1ybay+2/+fcYEGAK8EhdJp85VEx97EMKOoclzehyp TeTY+SPal2z2uDdu9D8nAy7JY4vcOhLPIo7TkPFf32mCeijJFPTLyGVyXAO+t/tf ybEAIvp4mUdEiCEP2QJQFR2EGvvkLfyek+7TvYdMX7luccHubxP+VRq/6Kmj0jCP H7TfBAVaOr+YQOlSLZ1DJzN3Jf6sWQ5AyItHudCF3nzt0r9CxcyWwMqZqaxJkkhi LGfl3XxyWeFcJyNXEHryUorSTGi+2nqrcdse+QI9ifWvKY/VbYLWRpNBcwlo7/sP Fpvi7IQPgvP2AOkLz1RU1DRoHH64tm/3 -----END CERTIFICATE-----Generated at Fri Oct 24 08:30:26 2025 by rpki-client