$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: ihdNe26OMmmctZxgijbcy19ggsAnFIZ0kBtjd71l8dg= Subject key identifier: 3D:B1:62:60:04:CA:CC:2E:AC:82:D2:56:44:83:63:E3:E4:02:C9:93 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0C51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0C46 Signing time: Tue 04 Nov 2025 18:44:43 +0000 Manifest this update: Tue 04 Nov 2025 18:44:42 +0000 Manifest next update: Tue 11 Nov 2025 18:44:42 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: 5wjgxmujbcRthpXhgRjOGHtMQOuvBHVJ+RXlrU/naQc=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 5YnlbFiESO7UmvUP8KNkIgeb7OYcXBskhmx0foLpcp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3153 (0xc51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Nov 4 18:44:42 2025 GMT Not After : Nov 11 18:44:42 2025 GMT Subject: CN=690a499a-3447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:aa:26:02:8f:79:b3:05:12:0c:1b:56:68:ff: ac:80:d9:d2:84:59:de:c5:03:ff:14:65:5f:70:e3: 2a:c1:7c:d8:c2:32:09:bd:52:ff:4c:b8:c2:3c:77: 6e:7c:b3:4d:c5:ae:e8:04:2b:4b:a5:e6:16:67:98: cd:bd:d7:56:f1:13:fe:88:8c:15:6a:97:b2:9e:3c: fe:04:5f:23:60:c1:a6:77:39:5d:07:e5:3b:b8:a1: ae:62:8a:70:2c:58:8d:0d:63:49:e8:ff:26:eb:36: 36:72:c4:4f:35:bb:66:01:a6:50:79:8c:04:4d:c7: b5:3f:63:2f:a9:33:cd:ca:cf:8b:be:cf:75:29:91: e0:75:65:5b:80:40:79:73:af:bc:82:22:78:97:04: 30:3b:73:c0:43:8e:86:b9:7f:ee:7b:16:30:0c:6d: ea:04:24:c0:79:80:c2:5d:ba:a9:d4:38:e0:df:2f: 0f:12:aa:ec:95:02:a9:8e:6d:2f:4d:60:e0:3b:4a: b5:97:3a:6b:ed:fd:ca:a1:c0:64:6c:e2:cd:a4:1c: 12:27:59:3d:8e:07:77:e5:46:93:f4:f8:ef:e4:01: 1d:01:bc:e5:b2:91:b7:64:f1:2b:85:f2:39:06:eb: 42:e6:3a:ee:2a:14:d3:99:ac:91:84:fc:ef:f9:10: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B1:62:60:04:CA:CC:2E:AC:82:D2:56:44:83:63:E3:E4:02:C9:93 X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:92:ae:74:03:d9:f9:ef:2d:7e:b0:d7:23:c6:bc:ed:a1:b4: ee:b9:1a:f8:b0:61:5f:7a:18:08:2b:37:56:95:39:5d:fb:c5: fe:3e:10:47:17:45:b9:ab:48:bd:a5:a5:eb:22:98:5e:87:bd: 12:3b:92:c1:3a:7b:65:f1:f4:1c:cc:c5:b3:50:af:51:0c:e9: 28:c6:28:e2:c4:79:09:8e:d7:2f:25:00:9a:3e:db:09:59:85: 92:ea:80:70:32:98:ec:c0:ed:a4:5d:d5:44:fe:db:13:2b:2d: 97:e2:cc:5d:68:42:0d:67:a7:59:7e:76:59:a0:77:db:5a:25: 96:a8:63:1a:ba:08:c1:36:10:86:70:5c:25:2a:7b:cc:c0:4a: 7c:8d:75:ef:e3:68:27:62:bb:8e:04:36:6c:65:f3:3c:2a:f5: 32:ac:78:88:02:a4:33:15:a3:03:7f:67:69:3f:ea:6b:60:0a: 0a:dc:c6:a4:cc:0b:58:ad:6d:fa:4e:d3:ab:f4:ea:a3:74:8f: 38:50:2c:18:63:55:7c:a9:03:5a:f7:bd:a7:91:25:e5:20:02: e5:09:a7:0d:83:06:36:a9:44:04:4c:3d:55:08:85:1f:ea:85: 18:96:65:e4:c8:d5:f3:b3:32:85:46:e7:83:59:d6:24:53:e7: 0e:38:fe:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjUxMTA0MTg0NDQyWhcNMjUxMTExMTg0NDQyWjAYMRYwFAYD VQQDEw02OTBhNDk5YS0zNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6omAo95swUSDBtWaP+sgNnShFnexQP/FGVfcOMqwXzYwjIJvVL/TLjCPHdu fLNNxa7oBCtLpeYWZ5jNvddW8RP+iIwVapeynjz+BF8jYMGmdzldB+U7uKGuYopw LFiNDWNJ6P8m6zY2csRPNbtmAaZQeYwETce1P2MvqTPNys+Lvs91KZHgdWVbgEB5 c6+8giJ4lwQwO3PAQ46GuX/uexYwDG3qBCTAeYDCXbqp1Djg3y8PEqrslQKpjm0v TWDgO0q1lzpr7f3KocBkbOLNpBwSJ1k9jgd35UaT9Pjv5AEdAbzlspG3ZPErhfI5 ButC5jruKhTTmayRhPzv+RCWxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2xYmAE yswurILSVkSDY+PkAsmTMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSkq50A9n57y1+sNcjxrztobTuuRr4sGFfehgIKzdWlTld+8X+PhBH F0W5q0i9paXrIpheh70SO5LBOntl8fQczMWzUK9RDOkoxijixHkJjtcvJQCaPtsJ WYWS6oBwMpjswO2kXdVE/tsTKy2X4sxdaEINZ6dZfnZZoHfbWiWWqGMaugjBNhCG cFwlKnvMwEp8jXXv42gnYruOBDZsZfM8KvUyrHiIAqQzFaMDf2dpP+prYAoK3Mak zAtYrW36TtOr9OqjdI84UCwYY1V8qQNa972nkSXlIALlCacNgwY2qUQETD1VCIUf 6oUYlmXkyNXzszKFRueDWdYkU+cOOP5Q -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:26 2025 by rpki-client