$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft File: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json) Hash identifier: Uw1PTZLZuQhZUi48IRwVlJQa66MYWe1ve0Kwk9uL/v4= Subject key identifier: 17:A8:99:42:03:E3:97:64:70:B5:C7:F7:9E:1A:12:49:DE:39:47:F3 Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 Certificate issuer: /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft Manifest number: 0259 Signing time: Sun 19 Oct 2025 03:57:26 +0000 Manifest this update: Sun 19 Oct 2025 03:57:26 +0000 Manifest next update: Sun 26 Oct 2025 03:57:26 +0000 Files and hashes: 1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: OBsuhssrgv1c4opmCSMV9SSu6LT7ko8EtoehCDmNntw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929 Validity Not Before: Oct 19 03:57:26 2025 GMT Not After : Oct 26 03:57:26 2025 GMT Subject: CN=68f461a6-16ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:89:f8:68:73:8c:1c:d1:4f:07:c6:af:1d:e1: b5:bd:47:5d:31:b0:9b:53:ec:75:03:86:da:10:77: ed:f6:57:04:d7:75:a9:8f:94:0f:92:0b:37:f9:94: cb:96:9d:82:2d:58:93:c0:54:70:d8:88:06:c9:6d: ca:13:c5:de:2f:37:b7:ad:be:44:81:d1:fa:84:2d: 9f:5c:e7:25:d7:0f:0b:06:b6:ec:8a:2c:35:f4:ce: de:c2:bd:13:94:f4:48:d8:ef:16:af:b0:72:65:0b: 74:59:12:55:ef:6c:70:74:a0:5a:42:28:79:23:91: 11:ef:32:03:6b:09:00:3b:de:19:32:b1:a1:d3:18: 64:55:23:20:d7:59:47:d2:97:60:56:8c:f6:c2:ae: c7:f8:8e:74:e1:33:67:d9:91:bb:36:5d:b3:ad:0a: 78:cf:84:cd:d5:75:57:6a:ca:cb:29:13:7f:4a:fe: a4:30:11:70:ec:a8:59:59:07:d2:a1:c4:7a:62:78: 13:0b:cf:4a:c6:51:4f:ce:1e:de:81:78:6a:08:c4: 2f:30:a3:2a:41:5d:49:0d:b0:bd:64:77:d7:63:06: f6:8d:c8:bf:92:72:e1:f3:94:9c:7e:24:72:2e:93: de:86:94:c9:6d:f2:d2:72:82:f3:36:17:be:81:0a: e8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A8:99:42:03:E3:97:64:70:B5:C7:F7:9E:1A:12:49:DE:39:47:F3 X509v3 Authority Key Identifier: keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a0:51:a3:ca:56:df:f0:15:6c:a0:4f:4b:64:81:8e:6b:cf: 65:69:26:8d:2d:4f:fa:2a:a8:8b:69:76:09:75:76:f0:63:df: 32:ea:30:d9:56:d4:41:85:df:1a:bc:e9:ba:ca:95:80:c5:60: fa:e9:b7:f8:44:f2:fa:6b:57:a3:0a:8d:e2:03:45:20:8d:fd: 3b:8e:96:6a:1f:4f:d9:41:fe:6c:fb:fe:47:0a:9e:90:18:01: c2:ec:7d:79:3e:f4:0d:fd:bf:e9:e6:7c:26:d1:f8:88:9b:b4: 5a:2a:cb:45:aa:ec:a3:94:fe:39:d1:7d:33:77:d8:91:b6:cf: e2:d4:e2:00:b2:af:ed:62:a5:14:a5:57:a6:ca:ff:f7:5b:09: 64:61:d5:68:3b:17:8f:8e:43:cb:fe:9a:38:f4:82:11:99:fa: 60:5a:1b:ff:f1:50:85:fc:1f:e7:6d:31:cd:b9:18:9b:55:6c: 68:ee:18:95:30:94:5f:f3:9c:2a:1f:9d:a6:e9:e7:fb:14:29: 9c:2f:55:23:93:b8:0d:9b:ef:11:67:7e:5f:c0:60:5e:4e:67: a0:78:74:29:5e:8a:ba:60:1d:7f:c7:25:60:ae:a2:4b:5a:2d: e1:4a:a8:2d:25:77:64:5c:75:f7:f7:dd:44:98:8f:a7:2c:f7: fe:f0:29:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy ODYwQ0Y5MjkwHhcNMjUxMDE5MDM1NzI2WhcNMjUxMDI2MDM1NzI2WjAYMRYwFAYD VQQDEw02OGY0NjFhNi0xNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34n4aHOMHNFPB8avHeG1vUddMbCbU+x1A4baEHft9lcE13Wpj5QPkgs3+ZTL lp2CLViTwFRw2IgGyW3KE8XeLze3rb5EgdH6hC2fXOcl1w8LBrbsiiw19M7ewr0T lPRI2O8Wr7ByZQt0WRJV72xwdKBaQih5I5ER7zIDawkAO94ZMrGh0xhkVSMg11lH 0pdgVoz2wq7H+I504TNn2ZG7Nl2zrQp4z4TN1XVXasrLKRN/Sv6kMBFw7KhZWQfS ocR6YngTC89KxlFPzh7egXhqCMQvMKMqQV1JDbC9ZHfXYwb2jci/knLh85ScfiRy LpPehpTJbfLScoLzNhe+gQro8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeomUID 45dkcLXH954aEkneOUfzMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0 NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjoFGjylbf8BVsoE9LZIGOa89laSaNLU/6KqiLaXYJdXbwY98y6jDZ VtRBhd8avOm6ypWAxWD66bf4RPL6a1ejCo3iA0Ugjf07jpZqH0/ZQf5s+/5HCp6Q GAHC7H15PvQN/b/p5nwm0fiIm7RaKstFquyjlP450X0zd9iRts/i1OIAsq/tYqUU pVemyv/3WwlkYdVoOxePjkPL/po49IIRmfpgWhv/8VCF/B/nbTHNuRibVWxo7hiV MJRf85wqH52m6ef7FCmcL1Ujk7gNm+8RZ35fwGBeTmegeHQpXoq6YB1/xyVgrqJL Wi3hSqgtJXdkXHX3991EmI+nLPf+8Ckg -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:27 2025 by rpki-client