$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json) Hash identifier: zDeUc8xF42JOnDUGVt7zY1NPqmtdfno6NpkT1LmrUeE= Subject key identifier: 93:7E:43:23:F2:90:52:16:4F:19:FC:40:04:F3:51:00:4B:5A:41:E0 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft Manifest number: 080A Signing time: Tue 04 Nov 2025 21:05:31 +0000 Manifest this update: Tue 04 Nov 2025 21:05:31 +0000 Manifest next update: Tue 11 Nov 2025 21:05:31 +0000 Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: Tx2fAU4D4tay2SlyRuPD/45chmDggM3vrqWpy3GNW2E=) 2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=) 3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: KUbdaIcIL3ANAib1/1yNdALhPqZywuDeLgdVE3tNncA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Nov 4 21:05:31 2025 GMT Not After : Nov 11 21:05:31 2025 GMT Subject: CN=690a6a9b-6dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:4d:2c:ad:eb:78:7a:cb:9b:fb:ca:8f:5d: 57:f7:a0:e8:22:a6:6d:92:7e:21:b4:f3:46:5b:3c: 91:c3:9a:ab:61:62:68:c4:4f:2e:9f:69:d6:87:99: 3f:b5:d9:27:5a:44:10:77:12:43:7a:30:e4:79:4c: 54:2b:c5:9d:a0:99:b3:21:fe:e8:f7:81:da:2b:47: 18:73:63:7e:ee:da:2b:40:dd:3f:eb:46:be:64:3a: b9:72:0d:75:f5:0d:19:30:27:26:1c:ed:dd:2f:89: 0d:d4:36:cc:51:43:3e:ea:f3:5e:92:ad:24:e3:d3: 83:ba:34:1e:f4:fe:da:6e:89:ce:97:c7:f6:4e:a4: b4:af:2a:51:9e:eb:b2:a3:15:1f:7f:18:1d:c5:b1: 34:ce:73:c7:80:18:25:d3:10:ac:b9:9f:38:61:2d: b0:e6:58:b4:17:72:93:6e:03:29:8d:85:e7:a1:aa: 50:c6:1b:6d:23:ff:f9:2b:2a:ef:28:98:ec:62:3a: 19:aa:1c:db:c7:d2:dd:05:81:58:75:17:69:82:40: cb:49:59:98:99:90:36:15:13:16:52:e5:99:01:51: 39:a8:43:7d:8f:39:e6:f7:91:33:16:fc:00:67:0f: 5f:6f:ef:99:e6:d6:58:15:d4:63:3c:00:09:13:09: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7E:43:23:F2:90:52:16:4F:19:FC:40:04:F3:51:00:4B:5A:41:E0 X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:af:a4:0c:7e:65:e5:3d:91:e1:c4:bc:98:e6:a2:81:a0:cb: f3:29:bf:17:05:0a:cf:f6:1c:d0:e9:0f:72:cf:69:40:38:52: 52:3e:2e:9d:07:75:69:d8:55:84:69:bc:a4:54:22:0a:b0:22: b0:5e:86:bd:71:20:e4:c8:0e:fb:f1:63:d1:63:a9:a8:66:f8: af:2e:84:2d:dc:ea:73:ac:b7:c4:b5:c5:5e:7d:20:e2:28:4d: 58:cd:a3:74:64:3d:d8:95:71:49:73:63:85:28:fc:09:06:a3: 05:f7:67:c8:af:e5:9a:29:75:f4:59:ca:a0:b1:ad:62:3d:0d: 47:f8:59:3b:fe:03:0d:03:c8:34:3f:45:bc:65:5a:1b:d7:11: f9:7e:58:1e:1b:1f:02:fc:bb:6c:3a:78:c4:0a:be:a7:b5:41: ad:27:5f:4a:56:38:62:07:72:f1:1a:af:16:43:8b:ff:d1:a3: 96:3a:e8:b5:e7:27:17:4b:d1:10:70:69:64:32:fa:94:e3:36: 27:34:ea:43:7c:d7:20:b2:54:c0:b6:49:9f:94:70:ba:f5:d2: a0:ee:94:b6:35:e0:cd:1e:3e:35:02:c1:8c:af:95:c5:f4:dc: df:12:27:2a:40:19:7b:8a:5b:da:98:d1:20:11:c9:a4:30:6f: c3:7f:db:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjUxMTA0MjEwNTMxWhcNMjUxMTExMjEwNTMxWjAYMRYwFAYD VQQDEw02OTBhNmE5Yi02ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRNNLK3reHrLm/vKj11X96DoIqZtkn4htPNGWzyRw5qrYWJoxE8un2nWh5k/ tdknWkQQdxJDejDkeUxUK8WdoJmzIf7o94HaK0cYc2N+7torQN0/60a+ZDq5cg11 9Q0ZMCcmHO3dL4kN1DbMUUM+6vNekq0k49ODujQe9P7abonOl8f2TqS0rypRnuuy oxUffxgdxbE0znPHgBgl0xCsuZ84YS2w5li0F3KTbgMpjYXnoapQxhttI//5Kyrv KJjsYjoZqhzbx9LdBYFYdRdpgkDLSVmYmZA2FRMWUuWZAVE5qEN9jznm95EzFvwA Zw9fb++Z5tZYFdRjPAAJEwlmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJN+QyPy kFIWTxn8QATzUQBLWkHgMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2r6QMfmXlPZHhxLyY5qKBoMvzKb8XBQrP9hzQ6Q9yz2lAOFJSPi6d B3Vp2FWEabykVCIKsCKwXoa9cSDkyA778WPRY6moZvivLoQt3OpzrLfEtcVefSDi KE1YzaN0ZD3YlXFJc2OFKPwJBqMF92fIr+WaKXX0Wcqgsa1iPQ1H+Fk7/gMNA8g0 P0W8ZVob1xH5flgeGx8C/LtsOnjECr6ntUGtJ19KVjhiB3LxGq8WQ4v/0aOWOui1 5ycXS9EQcGlkMvqU4zYnNOpDfNcgslTAtkmflHC69dKg7pS2NeDNHj41AsGMr5XF 9NzfEicqQBl7ilvamNEgEcmkMG/Df9tf -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:43 2025 by rpki-client