$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: VA+2AO8Xs9BNDX+cPHbgbExqARZkva+YbKHZ3ajkqGM= Subject key identifier: 42:B3:B4:11:2C:91:F9:88:14:2A:1E:A5:1F:3B:A3:95:39:36:58:D1 Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 0476 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 0472 Signing time: Sun 19 Oct 2025 02:01:07 +0000 Manifest this update: Sun 19 Oct 2025 02:01:07 +0000 Manifest next update: Sun 26 Oct 2025 02:01:07 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: KHGzExataFEPMP1Op/ddU2ICjYIH8mmEMES9ft6MfQE=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1142 (0x476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Oct 19 02:01:07 2025 GMT Not After : Oct 26 02:01:07 2025 GMT Subject: CN=68f44663-69fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:87:e3:ed:ae:79:57:7d:ed:d8:71:51:14: 88:42:b4:4c:8c:63:6e:f0:0b:b4:93:de:a0:9f:6d: 2b:39:23:50:44:10:b7:aa:11:60:e8:f0:1e:b5:25: ad:60:b6:9d:7e:b4:53:4d:bb:3e:6c:77:06:2d:fd: 4d:01:39:26:86:58:b7:3e:a0:12:fd:4b:1b:ac:4c: e6:3b:21:e1:d2:10:c8:99:f6:6e:49:36:fc:5b:93: bf:8c:89:d7:af:13:43:fc:c3:72:d5:4a:32:7d:f4: 9d:1b:f9:97:0d:c9:51:b6:ef:12:f7:14:98:29:a6: 09:a0:8d:fd:b3:ea:71:bf:06:b2:b5:4e:c3:f0:ff: c5:5c:ce:c1:29:48:e1:14:bb:55:42:03:3a:07:00: 7f:56:41:39:6e:94:40:66:67:84:49:08:07:7a:16: 2d:0f:0c:50:b9:d6:16:2d:e8:ff:07:e1:0d:19:8a: f2:75:e1:03:77:35:59:62:07:15:f9:78:e1:07:99: 65:30:65:95:1c:01:6a:30:8b:a4:e5:d8:d6:cd:13: fd:64:cd:c7:cb:41:42:e4:52:d8:aa:a3:6b:00:89: fb:8c:c6:c6:df:15:18:c3:62:59:3a:54:31:70:c1: 35:9c:dc:e6:4f:fb:62:c8:77:16:6a:c2:c8:14:05: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B3:B4:11:2C:91:F9:88:14:2A:1E:A5:1F:3B:A3:95:39:36:58:D1 X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0d:f6:22:ec:2b:6f:d3:d5:1b:95:3c:b2:30:55:02:02:0f: ab:52:7a:54:65:27:ba:17:e5:50:e2:54:83:33:18:65:56:18: d7:60:b3:b5:53:74:dc:27:ca:43:69:27:3f:32:2d:c5:f7:6e: ed:78:8c:12:f2:fc:c6:b0:2a:24:49:2e:05:e4:4e:0e:89:7b: 43:7c:f5:a5:97:35:6a:52:e4:28:3f:d7:47:6f:aa:bc:34:67: 9c:09:04:67:1f:65:87:6c:24:9a:dd:94:86:12:d6:3f:f6:34: b9:c8:b9:49:18:ee:47:fe:0b:e9:0a:77:83:14:79:be:e7:b8: d8:c4:25:3d:15:4e:4e:dc:c1:ae:d3:65:d3:54:57:a2:e6:36: ff:e7:8a:f8:c8:a6:d8:bb:2f:f3:00:49:09:b2:8b:ac:3a:d5: 61:db:bd:a0:76:e1:a8:f9:ad:0b:b8:0f:b0:f5:7f:ad:15:e4: a6:78:e0:d1:46:d9:82:b6:bc:4d:08:af:e7:6a:4c:9e:15:58: 77:d1:4d:af:8e:46:26:fd:4d:23:ac:6f:65:23:b3:aa:a2:b7: b3:46:c2:d6:94:d8:62:47:8e:b2:8b:3d:de:e7:35:d2:35:28: 7c:91:4a:4a:bf:bf:ac:b4:70:2b:dc:e5:c8:0d:50:9c:75:ba: 94:97:f5:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUxMDE5MDIwMTA3WhcNMjUxMDI2MDIwMTA3WjAYMRYwFAYD VQQDEw02OGY0NDY2My02OWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqWH4+2ueVd97dhxURSIQrRMjGNu8Au0k96gn20rOSNQRBC3qhFg6PAetSWt YLadfrRTTbs+bHcGLf1NATkmhli3PqAS/UsbrEzmOyHh0hDImfZuSTb8W5O/jInX rxND/MNy1UoyffSdG/mXDclRtu8S9xSYKaYJoI39s+pxvwaytU7D8P/FXM7BKUjh FLtVQgM6BwB/VkE5bpRAZmeESQgHehYtDwxQudYWLej/B+ENGYrydeEDdzVZYgcV +XjhB5llMGWVHAFqMIuk5djWzRP9ZM3Hy0FC5FLYqqNrAIn7jMbG3xUYw2JZOlQx cME1nNzmT/tiyHcWasLIFAU6bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKztBEs kfmIFCoepR87o5U5NljRMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIDfYi7Ctv09UblTyyMFUCAg+rUnpUZSe6F+VQ4lSDMxhlVhjXYLO1 U3TcJ8pDaSc/Mi3F927teIwS8vzGsCokSS4F5E4OiXtDfPWllzVqUuQoP9dHb6q8 NGecCQRnH2WHbCSa3ZSGEtY/9jS5yLlJGO5H/gvpCneDFHm+57jYxCU9FU5O3MGu 02XTVFei5jb/54r4yKbYuy/zAEkJsousOtVh272gduGo+a0LuA+w9X+tFeSmeODR RtmCtrxNCK/nakyeFVh30U2vjkYm/U0jrG9lI7OqorezRsLWlNhiR46yiz3e5zXS NSh8kUpKv7+stHAr3OXIDVCcdbqUl/Xa -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:18 2025 by rpki-client