$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: yUSJ/oYRizR+1alI0KkYOPYhgEdTEkXefrq/akrYpdk= Subject key identifier: 5A:D2:38:CE:21:56:C5:C4:0E:87:70:86:85:08:E5:0A:31:7E:11:11 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0C6B Signing time: Tue 04 Nov 2025 18:41:38 +0000 Manifest this update: Tue 04 Nov 2025 18:41:37 +0000 Manifest next update: Tue 11 Nov 2025 18:41:37 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: a5+F0cHkgS+6p/qeyYpr9Ak5fCHlJNW+ygUiP5vQm8w=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: bKIVbhRs5w35IIfwUaxKPcUoIg+dZW+Orr/jkzvA1ls=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o9KgCgIfk9qmZZ9pgzWFPU4WMxKkFhiZ4bjzLNQ6ffs=) 4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: ltU83qHdHMX+gE2JiPsnwwizXD7fI0umImKJHXZ+qiY=) 5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: X2T86WPoFoEyZcogT1ndr7RJyh96AHdCumJauzM/7xw=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: 3CkpfzzdlD3cY7gMPcsoVBDo+GHLrm85uXTpFP0fJ9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Nov 4 18:41:37 2025 GMT Not After : Nov 11 18:41:37 2025 GMT Subject: CN=690a48e1-d93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:85:33:55:de:f7:bb:0a:aa:2c:a6:12:af: 9b:20:d1:45:b8:58:7e:6c:ac:43:63:5d:e0:7c:8f: 38:c4:6e:12:47:46:dc:6d:de:b5:9d:32:5e:eb:c8: 02:d8:07:fe:94:03:8c:f7:36:b6:12:ae:cf:66:5f: 40:a0:5d:65:26:aa:81:96:f9:4d:b8:88:b8:a4:68: d0:6a:23:a0:b8:74:eb:18:bc:8d:df:04:0a:3e:89: 2e:a1:99:52:95:b9:27:34:ef:05:76:8f:d1:c3:5b: 33:32:7b:e9:93:d3:b0:19:f3:02:0b:e2:6d:cd:6e: 56:2a:2d:74:e9:69:d7:2e:ac:42:d4:9f:cb:39:b4: 41:4f:3b:a0:82:29:c3:3f:11:ed:32:ef:90:6e:64: 17:09:f5:d2:c0:db:e2:5d:83:e6:37:c4:bf:3d:b7: 40:02:bd:6a:0e:ea:3a:d9:5d:8f:e9:f8:30:b1:f1: 7e:26:81:5b:2e:b4:83:c1:6f:94:24:78:dd:6e:11: 71:69:3b:e3:9c:17:91:95:95:82:02:54:de:a3:fd: 48:95:e5:e1:d1:ea:5f:19:72:2e:5e:70:fc:f7:b2: 03:3e:a9:30:24:61:e9:6d:2c:1e:66:06:41:8f:e4: c7:43:05:42:76:e3:e3:9b:cd:7f:e5:30:a0:be:5f: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D2:38:CE:21:56:C5:C4:0E:87:70:86:85:08:E5:0A:31:7E:11:11 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f4:e1:6f:93:2c:25:49:99:0c:c6:99:af:a1:69:7e:cf:bd: 9d:56:e7:35:e9:e7:9b:01:a5:69:ed:ff:c3:1a:a9:d1:3d:7f: 9c:d4:14:91:ed:a5:54:05:ba:75:80:2d:fa:3d:c8:df:44:76: 28:07:12:b8:7e:93:08:c1:cd:b5:63:07:f1:f6:7f:2c:de:39: 9f:ed:8e:29:f8:bf:4e:a9:e4:b5:43:d0:ee:6b:38:3c:90:2e: 3c:5b:5a:55:77:16:e3:5b:04:bd:1f:d3:53:aa:96:18:b4:c2: ac:bf:9e:7a:84:a5:ac:0f:80:a9:78:37:fe:21:4d:b6:73:62: cb:a8:a9:b3:b3:09:65:c5:e8:94:80:fd:45:27:f6:04:12:57: d3:23:3f:65:f4:d1:ff:c4:66:c3:c8:eb:f4:e3:2f:82:a6:a7: 70:84:2a:2c:37:85:f7:8f:6e:5c:5e:d1:4b:98:b8:05:e7:c8: fc:3f:a8:e5:34:b0:ad:92:93:cf:cb:34:8d:d4:dc:65:60:8b: 33:87:08:13:67:0b:89:7f:ca:13:e7:cb:ce:f6:5a:21:18:4e: 45:c1:c8:28:95:40:5e:d0:67:de:0a:a8:e6:19:ef:24:44:04: 99:13:9b:90:90:e3:24:d4:5a:aa:2d:c1:99:e9:d3:69:dc:4e: 11:56:3c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUxMTA0MTg0MTM3WhcNMjUxMTExMTg0MTM3WjAYMRYwFAYD VQQDEw02OTBhNDhlMS1kOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NCFM1Xe97sKqiymEq+bINFFuFh+bKxDY13gfI84xG4SR0bcbd61nTJe68gC 2Af+lAOM9za2Eq7PZl9AoF1lJqqBlvlNuIi4pGjQaiOguHTrGLyN3wQKPokuoZlS lbknNO8Fdo/Rw1szMnvpk9OwGfMCC+JtzW5WKi106WnXLqxC1J/LObRBTzugginD PxHtMu+QbmQXCfXSwNviXYPmN8S/PbdAAr1qDuo62V2P6fgwsfF+JoFbLrSDwW+U JHjdbhFxaTvjnBeRlZWCAlTeo/1IleXh0epfGXIuXnD897IDPqkwJGHpbSweZgZB j+THQwVCduPjm81/5TCgvl+vXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrSOM4h VsXEDodwhoUI5QoxfhERMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr9OFvkywlSZkMxpmvoWl+z72dVuc16eebAaVp7f/DGqnRPX+c1BSR 7aVUBbp1gC36PcjfRHYoBxK4fpMIwc21Ywfx9n8s3jmf7Y4p+L9OqeS1Q9Duazg8 kC48W1pVdxbjWwS9H9NTqpYYtMKsv556hKWsD4CpeDf+IU22c2LLqKmzswllxeiU gP1FJ/YEElfTIz9l9NH/xGbDyOv04y+CpqdwhCosN4X3j25cXtFLmLgF58j8P6jl NLCtkpPPyzSN1NxlYIszhwgTZwuJf8oT58vO9lohGE5FwcgolUBe0GfeCqjmGe8k RASZE5uQkOMk1FqqLcGZ6dNp3E4RVjxO -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:50 2025 by rpki-client