$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: X5xkeYANUgaIwYFrHF1ZOrAbWxMPBPSiNc3n+5wGnHA= Subject key identifier: B8:75:17:25:EA:C7:04:D4:6A:2D:45:D3:19:3D:A7:0D:A7:15:5A:B1 Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: CB Signing time: Mon 03 Nov 2025 05:47:46 +0000 Manifest this update: Mon 03 Nov 2025 05:47:45 +0000 Manifest next update: Mon 10 Nov 2025 05:47:45 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: q/wWoxArsGaQlmC/L2mPLucOMOJGe+pO88bG89q6l6I=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Nov 3 05:47:45 2025 GMT Not After : Nov 10 05:47:45 2025 GMT Subject: CN=69084202-9a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:40:8c:c7:16:32:56:7b:d3:0f:00:af:75: 64:48:f2:60:61:c5:9a:e2:24:1f:29:f4:f3:4c:9b: a6:85:6c:c9:21:c2:8f:b5:52:86:6e:11:e7:d7:b8: 48:11:d0:8b:6a:6c:91:82:02:a7:dd:ab:a3:63:6b: 29:2c:e7:e4:39:ab:90:59:11:e5:ee:84:65:85:bb: fd:1c:d0:f6:5e:b2:7f:ae:df:24:9f:06:d1:10:49: b0:a8:ec:46:74:d5:89:03:2d:cd:30:86:ab:7a:ca: 05:59:89:1e:87:86:a1:e6:e6:8f:b0:74:25:64:18: 68:a4:31:44:2a:fe:0a:56:97:98:1c:b7:01:a1:2e: d6:ca:9d:59:21:ef:8b:c9:7e:e2:6a:9a:13:d1:90: ef:eb:0d:a1:55:69:d2:46:35:68:31:53:ae:5f:9d: 21:77:88:6d:b0:25:39:c6:9c:7e:89:ef:c5:28:31: 83:65:e5:4b:65:09:d5:e9:d3:6c:6d:52:26:9c:18: c3:0a:0c:c4:39:f6:dc:f7:48:ad:f3:0e:39:91:de: 86:aa:42:30:a7:c5:8d:ce:dc:a7:10:8b:24:4e:f8: 8b:77:92:19:85:24:2f:fa:c6:0f:8a:6d:26:9f:18: c7:4f:d4:89:b2:5a:5a:5b:9b:e7:8f:eb:5c:56:c9: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:75:17:25:EA:C7:04:D4:6A:2D:45:D3:19:3D:A7:0D:A7:15:5A:B1 X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:1d:e7:ab:33:6f:0d:37:e8:66:10:71:38:fc:8c:d8:6a: 12:4f:8e:03:0f:e2:78:62:62:46:e3:75:4e:f0:be:55:0b:b9: b9:fe:7e:65:71:9d:a1:3e:92:54:7f:8a:3b:8c:2e:a1:2c:3f: ac:fa:95:14:5f:93:32:62:4f:63:79:d9:ad:ea:30:b0:6f:5c: 57:9e:b7:73:02:62:f3:fd:00:0d:14:71:06:8b:c7:d5:49:d0: 6f:b6:ec:34:7d:2c:9d:a1:58:f1:cf:6b:2b:b1:dd:4b:77:2a: 99:26:a9:a9:8b:64:e1:15:8a:44:3f:7c:8f:5e:d5:37:5a:12: bb:22:d1:f6:02:a4:4f:6a:62:b3:2d:c7:5a:ab:fd:06:0b:9c: 96:bb:c5:ce:09:18:9a:51:3b:1e:65:d0:1f:b2:2c:f3:4e:fa: 06:00:72:02:e8:82:1d:80:af:ce:3e:38:43:cd:19:c9:b5:19: f1:88:51:de:98:3a:75:69:d9:9e:60:27:13:32:88:cf:12:e1: f2:77:fb:46:d8:08:7c:dd:07:66:3b:a0:84:d6:86:6f:1d:e9: 60:fa:7a:e9:c4:51:94:41:83:2a:f1:0b:e4:31:77:3a:05:f5: dc:6d:1b:49:50:99:c8:db:e4:7e:21:4f:34:af:13:f6:0d:76: e2:8c:9d:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUxMTAzMDU0NzQ1WhcNMjUxMTEwMDU0NzQ1WjAYMRYwFAYD VQQDEw02OTA4NDIwMi05YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudRAjMcWMlZ70w8Ar3VkSPJgYcWa4iQfKfTzTJumhWzJIcKPtVKGbhHn17hI EdCLamyRggKn3aujY2spLOfkOauQWRHl7oRlhbv9HND2XrJ/rt8knwbREEmwqOxG dNWJAy3NMIaresoFWYkeh4ah5uaPsHQlZBhopDFEKv4KVpeYHLcBoS7Wyp1ZIe+L yX7iapoT0ZDv6w2hVWnSRjVoMVOuX50hd4htsCU5xpx+ie/FKDGDZeVLZQnV6dNs bVImnBjDCgzEOfbc90it8w45kd6GqkIwp8WNztynEIskTviLd5IZhSQv+sYPim0m nxjHT9SJslpaW5vnj+tcVsk0HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh1FyXq xwTUai1F0xk9pw2nFVqxMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAGR3nqzNvDTfoZhBxOPyM2GoST44DD+J4YmJG43VO8L5VC7m5/n5l cZ2hPpJUf4o7jC6hLD+s+pUUX5MyYk9jedmt6jCwb1xXnrdzAmLz/QANFHEGi8fV SdBvtuw0fSydoVjxz2srsd1LdyqZJqmpi2ThFYpEP3yPXtU3WhK7ItH2AqRPamKz Lcdaq/0GC5yWu8XOCRiaUTseZdAfsizzTvoGAHIC6IIdgK/OPjhDzRnJtRnxiFHe mDp1admeYCcTMojPEuHyd/tG2Ah83QdmO6CE1oZvHelg+nrpxFGUQYMq8QvkMXc6 BfXcbRtJUJnI2+R+IU80rxP2DXbijJ24 -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:33 2025 by rpki-client