$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: Cpqs3YAxl1mfMMzOUXYQLrac7hgIV8dNJqjkhYAZ3XY= Subject key identifier: 51:65:21:F7:CA:6C:B0:54:63:23:B9:D3:F3:1E:FA:EC:78:42:58:B3 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 0226 Signing time: Sun 19 Oct 2025 04:27:41 +0000 Manifest this update: Sun 19 Oct 2025 04:27:40 +0000 Manifest next update: Sun 26 Oct 2025 04:27:40 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: SXN4wHtU5HlQGLENq9Qz4wzMOToG+aDKGdlTqn0n4wA=) 2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=) 3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Oct 19 04:27:40 2025 GMT Not After : Oct 26 04:27:40 2025 GMT Subject: CN=68f468bc-a781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:41:37:a6:71:07:6f:1d:a2:c2:22:be:cb: 4b:0a:8d:51:23:95:9e:30:82:46:f0:e3:ff:6e:e8: d4:9c:1b:1a:12:4b:53:f0:3c:f0:94:91:15:64:06: 36:e8:d5:11:48:97:ba:f3:de:0b:6e:fb:d0:72:4d: 04:8a:3f:e7:13:48:3b:79:bb:73:d2:83:c3:a2:82: 5a:b4:f5:83:f6:df:64:36:19:84:9c:3a:36:e7:28: c0:37:03:0b:80:2c:27:fa:4e:a3:ca:d7:ff:b2:71: bc:3c:50:a5:7e:c5:65:fa:15:9d:41:e7:6f:26:af: e3:2b:e1:d2:56:f9:1a:86:93:5f:e0:a0:ba:ac:85: a1:4b:72:bc:d5:f1:e4:b2:68:71:67:f1:12:d4:08: f4:12:94:85:80:2c:0c:63:55:cd:82:27:ff:45:1b: 2b:e4:fa:f9:95:1b:f6:f7:8a:92:be:71:82:03:23: 07:cb:0f:d4:ef:1f:5f:11:1e:62:25:e0:c7:7b:f3: 3c:52:24:e9:e8:73:22:c2:a5:bc:61:ef:30:16:d6: 97:20:41:47:c1:48:3f:dc:4a:82:ad:6e:6f:e4:26: 50:f3:05:3b:ef:99:c7:19:0d:2d:4c:6c:26:0e:af: 8f:54:4a:21:6f:67:af:2e:5f:d4:80:04:ff:4c:76: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:65:21:F7:CA:6C:B0:54:63:23:B9:D3:F3:1E:FA:EC:78:42:58:B3 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a7:bc:be:18:a5:9c:87:26:b1:ff:9f:2e:d5:e8:b2:75:29: 74:c6:6f:e5:64:98:c1:21:79:f4:be:e1:51:ab:d3:b8:e9:82: 77:d1:cd:cb:3f:0f:8c:69:c4:e5:9d:1a:30:80:73:28:b0:5d: 8d:aa:fe:96:a0:f5:9f:8a:14:9e:b7:34:82:00:48:be:0d:9b: a4:47:5d:c0:37:09:8e:84:b4:2c:55:70:3e:50:01:96:f5:7a: 90:d1:3e:92:ac:75:16:9a:7e:22:4d:0a:85:9a:10:55:5c:8e: 35:e3:24:36:21:5c:5d:03:cd:e0:b6:48:53:1e:9c:2b:6b:9e: 37:bc:30:e7:e8:c3:b4:5b:f2:b6:fc:40:6a:a7:fa:c2:d7:39: 1c:db:60:19:eb:a6:ab:b2:a8:34:b2:af:95:36:4a:5f:72:35: 2c:d0:b0:50:a6:e2:49:b1:18:e5:ae:a2:a8:20:ec:be:3f:5f: d0:f2:a1:d2:ec:3f:2f:d2:f5:07:c1:c1:f3:5e:5e:46:b9:98: 47:dd:85:20:e1:38:a2:4d:2d:d0:97:79:a1:64:21:1b:08:f9: 16:85:c2:c0:9f:97:95:e5:e5:1f:f4:02:5b:13:ed:cb:08:07: 29:28:19:84:96:c8:33:8a:d4:b5:fe:86:47:07:4c:c1:ff:ea: 41:59:41:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUxMDE5MDQyNzQwWhcNMjUxMDI2MDQyNzQwWjAYMRYwFAYD VQQDEw02OGY0NjhiYy1hNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6h1BN6ZxB28dosIivstLCo1RI5WeMIJG8OP/bujUnBsaEktT8DzwlJEVZAY2 6NURSJe6894LbvvQck0Eij/nE0g7ebtz0oPDooJatPWD9t9kNhmEnDo25yjANwML gCwn+k6jytf/snG8PFClfsVl+hWdQedvJq/jK+HSVvkahpNf4KC6rIWhS3K81fHk smhxZ/ES1Aj0EpSFgCwMY1XNgif/RRsr5Pr5lRv294qSvnGCAyMHyw/U7x9fER5i JeDHe/M8UiTp6HMiwqW8Ye8wFtaXIEFHwUg/3EqCrW5v5CZQ8wU775nHGQ0tTGwm Dq+PVEohb2evLl/UgAT/THYovwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFlIffK bLBUYyO50/Me+ux4QlizMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8p7y+GKWchyax/58u1eiydSl0xm/lZJjBIXn0vuFRq9O46YJ30c3L Pw+MacTlnRowgHMosF2Nqv6WoPWfihSetzSCAEi+DZukR13ANwmOhLQsVXA+UAGW 9XqQ0T6SrHUWmn4iTQqFmhBVXI414yQ2IVxdA83gtkhTHpwra543vDDn6MO0W/K2 /EBqp/rC1zkc22AZ66arsqg0sq+VNkpfcjUs0LBQpuJJsRjlrqKoIOy+P1/Q8qHS 7D8v0vUHwcHzXl5GuZhH3YUg4TiiTS3Ql3mhZCEbCPkWhcLAn5eV5eUf9AJbE+3L CAcpKBmElsgzitS1/oZHB0zB/+pBWUG+ -----END CERTIFICATE-----Generated at Tue Oct 21 06:58:25 2025 by rpki-client