$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json) Hash identifier: Em4fcfrocWijVJYBaYnLeySYeeyhDy2PSHhNCDWAKNk= Subject key identifier: A6:21:F4:D1:B4:90:AF:46:2F:4A:7B:A9:15:B9:16:04:F6:92:8D:46 Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft Manifest number: 2E Signing time: Mon 03 Nov 2025 07:42:17 +0000 Manifest this update: Mon 03 Nov 2025 07:42:16 +0000 Manifest next update: Mon 10 Nov 2025 07:42:16 +0000 Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: FZDGLIybanjULB8fl9M97r5BapUp1CeaI8WvyyONx0M=) 2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: x6HQ5RDi7bp4WcPcgDw38Yb49M8i1vVS8BiW9zZO4Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Validity Not Before: Nov 3 07:42:16 2025 GMT Not After : Nov 10 07:42:16 2025 GMT Subject: CN=69085cd8-01fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:02:26:be:a0:1b:be:9b:64:23:43:28:4f: b5:59:a0:28:91:62:db:fa:e2:3b:af:98:dd:7c:24: 0d:f4:0e:aa:d9:69:33:47:9b:4d:66:18:74:5f:04: 44:19:50:ad:58:75:d0:b8:13:ee:04:2c:67:e6:de: ef:9e:f7:aa:eb:35:a3:d4:02:1b:da:d3:4e:90:f5: a8:a4:37:bc:db:a3:0b:04:ab:a5:7e:bd:c7:52:1b: a4:5a:0f:5c:f7:b7:f4:77:3a:5a:8b:54:8a:da:37: c9:68:ed:f8:d4:aa:ad:5b:4e:8d:40:b7:0e:48:fa: d4:a5:04:d3:4d:96:cc:38:32:21:f1:3d:39:8e:3b: 34:81:6d:7f:8b:8e:71:5b:5c:e0:38:54:cc:38:38: ac:cf:c8:09:ae:f8:d2:50:94:5a:eb:0c:29:ea:5d: dc:a1:4f:7f:25:84:ac:bb:0a:3f:cd:ba:0d:99:c2: 11:d2:3c:57:b5:2a:05:8c:7e:3c:83:d9:23:50:83: 16:bd:b0:5c:78:1d:a1:80:46:35:39:34:28:df:33: 5b:b7:a2:5f:60:66:43:23:22:8b:f2:47:24:8e:b2: 81:a6:9a:68:4f:72:11:a0:19:15:55:9b:1b:f6:8d: cd:59:a1:b5:ca:41:8f:a7:54:1e:3e:89:01:0a:69: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:F4:D1:B4:90:AF:46:2F:4A:7B:A9:15:B9:16:04:F6:92:8D:46 X509v3 Authority Key Identifier: keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:da:da:1f:10:3a:2d:8d:04:6e:f2:55:a3:86:fb:ff:3f:0d: 4a:80:61:1d:69:f5:b0:40:c9:e8:a6:99:df:d9:30:e7:13:0c: be:ca:d1:8b:74:76:9c:4f:a6:f3:78:17:da:ae:ae:77:4d:8c: ac:74:d9:33:d9:81:b9:a0:bd:34:6b:e2:99:93:0f:ac:93:30: b2:af:e8:a4:a7:88:5d:90:21:ab:21:89:a3:01:31:e6:4b:b5: 9a:6d:57:19:8a:55:f7:b8:80:1b:e5:2d:5c:f7:1a:12:d2:6f: 6f:21:76:a7:21:4c:95:90:5a:05:44:f4:87:95:4b:60:dd:b0: c4:33:e7:f6:2f:8a:ec:7c:3e:b3:b0:e9:7c:bd:cf:44:3f:dc: a8:e5:98:69:ce:a8:83:cc:ab:46:e6:76:5c:55:9d:53:1d:07: 9d:48:71:86:ca:81:15:64:87:53:84:75:75:9a:b1:7a:eb:17: 98:a2:c2:86:74:1a:10:ca:3f:48:40:df:81:8b:75:71:cf:d7: d2:0b:52:cf:ca:09:03:ea:71:76:25:72:1c:43:06:95:45:1f: 76:12:33:e0:ad:0a:e7:c1:30:a0:8d:5d:35:27:77:15:91:0f: 13:e9:f7:37:9e:21:03:08:26:96:c6:64:d3:ea:32:a7:a6:9c: c4:ff:fd:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NTk3OTExMC8GA1UEBRMoMDFDODU4MTgxMDg4RTFCOUM1Nzc1RENBMEM0QkFFOUI5 RkY1NzdCMzAeFw0yNTExMDMwNzQyMTZaFw0yNTExMTAwNzQyMTZaMBgxFjAUBgNV BAMTDTY5MDg1Y2Q4LTAxZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCCwImvqAbvptkI0MoT7VZoCiRYtv64juvmN18JA30DqrZaTNHm01mGHRfBEQZ UK1YddC4E+4ELGfm3u+e96rrNaPUAhva006Q9aikN7zbowsEq6V+vcdSG6RaD1z3 t/R3OlqLVIraN8lo7fjUqq1bTo1Atw5I+tSlBNNNlsw4MiHxPTmOOzSBbX+LjnFb XOA4VMw4OKzPyAmu+NJQlFrrDCnqXdyhT38lhKy7Cj/Nug2ZwhHSPFe1KgWMfjyD 2SNQgxa9sFx4HaGARjU5NCjfM1u3ol9gZkMjIovyRySOsoGmmmhPchGgGRVVmxv2 jc1ZobXKQY+nVB4+iQEKabwLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpiH00bSQ r0YvSnupFbkWBPaSjUYwHwYDVR0jBBgwFoAUAchYGBCI4bnFd13KDEuum5/1d7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1OTc5LzUzOTUwNzg2N0Yy NzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWNoWUdCQ0k0Ym5GZDEzS0RFdXVtNV8xZDdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1 OTc5LzUzOTUwNzg2N0YyNzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJu RmQxM0tERXV1bTVfMWQ3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGja2h8QOi2NBG7yVaOG+/8/DUqAYR1p9bBAyeimmd/ZMOcTDL7K0Yt0 dpxPpvN4F9qurndNjKx02TPZgbmgvTRr4pmTD6yTMLKv6KSniF2QIashiaMBMeZL tZptVxmKVfe4gBvlLVz3GhLSb28hdqchTJWQWgVE9IeVS2DdsMQz5/Yviux8PrOw 6Xy9z0Q/3KjlmGnOqIPMq0bmdlxVnVMdB51IcYbKgRVkh1OEdXWasXrrF5iiwoZ0 GhDKP0hA34GLdXHP19ILUs/KCQPqcXYlchxDBpVFH3YSM+CtCufBMKCNXTUndxWR DxPp9zeeIQMIJpbGZNPqMqemnMT//Sg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:58 2025 by rpki-client