$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: 0CYjJtflLFZRhc+73U406uJBge36MzUdyMioAGMrOiw= Subject key identifier: F2:35:3D:F0:A2:6B:DB:4F:7C:70:88:9D:08:96:65:73:94:14:19:4C Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 0386 Signing time: Thu 23 Oct 2025 02:06:32 +0000 Manifest this update: Thu 23 Oct 2025 02:06:31 +0000 Manifest next update: Thu 30 Oct 2025 02:06:31 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: /s//1ymBAv5I5W18UKki4Ib1ZcUgrgdlTIhVPaOVWkc=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Oct 23 02:06:31 2025 GMT Not After : Oct 30 02:06:31 2025 GMT Subject: CN=68f98da8-5498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e7:5c:c6:3d:26:be:e2:c4:07:0f:ad:db:7f: c9:00:d4:7e:38:4c:f0:47:e1:be:be:48:91:ff:92: 51:c6:57:0b:33:36:43:e7:b8:2f:32:76:10:60:57: 35:a6:b5:3f:47:6e:e2:97:a8:6c:35:cf:f2:d1:e7: 3e:cc:60:f4:f4:2e:fe:c6:7c:d1:4c:98:02:30:1a: 15:08:54:58:4a:c5:b8:d2:e1:6c:f3:2c:f9:b2:36: 3d:ca:d8:ee:08:4e:22:81:e5:fb:e5:f5:2f:3d:e5: 18:b7:f9:ba:7f:f7:b6:1f:fc:b2:de:eb:3c:0b:8e: d0:3f:a0:a9:cc:b0:de:7e:d3:32:88:f9:d0:5e:32: 03:9f:2d:d9:db:eb:8d:55:e1:a4:15:47:9e:12:2e: f6:43:aa:a1:b7:4b:a2:21:0b:9e:c9:43:a3:4f:63: 07:d5:a2:c9:62:b9:f5:e7:a1:8a:bd:62:cb:9e:13: a9:35:3b:fa:66:e9:98:e8:06:6a:86:a9:d9:12:87: 06:5b:e7:13:a8:44:b5:e8:a6:11:1e:70:6c:31:2e: 17:83:07:f3:a7:8e:38:ce:b1:05:0f:47:75:c1:f2: da:c4:77:ea:d7:bd:af:31:5a:d6:c3:10:de:f7:e2: 75:97:9b:46:8d:b9:b1:e1:7a:61:b3:4e:99:36:96: d3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:3D:F0:A2:6B:DB:4F:7C:70:88:9D:08:96:65:73:94:14:19:4C X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7d:c4:d6:62:ed:28:79:74:0b:7d:d9:04:7d:1e:5a:60:91: cd:80:27:9a:8c:ed:73:0f:a7:d2:ab:6f:9a:59:ab:dd:3e:72: 38:d1:a6:47:8f:4f:fa:68:fc:a1:74:1a:b0:5d:a6:09:4d:2c: 2f:ef:6d:98:b2:08:88:e9:7d:9a:01:89:b3:4f:60:c6:ef:3a: b3:b4:9c:15:c9:cd:7d:c9:cd:3b:22:c0:d0:02:0a:f9:5d:11: 3e:66:a0:1b:e2:23:d2:12:c4:8e:57:29:64:da:0b:b1:e4:44: 48:02:f3:9a:96:9b:f0:20:fa:02:e2:5f:b0:bd:d5:11:58:92: 70:55:5d:a5:c8:5a:5b:49:62:2c:3e:26:a0:b5:b3:b8:ca:c9: 67:87:c5:c0:5e:88:d2:e3:e1:fb:ef:9f:a7:85:95:4e:9b:a5: 2e:a6:8b:1b:64:a2:3c:e9:4c:1d:21:b1:82:ba:53:f7:79:c4: 2f:21:ab:28:80:e5:ff:3d:68:64:c9:de:da:a8:df:3a:6a:a8: 12:3e:75:a4:ee:25:3c:00:3c:54:2c:b4:43:94:72:78:0b:44: 57:20:16:dd:94:6b:9b:5f:0e:e5:bc:90:2d:f1:ac:b9:68:16: aa:f9:d8:24:6a:a7:d9:99:98:04:6a:60:12:f8:c2:d6:68:ac: 8e:78:e3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUxMDIzMDIwNjMxWhcNMjUxMDMwMDIwNjMxWjAYMRYwFAYD VQQDEw02OGY5OGRhOC01NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Odcxj0mvuLEBw+t23/JANR+OEzwR+G+vkiR/5JRxlcLMzZD57gvMnYQYFc1 prU/R27il6hsNc/y0ec+zGD09C7+xnzRTJgCMBoVCFRYSsW40uFs8yz5sjY9ytju CE4igeX75fUvPeUYt/m6f/e2H/yy3us8C47QP6CpzLDeftMyiPnQXjIDny3Z2+uN VeGkFUeeEi72Q6qht0uiIQueyUOjT2MH1aLJYrn156GKvWLLnhOpNTv6ZumY6AZq hqnZEocGW+cTqES16KYRHnBsMS4Xgwfzp444zrEFD0d1wfLaxHfq172vMVrWwxDe 9+J1l5tGjbmx4Xphs06ZNpbToQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI1PfCi a9tPfHCInQiWZXOUFBlMMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChfcTWYu0oeXQLfdkEfR5aYJHNgCeajO1zD6fSq2+aWavdPnI40aZH j0/6aPyhdBqwXaYJTSwv722YsgiI6X2aAYmzT2DG7zqztJwVyc19yc07IsDQAgr5 XRE+ZqAb4iPSEsSOVylk2gux5ERIAvOalpvwIPoC4l+wvdURWJJwVV2lyFpbSWIs PiagtbO4yslnh8XAXojS4+H775+nhZVOm6UuposbZKI86UwdIbGCulP3ecQvIaso gOX/PWhkyd7aqN86aqgSPnWk7iU8ADxULLRDlHJ4C0RXIBbdlGubXw7lvJAt8ay5 aBaq+dgkaqfZmZgEamAS+MLWaKyOeOMd -----END CERTIFICATE-----Generated at Thu Oct 23 20:36:50 2025 by rpki-client