$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json) Hash identifier: ZsBHVHr54sN+6oyfwm5hD3vvxbH+HmBBbHGHaWcPJuY= Subject key identifier: C6:17:DD:A7:62:15:CC:0B:17:F5:B3:57:67:60:0C:AE:C2:5E:F9:9B Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Certificate serial: 0559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft Manifest number: 0559 Signing time: Sun 02 Nov 2025 23:23:06 +0000 Manifest this update: Sun 02 Nov 2025 23:23:06 +0000 Manifest next update: Sun 09 Nov 2025 23:23:06 +0000 Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: AhikZohND4bxbsuP+OlWGYyxu8wpqNANHAOOd+LdahI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1369 (0x559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Validity Not Before: Nov 2 23:23:06 2025 GMT Not After : Nov 9 23:23:06 2025 GMT Subject: CN=6907e7da-f19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:a4:d9:55:8e:0e:c8:0b:44:86:89:ee:ec: 73:2a:ec:9c:c3:8d:a9:f0:ee:1a:9b:ec:97:64:ce: 6d:ed:f5:f2:71:24:f4:33:ac:6b:d6:96:a6:1d:1b: 32:be:4d:ea:c5:5a:ca:bb:77:61:ff:b7:b7:79:27: 90:ec:cc:15:54:5e:8d:b5:42:81:7f:b5:a5:75:cf: 7a:73:a3:cb:5a:5f:05:47:73:a9:71:f5:57:31:7c: a5:14:69:6a:25:58:ba:6e:ef:10:f3:72:bc:81:b4: e8:50:1d:77:a5:7a:a8:cb:21:cd:c1:d0:af:26:41: b7:73:95:d0:a3:02:2e:95:2d:6c:09:39:3b:f4:90: 3c:94:79:97:20:de:29:74:45:75:c9:21:da:67:cd: 21:96:0e:32:af:ae:45:6e:ef:c0:3a:79:1e:4f:1b: b8:2d:63:a0:5b:ca:d3:8a:d2:71:a2:f7:f9:b1:bf: 1b:a2:19:05:28:3d:1c:34:7f:36:6b:65:e2:18:ef: 29:54:b5:4e:1f:63:bc:e3:c1:02:b3:93:93:29:2b: 85:f6:61:8d:fc:82:d1:ff:87:8f:fc:b8:19:5c:e3: 59:98:c1:d6:74:bf:2a:e0:9a:87:d7:c8:aa:cb:54: d9:d6:12:83:76:07:9d:4a:43:ef:6f:bc:32:c0:98: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:17:DD:A7:62:15:CC:0B:17:F5:B3:57:67:60:0C:AE:C2:5E:F9:9B X509v3 Authority Key Identifier: keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5d:c4:cb:cb:c8:e8:36:0a:63:1f:ad:b3:2f:18:70:57:90: 3a:57:57:7b:96:f0:37:3c:4e:56:c1:7e:33:f4:f0:af:54:de: f0:ed:06:99:d7:cc:17:80:f9:ea:2a:22:c8:2f:59:2d:16:9b: 21:2c:32:da:40:ec:69:f6:61:df:34:f3:66:be:26:19:2b:92: a3:85:69:3f:32:79:68:a0:41:dd:fd:33:30:b7:fd:ac:1f:c5: f1:6d:e1:b4:c6:b8:5d:5a:dc:c0:7c:61:bb:85:d3:bd:2a:8c: 72:3e:49:d0:a9:02:36:6d:73:30:7e:9f:b8:61:3a:7f:94:18: f6:bd:da:89:97:f3:2e:c0:8e:6e:cd:57:5e:d0:f5:95:b6:4d: a0:80:17:f9:39:a2:8c:76:ca:72:34:dc:81:10:36:24:a3:6b: e5:a6:ca:99:d7:a2:cb:b1:1b:4a:28:30:3a:af:86:33:c8:d6: 8d:d5:a3:f6:f3:f8:58:20:06:35:8d:bd:d9:96:e2:41:22:f8: 1a:c9:79:cf:b6:34:3b:77:af:31:43:fd:0d:61:f1:6c:9b:46: 72:39:65:b7:31:fd:ea:d6:98:62:af:b4:dd:b1:73:3b:55:48: 50:4a:e9:d1:a9:a8:02:74:dc:45:92:9b:ee:19:1e:d2:3e:de: e8:f1:a6:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF RDU3NUYxREMwHhcNMjUxMTAyMjMyMzA2WhcNMjUxMTA5MjMyMzA2WjAYMRYwFAYD VQQDEw02OTA3ZTdkYS1mMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Wk2VWODsgLRIaJ7uxzKuycw42p8O4am+yXZM5t7fXycST0M6xr1pamHRsy vk3qxVrKu3dh/7e3eSeQ7MwVVF6NtUKBf7Wldc96c6PLWl8FR3OpcfVXMXylFGlq JVi6bu8Q83K8gbToUB13pXqoyyHNwdCvJkG3c5XQowIulS1sCTk79JA8lHmXIN4p dEV1ySHaZ80hlg4yr65Fbu/AOnkeTxu4LWOgW8rTitJxovf5sb8bohkFKD0cNH82 a2XiGO8pVLVOH2O848ECs5OTKSuF9mGN/ILR/4eP/LgZXONZmMHWdL8q4JqH18iq y1TZ1hKDdgedSkPvb7wywJjuAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYX3adi FcwLF/WzV2dgDK7CXvmbMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzXcTLy8joNgpjH62zLxhwV5A6V1d7lvA3PE5WwX4z9PCvVN7w7QaZ 18wXgPnqKiLIL1ktFpshLDLaQOxp9mHfNPNmviYZK5KjhWk/MnlooEHd/TMwt/2s H8XxbeG0xrhdWtzAfGG7hdO9KoxyPknQqQI2bXMwfp+4YTp/lBj2vdqJl/MuwI5u zVde0PWVtk2ggBf5OaKMdspyNNyBEDYko2vlpsqZ16LLsRtKKDA6r4YzyNaN1aP2 8/hYIAY1jb3ZluJBIvgayXnPtjQ7d68xQ/0NYfFsm0ZyOWW3Mf3q1phir7TdsXM7 VUhQSunRqagCdNxFkpvuGR7SPt7o8aYL -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:18 2025 by rpki-client