$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: XvLEetg/ZT16qw5Lx0KeEbriTVKAMjaaeamizYKT4pA= Subject key identifier: 98:24:12:49:E4:10:BF:99:91:4A:4E:9E:82:97:9D:3B:A9:A4:39:DF Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 0225 Signing time: Wed 05 Nov 2025 02:20:18 +0000 Manifest this update: Wed 05 Nov 2025 02:20:18 +0000 Manifest next update: Wed 12 Nov 2025 02:20:18 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: wcFccUN7rJbVO8zk6Qk7cn1jnw5/sug5SJO0tOtE4PY=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: qmc/H0ByapLSZ1bg3nVk+PyVwmov94i2JIkcZK53qgY=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: MPJcPtDS4/T3UppAe6encPh5IY9tUXaMAMvIPt7HvEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Nov 5 02:20:18 2025 GMT Not After : Nov 12 02:20:18 2025 GMT Subject: CN=690ab462-f299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e2:45:c6:ef:96:c4:51:c5:02:34:bf:77:10: d3:a0:cb:8b:60:ed:04:e2:a1:ec:dd:31:88:8c:c9: f1:08:50:3a:50:01:93:c0:b1:97:6b:30:a1:1c:e2: 73:12:95:4b:a2:99:ad:24:41:a6:9f:80:3d:ff:93: b1:41:35:d5:1e:e8:2a:04:18:1a:00:a7:5e:26:72: ed:7a:68:b2:97:07:07:54:3d:cd:94:2a:2a:04:71: 35:6a:e2:36:b9:05:df:6f:fb:52:f9:25:09:7d:ea: b9:02:40:e4:4e:c8:bb:22:3c:d7:68:5e:f7:69:ea: 9a:b3:9b:bf:aa:5f:64:96:93:78:12:6e:df:0a:01: 29:59:df:b6:9d:59:7b:30:c0:4c:8d:df:3d:50:82: dd:1a:91:81:63:85:a0:26:04:e8:0c:6e:7c:e1:66: 79:6d:07:b7:5d:01:f7:8c:76:03:cd:d1:7a:9d:2b: e9:a3:89:44:6c:45:f6:7c:84:42:8c:fb:aa:7c:2c: bf:81:de:08:ff:94:d1:fe:43:d1:cd:b0:49:4c:89: e6:65:05:44:6c:d6:62:b2:2e:6b:81:ad:5b:7b:48: 71:0c:16:6d:da:ba:db:cd:0a:80:83:bd:15:e4:6c: 78:a2:af:4b:b2:29:a5:40:f4:98:01:83:c9:b3:7e: bb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:24:12:49:E4:10:BF:99:91:4A:4E:9E:82:97:9D:3B:A9:A4:39:DF X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:44:f4:4d:c5:00:d1:f9:93:09:aa:2c:18:e9:c9:26:1f:e3: 69:56:3f:02:61:23:d3:ab:83:13:f7:49:5b:cf:0d:5c:78:6f: 76:b1:cb:f2:3e:8b:09:3b:88:35:9a:03:2a:ab:22:1b:f3:11: 11:43:99:54:f3:dc:9b:92:d3:f6:20:ab:c0:86:c2:4c:59:ec: 2e:24:6b:38:51:31:97:70:dd:8a:06:93:53:8d:7f:77:58:9d: 17:88:fc:ca:5d:bc:cb:f0:d6:26:c6:10:9d:10:2e:2c:27:aa: b4:77:69:ac:e1:ce:11:72:3f:94:3e:7e:f3:f5:89:ec:67:05: c4:83:42:71:39:9d:70:44:69:4d:0b:a3:b8:a4:a2:bf:79:dc: 61:84:f0:51:bf:09:22:c5:1d:f3:bb:21:cb:71:23:1b:01:23: 18:b0:4c:a1:1d:fc:70:a1:e8:a2:be:95:37:63:42:38:04:18: d6:7d:c0:eb:80:ab:c8:a9:e5:64:d6:8e:38:05:0f:20:5a:3f: 06:61:1e:7f:68:05:5f:56:33:c5:b8:91:69:e8:ef:db:fe:4a: d2:32:c3:b4:f7:2e:e7:c4:90:1a:49:f3:2e:82:63:6e:58:05: 5e:ab:8d:73:21:94:88:8e:1d:13:3c:37:2f:ba:8c:c6:65:2e: 02:c1:e6:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUxMTA1MDIyMDE4WhcNMjUxMTEyMDIyMDE4WjAYMRYwFAYD VQQDEw02OTBhYjQ2Mi1mMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxuJFxu+WxFHFAjS/dxDToMuLYO0E4qHs3TGIjMnxCFA6UAGTwLGXazChHOJz EpVLopmtJEGmn4A9/5OxQTXVHugqBBgaAKdeJnLtemiylwcHVD3NlCoqBHE1auI2 uQXfb/tS+SUJfeq5AkDkTsi7IjzXaF73aeqas5u/ql9klpN4Em7fCgEpWd+2nVl7 MMBMjd89UILdGpGBY4WgJgToDG584WZ5bQe3XQH3jHYDzdF6nSvpo4lEbEX2fIRC jPuqfCy/gd4I/5TR/kPRzbBJTInmZQVEbNZisi5rga1be0hxDBZt2rrbzQqAg70V 5Gx4oq9LsimlQPSYAYPJs3670QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgkEknk EL+ZkUpOnoKXnTuppDnfMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkRPRNxQDR+ZMJqiwY6ckmH+NpVj8CYSPTq4MT90lbzw1ceG92scvy PosJO4g1mgMqqyIb8xERQ5lU89ybktP2IKvAhsJMWewuJGs4UTGXcN2KBpNTjX93 WJ0XiPzKXbzL8NYmxhCdEC4sJ6q0d2ms4c4Rcj+UPn7z9YnsZwXEg0JxOZ1wRGlN C6O4pKK/edxhhPBRvwkixR3zuyHLcSMbASMYsEyhHfxwoeiivpU3Y0I4BBjWfcDr gKvIqeVk1o44BQ8gWj8GYR5/aAVfVjPFuJFp6O/b/krSMsO09y7nxJAaSfMugmNu WAVeq41zIZSIjh0TPDcvuozGZS4Cwebq -----END CERTIFICATE-----Generated at Wed Nov 5 09:12:51 2025 by rpki-client