$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: wiXLrd0/YH8Dw3j1MwBT3jSSoxFJqKsOQANKUmeWu8M= Subject key identifier: 86:63:28:1D:FF:83:65:4E:43:87:2B:BF:E2:9A:D4:51:11:F3:22:15 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 5D Signing time: Sun 19 Oct 2025 10:31:27 +0000 Manifest this update: Sun 19 Oct 2025 10:31:27 +0000 Manifest next update: Sun 26 Oct 2025 10:31:27 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: r/jB1pKlX0O+X56MDNmNaqOSBjhVrEBK3NRYgqV1VIM=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Oct 19 10:31:27 2025 GMT Not After : Oct 26 10:31:27 2025 GMT Subject: CN=68f4bdff-a4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:c7:f9:08:ec:91:cd:8e:5c:37:4b:e0:fb: 0d:bf:31:ab:43:61:2a:3e:c2:d2:db:35:69:a2:da: c0:26:cc:11:f9:f2:a5:3c:33:73:4d:04:eb:c7:c9: 51:58:77:db:bb:51:18:20:33:2e:a4:66:5a:a9:17: 2e:99:90:13:5f:4a:fd:94:75:48:f5:33:3f:0d:4a: eb:f4:1e:5e:f3:fb:22:ce:64:85:38:9f:b1:fc:f1: 15:6d:59:86:aa:54:8b:98:d4:21:73:18:a7:82:27: ed:57:98:61:d9:20:3f:1f:0a:e6:41:2a:e7:1f:ce: 98:aa:cd:8d:3e:2b:f2:a4:b9:3b:51:e0:d5:00:d1: 85:75:48:f7:a9:98:43:61:15:25:2f:a6:fa:29:18: 2c:23:8f:9a:2b:19:cb:08:08:b1:01:32:23:1a:3b: f1:45:62:e0:21:7f:02:8b:9e:1f:c1:48:35:ac:9e: 73:88:d6:5a:b7:1a:a4:7b:bb:2b:9e:3e:cd:71:26: 69:16:04:5c:32:63:f3:78:de:03:0a:48:92:44:81: 90:d6:96:64:11:7f:27:b2:6c:2d:85:05:96:c9:d8: 44:0d:8f:c2:70:9c:d7:c1:b5:02:c6:ee:9b:76:a4: 44:5e:4b:63:18:d1:3d:dc:bd:10:a7:4e:57:7a:80: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:63:28:1D:FF:83:65:4E:43:87:2B:BF:E2:9A:D4:51:11:F3:22:15 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6a:67:23:69:b5:ac:82:a9:7a:25:fb:48:97:8a:20:ba:90: 5b:29:49:d3:54:d4:e1:cf:a9:75:a2:cc:c6:f3:75:85:33:91: 30:41:c9:d1:88:9a:b9:dd:b5:12:25:c7:16:79:29:2d:e1:d1: db:12:f9:30:98:f4:15:79:28:5e:22:54:98:17:7e:18:cf:fb: 86:f6:56:77:e6:da:ce:5c:77:83:92:aa:58:b2:fa:75:f8:78: 2f:37:d9:1e:1a:c4:14:8a:74:73:d4:b1:37:57:df:6a:79:f1: 85:d1:26:c6:af:79:a7:e7:e0:65:bb:36:c0:c8:a2:80:d9:43: 80:e9:2e:fb:47:98:b4:11:58:34:a2:4a:2d:a8:82:1c:c5:fd: a2:9f:41:70:02:b3:2d:37:e9:55:07:c7:d4:12:96:02:9e:9d: 6a:c4:be:84:9b:09:2c:bc:2b:fe:fb:c7:09:20:58:c3:2f:f5: cf:49:b6:c2:65:3f:a1:29:c7:58:6e:c7:71:12:8f:b0:6a:f5: 80:1e:09:4d:ed:60:ab:9a:73:a0:17:7e:d2:d2:9a:de:c5:04: c6:7d:5b:fa:32:50:e4:98:63:b8:33:13:7a:d2:cf:d8:16:06: bb:28:00:e3:8e:5a:36:a1:e6:d4:ad:a7:c2:ca:f4:f4:68:ad: 7b:35:3f:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTEwMTkxMDMxMjdaFw0yNTEwMjYxMDMxMjdaMBgxFjAUBgNV BAMTDTY4ZjRiZGZmLWE0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwY8f5COyRzY5cN0vg+w2/MatDYSo+wtLbNWmi2sAmzBH58qU8M3NNBOvHyVFY d9u7URggMy6kZlqpFy6ZkBNfSv2UdUj1Mz8NSuv0Hl7z+yLOZIU4n7H88RVtWYaq VIuY1CFzGKeCJ+1XmGHZID8fCuZBKucfzpiqzY0+K/KkuTtR4NUA0YV1SPepmENh FSUvpvopGCwjj5orGcsICLEBMiMaO/FFYuAhfwKLnh/BSDWsnnOI1lq3GqR7uyue Ps1xJmkWBFwyY/N43gMKSJJEgZDWlmQRfyeybC2FBZbJ2EQNj8JwnNfBtQLG7pt2 pEReS2MY0T3cvRCnTld6gMffAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhmMoHf+D ZU5Dhyu/4prUURHzIhUwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAApqZyNptayCqXol+0iXiiC6kFspSdNU1OHPqXWizMbzdYUzkTBBydGI mrndtRIlxxZ5KS3h0dsS+TCY9BV5KF4iVJgXfhjP+4b2Vnfm2s5cd4OSqliy+nX4 eC832R4axBSKdHPUsTdX32p58YXRJsaveafn4GW7NsDIooDZQ4DpLvtHmLQRWDSi Si2oghzF/aKfQXACsy036VUHx9QSlgKenWrEvoSbCSy8K/77xwkgWMMv9c9JtsJl P6Epx1hux3ESj7Bq9YAeCU3tYKuac6AXftLSmt7FBMZ9W/oyUOSYY7gzE3rSz9gW BrsoAOOOWjah5tStp8LK9PRorXs1P64= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:13 2025 by rpki-client