$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: aURzN76TKa43+VqABRHJ/Uz39pIquaLCDU8ebFNzb24= Subject key identifier: BE:EB:11:6C:CD:33:4F:E3:A2:E8:9A:31:50:AB:29:79:96:F5:14:7A Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: C1 Signing time: Thu 23 Oct 2025 07:54:02 +0000 Manifest this update: Thu 23 Oct 2025 07:54:01 +0000 Manifest next update: Thu 30 Oct 2025 07:54:01 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: T4HS20ac3oY92tvpYpJbveTqzr+Xka+w7qdVCPedY9w=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Oct 23 07:54:01 2025 GMT Not After : Oct 30 07:54:01 2025 GMT Subject: CN=68f9df1a-2b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:fe:ab:71:d1:ad:62:8c:0c:0f:f5:4c:61: ad:3b:eb:49:e7:4d:db:f0:a6:66:be:0c:ac:5d:c0: d3:1a:fd:97:8b:08:46:8b:5f:ed:19:a7:4c:a3:41: 84:6b:6e:fa:cd:25:94:a8:29:49:28:d9:4b:fe:46: 35:1d:87:a9:29:86:3a:84:e2:b2:51:b6:9f:90:67: 17:ae:f5:50:f2:36:8f:23:10:71:80:53:f9:68:4f: a2:a0:94:5a:92:81:bf:20:ff:3c:bb:a8:83:e1:4e: 2d:eb:db:d6:a5:a9:6b:2c:a1:e0:a1:aa:23:d5:ce: b1:bc:7b:c9:71:dd:8b:16:1f:dc:9b:16:99:22:00: 88:cd:77:b0:c9:f1:e5:70:03:ef:75:cc:a5:59:18: 01:fc:cd:b1:b7:d8:be:d2:fc:dc:5d:fa:17:f8:3e: 25:58:7a:ba:7e:21:2c:8d:4b:72:70:7c:d6:63:c9: 9d:70:f7:48:82:c2:84:1d:04:1d:11:e7:06:18:1f: 1a:7f:a0:da:9f:43:9f:4f:98:59:40:69:a3:c2:c1: 0d:0c:f1:cb:64:5f:05:84:c3:58:b3:78:9a:90:fe: 65:1d:48:6f:45:d7:97:2f:ce:df:f9:8b:65:8b:aa: 8d:0b:8d:f9:bd:f8:40:f4:51:fe:4a:7f:f8:ef:08: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EB:11:6C:CD:33:4F:E3:A2:E8:9A:31:50:AB:29:79:96:F5:14:7A X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:9f:17:46:16:60:68:e9:58:b5:5b:b7:a6:00:55:6d:7f: 02:a5:13:dd:ea:2e:9f:76:60:ee:17:e1:e8:6f:8e:a0:ed:f3: 34:42:e1:e8:17:6a:c9:11:d0:c5:e0:7b:00:a2:23:84:34:8e: ca:7c:bb:a3:e1:c9:9a:00:39:3f:ff:66:9e:37:b7:f1:4e:cc: 7e:e7:da:7e:79:59:0e:0e:27:18:e9:24:11:e2:6c:2b:0d:56: b9:1b:f2:01:a6:5c:69:95:f1:d7:06:3f:9f:0e:40:2c:6a:10: 24:ad:67:6f:23:22:75:46:5d:f8:8d:bd:6b:80:99:16:1c:ca: 1f:51:8e:b7:e8:ce:f9:cd:01:08:29:1e:11:12:66:c4:24:eb: b5:cb:de:55:fe:a2:ed:c4:39:09:52:07:71:e4:8f:ae:2c:a7: 34:79:78:f3:85:29:2e:15:28:5b:b3:7c:85:26:06:9f:c1:86: e5:6f:e6:f5:28:9c:46:95:e9:d6:94:27:6d:dc:1f:ca:28:fd: 73:05:41:25:bd:a4:50:53:ff:81:d7:92:e5:7d:88:94:24:21: c3:50:4c:ba:ee:e5:4c:9b:72:09:f8:50:24:85:ea:d4:11:22: 8a:7d:b7:52:55:8a:4e:cb:2c:06:83:4e:02:53:52:f6:0c:a3: 04:b6:a7:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJGOEMxMTAvBgNVBAUTKDAxN0Q4REI4QTc4ODc0QUIyRjlBRDk3REU1N0FGREUx QkUxNjdENDQwHhcNMjUxMDIzMDc1NDAxWhcNMjUxMDMwMDc1NDAxWjAYMRYwFAYD VQQDEw02OGY5ZGYxYS0yYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Fb+q3HRrWKMDA/1TGGtO+tJ503b8KZmvgysXcDTGv2XiwhGi1/tGadMo0GE a276zSWUqClJKNlL/kY1HYepKYY6hOKyUbafkGcXrvVQ8jaPIxBxgFP5aE+ioJRa koG/IP88u6iD4U4t69vWpalrLKHgoaoj1c6xvHvJcd2LFh/cmxaZIgCIzXewyfHl cAPvdcylWRgB/M2xt9i+0vzcXfoX+D4lWHq6fiEsjUtycHzWY8mdcPdIgsKEHQQd EecGGB8af6Dan0OfT5hZQGmjwsENDPHLZF8FhMNYs3iakP5lHUhvRdeXL87f+Ytl i6qNC435vfhA9FH+Sn/47whDhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7rEWzN M0/jouiaMVCrKXmW9RR6MB8GA1UdIwQYMBaAFAF9jbiniHSrL5rZfeV6/eG+Fn1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81NTc5QjlCMDg2 RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRLc3ZtdGw5NVhyOTRiNFdm VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9BWDJOdUtlSWRL c3ZtdGw5NVhyOTRiNFdmVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoZ58XRhZgaOlYtVu3pgBVbX8CpRPd6i6fdmDuF+Hob46g7fM0QuHo F2rJEdDF4HsAoiOENI7KfLuj4cmaADk//2aeN7fxTsx+59p+eVkODicY6SQR4mwr DVa5G/IBplxplfHXBj+fDkAsahAkrWdvIyJ1Rl34jb1rgJkWHMofUY636M75zQEI KR4REmbEJOu1y95V/qLtxDkJUgdx5I+uLKc0eXjzhSkuFShbs3yFJgafwYblb+b1 KJxGlenWlCdt3B/KKP1zBUElvaRQU/+B15LlfYiUJCHDUEy67uVMm3IJ+FAkherU ESKKfbdSVYpOyywGg04CU1L2DKMEtqf3 -----END CERTIFICATE-----Generated at Thu Oct 23 13:04:28 2025 by rpki-client