$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: Y7urgguLOIUwoLweE0+fn9/Yf9MEFs+Wk8lRr4o8GNg= Subject key identifier: 62:47:29:44:32:EA:11:AF:E7:07:F9:A9:E1:12:25:52:E5:5B:F3:99 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0A92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0A7D Signing time: Tue 04 Nov 2025 19:42:21 +0000 Manifest this update: Tue 04 Nov 2025 19:42:21 +0000 Manifest next update: Tue 11 Nov 2025 19:42:21 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: rQ90ZsK/1bRBX8kisM/x0p1L5EfOYG016vHGX/3zFLU=) 2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: E9181+VVT+rwNNkc7uINFuNWW6wPgms9gTqr7A850dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Nov 4 19:42:21 2025 GMT Not After : Nov 11 19:42:21 2025 GMT Subject: CN=690a571d-0b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:10:8f:2d:33:3f:c1:00:6d:24:ce:89:44: 14:1a:fa:c3:d8:8d:23:f6:e7:a6:76:29:8a:20:68: f1:25:25:fb:ad:5d:e4:58:01:b1:8d:5b:48:74:5e: 0f:54:e0:31:c0:6b:0b:0f:fb:9d:43:b5:ab:aa:e8: ba:60:cd:dc:42:dc:de:71:96:1f:ea:97:1e:88:9d: da:ae:0b:fb:da:80:d4:75:64:47:d6:7b:0d:8d:fd: 77:d9:48:b3:58:16:36:fe:8d:93:e2:0d:7d:e7:ff: 3a:29:99:e2:33:bc:34:9e:9d:1f:29:b0:27:80:60: 5c:60:3f:5f:47:7e:08:43:06:56:a3:5f:96:90:95: 06:6f:f6:9f:39:a3:b5:d0:10:04:cb:cb:03:19:88: f6:7b:d0:22:3e:51:07:6e:0b:30:e6:92:ca:5d:d8: 79:1b:ff:a8:93:97:bd:77:38:81:41:29:a2:c3:d9: 2b:d7:f3:23:3d:2a:76:06:67:6d:0d:ba:b3:5c:16: 1f:20:52:3b:d9:b4:6a:25:eb:bf:73:09:2a:0f:c6: a6:60:f4:96:d6:89:39:cf:83:99:25:c8:95:ec:c6: c9:7b:de:52:fd:eb:1e:c8:14:2d:45:87:d6:9e:b8: db:64:36:be:51:e0:a1:f5:81:fe:14:bd:89:0e:f2: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:47:29:44:32:EA:11:AF:E7:07:F9:A9:E1:12:25:52:E5:5B:F3:99 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:bf:1b:d1:2c:bf:c3:a8:33:e9:c2:c9:af:05:62:8f:28: c0:91:3b:0c:0b:e2:6f:4d:a5:4c:09:e7:1c:b9:aa:79:42:6e: 7c:81:1a:50:2c:51:dc:5f:00:14:7c:f7:64:56:4b:3e:58:66: 38:d0:39:10:cc:d6:f2:f6:bf:8a:24:48:9e:75:f0:d7:81:2c: 6f:30:c6:9b:9b:ef:de:92:a7:e9:55:48:d3:6f:91:f6:21:f8: 44:ff:6a:64:c1:40:82:c9:0e:35:a5:79:a8:85:33:eb:0e:a1: 24:44:1b:5a:7f:c7:2c:16:8c:f8:79:c0:32:ac:c5:a6:8c:61: 4b:44:fc:43:7d:80:23:a0:80:f8:cf:cc:45:d5:02:30:dc:07: 06:d0:4b:55:33:2d:66:dd:1f:08:97:cb:f2:6a:ef:58:07:19: 94:0c:82:71:e5:65:44:8b:9f:3f:08:6e:eb:04:1f:1f:d0:3d: cd:6b:c8:ce:f8:df:df:48:fb:5e:53:4e:8e:a3:e6:52:ed:86: 48:b8:1f:03:26:01:19:cd:61:26:40:3a:7f:51:41:8a:2b:a0: 0b:fd:3b:b9:17:af:79:46:a1:4d:ba:ba:fb:14:8a:60:3a:c2: 98:b5:12:59:f5:59:b2:64:a5:c6:48:e0:f7:63:39:31:88:94: 63:09:41:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjUxMTA0MTk0MjIxWhcNMjUxMTExMTk0MjIxWjAYMRYwFAYD VQQDEw02OTBhNTcxZC0wYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19IQjy0zP8EAbSTOiUQUGvrD2I0j9uemdimKIGjxJSX7rV3kWAGxjVtIdF4P VOAxwGsLD/udQ7Wrqui6YM3cQtzecZYf6pceiJ3argv72oDUdWRH1nsNjf132Uiz WBY2/o2T4g195/86KZniM7w0np0fKbAngGBcYD9fR34IQwZWo1+WkJUGb/afOaO1 0BAEy8sDGYj2e9AiPlEHbgsw5pLKXdh5G/+ok5e9dziBQSmiw9kr1/MjPSp2Bmdt DbqzXBYfIFI72bRqJeu/cwkqD8amYPSW1ok5z4OZJciV7MbJe95S/eseyBQtRYfW nrjbZDa+UeCh9YH+FL2JDvIfnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJHKUQy 6hGv5wf5qeESJVLlW/OZMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQBL8b0Sy/w6gz6cLJrwVijyjAkTsMC+JvTaVMCeccuap5Qm58gRpQ LFHcXwAUfPdkVks+WGY40DkQzNby9r+KJEiedfDXgSxvMMabm+/ekqfpVUjTb5H2 IfhE/2pkwUCCyQ41pXmohTPrDqEkRBtaf8csFoz4ecAyrMWmjGFLRPxDfYAjoID4 z8xF1QIw3AcG0EtVMy1m3R8Il8vyau9YBxmUDIJx5WVEi58/CG7rBB8f0D3Na8jO +N/fSPteU06Oo+ZS7YZIuB8DJgEZzWEmQDp/UUGKK6AL/Tu5F695RqFNurr7FIpg OsKYtRJZ9VmyZKXGSOD3YzkxiJRjCUFX -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:01 2025 by rpki-client