$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json) Hash identifier: I9hWroo+oKHWziN07YwEnU2ClG65qwaZtr8b5JstfR4= Subject key identifier: 30:1E:E5:4F:4E:F0:DF:7D:6F:0F:2C:EF:3C:69:AA:C7:46:7F:17:4E Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft Manifest number: 0644 Signing time: Wed 22 Oct 2025 23:57:32 +0000 Manifest this update: Wed 22 Oct 2025 23:57:31 +0000 Manifest next update: Wed 29 Oct 2025 23:57:31 +0000 Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: X4oEA22d2WKlkEryo9rxFLhGFXzunpZ7iWfzqJ/626s=) 2: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=) 3: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=) 4: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=) 5: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B Validity Not Before: Oct 22 23:57:31 2025 GMT Not After : Oct 29 23:57:31 2025 GMT Subject: CN=68f96f6b-a328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8c:9e:a2:b0:e7:0b:30:d3:2c:79:1e:2e:bb: 7d:de:f2:5a:13:d7:fc:e2:23:07:48:39:ac:1d:24: 5a:8d:6b:cd:ac:a7:f0:ce:2c:5c:99:f4:e5:91:7f: 66:4e:7d:05:cf:ba:a2:17:43:a1:a5:2a:de:b5:77: 11:4c:25:da:ac:ab:d8:40:41:dc:96:a5:b0:d4:7d: 6e:e7:6a:8f:89:e1:da:bd:56:e1:61:c1:e5:46:3c: b3:15:4a:b5:a0:62:53:bc:66:50:ff:d0:55:4b:35: a1:4b:0b:35:f9:dd:eb:2e:05:2b:77:27:29:e4:74: 84:59:92:24:fa:66:6b:6e:fd:6f:76:79:98:11:8d: 8f:a5:bc:50:2d:5d:15:9d:e0:54:86:9f:b1:a9:9d: f0:58:14:d9:1f:92:ec:55:8c:dd:d2:03:3a:cd:fc: 04:ad:21:df:0c:ba:46:09:72:2b:d4:ff:96:b4:05: 99:bf:36:bc:9c:bc:9c:c6:85:19:e4:e3:ae:9d:48: d9:44:8e:52:bf:0e:41:33:bd:b3:5e:bc:06:38:49: 04:fd:21:2c:aa:2f:46:1b:f7:7b:f6:97:48:84:e5: 7c:25:9c:f2:10:4d:97:3e:0d:8b:57:20:a2:bf:cd: b5:72:d7:88:c7:9b:a8:7c:14:d0:02:90:e7:5d:06: dd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1E:E5:4F:4E:F0:DF:7D:6F:0F:2C:EF:3C:69:AA:C7:46:7F:17:4E X509v3 Authority Key Identifier: keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:cd:c6:3d:3f:ba:5d:44:b7:9f:42:55:50:f9:eb:2a:d1:fd: 31:ab:40:05:43:af:87:40:b6:8e:f4:a7:c7:08:64:85:62:10: 34:fa:f6:6b:c7:53:99:1d:83:ab:f0:e5:00:36:f9:18:78:31: 06:9a:6a:48:ed:d4:c0:c6:95:09:b3:be:21:96:1d:33:8a:8e: 3e:33:9f:47:50:2a:65:48:b2:90:d7:0c:18:bf:00:0c:3e:0f: 80:e2:c2:0a:55:54:48:34:80:f2:5e:d6:19:7e:b9:8b:fd:45: 22:b9:49:58:25:94:5a:ce:bf:13:95:93:bc:1e:e6:b5:65:9d: d2:82:21:2f:e8:d2:be:96:1c:02:ef:72:d9:1c:95:b0:f6:77: 2a:d3:22:0d:23:ca:61:4e:8d:ab:12:cb:f1:b3:26:39:b9:70: d7:53:8d:01:74:b5:fe:ed:30:f6:c1:74:09:1f:59:8a:26:91: 35:22:54:e4:33:44:c6:78:53:01:1c:0b:53:8b:73:39:48:7a: 66:96:29:0a:ee:a8:e6:30:f4:44:c3:4a:07:2d:d0:43:cb:e4: 61:5d:2a:48:c8:7c:36:bb:3a:9e:d6:34:71:c7:54:7b:ec:93: 86:0e:f9:eb:a4:3c:17:89:8a:50:0f:93:95:ab:74:06:26:82: aa:0f:b4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC NTc3MzQ1NkIwHhcNMjUxMDIyMjM1NzMxWhcNMjUxMDI5MjM1NzMxWjAYMRYwFAYD VQQDEw02OGY5NmY2Yi1hMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIyeorDnCzDTLHkeLrt93vJaE9f84iMHSDmsHSRajWvNrKfwzixcmfTlkX9m Tn0Fz7qiF0OhpSretXcRTCXarKvYQEHclqWw1H1u52qPieHavVbhYcHlRjyzFUq1 oGJTvGZQ/9BVSzWhSws1+d3rLgUrdycp5HSEWZIk+mZrbv1vdnmYEY2PpbxQLV0V neBUhp+xqZ3wWBTZH5LsVYzd0gM6zfwErSHfDLpGCXIr1P+WtAWZvza8nLycxoUZ 5OOunUjZRI5Svw5BM72zXrwGOEkE/SEsqi9GG/d79pdIhOV8JZzyEE2XPg2LVyCi v821cteIx5uofBTQApDnXQbd4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAe5U9O 8N99bw8s7zxpqsdGfxdOMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4 RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhEOS81NDgzQkZCNkM4RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNi QWE4WW9Mc2Jsd3ExZHpSV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzzcY9P7pdRLefQlVQ+esq0f0xq0AFQ6+HQLaO9KfHCGSFYhA0+vZr x1OZHYOr8OUANvkYeDEGmmpI7dTAxpUJs74hlh0zio4+M59HUCplSLKQ1wwYvwAM Pg+A4sIKVVRINIDyXtYZfrmL/UUiuUlYJZRazr8TlZO8Hua1ZZ3SgiEv6NK+lhwC 73LZHJWw9ncq0yINI8phTo2rEsvxsyY5uXDXU40BdLX+7TD2wXQJH1mKJpE1IlTk M0TGeFMBHAtTi3M5SHpmlikK7qjmMPREw0oHLdBDy+RhXSpIyHw2uzqe1jRxx1R7 7JOGDvnrpDwXiYpQD5OVq3QGJoKqD7R/ -----END CERTIFICATE-----Generated at Thu Oct 23 10:04:09 2025 by rpki-client