$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: KHW3ENELIYKHOWtAN9KVFw09hd3j5yoWtCFEuZcTmPA= Subject key identifier: D0:94:67:E7:CC:93:1E:39:96:47:9C:91:74:72:1D:29:96:B0:D9:C3 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 22D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 22D2 Signing time: Tue 04 Nov 2025 14:43:02 +0000 Manifest this update: Tue 04 Nov 2025 14:43:01 +0000 Manifest next update: Tue 11 Nov 2025 14:43:01 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: sGokL31J2SnpMPyR28th2XUQRZ+JTgVw6d9BXkkANrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8914 (0x22d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Nov 4 14:43:01 2025 GMT Not After : Nov 11 14:43:01 2025 GMT Subject: CN=690a10f5-f257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:7a:a6:10:23:db:e3:c1:fd:92:7d:f2:ff: f7:b8:62:9e:4f:8d:11:7a:e4:c6:28:18:2e:b8:d3: 02:1d:97:39:7b:88:1e:0a:3b:d1:4e:ed:61:06:61: 70:b0:f1:97:2b:0f:ce:bd:40:ea:27:11:48:98:f6: 56:04:24:60:2b:56:9e:c7:23:a4:16:a9:ab:48:9b: 0a:0b:67:cb:38:13:0e:d2:bf:e7:a6:8c:61:16:05: c7:07:be:ee:cf:14:81:b9:28:61:39:0e:ce:e8:cd: f0:b7:f5:a6:73:e1:c6:05:5b:f0:c3:03:46:ed:a2: 80:fa:e1:b6:48:4f:1d:9d:7b:20:f0:b2:ca:7d:7e: 35:ef:3b:81:9d:6a:12:f2:44:6f:21:1a:bd:b0:de: 78:d3:8b:ea:2c:28:a6:59:74:37:a8:9c:08:80:10: 17:5a:f5:9a:73:2c:cf:f1:8c:07:a9:92:d8:66:30: a9:91:a5:f0:8f:c0:81:4f:d3:a0:f0:91:cf:50:76: 61:2a:3a:bc:f9:21:d7:9e:79:f1:c4:a5:32:77:e3: 44:68:00:b4:1a:29:bb:35:4f:4f:c3:c9:33:0f:6a: d5:fa:ad:5f:3d:62:22:b5:a0:e4:75:dd:87:bb:44: 7f:8d:bb:39:1b:de:20:0f:2a:91:b4:89:98:01:e0: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:94:67:E7:CC:93:1E:39:96:47:9C:91:74:72:1D:29:96:B0:D9:C3 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2c:1f:38:d9:cf:ba:ba:c1:86:94:d5:fd:77:64:16:1d:84: 18:81:f8:c7:cf:7c:8c:7c:d6:67:c7:c9:cf:d8:8c:6b:71:7a: 38:ef:e5:f2:bb:61:cd:11:cf:c6:28:b5:37:0a:b7:6b:84:1f: f4:d4:6c:18:67:57:7f:f9:c1:ef:cb:a8:48:a4:30:6d:be:44: 31:7e:3c:c7:4a:ff:54:3c:04:39:16:81:29:21:c2:58:93:32: 97:e8:ce:67:f4:f1:3a:84:e7:f7:91:fc:e9:2b:91:30:94:48: 1a:a6:66:4d:27:33:68:e6:5e:5b:92:63:5b:04:68:b6:96:00: 39:50:af:bc:bf:bf:ad:61:c0:4c:6b:27:79:b8:9d:01:89:c0: 27:e9:60:39:9e:74:d0:1e:5b:51:dd:1d:be:d8:f3:27:83:97: 50:f5:92:ab:3d:3c:9d:6a:f1:55:48:99:d1:bf:1f:f9:18:13: ed:f5:51:0d:eb:62:5c:9b:7d:b2:42:2b:12:97:b5:5b:90:ec: a4:fe:ed:1a:22:d4:ad:14:83:b4:2a:7d:30:a8:57:f3:e3:a2: 20:fc:98:be:f0:99:85:86:37:c5:49:38:53:f7:40:4f:af:a4: 7c:51:6d:65:e4:ce:34:b6:f5:c4:30:b1:22:a2:0f:70:48:3d: f4:9b:a0:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICItIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUxMTA0MTQ0MzAxWhcNMjUxMTExMTQ0MzAxWjAYMRYwFAYD VQQDEw02OTBhMTBmNS1mMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogl6phAj2+PB/ZJ98v/3uGKeT40ReuTGKBguuNMCHZc5e4geCjvRTu1hBmFw sPGXKw/OvUDqJxFImPZWBCRgK1aexyOkFqmrSJsKC2fLOBMO0r/npoxhFgXHB77u zxSBuShhOQ7O6M3wt/Wmc+HGBVvwwwNG7aKA+uG2SE8dnXsg8LLKfX417zuBnWoS 8kRvIRq9sN5404vqLCimWXQ3qJwIgBAXWvWacyzP8YwHqZLYZjCpkaXwj8CBT9Og 8JHPUHZhKjq8+SHXnnnxxKUyd+NEaAC0Gim7NU9Pw8kzD2rV+q1fPWIitaDkdd2H u0R/jbs5G94gDyqRtImYAeAVtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCUZ+fM kx45lkeckXRyHSmWsNnDMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxLB842c+6usGGlNX9d2QWHYQYgfjHz3yMfNZnx8nP2IxrcXo47+Xy u2HNEc/GKLU3CrdrhB/01GwYZ1d/+cHvy6hIpDBtvkQxfjzHSv9UPAQ5FoEpIcJY kzKX6M5n9PE6hOf3kfzpK5EwlEgapmZNJzNo5l5bkmNbBGi2lgA5UK+8v7+tYcBM ayd5uJ0BicAn6WA5nnTQHltR3R2+2PMng5dQ9ZKrPTydavFVSJnRvx/5GBPt9VEN 62Jcm32yQisSl7VbkOyk/u0aItStFIO0Kn0wqFfz46Ig/Ji+8JmFhjfFSThT90BP r6R8UW1l5M40tvXEMLEiog9wSD30m6Dk -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:31 2025 by rpki-client