$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json) Hash identifier: 4Uh/P/GoeqbY2lYqRDZEyab5UBlrBQnSVb06qmdutpU= Subject key identifier: 97:13:FA:70:10:CA:45:C8:38:EC:9A:30:AF:57:AE:85:D4:92:E5:4E Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft Manifest number: 0802 Signing time: Sat 18 Oct 2025 22:16:33 +0000 Manifest this update: Sat 18 Oct 2025 22:16:32 +0000 Manifest next update: Sat 25 Oct 2025 22:16:32 +0000 Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: 0kG52zX6OAvDMTRvJ+b4aauqfJD4pSVB8VYpwelQnB0=) 2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: FfGvWbRgw7M2d0HlF6t0whQketZeGqrQDCwVLn5jEfk=) 3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: KUbdaIcIL3ANAib1/1yNdALhPqZywuDeLgdVE3tNncA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Oct 18 22:16:32 2025 GMT Not After : Oct 25 22:16:32 2025 GMT Subject: CN=68f411c1-2f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:19:70:77:f3:0a:54:9d:9f:dd:53:1c:6c: f2:94:a7:8e:61:8d:8d:2d:6d:3b:47:df:9f:1c:1e: 0c:a8:b4:14:3b:a2:f2:8e:26:56:6c:a6:33:3a:26: 8c:32:2d:99:ad:0b:d0:a5:17:26:e5:b2:be:eb:cd: 35:4a:ba:ca:23:7e:fb:8b:b5:0b:7d:c5:23:6b:9c: 06:8a:1c:a5:c2:89:e7:6c:9b:ed:b9:1e:3c:05:38: 87:7d:84:6a:d5:9b:ba:4b:a0:51:97:d4:1c:0c:48: 77:b6:21:bf:76:1e:49:60:f1:19:a4:68:ed:06:1e: 6e:a7:f0:b2:ae:c4:86:61:c5:17:cf:4b:0f:d7:e6: f3:f0:14:fc:2a:05:52:ad:2e:2d:6a:fe:d0:73:32: 94:62:d5:b5:41:49:db:43:5c:01:34:43:cf:a2:96: e4:af:93:be:7b:35:23:f1:ba:40:e3:10:a7:d0:34: 1b:45:b1:ca:3e:20:37:28:58:53:20:bc:7e:d5:bf: bd:42:c9:09:f0:0d:16:ba:69:99:a3:19:4f:23:c0: e2:f1:86:9d:65:bc:40:a1:59:a3:18:d1:3d:5c:5b: fd:fe:4a:42:45:e0:15:38:aa:76:29:97:82:e4:c0: e3:1c:b6:8f:b7:34:bb:ca:a8:a6:86:07:fb:b8:40: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:13:FA:70:10:CA:45:C8:38:EC:9A:30:AF:57:AE:85:D4:92:E5:4E X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ca:cc:77:a6:13:df:8d:b4:9b:2b:14:f9:d1:c1:b0:22:da: ca:18:b9:61:f9:ce:a6:05:40:30:5c:c1:97:8e:70:46:c0:f8: 69:16:ea:4c:34:e5:c5:d1:ff:34:8d:14:9e:60:8f:ff:98:57: a5:35:26:82:ee:f5:9d:c2:96:56:4c:2c:8d:d0:e6:b3:6d:a1: 55:a1:d6:5c:86:ca:f7:53:67:89:73:dd:f7:f7:c1:ea:26:cd: 97:66:0c:ee:54:9f:26:8b:48:86:af:a1:3d:c0:f0:28:3d:fc: 26:ef:70:c7:db:79:cd:8d:38:fd:82:e7:d8:eb:0f:b6:6b:81: 6b:cc:ea:a2:62:22:e0:53:2e:20:8c:fd:bf:12:9d:11:12:6f: 43:7c:aa:7b:77:5f:04:1a:63:8e:ef:ea:59:b6:6f:b9:8f:b0: d9:f3:f2:e7:2e:ea:fc:85:3a:3f:d9:40:59:9b:2f:60:22:a7: 86:30:da:08:c3:e0:46:e7:74:19:aa:d7:60:bc:b9:ae:49:27: 80:88:13:bb:99:76:62:03:77:2f:d0:3c:04:ac:fe:58:21:b2: 09:fd:65:28:2b:5a:cc:7d:6c:78:32:ad:45:86:61:83:45:d6: cf:e3:83:8d:b3:0e:db:f6:a8:4e:c2:2e:3e:86:1d:28:b9:89: b1:3e:d8:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjUxMDE4MjIxNjMyWhcNMjUxMDI1MjIxNjMyWjAYMRYwFAYD VQQDEw02OGY0MTFjMS0yZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjoZcHfzClSdn91THGzylKeOYY2NLW07R9+fHB4MqLQUO6LyjiZWbKYzOiaM Mi2ZrQvQpRcm5bK+6801SrrKI377i7ULfcUja5wGihylwonnbJvtuR48BTiHfYRq 1Zu6S6BRl9QcDEh3tiG/dh5JYPEZpGjtBh5up/CyrsSGYcUXz0sP1+bz8BT8KgVS rS4tav7QczKUYtW1QUnbQ1wBNEPPopbkr5O+ezUj8bpA4xCn0DQbRbHKPiA3KFhT ILx+1b+9QskJ8A0WummZoxlPI8Di8YadZbxAoVmjGNE9XFv9/kpCReAVOKp2KZeC 5MDjHLaPtzS7yqimhgf7uEDTNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcT+nAQ ykXIOOyaMK9XroXUkuVOMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhDMy9EMEUzM0ZBNDAyQzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRu MWIxeXR1NlhDb0FBX0ZTVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUysx3phPfjbSbKxT50cGwItrKGLlh+c6mBUAwXMGXjnBGwPhpFupM NOXF0f80jRSeYI//mFelNSaC7vWdwpZWTCyN0OazbaFVodZchsr3U2eJc93398Hq Js2XZgzuVJ8mi0iGr6E9wPAoPfwm73DH23nNjTj9gufY6w+2a4FrzOqiYiLgUy4g jP2/Ep0REm9DfKp7d18EGmOO7+pZtm+5j7DZ8/LnLur8hTo/2UBZmy9gIqeGMNoI w+BG53QZqtdgvLmuSSeAiBO7mXZiA3cv0DwErP5YIbIJ/WUoK1rMfWx4Mq1FhmGD RdbP44ONsw7b9qhOwi4+hh0ouYmxPtjg -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:14 2025 by rpki-client