$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: v7QaxgNZEvXi+9KaVw7+wZjKNLy48v8WJ2ocW4Z9Tvc= Subject key identifier: 77:5C:D9:5F:F3:22:C9:5E:2C:E3:07:24:08:53:F5:75:5E:92:9A:9D Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 08E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 08DF Signing time: Sat 18 Oct 2025 21:29:51 +0000 Manifest this update: Sat 18 Oct 2025 21:29:50 +0000 Manifest next update: Sat 25 Oct 2025 21:29:50 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: 8WnEuRqgWVkWaluT/3vQ7VCX2QC6w+iW5yBBq8L/o50=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: RBbk8UhQUJAo0+DivNUUdglkSzsFknX4rSnxZW8gCTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704, serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Oct 18 21:29:50 2025 GMT Not After : Oct 25 21:29:50 2025 GMT Subject: CN=68f406cf-ee02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:50:5a:06:45:9e:a0:12:e0:0d:bc:0c:97: 12:f8:61:75:23:e5:74:f2:a0:29:f1:7c:02:9a:34: 2d:3c:4a:2d:dd:c4:b0:0a:a2:86:89:4c:4f:d6:2d: 3f:73:87:07:3e:02:b6:6d:65:4d:78:04:3e:21:52: c5:70:5a:c2:ad:53:9b:91:9a:a3:6f:73:bf:08:ea: 7c:30:36:d1:78:9a:d4:ac:0e:3e:f1:aa:53:4e:ab: 7e:82:de:43:c8:d0:16:34:b9:b3:54:c1:90:b2:0b: eb:bc:ad:60:33:ca:ab:d4:06:7b:72:b2:ef:30:94: c5:f6:43:35:fe:24:d3:46:4b:18:b3:b0:c1:41:ea: c5:bb:5f:83:e8:43:cf:fd:04:ea:ad:d7:23:31:fe: e0:ca:26:dc:3e:40:b6:3e:3f:82:07:b3:8e:16:e1: 3b:17:1d:42:19:3e:98:55:09:8d:04:95:13:59:a2: f0:10:d4:bb:d8:7d:0f:11:d2:e6:9d:5f:82:8c:10: c1:77:e9:a8:47:8a:4b:03:46:63:97:cc:11:46:70: c8:49:7b:42:84:64:7a:33:79:a6:ce:71:eb:62:86: f0:fb:a1:cd:1a:9a:8e:de:c3:f2:42:10:d8:38:c3: cc:ec:c8:38:10:b1:76:23:a2:d0:29:95:54:94:b8: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5C:D9:5F:F3:22:C9:5E:2C:E3:07:24:08:53:F5:75:5E:92:9A:9D X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:63:bf:f8:7b:0e:e1:d9:25:d2:ab:68:66:4e:73:5e:ef:ce: 6e:58:95:2c:6e:3d:bb:aa:4f:62:e6:a7:30:47:e1:26:2d:20: 3e:0f:73:86:90:22:4e:ec:78:b0:96:79:63:ee:15:e5:29:2c: 91:24:77:c5:71:39:0f:5a:51:25:d5:82:b1:01:1a:5e:ff:10: 2d:5f:63:a2:23:6d:56:ad:12:f3:6a:ba:ad:92:e0:66:01:22: ad:6d:41:bd:ab:41:ef:ec:35:f7:39:04:2f:e0:e0:7c:91:23: 72:64:c5:2f:68:fd:2f:40:1c:e1:e8:99:15:6b:4f:c7:29:f6: 18:da:3d:a6:e7:60:12:fa:51:46:29:e3:ff:ef:3c:57:6c:9d: 91:37:73:bd:77:ac:1d:0f:d1:d1:c0:b3:1b:94:f9:14:17:79: 2e:58:38:93:9b:c5:2e:cd:33:74:58:60:ba:47:8c:48:37:89: 50:68:49:84:1d:dc:2a:25:31:a7:da:6a:78:e6:6f:1e:78:cf: f9:31:18:3d:43:56:07:5f:a3:b4:30:10:e4:8c:be:b5:92:5d: 12:88:85:98:a1:6f:56:a1:ad:71:97:d5:90:9e:93:1e:91:52: d2:a6:5d:c4:6a:05:33:05:55:03:74:61:d3:ae:8c:2e:7d:c1: 2a:4f:8f:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjUxMDE4MjEyOTUwWhcNMjUxMDI1MjEyOTUwWjAYMRYwFAYD VQQDEw02OGY0MDZjZi1lZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLBQWgZFnqAS4A28DJcS+GF1I+V08qAp8XwCmjQtPEot3cSwCqKGiUxP1i0/ c4cHPgK2bWVNeAQ+IVLFcFrCrVObkZqjb3O/COp8MDbReJrUrA4+8apTTqt+gt5D yNAWNLmzVMGQsgvrvK1gM8qr1AZ7crLvMJTF9kM1/iTTRksYs7DBQerFu1+D6EPP /QTqrdcjMf7gyibcPkC2Pj+CB7OOFuE7Fx1CGT6YVQmNBJUTWaLwENS72H0PEdLm nV+CjBDBd+moR4pLA0Zjl8wRRnDISXtChGR6M3mmznHrYobw+6HNGpqO3sPyQhDY OMPM7Mg4ELF2I6LQKZVUlLgw7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdc2V/z IsleLOMHJAhT9XVekpqdMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGY7/4ew7h2SXSq2hmTnNe785uWJUsbj27qk9i5qcwR+EmLSA+D3OG kCJO7Hiwlnlj7hXlKSyRJHfFcTkPWlEl1YKxARpe/xAtX2OiI21WrRLzarqtkuBm ASKtbUG9q0Hv7DX3OQQv4OB8kSNyZMUvaP0vQBzh6JkVa0/HKfYY2j2m52AS+lFG KeP/7zxXbJ2RN3O9d6wdD9HRwLMblPkUF3kuWDiTm8UuzTN0WGC6R4xIN4lQaEmE HdwqJTGn2mp45m8eeM/5MRg9Q1YHX6O0MBDkjL61kl0SiIWYoW9Woa1xl9WQnpMe kVLSpl3EagUzBVUDdGHTrowufcEqT49V -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:49 2025 by rpki-client