$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: HtULPJvcqdf4cWh+NxrEs+AA1y7ZwXfWwOun3ffbIFI= Subject key identifier: F2:0F:CA:48:E9:C8:FB:98:A7:08:5D:76:E9:0F:46:0E:B8:E6:50:68 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 038C Signing time: Mon 03 Nov 2025 00:44:04 +0000 Manifest this update: Mon 03 Nov 2025 00:44:04 +0000 Manifest next update: Mon 10 Nov 2025 00:44:04 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: KRyScQqf6sUNosiJk/wI5EDv/Uh4qPypzEgZdCub8QQ=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Nov 3 00:44:04 2025 GMT Not After : Nov 10 00:44:04 2025 GMT Subject: CN=6907fad4-80c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:ad:a0:34:07:dc:ca:0b:d3:ab:aa:e6:39: 60:f0:48:dd:3d:a1:a5:77:1c:ba:a3:dc:0f:79:38: 8b:89:fb:08:d9:04:15:59:b2:46:60:ae:9c:fb:8f: 2e:ea:eb:25:70:97:6f:99:88:3c:1d:77:15:21:3e: 51:18:39:2c:63:ab:2d:23:d0:31:c4:55:9f:bf:12: d1:c3:ae:da:ba:3d:00:25:c9:81:f3:1d:3d:7a:5e: 77:3c:25:86:1e:ea:16:79:1a:b1:74:54:cb:5e:79: 59:8b:2f:df:d7:3b:bc:b5:3c:c1:2c:9a:9e:bf:f2: 95:d1:23:b8:a7:ed:b6:b4:c3:ec:ad:99:c3:30:a3: 17:ad:28:f0:28:6c:6a:6a:4e:4f:43:b0:d6:49:a8: ed:30:59:ac:21:4f:48:33:ee:c5:4e:8f:ab:35:51: e0:37:3e:ed:d4:72:4b:07:41:c3:69:10:66:28:51: 46:f4:e5:c5:86:b2:b1:57:88:87:4f:8a:9e:66:b6: 98:25:ca:79:a6:c6:73:88:1a:24:ba:c5:01:54:3d: b9:fb:65:e4:fb:52:3d:2e:ae:48:66:4c:48:5e:d8: 34:79:b2:3e:43:ae:19:d0:77:36:4f:6a:c0:1c:c9: cd:4d:75:10:88:5c:64:5c:76:bb:7a:b7:62:c6:9b: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0F:CA:48:E9:C8:FB:98:A7:08:5D:76:E9:0F:46:0E:B8:E6:50:68 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a8:e4:40:3c:db:e8:df:61:7f:0a:ec:78:3f:6e:77:f5:3c: 86:13:05:b2:cd:ab:8c:85:f1:7f:85:71:45:85:57:22:92:ac: aa:06:67:84:7b:39:a3:48:b2:ef:da:1f:01:d2:10:c1:82:0f: 83:5f:1d:89:e3:c3:0b:cb:e0:d5:c0:98:ec:28:66:a7:64:ec: d5:0f:86:a5:50:b0:7f:b6:d2:30:d1:00:e2:5d:3a:65:b7:d1: f4:c5:9b:0d:87:b2:bb:42:8b:d1:f1:62:6d:39:41:cc:81:0d: 0e:e6:1c:83:76:89:ab:6f:ca:86:2c:84:c6:90:62:aa:e6:88: f5:17:46:53:54:50:42:81:8a:d4:e7:40:7b:07:55:76:ac:45: 58:c5:90:98:76:c3:46:66:67:61:c2:74:da:f0:64:1e:da:85: 27:a2:cb:ca:06:a3:ae:b3:34:97:44:9c:3d:c5:9f:b2:b8:e0: a1:06:c4:25:d6:9d:c1:73:54:9e:78:ab:57:95:da:2d:7f:e1: 01:63:01:42:23:17:64:cc:cc:7f:a4:18:7d:62:fa:28:5f:c5: 04:4e:3f:e8:f4:82:d4:b8:f7:c8:92:8e:08:e1:18:4a:2c:55: 74:a9:7d:d2:46:99:75:5e:4e:1c:01:0c:69:fd:14:db:d0:d5: aa:22:e2:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUxMTAzMDA0NDA0WhcNMjUxMTEwMDA0NDA0WjAYMRYwFAYD VQQDEw02OTA3ZmFkNC04MGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnh2toDQH3MoL06uq5jlg8EjdPaGldxy6o9wPeTiLifsI2QQVWbJGYK6c+48u 6uslcJdvmYg8HXcVIT5RGDksY6stI9AxxFWfvxLRw67auj0AJcmB8x09el53PCWG HuoWeRqxdFTLXnlZiy/f1zu8tTzBLJqev/KV0SO4p+22tMPsrZnDMKMXrSjwKGxq ak5PQ7DWSajtMFmsIU9IM+7FTo+rNVHgNz7t1HJLB0HDaRBmKFFG9OXFhrKxV4iH T4qeZraYJcp5psZziBokusUBVD25+2Xk+1I9Lq5IZkxIXtg0ebI+Q64Z0Hc2T2rA HMnNTXUQiFxkXHa7erdixpt9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIPykjp yPuYpwhddukPRg645lBoMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbqORAPNvo32F/Cux4P2539TyGEwWyzauMhfF/hXFFhVcikqyqBmeE ezmjSLLv2h8B0hDBgg+DXx2J48MLy+DVwJjsKGanZOzVD4alULB/ttIw0QDiXTpl t9H0xZsNh7K7QovR8WJtOUHMgQ0O5hyDdomrb8qGLITGkGKq5oj1F0ZTVFBCgYrU 50B7B1V2rEVYxZCYdsNGZmdhwnTa8GQe2oUnosvKBqOuszSXRJw9xZ+yuOChBsQl 1p3Bc1SeeKtXldotf+EBYwFCIxdkzMx/pBh9YvooX8UETj/o9ILUuPfIko4I4RhK LFV0qX3SRpl1Xk4cAQxp/RTb0NWqIuLB -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:08 2025 by rpki-client