$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: Nfi6Q98d6cljYbB2eV8ne3qg/KvXczrtFee3LI/zOI0= Subject key identifier: 85:BD:31:73:36:9A:37:C8:C2:4D:C6:07:4C:E2:07:D6:2C:98:6B:BE Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 03AE Signing time: Sun 19 Oct 2025 02:45:41 +0000 Manifest this update: Sun 19 Oct 2025 02:45:41 +0000 Manifest next update: Sun 26 Oct 2025 02:45:41 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: XFkjcFhXASHEP9kvxWBtivoa/BrxInC3gmQRW7VI/Po=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: 2CusgDeod/GNoY/LuvI1PPosNLPCfcqPbyc433D/0Uw=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: Qo8S4vnL8vk6lsjFg8E5pxu1jHSHJhkqcg0rzkOHusw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA, serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Oct 19 02:45:41 2025 GMT Not After : Oct 26 02:45:41 2025 GMT Subject: CN=68f450d5-eb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:70:d6:b6:b3:e9:93:6c:84:6f:cc:ec:d5: 9d:35:79:9b:4e:21:c1:ac:af:ff:e5:6e:7d:f1:e6: ec:ef:fe:08:a3:ce:1d:29:3d:04:ba:52:42:a3:2e: db:b0:ca:7c:38:4c:53:06:b4:09:b5:5e:fc:ff:ab: 32:42:16:88:83:c2:3c:8b:02:78:b6:bc:bb:c4:e0: d4:4a:46:37:f8:34:85:09:c7:48:55:9d:86:95:93: 7e:7c:45:83:e0:f2:d1:55:5e:12:aa:c3:40:50:f4: f6:60:f1:fb:16:e4:92:f9:d6:cc:9c:d3:d0:2d:10: 25:8f:67:21:2f:42:2a:da:49:a1:62:31:e7:ae:7b: 83:fb:60:8c:50:77:c2:78:62:3b:b2:34:c1:86:23: c9:ea:f7:1b:b1:5c:69:ed:c0:72:7f:a7:02:9a:46: 6c:83:a5:4b:c5:e8:34:fa:d8:cd:21:bd:2e:00:73: f5:df:ae:30:2a:19:a2:d9:5a:18:16:0e:9f:12:48: bb:5d:01:c0:cb:1b:4f:86:be:c5:c0:e5:aa:50:62: 17:2f:15:59:f2:85:0a:b5:ce:1c:02:81:cf:e9:93: b4:e6:76:70:ef:ce:43:59:33:96:1f:b3:33:93:36: 56:e2:f5:b6:4a:42:ee:56:95:f5:d9:e7:bb:45:6b: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:31:73:36:9A:37:C8:C2:4D:C6:07:4C:E2:07:D6:2C:98:6B:BE X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:05:2c:09:26:85:9d:fa:db:ab:a9:c0:8b:c4:39:05:15:2a: 91:93:72:0c:5d:a9:4d:57:39:51:c4:9e:6f:95:c2:5e:9e:9f: 34:29:1d:49:51:5e:51:b7:e9:40:ff:2f:a8:f7:66:c1:1d:5a: b0:74:90:73:b9:68:46:29:e5:8a:13:86:f8:06:ab:9a:70:9d: cf:38:90:ed:20:6b:75:2a:b2:1e:d7:c7:7c:6a:2e:2c:a2:57: bf:4d:4c:af:be:f7:91:02:1f:03:45:0e:02:21:d8:74:65:1f: c6:d4:c5:c5:4c:0f:25:13:06:78:b3:c6:1b:b7:b6:62:f5:fe: dc:52:66:01:21:f8:26:b7:fa:3a:eb:bf:b4:61:9e:b3:f1:da: b6:ea:97:41:73:25:66:aa:14:92:b3:f2:31:56:79:76:52:3f: f5:8b:f7:f1:87:e6:7c:2a:f7:a3:00:a4:0c:23:92:54:e0:1c: ec:bd:2c:fb:cd:ce:fb:0c:f2:b8:9c:47:52:0d:c4:5b:e4:e6: 30:c8:00:ed:49:28:a7:57:93:66:97:4c:03:93:1d:ee:a3:14: a3:23:04:a1:ea:20:05:12:b6:c7:f0:80:dd:6a:96:f0:2b:49: ca:8f:b5:ad:29:89:02:46:fe:60:19:86:14:c1:17:c3:39:c0: 09:80:0e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjUxMDE5MDI0NTQxWhcNMjUxMDI2MDI0NTQxWjAYMRYwFAYD VQQDEw02OGY0NTBkNS1lYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/xw1raz6ZNshG/M7NWdNXmbTiHBrK//5W598ebs7/4Io84dKT0EulJCoy7b sMp8OExTBrQJtV78/6syQhaIg8I8iwJ4try7xODUSkY3+DSFCcdIVZ2GlZN+fEWD 4PLRVV4SqsNAUPT2YPH7FuSS+dbMnNPQLRAlj2chL0Iq2kmhYjHnrnuD+2CMUHfC eGI7sjTBhiPJ6vcbsVxp7cByf6cCmkZsg6VLxeg0+tjNIb0uAHP1364wKhmi2VoY Fg6fEki7XQHAyxtPhr7FwOWqUGIXLxVZ8oUKtc4cAoHP6ZO05nZw785DWTOWH7Mz kzZW4vW2SkLuVpX12ee7RWvRHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW9MXM2 mjfIwk3GB0ziB9YsmGu+MB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaBSwJJoWd+turqcCLxDkFFSqRk3IMXalNVzlRxJ5vlcJenp80KR1J UV5Rt+lA/y+o92bBHVqwdJBzuWhGKeWKE4b4BquacJ3POJDtIGt1KrIe18d8ai4s ole/TUyvvveRAh8DRQ4CIdh0ZR/G1MXFTA8lEwZ4s8Ybt7Zi9f7cUmYBIfgmt/o6 67+0YZ6z8dq26pdBcyVmqhSSs/IxVnl2Uj/1i/fxh+Z8KvejAKQMI5JU4BzsvSz7 zc77DPK4nEdSDcRb5OYwyADtSSinV5Nml0wDkx3uoxSjIwSh6iAFErbH8IDdapbw K0nKj7WtKYkCRv5gGYYUwRfDOcAJgA4/ -----END CERTIFICATE-----Generated at Mon Oct 20 19:44:54 2025 by rpki-client