$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: fWDwGYV+dbEmYZ1xJujzPsqlnf2NhdjLPIcsCKQ1UAU= Subject key identifier: 60:00:30:13:6B:A0:75:AA:85:30:33:E1:99:15:05:33:69:DA:86:E0 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 021C Signing time: Thu 23 Oct 2025 03:46:36 +0000 Manifest this update: Thu 23 Oct 2025 03:46:36 +0000 Manifest next update: Thu 30 Oct 2025 03:46:36 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: LSYnnlG/99uvwiAqncYrNkK0GTM+Ity79iRNv4t/Hoc=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Oct 23 03:46:36 2025 GMT Not After : Oct 30 03:46:36 2025 GMT Subject: CN=68f9a51c-4f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:b4:c1:e4:d4:75:cb:ab:ae:f9:56:e4:72: fe:a9:ef:b8:a5:69:4e:02:19:36:f0:85:47:05:08: 67:34:d6:10:64:54:7d:9c:d8:69:84:29:0c:ac:22: 4c:35:27:29:ef:bf:d4:35:91:3f:4d:3b:ed:5d:b1: 18:41:dd:ea:93:8b:55:ea:71:f0:3e:55:7b:dc:cc: e4:d8:05:56:e6:f2:cb:ea:34:76:67:51:2f:5f:11: c8:b0:94:46:9a:c0:2b:f4:75:39:93:60:8f:6a:6a: 47:e8:c5:48:3d:b0:0c:0d:49:b9:fa:fd:ac:b4:38: 19:a3:9d:d4:0a:ba:8e:a5:d1:6e:39:c9:57:13:97: 42:11:14:78:69:9a:7a:b7:81:d1:81:53:b9:6a:58: 92:9e:6c:70:76:b7:03:ec:39:49:7b:23:7a:b6:39: c6:0d:fc:09:cf:b7:2c:be:d6:9b:6d:ad:6f:5d:de: 06:b7:5e:02:a0:2b:1f:b7:8d:05:d1:c8:32:34:76: a0:4a:4e:a4:67:51:4c:6c:7b:c0:b2:33:4c:62:99: 16:86:b7:ef:e4:5b:38:8b:a9:bd:36:66:c5:c5:1d: e1:44:92:2d:6b:ee:7a:03:20:3c:95:f1:ed:f9:23: 8c:a5:c0:02:85:a9:56:89:2b:17:76:cf:27:38:fb: b4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:30:13:6B:A0:75:AA:85:30:33:E1:99:15:05:33:69:DA:86:E0 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:58:22:58:6a:ed:74:3e:3e:e2:63:f4:8a:7b:83:8c:ab:81: 15:96:ca:ac:44:e0:f0:40:99:dc:90:40:ce:4a:40:28:08:0f: 2a:4c:4b:bb:df:83:5a:7c:43:f0:60:c1:95:2b:78:ee:ac:44: ac:1f:85:8e:45:dc:af:3d:53:eb:1a:a9:64:ff:e7:92:f9:60: 61:aa:8f:24:35:38:05:36:bf:c1:ab:58:07:eb:8a:9b:51:d4: 70:e3:c4:56:b3:f0:c7:0d:1b:5a:03:61:49:6c:6c:4a:40:dd: b1:cc:52:8d:50:53:6d:d4:de:d2:9b:aa:e3:d7:af:dc:4b:8e: a5:8c:f8:81:38:1e:fa:6b:cd:f7:22:d1:2b:aa:67:04:18:9d: c7:68:0d:28:4f:14:2c:43:ab:21:42:a1:22:6e:28:23:eb:47: fa:71:e1:47:97:3c:12:84:73:73:cd:66:88:5e:38:5e:f8:cf: 10:ac:8c:0f:4d:5b:70:a1:da:11:8e:74:e7:17:f4:36:b6:7a: e7:95:45:9b:23:b5:e0:fc:4a:32:14:63:55:fd:97:46:7d:f0: 5d:1a:cb:01:9d:d9:62:a6:24:21:c9:02:17:ff:fb:db:e2:84: 57:de:3d:da:cc:ed:77:96:28:ba:cf:36:2d:26:c3:78:3a:74: 5e:47:c8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUxMDIzMDM0NjM2WhcNMjUxMDMwMDM0NjM2WjAYMRYwFAYD VQQDEw02OGY5YTUxYy00ZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47O0weTUdcurrvlW5HL+qe+4pWlOAhk28IVHBQhnNNYQZFR9nNhphCkMrCJM NScp77/UNZE/TTvtXbEYQd3qk4tV6nHwPlV73Mzk2AVW5vLL6jR2Z1EvXxHIsJRG msAr9HU5k2CPampH6MVIPbAMDUm5+v2stDgZo53UCrqOpdFuOclXE5dCERR4aZp6 t4HRgVO5aliSnmxwdrcD7DlJeyN6tjnGDfwJz7csvtabba1vXd4Gt14CoCsft40F 0cgyNHagSk6kZ1FMbHvAsjNMYpkWhrfv5Fs4i6m9NmbFxR3hRJIta+56AyA8lfHt +SOMpcAChalWiSsXds8nOPu0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAAMBNr oHWqhTAz4ZkVBTNp2obgMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbWCJYau10Pj7iY/SKe4OMq4EVlsqsRODwQJnckEDOSkAoCA8qTEu7 34NafEPwYMGVK3jurESsH4WORdyvPVPrGqlk/+eS+WBhqo8kNTgFNr/Bq1gH64qb UdRw48RWs/DHDRtaA2FJbGxKQN2xzFKNUFNt1N7Sm6rj16/cS46ljPiBOB76a833 ItErqmcEGJ3HaA0oTxQsQ6shQqEibigj60f6ceFHlzwShHNzzWaIXjhe+M8QrIwP TVtwodoRjnTnF/Q2tnrnlUWbI7Xg/EoyFGNV/ZdGffBdGssBndlipiQhyQIX//vb 4oRX3j3azO13lii6zzYtJsN4OnReR8hV -----END CERTIFICATE-----Generated at Thu Oct 23 10:12:52 2025 by rpki-client