$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: CIFYXIbqCLCYGerUALBKW/4I1q535Ptp2XEMWt1UHS0= Subject key identifier: 27:C2:CC:30:1B:F5:8B:5C:DE:CE:72:53:C0:38:DA:56:DA:41:08:90 Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: C4 Signing time: Sun 19 Oct 2025 09:00:14 +0000 Manifest this update: Sun 19 Oct 2025 09:00:14 +0000 Manifest next update: Sun 26 Oct 2025 09:00:14 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: KH3GwRAgqlMOpMPOOkIq3ywpLeDjTNM2yyAJ8YAJkIY=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: V86iixkcvnqrY9mFy6IN1yxn9j8XC/z6FWNoSjs479w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92, serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Oct 19 09:00:14 2025 GMT Not After : Oct 26 09:00:14 2025 GMT Subject: CN=68f4a89e-37bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a5:98:82:04:bc:f5:5d:e7:f4:82:80:9b:fe: 7a:20:18:45:a8:60:9d:a5:08:db:a2:15:05:16:c4: 0f:15:87:50:20:a5:58:40:7b:da:09:3b:84:f6:fc: d3:71:1f:90:49:62:0a:4d:4f:04:27:ff:a8:b7:61: a9:a7:59:ba:21:c2:f9:d6:92:db:4b:2b:62:66:dd: 77:33:c2:5f:fb:ef:ee:7b:b6:40:10:7d:60:c5:80: 95:b2:d7:c1:c7:f2:0a:2b:5a:6e:b1:ea:19:a3:fe: eb:db:11:b5:b0:a8:00:6a:27:da:ff:aa:98:28:86: ff:12:9e:f3:cd:54:0c:cf:74:ff:6a:b8:74:62:1a: 6d:f1:94:dc:9f:f8:e7:57:6b:a2:a2:af:75:3c:f8: 0c:54:4c:db:4d:cd:3c:39:8d:4a:e0:95:21:f0:25: de:d9:8c:52:c3:02:32:1a:fe:94:d3:58:2e:73:4e: 53:dc:90:ec:b9:b9:c9:88:9a:cd:b7:5b:09:6b:c6: 58:d4:8d:b7:f4:b4:9c:5d:9a:14:a7:9b:55:93:1b: 2f:1b:2e:e5:da:70:e5:0b:6f:73:db:58:f8:03:d0: 12:0f:ba:1b:a4:ea:a2:20:3c:5a:b4:95:06:4e:2f: 22:ba:4e:2f:9a:2f:29:da:64:3a:be:d1:94:6b:12: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C2:CC:30:1B:F5:8B:5C:DE:CE:72:53:C0:38:DA:56:DA:41:08:90 X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f8:72:b5:93:cc:28:3a:ec:15:01:c5:50:4b:9b:89:b5:52: fd:38:5c:bc:5f:73:a3:4c:ad:b7:32:6f:da:bb:a0:8c:86:91: 4a:b7:b8:fa:ec:54:52:5b:70:5e:0b:3b:67:ad:00:78:74:3b: 59:ec:30:e3:a9:23:76:ec:39:7f:90:55:ed:1a:9b:9a:ff:c3: bb:7f:e4:b8:da:29:b0:bb:6d:2b:53:9b:00:db:16:0f:46:45: c2:74:2f:58:c2:fa:de:39:cb:76:e9:d0:18:9d:72:bc:8a:a2: f1:c2:cd:cb:08:f8:6d:b8:1c:3f:ec:39:30:5e:ce:d1:42:03: 1d:46:cf:dd:aa:e9:31:1d:6c:7e:be:c4:ff:9b:89:32:f3:d3: 83:b2:7b:e8:54:d4:7d:e0:8f:fa:95:2d:8f:5e:52:02:52:3f: 1d:e5:a7:54:19:74:99:35:a4:2e:02:8d:cb:e1:8b:e9:47:47: e3:c0:31:3b:66:ed:f5:30:35:26:4a:6a:3b:d5:79:14:fb:a9: 35:8b:bf:22:9f:10:a0:d6:6b:a6:1f:6b:ab:4e:66:b0:5c:3c: 8d:ee:c3:a5:5a:a1:a8:8b:c1:45:d9:7a:48:6f:73:fb:1e:15: 6a:6b:1d:fc:7b:09:84:6d:20:b8:3d:b2:8c:c6:c6:d9:ab:6c: 10:30:e7:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBOTIxMTAvBgNVBAUTKDZBNDU4QUIwRkM1NjI4MjkzMzE4M0Q0NjgwNTFCRkM1 MDc5MTE2MzIwHhcNMjUxMDE5MDkwMDE0WhcNMjUxMDI2MDkwMDE0WjAYMRYwFAYD VQQDEw02OGY0YTg5ZS0zN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qWYggS89V3n9IKAm/56IBhFqGCdpQjbohUFFsQPFYdQIKVYQHvaCTuE9vzT cR+QSWIKTU8EJ/+ot2Gpp1m6IcL51pLbSytiZt13M8Jf++/ue7ZAEH1gxYCVstfB x/IKK1puseoZo/7r2xG1sKgAaifa/6qYKIb/Ep7zzVQMz3T/arh0Yhpt8ZTcn/jn V2uioq91PPgMVEzbTc08OY1K4JUh8CXe2YxSwwIyGv6U01guc05T3JDsubnJiJrN t1sJa8ZY1I239LScXZoUp5tVkxsvGy7l2nDlC29z21j4A9ASD7obpOqiIDxatJUG Ti8iuk4vmi8p2mQ6vtGUaxKAYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfCzDAb 9Ytc3s5yU8A42lbaQQiQMB8GA1UdIwQYMBaAFGpFirD8VigpMxg9RoBRv8UHkRYy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0E5Mi85OTlFOEVBQzg3 QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tDa3pHRDFHZ0ZHX3hRZVJG akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0E5Mi85OTlFOEVBQzg3QkUxMUVGQkM0MUMyNjhDNEY5QUUwMi9ha1dLc1B4V0tD a3pHRDFHZ0ZHX3hRZVJGakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT+HK1k8woOuwVAcVQS5uJtVL9OFy8X3OjTK23Mm/au6CMhpFKt7j6 7FRSW3BeCztnrQB4dDtZ7DDjqSN27Dl/kFXtGpua/8O7f+S42imwu20rU5sA2xYP RkXCdC9YwvreOct26dAYnXK8iqLxws3LCPhtuBw/7DkwXs7RQgMdRs/dqukxHWx+ vsT/m4ky89ODsnvoVNR94I/6lS2PXlICUj8d5adUGXSZNaQuAo3L4YvpR0fjwDE7 Zu31MDUmSmo71XkU+6k1i78inxCg1mumH2urTmawXDyN7sOlWqGoi8FF2XpIb3P7 HhVqax38ewmEbSC4PbKMxsbZq2wQMOff -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:32 2025 by rpki-client