$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft File: awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json) Hash identifier: AjDKdrWmkETIPOrYbhaYf4X4WHYLzT89Sh766h0YHP4= Subject key identifier: 84:20:2E:E5:39:59:8B:A8:36:DD:BA:C3:12:41:78:5E:C4:CA:B4:0F Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C Certificate issuer: /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft Manifest number: CA Signing time: Sun 19 Oct 2025 08:54:31 +0000 Manifest this update: Sun 19 Oct 2025 08:54:30 +0000 Manifest next update: Sun 26 Oct 2025 08:54:30 +0000 Files and hashes: 1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: HBU7HpCRqsDhTULXZ1FnHpt91ZW2b7lq0+fKbvFX4s0=) 2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: p+Li5x5IRkEHLsrKLMYZtCUY4xOsEsGyH8peATkiJDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Validity Not Before: Oct 19 08:54:30 2025 GMT Not After : Oct 26 08:54:30 2025 GMT Subject: CN=68f4a746-7331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:30:a8:fc:b7:55:dc:2b:f0:60:9b:37:0a: 39:69:d5:01:50:4f:dc:b9:88:33:a9:96:65:23:1c: 73:53:1f:22:fc:8f:a3:1d:2b:50:42:75:c7:8c:b9: 5f:f4:74:fd:7b:50:e7:16:a6:5b:18:c7:c3:29:6f: 25:a4:25:71:13:63:2f:04:3f:5b:7f:b7:2a:c8:f4: 21:bc:b4:d0:53:bd:85:46:eb:8c:61:a0:cd:62:6a: af:f3:50:08:ba:b0:11:08:60:93:cd:43:02:94:2b: a0:28:39:05:b5:e5:62:1f:4a:e7:b4:39:79:13:38: ec:3c:c8:9c:1d:d2:5d:86:06:73:3b:33:3c:99:20: a4:ec:f5:be:3f:92:c3:0c:d6:36:01:4d:c3:65:d4: f2:e1:0a:9a:ef:cc:ed:8c:65:41:58:39:27:1e:55: d5:80:4d:7b:50:cf:d6:4b:22:e2:d8:db:48:2e:8a: 85:2b:d2:03:54:43:61:4b:3f:e2:42:06:86:75:1a: 57:11:f1:5c:3a:07:88:94:e4:5a:f0:a9:13:82:f7: cd:eb:72:4b:15:62:5d:0f:42:26:84:1e:13:82:66: b4:e4:8f:5b:eb:88:3e:5c:88:66:b1:b8:ec:0f:a9: 98:d6:d7:bb:51:48:39:bb:4f:33:d3:c4:09:1c:e8: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:20:2E:E5:39:59:8B:A8:36:DD:BA:C3:12:41:78:5E:C4:CA:B4:0F X509v3 Authority Key Identifier: keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:9d:cf:af:08:49:26:60:f2:a4:d8:f5:d0:cf:c6:69:c2: ed:aa:af:f1:19:55:9c:d3:1e:0c:33:0d:19:1a:da:2c:59:1e: 76:33:e3:ea:f1:5a:ab:62:a3:77:a8:c1:36:2e:19:d3:d9:dd: 0a:57:17:61:f8:2e:b0:97:82:10:cf:4a:1b:55:86:9d:f3:1f: 21:44:8e:13:88:e2:78:34:19:a5:db:4e:c5:d3:2f:9a:6a:fe: af:eb:f6:f2:5d:91:9f:27:1b:61:6e:c1:51:5a:62:d6:c3:57: 72:b3:d5:03:9f:93:ef:9a:13:5e:43:d8:6d:f3:54:8e:1e:8e: f5:96:27:7b:ff:86:87:7c:03:52:e0:df:bb:64:27:e2:1a:d3: fb:57:d5:36:34:78:a2:b1:57:54:c7:c3:bd:1d:27:8f:9c:e2: ca:68:08:90:c0:ab:18:40:b6:df:a5:be:c7:96:e6:1a:f1:68: 7e:69:41:19:4d:a2:7b:b5:48:e4:42:ac:50:a0:59:55:24:97: be:ba:c6:7f:29:5f:01:db:fb:b9:cd:0b:b3:62:b6:18:d1:6f: 3c:9e:1f:4f:49:b1:3d:09:18:ef:65:c4:23:cb:7d:01:6c:bf: 48:c5:04:d1:37:49:03:f3:17:6f:2b:ec:42:90:f7:a0:2e:f7: eb:a1:be:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMEUxMTAvBgNVBAUTKDZCMDI5MkM2MDI3MDg5QzhCQTg5RDhDNjVBMUEzMzBE NDg4QjBBMkMwHhcNMjUxMDE5MDg1NDMwWhcNMjUxMDI2MDg1NDMwWjAYMRYwFAYD VQQDEw02OGY0YTc0Ni03MzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf8wqPy3Vdwr8GCbNwo5adUBUE/cuYgzqZZlIxxzUx8i/I+jHStQQnXHjLlf 9HT9e1DnFqZbGMfDKW8lpCVxE2MvBD9bf7cqyPQhvLTQU72FRuuMYaDNYmqv81AI urARCGCTzUMClCugKDkFteViH0rntDl5EzjsPMicHdJdhgZzOzM8mSCk7PW+P5LD DNY2AU3DZdTy4Qqa78ztjGVBWDknHlXVgE17UM/WSyLi2NtILoqFK9IDVENhSz/i QgaGdRpXEfFcOgeIlORa8KkTgvfN63JLFWJdD0ImhB4Tgma05I9b64g+XIhmsbjs D6mY1te7UUg5u08z08QJHOiiWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQgLuU5 WYuoNt26wxJBeF7EyrQPMB8GA1UdIwQYMBaAFGsCksYCcInIuonYxloaMw1Iiwos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80NEJDQTYzMjgw NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9hd0tTeGdKd2ljaTZpZGpHV2hvekRVaUxD aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2F3S1N4Z0p3aWNpNmlkakdXaG96RFVpTENpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIwRS80NEJDQTYzMjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9hd0tTeGdKd2lj aTZpZGpHV2hvekRVaUxDaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWh53PrwhJJmDypNj10M/GacLtqq/xGVWc0x4MMw0ZGtosWR52M+Pq 8VqrYqN3qME2LhnT2d0KVxdh+C6wl4IQz0obVYad8x8hRI4TiOJ4NBml207F0y+a av6v6/byXZGfJxthbsFRWmLWw1dys9UDn5PvmhNeQ9ht81SOHo71lid7/4aHfANS 4N+7ZCfiGtP7V9U2NHiisVdUx8O9HSePnOLKaAiQwKsYQLbfpb7HluYa8Wh+aUEZ TaJ7tUjkQqxQoFlVJJe+usZ/KV8B2/u5zQuzYrYY0W88nh9PSbE9CRjvZcQjy30B bL9IxQTRN0kD8xdvK+xCkPegLvfrob4R -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:56 2025 by rpki-client