$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json) Hash identifier: Z2FVOfq91XOLx1SMx4ckT3LLEiaDz6AWsDVmDXmJzh8= Subject key identifier: EF:D3:6C:5C:C1:B9:96:8F:24:E3:9B:D0:99:DF:9A:0D:E7:10:9C:8B Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Certificate serial: 0A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft Manifest number: 0A10 Signing time: Sat 18 Oct 2025 20:48:10 +0000 Manifest this update: Sat 18 Oct 2025 20:48:09 +0000 Manifest next update: Sat 25 Oct 2025 20:48:09 +0000 Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: k8C5+LX9+LY4d0nnVxhqOiHV5rjBPVs2JVw0ODUCSKM=) 2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2582 (0xa16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Validity Not Before: Oct 18 20:48:09 2025 GMT Not After : Oct 25 20:48:09 2025 GMT Subject: CN=68f3fd09-340b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:af:f5:7c:51:07:cd:e2:14:94:e2:4a:8b: fb:eb:ee:31:68:a7:da:b5:21:bb:03:d9:24:b0:77: 0e:d5:77:3c:92:f4:b9:67:27:70:d8:51:88:b7:66: 39:64:20:a1:38:15:b4:15:db:3f:ac:90:60:a6:98: 45:a2:56:88:9f:7a:43:a9:2c:ca:f2:ad:f5:03:0f: a0:28:48:93:d8:7b:d3:9f:62:f8:58:fb:b5:0e:dd: 01:9d:ec:69:b2:a0:d5:b9:c4:02:58:f4:6a:33:ed: 51:a1:92:f1:5d:55:b4:56:24:a6:03:0e:9f:a1:24: dd:42:f7:6b:4e:b5:be:57:2c:3d:d8:5f:de:9c:b1: 35:7a:a3:ab:1a:dd:68:53:36:da:03:ac:84:46:d1: 9e:2e:26:cf:21:d8:ca:1e:54:87:86:e5:3b:2b:e6: 26:4e:b5:26:a9:f4:a0:a8:e0:83:ee:06:9a:c8:17: 80:2a:8d:0f:75:43:59:d0:66:a6:05:b2:10:33:36: 0f:fc:a4:48:da:5b:6d:4b:4f:bc:78:2f:bc:28:ea: 3b:c6:6a:9c:68:a3:7e:bd:67:0b:f0:c1:0c:45:cc: b2:3d:13:5b:e4:46:b8:b3:5a:57:de:2a:ae:92:d4: 98:49:26:29:3f:8a:5e:b9:b2:31:e3:e2:35:4d:dd: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D3:6C:5C:C1:B9:96:8F:24:E3:9B:D0:99:DF:9A:0D:E7:10:9C:8B X509v3 Authority Key Identifier: keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9d:47:ae:72:17:03:d9:d6:87:8d:e9:df:63:c8:c4:92:da: 67:1f:cf:96:06:4a:5d:4b:4c:35:e6:5e:e4:4e:f1:59:cf:74: f5:4f:2f:99:50:f5:de:69:3b:de:a0:0a:b6:6c:42:9d:c0:9c: 6e:bf:64:7f:b6:b2:68:5d:cd:bd:28:3e:14:5d:45:a1:c5:b4: 4d:65:85:09:35:39:c9:20:5f:c3:ed:23:ce:c1:82:8e:c2:80: a7:19:d1:6d:ae:a2:1d:f9:db:f3:26:86:24:1f:e3:e8:2c:49: 19:3c:a1:2c:77:ae:54:2f:e2:9e:76:bb:b8:ed:e4:fb:40:bc: 6e:82:eb:68:0a:70:75:0a:41:c5:f0:08:7d:08:4c:77:d4:1b: 25:96:b4:d9:61:76:18:98:5e:7c:2f:4a:e3:f7:d8:43:55:5b: 14:e2:e1:16:f3:cf:e2:ad:f5:fb:d6:64:91:8d:0b:b4:42:19: 46:0e:1d:ab:d8:f9:98:c4:9d:72:0a:39:ed:3f:97:23:76:2d: 9b:82:aa:b1:fb:e3:b0:b4:c9:0f:50:5e:11:63:6a:ea:9d:7d: 43:a0:56:9c:9c:56:17:cd:98:40:2c:7a:76:3c:fd:c4:2e:e9: dc:c3:13:de:76:b3:d3:7e:e5:91:b7:ed:00:cb:3c:14:1a:8b: e3:00:ed:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz NUZGRTg2RDUwHhcNMjUxMDE4MjA0ODA5WhcNMjUxMDI1MjA0ODA5WjAYMRYwFAYD VQQDEw02OGYzZmQwOS0zNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZiv9XxRB83iFJTiSov76+4xaKfatSG7A9kksHcO1Xc8kvS5Zydw2FGIt2Y5 ZCChOBW0Fds/rJBgpphFolaIn3pDqSzK8q31Aw+gKEiT2HvTn2L4WPu1Dt0Bnexp sqDVucQCWPRqM+1RoZLxXVW0ViSmAw6foSTdQvdrTrW+Vyw92F/enLE1eqOrGt1o UzbaA6yERtGeLibPIdjKHlSHhuU7K+YmTrUmqfSgqOCD7gaayBeAKo0PdUNZ0Gam BbIQMzYP/KRI2lttS0+8eC+8KOo7xmqcaKN+vWcL8MEMRcyyPRNb5Ea4s1pX3iqu ktSYSSYpP4peubIx4+I1Td2phwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/TbFzB uZaPJOOb0Jnfmg3nEJyLMB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2 TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNnUeuchcD2daHjenfY8jEktpnH8+WBkpdS0w15l7kTvFZz3T1Ty+Z UPXeaTveoAq2bEKdwJxuv2R/trJoXc29KD4UXUWhxbRNZYUJNTnJIF/D7SPOwYKO woCnGdFtrqId+dvzJoYkH+PoLEkZPKEsd65UL+Kedru47eT7QLxugutoCnB1CkHF 8Ah9CEx31BsllrTZYXYYmF58L0rj99hDVVsU4uEW88/irfX71mSRjQu0QhlGDh2r 2PmYxJ1yCjntP5cjdi2bgqqx++OwtMkPUF4RY2rqnX1DoFacnFYXzZhALHp2PP3E LuncwxPedrPTfuWRt+0AyzwUGovjAO1p -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:15 2025 by rpki-client