$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: zE05zOHiS/2sOXKkotWpgGRVeB2XbGxQm4OFRzBA4jw= Subject key identifier: 5E:8D:7E:04:0D:3F:93:63:6E:A4:E6:46:18:2D:A3:DF:44:30:B5:15 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1024 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 1018 Signing time: Sat 18 Oct 2025 18:01:35 +0000 Manifest this update: Sat 18 Oct 2025 18:01:34 +0000 Manifest next update: Sat 25 Oct 2025 18:01:34 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: K6tbCPP8E+COghdF8hc2zQFgMdy8R436iBQHck5NiKk=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4132 (0x1024) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: Oct 18 18:01:34 2025 GMT Not After : Oct 25 18:01:34 2025 GMT Subject: CN=68f3d5ff-ee4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:b9:74:18:35:1e:4d:88:f7:df:76:39:f3: 9f:fa:c1:bd:ca:85:7f:11:66:d1:df:93:a3:a2:4b: ab:f7:b4:dc:6c:ea:07:d4:57:95:40:8f:12:7c:4e: 6d:11:85:82:16:32:0a:f6:42:b9:04:7e:23:4f:bd: 2e:bc:0c:ed:ad:d0:b2:90:bb:5d:8d:06:42:71:be: 63:14:de:be:08:ff:1a:5a:3c:98:a2:e1:ad:25:71: 1d:bd:ca:6f:ac:c4:79:e5:cd:4e:a4:8c:30:96:e9: d9:e7:51:10:e6:2a:82:1c:d0:16:d0:58:d0:78:d2: 76:b7:79:ab:dc:76:a6:20:91:88:e3:1c:45:40:28: 0e:8f:32:13:ca:f7:d6:8d:f1:f8:ac:7b:6d:38:64: 2e:e0:25:d1:03:e0:02:fc:c0:6e:df:32:44:63:20: f8:1a:2c:9e:a6:34:30:62:b8:3f:6c:d7:78:5e:2c: 72:11:87:bf:20:b0:f8:0d:27:50:ba:dd:1c:d4:75: 2f:aa:69:b8:0e:52:0c:4d:3f:71:38:70:fd:3a:d2: 8e:ab:a6:21:c0:26:50:65:a3:bf:70:c2:62:24:c7: 7f:48:4f:64:14:20:30:d6:b9:18:50:a4:26:c9:05: 32:be:39:67:23:8b:78:13:51:e5:6e:87:a8:09:15: 72:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:7E:04:0D:3F:93:63:6E:A4:E6:46:18:2D:A3:DF:44:30:B5:15 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:f2:59:f4:89:ef:1b:fc:a3:ed:1b:19:c6:86:6d:a4:b3:fc: c6:88:ad:2f:58:62:8f:cc:23:aa:cc:bf:1f:10:47:f1:fb:40: 71:9c:be:3e:6b:54:a2:5f:47:09:e5:b9:cb:7c:42:45:0e:13: 69:80:4f:56:17:e7:02:b6:5b:aa:8f:af:8e:e7:49:02:3d:7b: 41:f3:92:b1:e0:eb:9a:be:5f:24:3f:25:2f:5b:5d:39:55:39: cc:93:57:06:64:3e:f0:63:40:22:f7:81:2f:c8:67:a8:a2:c3: d4:2d:60:2f:41:94:5f:10:fb:e7:72:c2:a3:4c:dd:02:ee:d3: e7:c7:e1:f4:55:eb:2f:af:a5:e9:7f:f5:e6:17:40:14:d3:6b: 8e:5a:cc:ab:d7:aa:a0:ad:30:93:4c:e4:98:5f:25:a4:fa:7b: 54:97:62:03:17:15:a4:4e:a9:24:c2:f7:0c:34:c3:2c:5c:df: 58:1a:0a:7c:9c:81:6b:c3:5e:68:48:5a:d6:71:bf:1f:11:51: 5f:04:7d:77:bc:41:41:a1:f4:1e:3d:cc:22:44:eb:00:ab:db: b2:24:5b:df:b2:8b:15:b5:c1:a8:ea:61:84:e9:a5:cd:69:86: a5:e0:9f:c5:a0:7f:70:26:f7:96:65:08:f2:e1:4a:a4:07:81: 77:1c:73:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjUxMDE4MTgwMTM0WhcNMjUxMDI1MTgwMTM0WjAYMRYwFAYD VQQDEw02OGYzZDVmZi1lZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmG5dBg1Hk2I9992OfOf+sG9yoV/EWbR35Ojokur97TcbOoH1FeVQI8SfE5t EYWCFjIK9kK5BH4jT70uvAztrdCykLtdjQZCcb5jFN6+CP8aWjyYouGtJXEdvcpv rMR55c1OpIwwlunZ51EQ5iqCHNAW0FjQeNJ2t3mr3HamIJGI4xxFQCgOjzITyvfW jfH4rHttOGQu4CXRA+AC/MBu3zJEYyD4GiyepjQwYrg/bNd4XixyEYe/ILD4DSdQ ut0c1HUvqmm4DlIMTT9xOHD9OtKOq6YhwCZQZaO/cMJiJMd/SE9kFCAw1rkYUKQm yQUyvjlnI4t4E1HlboeoCRVymwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6NfgQN P5NjbqTmRhgto99EMLUVMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC68ln0ie8b/KPtGxnGhm2ks/zGiK0vWGKPzCOqzL8fEEfx+0BxnL4+ a1SiX0cJ5bnLfEJFDhNpgE9WF+cCtluqj6+O50kCPXtB85Kx4Ouavl8kPyUvW105 VTnMk1cGZD7wY0Ai94EvyGeoosPULWAvQZRfEPvncsKjTN0C7tPnx+H0Vesvr6Xp f/XmF0AU02uOWsyr16qgrTCTTOSYXyWk+ntUl2IDFxWkTqkkwvcMNMMsXN9YGgp8 nIFrw15oSFrWcb8fEVFfBH13vEFBofQePcwiROsAq9uyJFvfsosVtcGo6mGE6aXN aYal4J/FoH9wJveWZQjy4UqkB4F3HHOj -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:56 2025 by rpki-client