$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft File: ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json) Hash identifier: A1IEESV6dFZ66IKDuM2LtM4pPH7s32gP3XiMIOYrVrU= Subject key identifier: 89:47:CC:12:E4:5E:91:03:1A:B5:CA:89:67:AB:35:16:13:0A:5E:3F Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft Manifest number: 29 Signing time: Sun 19 Oct 2025 11:16:46 +0000 Manifest this update: Sun 19 Oct 2025 11:16:46 +0000 Manifest next update: Sun 26 Oct 2025 11:16:45 +0000 Files and hashes: 1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: kIpzDaTcnZxDiJht8mwxPzgbMa+K0dInhvTX+vqW6qY=) 2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: y8FMpJ63sS6i2zvQWU1SmHtfzGgXpl9kmSxDwAQPAFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Validity Not Before: Oct 19 11:16:46 2025 GMT Not After : Oct 26 11:16:45 2025 GMT Subject: CN=68f4c89e-ae1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:be:00:2e:6a:62:53:78:53:c8:bb:84:bb: 1d:45:b5:e2:90:5e:8b:c8:2d:da:bf:a4:87:36:8e: 00:16:5b:90:52:4a:0e:87:39:98:e0:24:ca:07:f9: 47:92:fc:f4:df:bf:ea:29:a7:5b:ca:45:66:d0:14: d6:ae:69:0f:0c:33:26:79:5b:f3:75:b9:f8:06:aa: 41:6c:82:57:e1:9f:a6:3d:46:a6:cd:84:81:e0:62: 2d:83:f6:50:11:71:a5:75:3a:e9:63:b7:c5:07:71: 45:12:d4:24:37:a0:7a:09:a8:0d:30:b0:3d:22:cf: 5b:50:99:ac:42:e9:dd:16:87:24:18:bc:0d:02:33: 0b:be:89:fa:40:f1:b9:f4:39:c3:1d:32:3e:4a:cd: ab:0d:1c:1b:32:3a:69:25:a2:9f:2f:87:eb:a9:66: 8c:b6:fa:5d:d0:fa:4a:37:b1:cb:17:6c:b2:76:a8: 47:6b:15:1d:35:5f:4e:c4:5f:24:96:6a:b7:2b:0f: af:5f:b8:b8:89:b6:be:46:9c:fd:d5:61:3a:09:eb: 85:47:49:2b:17:2d:9c:9f:fd:f4:5f:4d:d3:e3:a0: f7:82:6f:c0:8a:77:27:c4:c7:b8:1d:34:4a:45:4b: 3e:84:a8:5c:f7:07:c2:41:c3:4d:9b:14:c4:6f:db: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:47:CC:12:E4:5E:91:03:1A:B5:CA:89:67:AB:35:16:13:0A:5E:3F X509v3 Authority Key Identifier: keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:8d:2f:fc:cc:e6:06:80:90:92:67:7b:65:23:29:1d:6b: f5:58:29:1f:2b:53:13:f1:8a:20:59:9c:0c:52:3c:68:37:04: 07:69:9e:9b:e1:eb:ea:f8:db:3e:c0:c2:7f:a1:7b:37:ba:59: fc:e0:89:7b:06:06:e3:89:4e:a3:64:4e:67:c8:39:95:ea:18: 12:47:88:59:81:05:65:5d:22:90:c1:6a:42:55:38:1f:d6:4d: 22:72:88:cb:c6:88:d2:b6:d8:ef:fd:1f:db:16:2e:60:3e:6d: a7:a8:10:61:a0:4f:3b:e6:d6:e3:e0:00:7d:72:76:0e:38:42: e6:7d:21:da:12:bd:fd:dd:f3:74:8f:26:17:a7:d1:49:8a:6b: bf:23:cd:21:4e:77:f9:29:40:44:0e:50:49:81:aa:4f:21:fd: c0:64:f2:5b:9d:82:4f:75:bb:b6:6a:a9:de:2d:70:50:5f:f9: 51:f8:6e:df:0e:62:ab:1a:f4:74:7c:ef:34:ba:53:a0:b5:76: 06:00:e6:49:dd:71:95:63:da:c3:c0:d8:f0:d5:3a:5b:eb:9b: 2b:25:77:a2:cb:74:40:94:ee:f3:f5:0b:32:40:81:65:63:f0: de:5e:77:f8:24:91:ac:49:2a:1b:41:fe:00:10:04:6c:df:4c: 74:e3:e2:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCRTExMC8GA1UEBRMoNkIyMkY5MDc5MTA1QTRERUJDQjA5Q0MxQjkwMDk2MDg1 QzY2MkQ0NDAeFw0yNTEwMTkxMTE2NDZaFw0yNTEwMjYxMTE2NDVaMBgxFjAUBgNV BAMTDTY4ZjRjODllLWFlMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD574ALmpiU3hTyLuEux1FteKQXovILdq/pIc2jgAWW5BSSg6HOZjgJMoH+UeS /PTfv+opp1vKRWbQFNauaQ8MMyZ5W/N1ufgGqkFsglfhn6Y9RqbNhIHgYi2D9lAR caV1Ouljt8UHcUUS1CQ3oHoJqA0wsD0iz1tQmaxC6d0WhyQYvA0CMwu+ifpA8bn0 OcMdMj5KzasNHBsyOmklop8vh+upZoy2+l3Q+ko3scsXbLJ2qEdrFR01X07EXySW arcrD69fuLiJtr5GnP3VYToJ64VHSSsXLZyf/fRfTdPjoPeCb8CKdyfEx7gdNEpF Sz6EqFz3B8JBw02bFMRv2wHRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiUfMEuRe kQMatcqJZ6s1FhMKXj8wHwYDVR0jBBgwFoAUayL5B5EFpN68sJzBuQCWCFxmLUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUJFLzE1RjVDMTBDNzQz RTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXlMNUI1RUZwTjY4c0p6QnVRQ1dDRnhtTFVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QUJFLzE1RjVDMTBDNzQzRTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42 OHNKekJ1UUNXQ0Z4bUxVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ0FjS/8zOYGgJCSZ3tlIykda/VYKR8rUxPxiiBZnAxSPGg3BAdpnpvh 6+r42z7Awn+heze6WfzgiXsGBuOJTqNkTmfIOZXqGBJHiFmBBWVdIpDBakJVOB/W TSJyiMvGiNK22O/9H9sWLmA+baeoEGGgTzvm1uPgAH1ydg44QuZ9IdoSvf3d83SP Jhen0UmKa78jzSFOd/kpQEQOUEmBqk8h/cBk8ludgk91u7Zqqd4tcFBf+VH4bt8O Yqsa9HR87zS6U6C1dgYA5kndcZVj2sPA2PDVOlvrmysld6LLdECU7vP1CzJAgWVj 8N5ed/gkkaxJKhtB/gAQBGzfTHTj4nc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:25:07 2025 by rpki-client