$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json) Hash identifier: oFhGSk/NqyLmQjaxCXkCsLDqATrpXBiEotYp6k7QATE= Subject key identifier: 02:F7:A8:7F:B8:B2:72:90:D2:72:1E:00:C2:80:70:27:CF:74:DC:49 Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft Manifest number: 2F Signing time: Wed 05 Nov 2025 07:53:49 +0000 Manifest this update: Wed 05 Nov 2025 07:53:49 +0000 Manifest next update: Wed 12 Nov 2025 07:53:49 +0000 Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: 8ZSGUjFn1O7HVxb40ft9M4znJcp0SH+bCsPA9X53baA=) 2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: x6HQ5RDi7bp4WcPcgDw38Yb49M8i1vVS8BiW9zZO4Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Validity Not Before: Nov 5 07:53:49 2025 GMT Not After : Nov 12 07:53:49 2025 GMT Subject: CN=690b028d-d0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:77:3a:e5:18:42:d0:e6:b1:25:20:6d:55: 22:17:89:a0:54:76:2a:67:d7:19:ec:97:01:fd:91: 19:8e:a4:3b:4f:7e:5d:0d:51:42:2c:ae:60:8d:93: ac:f8:7c:b0:85:78:20:3c:ac:22:29:9b:76:ed:f4: 4f:c0:ee:9e:2c:30:39:eb:b8:4f:a7:d6:58:53:d8: 0a:0e:4b:ed:10:92:73:f1:e5:8f:79:c0:3a:b8:da: bb:90:f9:80:20:36:c1:f6:eb:8e:09:d2:80:9a:9d: ed:0d:48:a0:96:bf:f6:8f:1b:f0:55:e8:05:dc:a8: fe:5e:db:ac:98:b8:25:c7:18:9a:b2:5c:fa:7e:ae: 1c:44:48:f6:81:43:25:d3:2e:2c:52:13:e7:7e:27: 3d:3c:81:fb:fa:3d:c2:cc:6e:58:7c:4f:2f:c6:7a: 0d:a1:e3:db:ca:a3:0b:58:85:12:10:c8:e1:b8:2e: 75:e5:59:21:44:0b:19:82:76:6c:1b:79:f1:93:e4: 4a:e3:13:63:18:1f:5d:53:09:75:be:10:2a:62:d6: aa:09:f0:02:ad:78:4d:46:ed:b7:eb:a2:fb:0d:5e: 9a:7d:87:12:80:8c:fa:75:93:9b:30:8c:74:5e:74: 4e:17:93:78:73:71:cd:67:1d:ef:de:7b:fc:a4:10: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:A8:7F:B8:B2:72:90:D2:72:1E:00:C2:80:70:27:CF:74:DC:49 X509v3 Authority Key Identifier: keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7c:c9:81:1c:92:37:90:5b:0a:70:b5:ed:27:cf:61:61:a8: 30:00:94:fc:9e:eb:d8:c5:f7:79:c1:68:01:06:f8:73:91:41: 65:bc:9c:f1:4b:4a:fe:17:30:84:8a:a1:29:c2:08:72:82:36: 9f:51:b7:47:e2:c0:7e:81:82:1a:d6:65:2e:6a:c1:f4:2d:eb: c0:01:1d:68:50:2f:25:fd:68:1a:d9:b6:2d:75:6b:8d:ce:e8: 5d:8b:bc:cc:b0:4e:a6:d9:10:42:44:e4:94:40:f9:75:9e:76: aa:e9:54:87:f5:e5:25:18:c6:d7:b0:35:4c:c0:48:de:26:21: 9f:ec:b7:26:1b:3d:60:7d:15:3e:ff:ae:81:c6:f6:93:52:a2: 12:c8:48:29:64:17:6b:2e:f7:f9:8b:7d:b3:58:e7:1a:80:3b: 97:94:79:a5:95:1b:b3:4f:b4:93:ef:d1:1e:28:b9:48:65:68: f0:37:69:1e:b6:3b:b6:00:6e:bb:66:d7:47:78:65:56:b4:5c: d7:5e:fd:07:0a:47:89:a6:7f:cc:7e:f7:82:f7:cb:ec:db:d8: a2:48:a1:a2:10:40:50:23:fe:9b:16:3b:82:8c:bd:ab:4a:8a: 39:aa:4e:17:f6:5f:17:de:18:e7:70:2c:e6:75:8d:d8:bf:38: 27:67:44:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NTk3OTExMC8GA1UEBRMoMDFDODU4MTgxMDg4RTFCOUM1Nzc1RENBMEM0QkFFOUI5 RkY1NzdCMzAeFw0yNTExMDUwNzUzNDlaFw0yNTExMTIwNzUzNDlaMBgxFjAUBgNV BAMTDTY5MGIwMjhkLWQwZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCajnc65RhC0OaxJSBtVSIXiaBUdipn1xnslwH9kRmOpDtPfl0NUUIsrmCNk6z4 fLCFeCA8rCIpm3bt9E/A7p4sMDnruE+n1lhT2AoOS+0QknPx5Y95wDq42ruQ+YAg NsH2644J0oCane0NSKCWv/aPG/BV6AXcqP5e26yYuCXHGJqyXPp+rhxESPaBQyXT LixSE+d+Jz08gfv6PcLMblh8Ty/Geg2h49vKowtYhRIQyOG4LnXlWSFECxmCdmwb efGT5ErjE2MYH11TCXW+ECpi1qoJ8AKteE1G7bfrovsNXpp9hxKAjPp1k5swjHRe dE4Xk3hzcc1nHe/ee/ykEKHtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAveof7iy cpDSch4AwoBwJ8903EkwHwYDVR0jBBgwFoAUAchYGBCI4bnFd13KDEuum5/1d7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1OTc5LzUzOTUwNzg2N0Yy NzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWNoWUdCQ0k0Ym5GZDEzS0RFdXVtNV8xZDdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1 OTc5LzUzOTUwNzg2N0YyNzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJu RmQxM0tERXV1bTVfMWQ3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIt8yYEckjeQWwpwte0nz2FhqDAAlPye69jF93nBaAEG+HORQWW8nPFL Sv4XMISKoSnCCHKCNp9Rt0fiwH6BghrWZS5qwfQt68ABHWhQLyX9aBrZti11a43O 6F2LvMywTqbZEEJE5JRA+XWedqrpVIf15SUYxtewNUzASN4mIZ/styYbPWB9FT7/ roHG9pNSohLISClkF2su9/mLfbNY5xqAO5eUeaWVG7NPtJPv0R4ouUhlaPA3aR62 O7YAbrtm10d4ZVa0XNde/QcKR4mmf8x+94L3y+zb2KJIoaIQQFAj/psWO4KMvatK ijmqThf2XxfeGOdwLOZ1jdi/OCdnRGM= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:19 2025 by rpki-client