$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json) Hash identifier: VWe3NQrslFbaHqCw6r7fcIxGy+B3ZveqxjkA1xAz2IE= Subject key identifier: A1:FB:6C:36:1B:81:FE:8D:CD:71:C2:E0:14:FB:6A:3D:F2:43:C8:6E Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft Manifest number: 30 Signing time: Mon 03 Nov 2025 07:39:09 +0000 Manifest this update: Mon 03 Nov 2025 07:39:08 +0000 Manifest next update: Mon 10 Nov 2025 07:39:08 +0000 Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: qfGh/6iic9pLNSvtAFtHQE6fIuDJkY+a5SdGNZoWnVQ=) 2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: y8FMpJ63sS6i2zvQWU1SmHtfzGgXpl9kmSxDwAQPAFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Validity Not Before: Nov 3 07:39:08 2025 GMT Not After : Nov 10 07:39:08 2025 GMT Subject: CN=69085c1c-3c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:7d:e3:e8:49:b6:4f:5f:50:01:3f:1a:eb: 22:e1:8e:9e:95:d0:31:ad:e3:f3:84:aa:e5:55:cd: 7c:32:d1:9a:96:fc:b0:45:e5:e1:e7:2a:f0:9d:83: e8:d3:6a:f7:cd:77:59:b9:14:32:ea:7b:de:43:4c: 9a:05:71:e6:90:8e:f5:3e:d9:a5:76:87:82:ea:ed: 85:27:3a:94:e4:8e:2d:5f:5c:80:b7:82:d5:ee:8e: bb:4d:9c:08:5a:a2:dc:b0:48:08:e1:13:7c:85:3d: b6:d8:3b:00:c5:f2:97:a3:34:0b:86:77:68:64:80: 10:f7:c3:12:e2:c1:51:77:48:7d:08:9b:32:ec:3a: 76:57:b8:a0:46:f0:47:67:6f:00:2e:30:ac:27:3e: 3f:ff:59:58:03:15:43:e6:c8:48:2b:f1:f1:06:cc: ac:98:ab:02:48:58:3c:f7:05:f0:b5:58:0d:a3:1e: 97:01:d6:70:94:27:87:09:65:fd:cb:a1:ed:5f:8c: 1f:b2:ee:c0:e2:e2:98:a1:c1:8a:6f:9d:d3:fa:8c: 90:d6:b0:f2:27:ed:b1:01:01:c6:5a:fe:d5:1a:18: bf:54:ed:fb:d2:08:78:ae:0c:ff:e2:a8:ff:d3:68: 23:b5:06:88:bb:e6:30:ec:38:50:40:b3:a2:53:f7: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:6C:36:1B:81:FE:8D:CD:71:C2:E0:14:FB:6A:3D:F2:43:C8:6E X509v3 Authority Key Identifier: keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:23:70:c2:9b:47:57:5d:13:c1:b3:8d:67:52:14:c8:fa:7b: e6:0d:d5:dd:3f:6a:19:54:12:1e:6f:e1:78:09:b2:b8:48:fb: 39:f2:c2:e9:2b:10:75:14:51:82:06:34:54:94:d0:da:a4:2f: 4a:66:9f:05:c0:c9:2a:76:b1:21:0e:47:36:b9:a2:15:d7:b5: d9:07:fb:1c:75:fc:9e:37:43:1d:fb:41:79:6b:17:b4:74:e2: 85:a0:16:11:5a:a2:ae:1a:20:ba:83:67:53:71:83:b1:79:db: 28:0e:09:7e:d2:b6:68:1f:58:18:13:d0:81:e0:52:b6:43:2f: 55:b7:59:ef:62:ae:32:5c:b5:3b:c7:5b:df:1e:20:10:19:5f: 5e:32:37:e0:ac:b9:40:47:79:18:a7:c0:10:bf:72:ae:e0:4d: eb:b3:a4:da:6f:83:06:85:d2:64:ac:14:ee:cd:8e:64:24:68: 7b:b8:62:2c:7c:d2:43:12:10:cf:ef:cf:f8:bd:c4:3d:96:9f: 4d:af:dc:5c:d0:4e:d1:d0:26:7c:a8:75:45:44:6d:53:6b:0e: 3f:b4:07:54:cf:d1:63:cb:c3:ad:33:14:66:09:42:66:d4:25: 84:63:24:28:a5:dd:49:25:d1:54:32:3b:e6:ef:7a:45:42:57: 55:6e:bb:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCRTExMC8GA1UEBRMoNkIyMkY5MDc5MTA1QTRERUJDQjA5Q0MxQjkwMDk2MDg1 QzY2MkQ0NDAeFw0yNTExMDMwNzM5MDhaFw0yNTExMTAwNzM5MDhaMBgxFjAUBgNV BAMTDTY5MDg1YzFjLTNjNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHrH3j6Em2T19QAT8a6yLhjp6V0DGt4/OEquVVzXwy0ZqW/LBF5eHnKvCdg+jT avfNd1m5FDLqe95DTJoFceaQjvU+2aV2h4Lq7YUnOpTkji1fXIC3gtXujrtNnAha otywSAjhE3yFPbbYOwDF8pejNAuGd2hkgBD3wxLiwVF3SH0ImzLsOnZXuKBG8Edn bwAuMKwnPj//WVgDFUPmyEgr8fEGzKyYqwJIWDz3BfC1WA2jHpcB1nCUJ4cJZf3L oe1fjB+y7sDi4pihwYpvndP6jJDWsPIn7bEBAcZa/tUaGL9U7fvSCHiuDP/iqP/T aCO1Boi75jDsOFBAs6JT9z/ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoftsNhuB /o3NccLgFPtqPfJDyG4wHwYDVR0jBBgwFoAUayL5B5EFpN68sJzBuQCWCFxmLUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUJFLzE1RjVDMTBDNzQz RTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXlMNUI1RUZwTjY4c0p6QnVRQ1dDRnhtTFVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUJFLzE1RjVDMTBDNzQzRTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42 OHNKekJ1UUNXQ0Z4bUxVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALojcMKbR1ddE8GzjWdSFMj6e+YN1d0/ahlUEh5v4XgJsrhI+znywukr EHUUUYIGNFSU0NqkL0pmnwXAySp2sSEORza5ohXXtdkH+xx1/J43Qx37QXlrF7R0 4oWgFhFaoq4aILqDZ1Nxg7F52ygOCX7StmgfWBgT0IHgUrZDL1W3We9irjJctTvH W98eIBAZX14yN+CsuUBHeRinwBC/cq7gTeuzpNpvgwaF0mSsFO7NjmQkaHu4Yix8 0kMSEM/vz/i9xD2Wn02v3FzQTtHQJnyodUVEbVNrDj+0B1TP0WPLw60zFGYJQmbU JYRjJCil3Ukl0VQyO+bvekVCV1Vuu/8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:16 2025 by rpki-client