$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json) Hash identifier: MyDIVIvRhEHj3jXEWJjJFp0qinDQZREZ4CnFGeDMzCs= Subject key identifier: 7D:05:1A:2E:FB:09:9D:28:7F:0C:DB:82:B0:62:79:49:4D:93:26:0F Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft Manifest number: 12 Signing time: Mon 03 Nov 2025 07:55:49 +0000 Manifest this update: Mon 03 Nov 2025 07:55:48 +0000 Manifest next update: Mon 10 Nov 2025 07:55:48 +0000 Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: 7ulKuYd8N5LS03/24Hnd0LcpCngyrG3M1nYh4+Q7kp8=) 2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: z3P+QwqIAVJ2kDpSoqWTAoJ/rezdLH3YQLa5NxQBxaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Validity Not Before: Nov 3 07:55:48 2025 GMT Not After : Nov 10 07:55:48 2025 GMT Subject: CN=69086004-df57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:5b:f3:42:d3:88:c0:53:6f:58:0a:de:62: 21:76:23:76:56:02:80:21:43:d7:f5:4e:42:0d:92: 18:20:02:30:14:9e:9a:dc:89:f2:8a:9c:be:84:88: 67:89:8a:1d:4f:e4:98:fe:ca:35:3f:79:5a:2f:37: d7:28:e0:78:9f:0c:5f:d3:bd:67:20:89:25:78:fe: e5:42:2c:f0:84:a1:be:b7:f0:3a:f6:08:65:4b:6b: a4:50:4e:42:42:8a:82:b3:ce:91:ea:0c:13:ba:f9: bb:a8:78:09:3b:e2:9a:76:1e:bb:11:2c:62:53:b0: 08:b8:07:39:30:52:06:6d:1e:ca:5c:71:a2:b0:36: ce:2f:20:c4:f8:e7:7c:af:b4:97:15:e9:e7:08:e4: a2:e7:b7:3c:0e:92:54:18:b4:f8:4d:cf:29:0d:31: 0e:dc:52:33:29:c7:a5:f2:1a:95:7c:6d:21:d1:25: 8c:3b:78:10:52:d9:c5:3f:fa:8b:c1:39:00:21:46: 6d:7c:f5:4f:ed:0e:98:8e:e4:aa:c1:53:3e:06:f1: 1e:d6:3e:69:b4:7e:3f:4e:ed:72:47:38:d2:6e:c7: 2f:8a:7a:19:e8:4a:30:51:36:52:a1:2c:ef:f7:2e: 47:bf:f1:81:c0:73:0b:cd:a2:1f:81:29:56:22:4b: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:1A:2E:FB:09:9D:28:7F:0C:DB:82:B0:62:79:49:4D:93:26:0F X509v3 Authority Key Identifier: keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:bf:e7:9b:5e:4e:f7:4a:ee:0f:ea:4d:12:e8:ad:c3:10:d7: 72:f1:97:f2:6f:97:d1:e7:ba:0f:f4:ff:66:2c:9a:c5:a7:f0: c4:81:b1:f9:2b:af:e9:36:5a:2a:58:c6:fa:56:c9:2e:aa:81: 4f:73:9a:36:31:77:eb:63:92:56:09:56:23:6d:d6:bb:e9:34: 55:ce:d5:e9:1a:6b:5c:cd:88:cd:0a:4a:2e:b8:dd:05:4b:f5: f3:af:ec:3f:82:1b:63:06:bd:76:f1:c4:69:d6:cb:4b:70:1f: bb:4c:47:cb:bc:63:2d:2a:a7:13:16:b7:2f:ed:7b:eb:c7:49: 0a:e9:b3:1c:6c:24:52:86:42:c9:de:6c:24:98:78:d3:cd:b6: 93:4f:f4:d1:e2:50:7f:0d:92:92:54:d8:76:89:cb:0a:ea:bc: 3b:ed:af:45:51:fc:33:47:32:19:43:e5:f8:fa:03:ab:3b:c3: 35:eb:ba:b2:64:ee:6f:98:35:6b:a3:31:a2:25:0f:70:8f:be: ce:5f:e9:e2:bb:d0:bb:16:6d:15:4c:87:ed:78:ed:ab:59:da: 5c:12:79:92:e0:ae:76:31:a0:f7:0e:1d:3f:67:fb:e1:1f:4e: b2:ba:18:ce:14:d0:14:19:0b:6e:1b:48:e6:f8:9f:f3:6a:7e: ff:ee:5c:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUYyQTExMC8GA1UEBRMoNkIxMThDMTU4RTBCOEQ5Qjk4NEVDRERDNzhCMjQ0ODAy RTQ3MDU0NzAeFw0yNTExMDMwNzU1NDhaFw0yNTExMTAwNzU1NDhaMBgxFjAUBgNV BAMTDTY5MDg2MDA0LWRmNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD31vzQtOIwFNvWAreYiF2I3ZWAoAhQ9f1TkINkhggAjAUnprcifKKnL6EiGeJ ih1P5Jj+yjU/eVovN9co4HifDF/TvWcgiSV4/uVCLPCEob638Dr2CGVLa6RQTkJC ioKzzpHqDBO6+buoeAk74pp2HrsRLGJTsAi4BzkwUgZtHspccaKwNs4vIMT453yv tJcV6ecI5KLntzwOklQYtPhNzykNMQ7cUjMpx6XyGpV8bSHRJYw7eBBS2cU/+ovB OQAhRm189U/tDpiO5KrBUz4G8R7WPmm0fj9O7XJHONJuxy+KehnoSjBRNlKhLO/3 Lke/8YHAcwvNoh+BKVYiS0NHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfQUaLvsJ nSh/DNuCsGJ5SU2TJg8wHwYDVR0jBBgwFoAUaxGMFY4LjZuYTs3ceLJEgC5HBUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRjJBLzkzMkY4NUJFOUY4 RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1WVRzM2NlTEpFZ0M1SEJV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhHTUZZNExqWnVZVHMzY2VMSkVnQzVIQlVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RjJBLzkzMkY4NUJFOUY4RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1 WVRzM2NlTEpFZ0M1SEJVYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIa/55teTvdK7g/qTRLorcMQ13Lxl/Jvl9Hnug/0/2YsmsWn8MSBsfkr r+k2WipYxvpWyS6qgU9zmjYxd+tjklYJViNt1rvpNFXO1ekaa1zNiM0KSi643QVL 9fOv7D+CG2MGvXbxxGnWy0twH7tMR8u8Yy0qpxMWty/te+vHSQrpsxxsJFKGQsne bCSYeNPNtpNP9NHiUH8NkpJU2HaJywrqvDvtr0VR/DNHMhlD5fj6A6s7wzXrurJk 7m+YNWujMaIlD3CPvs5f6eK70LsWbRVMh+147atZ2lwSeZLgrnYxoPcOHT9n++Ef TrK6GM4U0BQZC24bSOb4n/Nqfv/uXCE= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:19 2025 by rpki-client