$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: kvlVvY83eMb/F+CpKTz4jXz+OYHdBngMSdUZhdrnRCQ= Subject key identifier: B5:44:29:64:F6:BD:FC:F9:FC:D9:2F:9F:41:F7:F2:46:27:2A:FD:3C Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 161D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 160F Signing time: Tue 04 Nov 2025 16:50:19 +0000 Manifest this update: Tue 04 Nov 2025 16:50:18 +0000 Manifest next update: Tue 11 Nov 2025 16:50:18 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: GCDP/87pQ3zI6Qqxel6k7s/Z/ti0uMVX/ZjBWqVI4Bw=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: jy3Wft/F/5UxXAXx08sOlZkwBarb1srk+Xi5m/F+Ac0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5661 (0x161d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA, serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Nov 4 16:50:18 2025 GMT Not After : Nov 11 16:50:18 2025 GMT Subject: CN=690a2eca-1a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:55:57:12:f5:2c:70:d5:ad:4a:77:25:79:e4: e9:e8:51:11:ad:5a:87:07:70:07:06:51:b8:24:8c: d0:74:a8:aa:6f:a2:a0:b3:4a:7a:f6:c5:c4:b8:a3: 20:d2:7d:7f:21:8f:22:64:da:67:d6:24:14:42:ac: c8:9f:d3:0d:01:6e:ed:a5:3f:a7:c4:dc:83:3f:9a: e9:ec:26:e2:fb:b7:96:cc:a9:e3:e0:4f:26:69:57: 96:46:df:68:57:8f:45:c6:c3:32:6d:31:f6:f9:10: 0e:49:58:92:48:2c:5c:f0:bf:30:4b:d2:45:b8:80: b8:e8:ca:d8:61:c7:62:2a:31:26:d1:4f:71:7c:64: 6b:4c:d7:0a:69:59:f1:55:c1:e6:f4:d4:c6:4a:77: ee:f5:a0:4c:76:97:f0:76:8f:b9:05:6a:92:0f:19: 23:63:b3:29:cb:19:60:e1:a0:06:07:32:d1:1d:44: 30:43:81:89:03:db:3a:a8:00:b0:04:30:ad:cd:35: 75:bf:5e:fa:e8:8f:42:34:89:3d:05:30:4e:03:8e: 24:8a:f1:f4:55:8a:70:5c:c5:b5:87:02:0f:16:75: 33:f5:94:7b:55:dc:24:94:4b:5c:0b:f4:bb:91:75: 77:db:1f:83:09:20:32:a0:76:ae:55:0f:52:2e:ef: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:44:29:64:F6:BD:FC:F9:FC:D9:2F:9F:41:F7:F2:46:27:2A:FD:3C X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:5f:03:dc:1f:3c:f4:63:ab:9a:08:55:f2:14:c1:13:b6:88: 74:f1:22:39:4b:96:98:72:30:a6:fb:3a:97:e2:f8:1b:ed:91: 54:f5:4b:9e:a2:73:40:c0:99:84:0f:12:8f:60:cc:ab:b6:19: 3b:f2:62:91:50:5a:10:b6:47:8c:64:c6:0f:61:84:ec:4f:ef: 44:de:f9:dd:2d:16:40:56:d5:54:ba:18:5a:d5:5c:50:06:63: ca:60:a3:5c:ef:25:f9:e1:63:5d:0a:74:fe:e4:0c:ce:f4:d6: 0e:d5:c6:0b:47:83:c0:19:b1:fe:9b:f2:ed:62:4a:7c:f2:9e: bf:7f:19:08:90:fd:69:1d:85:a2:af:57:c5:f8:e6:1b:89:33: 49:20:b2:40:3a:e4:16:ed:4b:e2:34:c0:d6:d3:d6:00:25:ba: 86:13:b7:8b:9a:3b:cb:30:15:3d:3e:e3:52:3a:2f:33:e1:87: 0f:3c:f6:47:97:6a:39:d2:54:16:58:e9:a7:00:db:08:f2:f8: 0b:b5:ad:4a:d4:11:53:8f:53:33:91:43:6c:27:d4:0f:9f:b0: 31:2d:39:e0:87:d6:cd:ad:c9:44:8a:1b:38:78:41:00:38:b9: fa:a0:3c:62:ae:09:f8:d0:58:2c:43:02:ff:3f:63:3e:cd:d0: 1d:97:fd:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjUxMTA0MTY1MDE4WhcNMjUxMTExMTY1MDE4WjAYMRYwFAYD VQQDEw02OTBhMmVjYS0xYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFVXEvUscNWtSncleeTp6FERrVqHB3AHBlG4JIzQdKiqb6Kgs0p69sXEuKMg 0n1/IY8iZNpn1iQUQqzIn9MNAW7tpT+nxNyDP5rp7Cbi+7eWzKnj4E8maVeWRt9o V49FxsMybTH2+RAOSViSSCxc8L8wS9JFuIC46MrYYcdiKjEm0U9xfGRrTNcKaVnx VcHm9NTGSnfu9aBMdpfwdo+5BWqSDxkjY7Mpyxlg4aAGBzLRHUQwQ4GJA9s6qACw BDCtzTV1v1766I9CNIk9BTBOA44kivH0VYpwXMW1hwIPFnUz9ZR7VdwklEtcC/S7 kXV32x+DCSAyoHauVQ9SLu/KJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVEKWT2 vfz5/Nkvn0H38kYnKv08MB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRXwPcHzz0Y6uaCFXyFMETtoh08SI5S5aYcjCm+zqX4vgb7ZFU9Uue onNAwJmEDxKPYMyrthk78mKRUFoQtkeMZMYPYYTsT+9E3vndLRZAVtVUuhha1VxQ BmPKYKNc7yX54WNdCnT+5AzO9NYO1cYLR4PAGbH+m/LtYkp88p6/fxkIkP1pHYWi r1fF+OYbiTNJILJAOuQW7UviNMDW09YAJbqGE7eLmjvLMBU9PuNSOi8z4YcPPPZH l2o50lQWWOmnANsI8vgLta1K1BFTj1MzkUNsJ9QPn7AxLTngh9bNrclEihs4eEEA OLn6oDxirgn40FgsQwL/P2M+zdAdl/3Q -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:08 2025 by rpki-client