$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft File: AchYGBCI4bnFd13KDEuum5_1d7M.mft (raw, json) Hash identifier: KHDSXiArbjdd5Hs078JRdXujPKj6ztZHcdht7sMEg1o= Subject key identifier: AC:60:C3:EA:C8:E6:38:6A:80:BB:5A:81:3B:A4:26:5D:16:72:A7:21 Authority key identifier: 01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 Certificate issuer: /CN=A91D5979/serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft Manifest number: 27 Signing time: Sun 19 Oct 2025 11:20:35 +0000 Manifest this update: Sun 19 Oct 2025 11:20:34 +0000 Manifest next update: Sun 26 Oct 2025 11:20:34 +0000 Files and hashes: 1: AchYGBCI4bnFd13KDEuum5_1d7M.crl (hash: vUMry12S9GdE4Up2yMiYOgN2CdnZntsgVYYOVPXn6K8=) 2: A80352FA7F2711F0AC85D327C4F9AE02.roa (hash: x6HQ5RDi7bp4WcPcgDw38Yb49M8i1vVS8BiW9zZO4Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5979, serialNumber=01C858181088E1B9C5775DCA0C4BAE9B9FF577B3 Validity Not Before: Oct 19 11:20:34 2025 GMT Not After : Oct 26 11:20:34 2025 GMT Subject: CN=68f4c983-1197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:45:93:93:35:94:dd:74:2e:5a:e3:b9:fe: a5:8a:3a:6e:12:02:94:2b:dd:a4:15:0e:a8:e5:f7: e9:18:2e:88:1e:e8:30:27:32:c1:75:57:fb:d6:95: d9:5b:c9:a1:13:9a:8e:16:26:f9:90:fd:d0:ce:28: e9:2b:0d:aa:21:fd:18:17:32:37:e9:cb:c6:d1:d5: f3:cc:a3:10:e1:e8:da:68:5a:f7:16:88:7a:14:ca: 3b:53:4c:67:1e:8a:15:f6:39:cc:b8:2e:a3:e6:1d: a9:be:cd:f0:0e:3d:9a:b0:8b:69:0a:ea:44:d6:44: d5:e1:50:d4:79:cd:da:9f:fa:d3:f4:2f:26:6e:99: c4:6f:c4:b9:0e:ba:a5:5c:ae:5a:2a:44:ed:ad:7f: af:e4:6f:d9:b9:02:97:ee:cc:59:49:65:9f:73:8c: 89:38:79:e3:b3:a0:91:f4:21:a6:5a:e3:e1:3d:43: 74:a0:14:9a:4d:f3:1f:98:31:72:01:f3:16:a3:c7: 16:9b:8a:cd:7d:64:f1:f6:54:49:82:a0:7a:00:8a: 4e:9f:86:52:fd:dd:02:f9:95:1c:93:a3:3f:bf:f1: 88:da:63:d8:00:b2:5d:e7:dd:ae:4a:7e:2d:4d:7d: f0:79:33:4a:b5:ca:31:41:46:62:39:10:bc:bd:f5: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:60:C3:EA:C8:E6:38:6A:80:BB:5A:81:3B:A4:26:5D:16:72:A7:21 X509v3 Authority Key Identifier: keyid:01:C8:58:18:10:88:E1:B9:C5:77:5D:CA:0C:4B:AE:9B:9F:F5:77:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AchYGBCI4bnFd13KDEuum5_1d7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5979/539507867F2711F094BA5727C4F9AE02/AchYGBCI4bnFd13KDEuum5_1d7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:74:5a:19:ab:4b:4d:a6:08:b6:e4:56:a4:a9:78:e3:08:80: d3:54:91:11:3d:cc:84:44:82:82:3f:67:dd:45:29:0b:c8:c1: f2:59:9d:07:4d:d3:1d:44:ce:68:4e:0c:6d:fd:e9:e4:9b:2f: 8d:55:a0:ff:25:30:c6:72:51:4a:20:61:1b:f3:51:92:44:71: 93:cd:33:0b:fb:07:84:53:5f:f3:59:ee:f4:42:0a:67:46:51: 4e:af:57:e4:67:a7:97:35:ac:1d:3b:1c:4a:02:36:2a:2c:42: 5c:19:01:68:b3:0b:26:ff:f1:a5:87:d3:3c:b9:94:7c:c7:be: d3:42:4a:b8:4d:49:17:9f:44:6f:63:b4:53:07:d6:33:59:aa: af:26:ee:ea:4b:02:92:8a:d6:61:e1:e7:e7:b8:c5:3a:32:2c: 0a:ee:16:c2:97:78:98:62:18:aa:21:d3:54:12:9a:57:89:3f: 74:4c:b5:1e:27:45:b6:59:d2:31:05:15:f4:c3:69:28:9f:40: c0:c2:9a:5c:fb:64:81:dc:6c:81:a7:19:00:27:6c:99:d4:92: c8:9a:2a:a7:35:fc:cb:66:84:74:c2:eb:09:9e:51:d3:18:2a: 25:71:6c:a0:a5:4f:53:e2:79:0a:9d:9d:1f:86:cd:35:15:98: 91:95:81:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NTk3OTExMC8GA1UEBRMoMDFDODU4MTgxMDg4RTFCOUM1Nzc1RENBMEM0QkFFOUI5 RkY1NzdCMzAeFw0yNTEwMTkxMTIwMzRaFw0yNTEwMjYxMTIwMzRaMBgxFjAUBgNV BAMTDTY4ZjRjOTgzLTExOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX0UWTkzWU3XQuWuO5/qWKOm4SApQr3aQVDqjl9+kYLoge6DAnMsF1V/vWldlb yaETmo4WJvmQ/dDOKOkrDaoh/RgXMjfpy8bR1fPMoxDh6NpoWvcWiHoUyjtTTGce ihX2Ocy4LqPmHam+zfAOPZqwi2kK6kTWRNXhUNR5zdqf+tP0LyZumcRvxLkOuqVc rloqRO2tf6/kb9m5ApfuzFlJZZ9zjIk4eeOzoJH0IaZa4+E9Q3SgFJpN8x+YMXIB 8xajxxabis19ZPH2VEmCoHoAik6fhlL93QL5lRyToz+/8YjaY9gAsl3n3a5Kfi1N ffB5M0q1yjFBRmI5ELy99bPPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrGDD6sjm OGqAu1qBO6QmXRZypyEwHwYDVR0jBBgwFoAUAchYGBCI4bnFd13KDEuum5/1d7Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1OTc5LzUzOTUwNzg2N0Yy NzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJuRmQxM0tERXV1bTVfMWQ3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWNoWUdCQ0k0Ym5GZDEzS0RFdXVtNV8xZDdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ1 OTc5LzUzOTUwNzg2N0YyNzExRjA5NEJBNTcyN0M0RjlBRTAyL0FjaFlHQkNJNGJu RmQxM0tERXV1bTVfMWQ3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADl0WhmrS02mCLbkVqSpeOMIgNNUkRE9zIREgoI/Z91FKQvIwfJZnQdN 0x1EzmhODG396eSbL41VoP8lMMZyUUogYRvzUZJEcZPNMwv7B4RTX/NZ7vRCCmdG UU6vV+Rnp5c1rB07HEoCNiosQlwZAWizCyb/8aWH0zy5lHzHvtNCSrhNSRefRG9j tFMH1jNZqq8m7upLApKK1mHh5+e4xToyLAruFsKXeJhiGKoh01QSmleJP3RMtR4n RbZZ0jEFFfTDaSifQMDCmlz7ZIHcbIGnGQAnbJnUksiaKqc1/MtmhHTC6wmeUdMY KiVxbKClT1PieQqdnR+GzTUVmJGVgTs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:46 2025 by rpki-client