$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: DrwrrmqhO59gjyLITcpp7JV+wvvcHjTso8IgSDYz1pU= Subject key identifier: 5E:97:C2:AD:2F:03:E5:52:25:C7:8A:6A:52:48:DB:07:A1:E5:3C:48 Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 062F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 062A Signing time: Tue 16 Sep 2025 23:04:48 +0000 Manifest this update: Tue 16 Sep 2025 23:04:48 +0000 Manifest next update: Tue 23 Sep 2025 23:04:48 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: RicH3xSCIfzFzju0TNd19/LOF5LmoPjbONGfq4x2KMc=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1583 (0x62f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Sep 16 23:04:48 2025 GMT Not After : Sep 23 23:04:48 2025 GMT Subject: CN=68c9ed10-ad2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:00:ea:97:e4:a1:6c:cf:ce:19:94:03:22: 44:7f:84:6c:35:fe:c0:32:f7:a1:e3:c7:c2:32:8d: 69:27:1a:6d:e0:59:5e:4f:c6:80:22:6c:41:ea:67: 03:ee:87:f8:0f:fe:f2:38:51:4d:01:71:3d:c5:c4: d7:c8:63:88:b9:5e:01:f4:47:c3:1c:1d:f7:8d:ea: 76:17:52:17:4e:c4:9a:a2:c7:89:39:85:31:a0:2c: b4:4f:7d:4d:91:55:a0:bd:07:38:b3:45:35:c0:5b: c4:08:e0:fe:28:dc:4d:82:87:ba:12:a8:f2:a1:d5: b6:34:da:34:5a:07:26:f7:3e:5f:b5:2e:90:7a:82: fc:9e:3b:c7:6b:58:49:3e:bb:45:fb:08:4e:a5:e3: 5b:97:60:7a:77:d1:d8:7b:ad:f4:25:42:78:a9:19: 2e:6b:11:4f:96:e8:a1:98:8d:e1:07:d9:40:e7:d2: 1e:1d:ac:97:43:c4:f5:46:a4:ce:14:2c:ac:a3:47: 45:ba:a9:4c:9a:9f:83:5a:a2:f6:33:e5:cf:4a:05: bb:a9:cb:07:62:21:ae:29:38:de:7e:fa:28:5e:62: 68:4a:55:92:fb:f3:5f:0f:5f:e9:8e:4a:29:22:8c: 69:fe:b2:17:96:b9:3e:5e:9d:d5:6d:41:8f:73:e4: 81:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:97:C2:AD:2F:03:E5:52:25:C7:8A:6A:52:48:DB:07:A1:E5:3C:48 X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7a:05:7c:b2:55:5c:83:30:f3:56:b4:4e:de:58:ba:cb:1e: 12:35:55:44:05:6a:ce:a7:51:a5:01:61:2a:8a:0f:14:0d:73: 96:fa:80:70:04:95:9d:b9:73:d9:49:c1:cb:7f:3d:c7:1e:8d: bd:d7:bd:b5:34:21:e0:ee:15:d8:a8:28:19:62:19:2f:6d:55: f0:0f:da:54:d1:d4:e5:97:70:76:82:19:41:08:12:19:4e:25: d8:a2:da:fd:9b:4b:c2:b0:37:02:67:0c:f3:e9:24:ca:65:79: f4:ed:65:4f:b7:0f:61:f7:b8:24:50:e5:71:46:b7:f3:0a:54: 72:f1:8e:d9:82:dc:aa:d8:51:86:18:ca:e6:b3:dd:46:af:33: 32:37:75:4c:24:d7:93:1a:42:21:3d:d9:cd:9d:d0:5a:dc:2e: be:3e:47:21:32:d0:64:fb:6e:35:75:e2:89:ae:41:1c:0e:8d: a7:3f:66:20:86:99:5f:4f:b7:0a:b1:54:54:c5:e4:e8:22:74: 1f:bd:d1:59:5e:f4:cf:62:8c:c5:ed:f5:a0:20:72:60:a9:cb: f1:85:68:67:99:ef:70:f8:3a:b3:22:fa:41:6b:ea:4b:3e:2a: ed:0b:0e:71:ef:ab:3f:58:10:0e:25:1d:e3:c3:bb:4d:cb:b6: 37:28:84:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjUwOTE2MjMwNDQ4WhcNMjUwOTIzMjMwNDQ4WjAYMRYwFAYD VQQDEw02OGM5ZWQxMC1hZDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvgA6pfkoWzPzhmUAyJEf4RsNf7AMveh48fCMo1pJxpt4FleT8aAImxB6mcD 7of4D/7yOFFNAXE9xcTXyGOIuV4B9EfDHB33jep2F1IXTsSaoseJOYUxoCy0T31N kVWgvQc4s0U1wFvECOD+KNxNgoe6EqjyodW2NNo0Wgcm9z5ftS6QeoL8njvHa1hJ PrtF+whOpeNbl2B6d9HYe630JUJ4qRkuaxFPluihmI3hB9lA59IeHayXQ8T1RqTO FCyso0dFuqlMmp+DWqL2M+XPSgW7qcsHYiGuKTjefvooXmJoSlWS+/NfD1/pjkop Ioxp/rIXlrk+Xp3VbUGPc+SB4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6Xwq0v A+VSJceKalJI2weh5TxIMB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuegV8slVcgzDzVrRO3li6yx4SNVVEBWrOp1GlAWEqig8UDXOW+oBw BJWduXPZScHLfz3HHo291721NCHg7hXYqCgZYhkvbVXwD9pU0dTll3B2ghlBCBIZ TiXYotr9m0vCsDcCZwzz6STKZXn07WVPtw9h97gkUOVxRrfzClRy8Y7Zgtyq2FGG GMrms91GrzMyN3VMJNeTGkIhPdnNndBa3C6+PkchMtBk+241deKJrkEcDo2nP2Yg hplfT7cKsVRUxeToInQfvdFZXvTPYozF7fWgIHJgqcvxhWhnme9w+DqzIvpBa+pL PirtCw5x76s/WBAOJR3jw7tNy7Y3KIS3 -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:01 2025 by rpki-client