$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: rC11s+rHuqgQaxqahFpR3KoGpz5TJLQMM5ySiRQeYas= Subject key identifier: 63:F3:79:4D:72:57:6B:AF:B4:26:43:B2:9B:8C:67:7E:FF:5A:4E:54 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 08E7 Signing time: Sun 02 Nov 2025 20:18:57 +0000 Manifest this update: Sun 02 Nov 2025 20:18:56 +0000 Manifest next update: Sun 09 Nov 2025 20:18:56 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: AWp+4IIE2kcY1w1g3dV5HIkRXHTK0TEddrfIt+YQLo8=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Nov 2 20:18:56 2025 GMT Not After : Nov 9 20:18:56 2025 GMT Subject: CN=6907bcb0-d257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:86:85:db:15:18:ad:09:5d:81:2c:7b:98: 99:7c:32:5f:62:9d:30:ca:e4:14:d9:4b:f6:f8:50: 03:ff:37:37:dc:ef:ee:98:83:56:60:55:a0:fb:06: ef:84:b4:2c:b4:51:df:a4:4f:23:56:b0:7d:90:5a: 86:b7:a4:f2:cf:20:c1:84:5c:d8:c5:40:9e:81:a6: f2:33:0d:18:18:83:b4:a7:ac:03:58:60:d9:51:1a: 85:05:73:5d:04:21:53:11:8a:2c:51:00:ca:82:ce: 2e:5a:e5:36:34:37:e0:1f:66:f6:22:77:f3:2d:d0: 73:bc:ea:72:32:10:6d:d5:34:59:e1:27:44:81:68: f1:78:9f:fb:d7:94:00:4c:54:39:c6:2a:75:a9:b8: 77:14:e1:4e:fc:d8:26:af:0e:41:01:96:34:4b:4b: d0:a7:37:7a:fe:7c:13:c5:14:5c:33:93:34:85:68: cf:7e:13:77:af:87:ad:22:47:87:a0:74:a6:2d:69: 86:c9:80:58:a7:cb:28:48:58:ea:1d:15:bb:35:bd: 41:d6:c8:84:b5:a5:2d:7b:34:8f:e4:2b:04:8d:8a: 29:06:42:13:ab:8b:e5:25:b5:a3:3c:48:16:98:9f: 17:97:1e:0c:96:28:b9:8e:4a:4f:fb:9b:75:a7:54: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:79:4D:72:57:6B:AF:B4:26:43:B2:9B:8C:67:7E:FF:5A:4E:54 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d4:ca:81:73:d3:e2:60:fd:9d:0f:52:76:30:99:7f:79:70: 16:5e:cd:25:21:50:04:44:12:21:87:ab:82:70:ca:ed:fc:67: a9:9d:d9:b8:4b:ac:c7:f3:67:3a:9f:47:70:79:59:22:98:2c: 84:07:93:ad:cb:b2:9e:d0:14:2e:76:e0:ac:2c:fb:7e:ed:0c: 08:45:41:82:fe:b6:d4:17:00:2f:16:60:c2:0a:33:2a:6c:8f: 4e:18:ef:7b:dc:21:7b:f7:af:ce:6d:74:e0:e6:d5:ff:f0:13: f6:ee:78:0c:ad:07:cb:07:d8:15:a0:a9:86:f8:7f:e4:47:f3: 77:90:25:44:75:a7:71:be:98:6e:46:16:16:ce:60:33:24:07: 7a:1b:a1:b4:3e:6a:69:b2:60:e1:9a:8b:a8:df:6f:10:74:44: 1f:f5:14:61:a9:36:2a:0c:5c:28:05:32:fb:3b:e6:a1:53:eb: 5c:6d:ee:ac:aa:52:c1:8a:06:2f:17:0a:3d:7d:06:9b:7c:71: c6:2b:9b:d8:fe:89:25:ff:fb:62:03:8a:49:2a:f5:fa:63:50: ed:1a:e3:3f:50:69:f7:b7:b1:d2:b7:43:64:38:d9:9b:27:7e: 86:f7:2d:b9:66:b9:2d:9b:7f:df:91:40:28:9e:2d:cf:6a:b8: 27:9c:76:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUxMTAyMjAxODU2WhcNMjUxMTA5MjAxODU2WjAYMRYwFAYD VQQDEw02OTA3YmNiMC1kMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kyGhdsVGK0JXYEse5iZfDJfYp0wyuQU2Uv2+FAD/zc33O/umINWYFWg+wbv hLQstFHfpE8jVrB9kFqGt6TyzyDBhFzYxUCegabyMw0YGIO0p6wDWGDZURqFBXNd BCFTEYosUQDKgs4uWuU2NDfgH2b2InfzLdBzvOpyMhBt1TRZ4SdEgWjxeJ/715QA TFQ5xip1qbh3FOFO/Ngmrw5BAZY0S0vQpzd6/nwTxRRcM5M0hWjPfhN3r4etIkeH oHSmLWmGyYBYp8soSFjqHRW7Nb1B1siEtaUtezSP5CsEjYopBkITq4vlJbWjPEgW mJ8Xlx4Mlii5jkpP+5t1p1QtDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPzeU1y V2uvtCZDspuMZ37/Wk5UMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB31MqBc9PiYP2dD1J2MJl/eXAWXs0lIVAERBIhh6uCcMrt/Gepndm4 S6zH82c6n0dweVkimCyEB5Oty7Ke0BQuduCsLPt+7QwIRUGC/rbUFwAvFmDCCjMq bI9OGO973CF796/ObXTg5tX/8BP27ngMrQfLB9gVoKmG+H/kR/N3kCVEdadxvphu RhYWzmAzJAd6G6G0PmppsmDhmouo328QdEQf9RRhqTYqDFwoBTL7O+ahU+tcbe6s qlLBigYvFwo9fQabfHHGK5vY/okl//tiA4pJKvX6Y1DtGuM/UGn3t7HSt0NkONmb J36G9y25Zrktm3/fkUAoni3PargnnHaK -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:57 2025 by rpki-client