$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: qqQWX2UYA/Wr3bHf0X7a5peb2iDGJhJIUpK9GgkY2Bs= Subject key identifier: 21:8F:85:0A:49:2C:F8:3C:2E:84:52:E8:BB:83:0B:36:7B:1E:20:C4 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 022E Signing time: Wed 05 Nov 2025 02:13:28 +0000 Manifest this update: Wed 05 Nov 2025 02:13:28 +0000 Manifest next update: Wed 12 Nov 2025 02:13:28 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: dBXJbTry64c7dNQV7O73TZxNctPks4FeBDf/b/QsCqo=) 2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=) 3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Nov 5 02:13:28 2025 GMT Not After : Nov 12 02:13:28 2025 GMT Subject: CN=690ab2c8-66d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:b1:fd:36:a1:48:c2:d0:b4:99:cd:5c:43: 67:ad:b9:21:60:bd:df:4b:4e:cd:06:cc:32:a7:c0: 4e:33:59:5b:6d:71:fe:1d:f7:98:23:92:4f:18:36: fa:d5:c2:13:7d:f1:d2:23:ba:10:f0:24:86:b5:b4: d9:14:c7:4d:4a:e8:a7:4c:65:2e:83:bd:13:8a:87: 70:e0:c9:d4:28:87:68:2a:38:94:3b:a5:14:ec:71: 16:87:6a:e9:2c:ec:d1:17:db:79:b2:bb:d5:2d:00: 19:b8:f4:b3:e8:ca:d8:62:3f:d2:07:8b:18:ef:44: 42:f0:ef:c4:99:67:e9:87:f6:83:f6:a4:de:c8:a4: 20:a2:cf:c4:5a:b4:46:40:5d:54:ad:96:a2:0c:c0: e0:4a:17:fd:c7:21:cd:e1:df:28:34:f7:a5:0e:f4: 3a:42:d8:d9:d0:55:27:fe:48:d2:88:7d:24:e2:bb: aa:95:5f:14:b8:33:4f:5d:06:3c:8f:24:c5:45:80: 06:e2:0c:dc:0a:0c:8e:f3:80:07:ff:89:bd:b3:ec: 29:76:ff:7a:1b:cc:77:d8:a2:4a:14:24:33:7d:2c: ae:55:bc:f4:5a:c1:91:45:5c:d6:34:dc:31:9d:90: 57:4f:d2:7c:67:57:1a:9f:e4:27:c0:47:d1:71:a2: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:85:0A:49:2C:F8:3C:2E:84:52:E8:BB:83:0B:36:7B:1E:20:C4 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:81:a6:b1:4a:6f:06:f7:26:da:ee:f5:39:d7:71:72:c7:29: 83:e0:ed:d3:7f:11:62:51:96:ed:b3:69:15:08:3d:b5:47:34: ad:82:53:46:cd:f3:97:b8:f0:1a:79:e9:53:29:9c:da:fc:23: b8:28:07:4a:65:08:ba:6f:c7:b0:1a:3c:20:01:66:4b:bd:dd: 07:0a:6f:5a:56:29:2a:8b:8d:0d:9a:d9:61:7c:2b:e1:8d:4e: f7:0c:44:99:4c:f0:9b:d9:b4:f1:df:b7:41:0b:95:84:34:71: 3d:2a:11:db:ce:d1:5a:1b:f4:fd:da:f5:c1:bc:27:94:a3:1a: 05:77:a1:48:6f:1b:27:79:62:b2:6e:3d:9b:2b:fc:4d:8f:b1: 31:ed:52:60:94:5a:cd:34:a6:89:41:b5:48:a0:bd:3a:7f:72: 90:2d:33:ce:76:9d:b1:88:be:85:75:74:fa:5c:b0:dc:47:18: ca:bf:bb:d8:76:2f:dd:8a:46:ce:3a:7a:9f:39:84:5f:97:dc: db:f1:15:61:65:09:90:76:ad:88:b9:eb:a1:52:68:69:a0:f2: 4f:36:5f:bd:69:5f:79:8e:8e:52:52:94:2e:ac:6d:71:54:c7: 0c:8c:b3:f3:dd:02:9d:10:43:8b:d2:91:eb:1e:e1:c4:93:94: 2f:86:54:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUxMTA1MDIxMzI4WhcNMjUxMTEyMDIxMzI4WjAYMRYwFAYD VQQDEw02OTBhYjJjOC02NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt82x/TahSMLQtJnNXENnrbkhYL3fS07NBswyp8BOM1lbbXH+HfeYI5JPGDb6 1cITffHSI7oQ8CSGtbTZFMdNSuinTGUug70Tiodw4MnUKIdoKjiUO6UU7HEWh2rp LOzRF9t5srvVLQAZuPSz6MrYYj/SB4sY70RC8O/EmWfph/aD9qTeyKQgos/EWrRG QF1UrZaiDMDgShf9xyHN4d8oNPelDvQ6QtjZ0FUn/kjSiH0k4ruqlV8UuDNPXQY8 jyTFRYAG4gzcCgyO84AH/4m9s+wpdv96G8x32KJKFCQzfSyuVbz0WsGRRVzWNNwx nZBXT9J8Z1can+QnwEfRcaIQVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGPhQpJ LPg8LoRS6LuDCzZ7HiDEMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIgaaxSm8G9yba7vU513FyxymD4O3TfxFiUZbts2kVCD21RzStglNG zfOXuPAaeelTKZza/CO4KAdKZQi6b8ewGjwgAWZLvd0HCm9aVikqi40NmtlhfCvh jU73DESZTPCb2bTx37dBC5WENHE9KhHbztFaG/T92vXBvCeUoxoFd6FIbxsneWKy bj2bK/xNj7Ex7VJglFrNNKaJQbVIoL06f3KQLTPOdp2xiL6FdXT6XLDcRxjKv7vY di/dikbOOnqfOYRfl9zb8RVhZQmQdq2IueuhUmhpoPJPNl+9aV95jo5SUpQurG1x VMcMjLPz3QKdEEOL0pHrHuHEk5QvhlTd -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:27 2025 by rpki-client