$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: kv1bHtD1ejlsjn7KSANmTsiJBHKXM1SgCuHXqSKkaW4= Subject key identifier: F3:15:32:A1:80:73:1D:B9:14:40:50:9C:BB:96:86:7A:66:D8:22:B9 Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: CC Signing time: Wed 05 Nov 2025 05:57:20 +0000 Manifest this update: Wed 05 Nov 2025 05:57:19 +0000 Manifest next update: Wed 12 Nov 2025 05:57:19 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: OPnf7nwwywTNsRyum+0d5IVf5Lh9WsHOAbRY7y/9ltU=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Nov 5 05:57:19 2025 GMT Not After : Nov 12 05:57:19 2025 GMT Subject: CN=690ae73f-7bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:ce:e0:e9:73:df:c8:41:a4:8c:48:d2:73: 37:c1:42:45:2e:6b:9f:5f:46:2e:29:51:fb:61:87: 04:65:fe:f7:4f:73:43:c7:fb:b5:1c:64:0d:cc:b4: 9a:b8:fc:bd:d1:78:ff:ae:6c:d0:ba:77:bb:7c:77: fb:8d:01:38:10:75:79:e1:1a:41:15:08:64:9a:01: 4c:3a:77:51:db:d4:d0:d5:87:bf:ac:35:79:bf:f1: bc:a3:50:5f:42:e0:53:75:57:08:b2:7e:ff:4c:65: 9b:0d:28:6c:5a:76:ac:29:5e:d5:2c:ba:23:32:c1: af:03:84:05:dc:ba:16:fe:f5:4d:de:c5:55:2c:de: da:7a:72:6e:de:c0:8a:09:dc:d9:88:65:fc:2a:b4: 62:5b:09:29:b3:78:12:15:57:30:c4:ca:43:cf:0a: 21:7a:72:dd:e2:c6:50:6b:49:24:9d:50:f6:a5:3a: e8:17:11:c6:19:64:22:9e:47:31:3a:d6:b2:e6:fe: 9a:46:80:a2:18:29:76:fe:10:65:c6:0d:87:6f:e4: e1:78:7c:41:ca:dd:fd:cd:6e:e7:d6:c2:54:27:de: fe:f1:d9:8f:ad:80:ea:a2:08:0e:eb:ce:6e:fa:cf: 42:f3:27:61:d8:84:50:7e:99:f2:27:6a:89:9e:6e: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:15:32:A1:80:73:1D:B9:14:40:50:9C:BB:96:86:7A:66:D8:22:B9 X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e7:26:d7:68:62:77:c5:86:f5:9e:23:13:31:5f:b1:93:f2: ef:65:8f:fc:6b:e6:cc:31:d8:e2:6a:21:3c:2f:11:3b:78:41: dc:15:0e:b1:6b:f6:aa:3b:55:ff:e3:03:5d:00:c7:35:89:67: b4:10:fe:ba:7b:e9:da:9c:d3:5e:f2:1d:4e:70:0b:ac:4a:65: d7:cc:ef:2d:82:fb:bd:37:88:c7:21:14:e1:06:17:02:db:83: 14:33:e3:4f:c3:c7:61:9c:45:a7:2f:8f:8b:7d:02:7d:5f:f2: 46:6b:c6:4f:c9:f8:83:37:19:67:ff:a2:f5:c4:2f:68:b9:da: b0:cc:c1:c7:9e:80:17:b2:a0:70:4d:10:b7:ff:c7:1a:11:7f: 2a:69:18:0c:27:d9:44:da:a2:8e:98:1c:a3:9a:b3:5a:dd:ae: a9:43:6c:dc:af:35:3d:e8:37:a8:1d:fb:59:31:3a:c3:a1:9d: 63:b2:34:f6:65:86:db:24:e0:4b:2f:3d:cc:7f:e5:27:e1:99: e9:58:a0:e7:11:d9:55:c5:61:f1:21:6f:8c:0e:77:d8:e4:03: ec:99:b6:2e:8a:d4:14:d9:e2:f4:3d:23:94:af:df:ca:01:b0: 09:43:75:7c:ee:02:f8:68:76:e1:79:5e:2b:2b:7d:04:95:53: ca:11:11:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUxMTA1MDU1NzE5WhcNMjUxMTEyMDU1NzE5WjAYMRYwFAYD VQQDEw02OTBhZTczZi03YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJrO4Olz38hBpIxI0nM3wUJFLmufX0YuKVH7YYcEZf73T3NDx/u1HGQNzLSa uPy90Xj/rmzQune7fHf7jQE4EHV54RpBFQhkmgFMOndR29TQ1Ye/rDV5v/G8o1Bf QuBTdVcIsn7/TGWbDShsWnasKV7VLLojMsGvA4QF3LoW/vVN3sVVLN7aenJu3sCK CdzZiGX8KrRiWwkps3gSFVcwxMpDzwohenLd4sZQa0kknVD2pTroFxHGGWQinkcx Otay5v6aRoCiGCl2/hBlxg2Hb+TheHxByt39zW7n1sJUJ97+8dmPrYDqoggO685u +s9C8ydh2IRQfpnyJ2qJnm6hDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMVMqGA cx25FEBQnLuWhnpm2CK5MB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5ybXaGJ3xYb1niMTMV+xk/LvZY/8a+bMMdjiaiE8LxE7eEHcFQ6x a/aqO1X/4wNdAMc1iWe0EP66e+nanNNe8h1OcAusSmXXzO8tgvu9N4jHIRThBhcC 24MUM+NPw8dhnEWnL4+LfQJ9X/JGa8ZPyfiDNxln/6L1xC9oudqwzMHHnoAXsqBw TRC3/8caEX8qaRgMJ9lE2qKOmByjmrNa3a6pQ2zcrzU96DeoHftZMTrDoZ1jsjT2 ZYbbJOBLLz3Mf+Un4ZnpWKDnEdlVxWHxIW+MDnfY5APsmbYuitQU2eL0PSOUr9/K AbAJQ3V87gL4aHbheV4rK30ElVPKERE+ -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:47 2025 by rpki-client