$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: vf/A8hqVRu1XCuT/tOElEVVDQ9T+jpqDZNkEckWANcs= Subject key identifier: B7:26:5A:83:53:3A:E5:C6:2A:9A:93:68:C8:7D:44:14:20:8E:F3:E0 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 102C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 1020 Signing time: Sun 02 Nov 2025 17:27:31 +0000 Manifest this update: Sun 02 Nov 2025 17:27:30 +0000 Manifest next update: Sun 09 Nov 2025 17:27:30 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: UlIfQS5y41a1ROqm6bVyGmbK72R3OnYm884VNiDlrU8=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4140 (0x102c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Nov 2 17:27:30 2025 GMT Not After : Nov 9 17:27:30 2025 GMT Subject: CN=69079482-1330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:d3:38:30:c4:45:c8:60:5e:13:9c:f2:d2: ff:0b:a4:25:b1:d3:58:38:83:ea:07:1a:0e:12:36: 1a:31:40:f5:9e:d6:95:2b:3a:2e:36:3b:d8:30:ba: fa:ea:35:86:cd:08:87:81:b7:64:d1:ba:1d:f0:3b: d7:50:e9:a9:64:4a:63:5b:0b:58:ba:ef:60:d2:79: be:00:db:0b:0a:82:ee:52:44:51:9e:2d:5f:80:47: ee:d8:2d:3c:14:34:2e:47:37:e7:bb:93:59:82:02: 87:0c:4f:46:bc:82:8e:2c:ce:05:26:27:3b:c0:81: 14:2c:e4:9b:22:50:f2:7e:95:f6:dc:2d:8d:6e:c3: a7:c0:13:76:56:5e:f4:3c:3e:e1:03:32:17:7d:32: 86:b5:55:19:f9:14:d3:d7:bb:1c:c9:4c:f4:de:0e: e6:7a:30:1f:5b:75:54:a7:d5:6b:68:f4:6f:b6:3a: 4f:23:d8:89:c7:a7:9d:d0:bd:b7:52:8f:9b:d2:70: 5f:60:aa:1c:a4:80:5b:b4:21:98:9b:c8:70:f1:11: 09:ff:ed:76:84:67:21:fd:78:86:1d:57:d7:29:9f: 1e:bc:94:1e:4e:4f:96:9f:e4:72:86:71:e4:2a:cf: f1:94:71:9f:27:c7:21:a6:c0:d6:2a:25:48:13:22: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:26:5A:83:53:3A:E5:C6:2A:9A:93:68:C8:7D:44:14:20:8E:F3:E0 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b4:11:d1:08:0c:70:05:e0:d3:a3:b0:3f:31:d8:23:c7:e0: 57:41:82:2d:3a:cd:d4:98:a7:f5:01:5a:4d:d1:91:29:8e:9c: df:c6:bf:77:f2:06:aa:58:a3:a3:5a:99:71:67:41:88:12:74: 89:93:65:5b:07:de:31:c9:04:41:ee:2f:ef:d7:e2:4d:50:1f: 5b:82:fe:cc:21:f5:d1:f4:a1:01:06:b4:a9:97:56:52:27:cd: 03:40:24:e5:02:42:51:bd:dd:32:07:98:5a:75:14:df:36:5e: 63:b8:41:00:43:af:91:6b:04:a7:6d:31:fc:fe:45:e2:ad:a5: a3:a9:48:63:29:ad:42:38:ca:20:cc:fa:29:6f:b6:89:e0:4d: a1:62:88:1d:89:c9:ec:c1:3c:22:13:a4:d9:4e:37:66:07:36: bc:b6:85:61:7f:31:d4:78:9f:c2:43:5a:5a:7b:21:14:74:c5: a3:05:8f:4a:dc:cc:92:f6:14:19:68:d6:ee:f9:a3:25:7f:ce: 51:54:1f:6a:a2:f3:ca:22:eb:10:09:b9:1a:a8:ad:ce:5b:49: 0e:96:a4:2f:81:47:ae:ed:85:4b:54:7a:a8:c2:ca:fe:70:57: 50:22:a3:a8:59:53:36:e1:0d:28:95:0e:12:8b:22:e0:08:53: 79:82:05:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUxMTAyMTcyNzMwWhcNMjUxMTA5MTcyNzMwWjAYMRYwFAYD VQQDEw02OTA3OTQ4Mi0xMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lbTODDERchgXhOc8tL/C6QlsdNYOIPqBxoOEjYaMUD1ntaVKzouNjvYMLr6 6jWGzQiHgbdk0bod8DvXUOmpZEpjWwtYuu9g0nm+ANsLCoLuUkRRni1fgEfu2C08 FDQuRzfnu5NZggKHDE9GvIKOLM4FJic7wIEULOSbIlDyfpX23C2NbsOnwBN2Vl70 PD7hAzIXfTKGtVUZ+RTT17scyUz03g7mejAfW3VUp9VraPRvtjpPI9iJx6ed0L23 Uo+b0nBfYKocpIBbtCGYm8hw8REJ/+12hGch/XiGHVfXKZ8evJQeTk+Wn+RyhnHk Ks/xlHGfJ8chpsDWKiVIEyLhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcmWoNT OuXGKpqTaMh9RBQgjvPgMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1tBHRCAxwBeDTo7A/Mdgjx+BXQYItOs3UmKf1AVpN0ZEpjpzfxr93 8gaqWKOjWplxZ0GIEnSJk2VbB94xyQRB7i/v1+JNUB9bgv7MIfXR9KEBBrSpl1ZS J80DQCTlAkJRvd0yB5hadRTfNl5juEEAQ6+RawSnbTH8/kXiraWjqUhjKa1COMog zPopb7aJ4E2hYogdicnswTwiE6TZTjdmBza8toVhfzHUeJ/CQ1paeyEUdMWjBY9K 3MyS9hQZaNbu+aMlf85RVB9qovPKIusQCbkaqK3OW0kOlqQvgUeu7YVLVHqowsr+ cFdQIqOoWVM24Q0olQ4SiyLgCFN5ggXv -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:18 2025 by rpki-client