$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: qFPhk0qp9AnWotbjp4HBcbMQTl300VNLt+nSR1IxL5s= Subject key identifier: 5A:3F:0E:4A:38:96:16:99:80:71:81:A1:1E:13:0B:9A:C3:59:D5:D8 Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 063F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 063A Signing time: Sun 19 Oct 2025 00:17:01 +0000 Manifest this update: Sun 19 Oct 2025 00:17:00 +0000 Manifest next update: Sun 26 Oct 2025 00:17:00 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: TMjUxyPHoDDkpm9AYtBwbxKh+rWek+R8F6snqFKb6gg=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1599 (0x63f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Oct 19 00:17:00 2025 GMT Not After : Oct 26 00:17:00 2025 GMT Subject: CN=68f42dfc-7271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:28:6e:d8:eb:52:2a:54:06:fc:39:ab:3a:5b: 46:52:29:ac:82:91:20:77:44:31:0e:b5:72:80:d5: 38:36:0f:f2:66:93:1e:63:1f:74:46:bd:4d:65:81: 1b:db:54:c2:98:95:82:38:ea:47:68:d3:a2:ef:92: af:98:ec:6f:cc:dd:0a:25:fe:36:68:80:b6:6a:e8: 5b:ff:95:90:f3:17:3b:7e:28:1b:80:2c:4c:61:3c: 53:cb:db:6f:7a:ec:23:44:64:11:44:c9:98:5c:e9: c2:99:a4:ad:8a:f4:c8:53:a1:c6:7f:a8:16:7b:b7: 42:e0:24:53:32:46:0a:3d:de:58:43:5e:a5:2b:07: 03:db:e6:ea:76:3d:f1:de:ae:b5:63:2e:0e:90:85: 70:b4:47:1d:36:a6:28:bc:90:5c:b5:c3:1a:63:6b: 9f:29:ec:03:74:fc:c1:c5:fa:69:ec:00:b3:5c:dd: 2a:2c:c6:98:11:05:f6:10:b2:39:43:10:8c:cb:82: 2c:df:ed:04:be:e2:16:93:f1:c1:84:a6:34:a0:aa: 86:ce:fa:6e:ba:0a:0a:59:4b:3b:c0:f8:c6:1e:e8: ac:a6:01:06:55:7d:30:f9:09:40:5a:db:6b:97:99: df:9f:54:29:9b:93:6b:a6:8f:58:16:20:1d:ee:c0: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:0E:4A:38:96:16:99:80:71:81:A1:1E:13:0B:9A:C3:59:D5:D8 X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:39:1e:12:20:78:2f:b6:a3:dc:09:12:8d:06:95:4d:ec:3c: 51:d5:77:41:11:4a:da:1f:33:a4:f7:54:5b:96:19:64:36:1d: 2b:e6:f6:3a:df:be:f2:a1:5f:7e:71:f5:0d:36:9f:ed:bf:cf: 46:b2:b5:cb:06:9c:44:e2:17:d5:09:0d:2d:50:ef:d2:04:4b: 2c:e7:16:57:5d:9f:36:4a:26:2e:91:2f:76:69:4d:1e:95:ab: ee:44:0c:60:43:67:77:02:df:50:b0:d6:7a:c0:77:44:d1:61: 7d:71:dd:4d:36:12:53:a8:4c:33:7f:2e:32:34:52:a7:45:a2: a4:b4:45:71:d4:4e:fc:ec:8b:f2:63:06:47:6e:08:12:d3:41: 0d:65:82:2a:dd:2f:52:aa:25:7d:4d:f8:a1:c3:b8:cd:c6:ae: df:75:16:92:ea:18:e9:10:d4:a0:9c:2d:58:7c:44:2d:94:4f: 74:6a:b0:bb:b5:8c:7e:ed:53:07:d2:44:b2:7e:4a:e3:c8:cf: 8f:66:d0:21:e7:a7:3e:b5:dc:82:72:61:d0:cc:e6:74:40:a1: d9:3f:2c:51:7a:5f:30:2b:cd:e9:8f:6c:45:44:4e:75:36:2b: f2:2d:9f:5c:b3:cf:5d:56:50:f2:a3:4b:6d:ed:f2:f0:72:13: 02:7f:15:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjUxMDE5MDAxNzAwWhcNMjUxMDI2MDAxNzAwWjAYMRYwFAYD VQQDEw02OGY0MmRmYy03MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Shu2OtSKlQG/DmrOltGUimsgpEgd0QxDrVygNU4Ng/yZpMeYx90Rr1NZYEb 21TCmJWCOOpHaNOi75KvmOxvzN0KJf42aIC2auhb/5WQ8xc7figbgCxMYTxTy9tv euwjRGQRRMmYXOnCmaStivTIU6HGf6gWe7dC4CRTMkYKPd5YQ16lKwcD2+bqdj3x 3q61Yy4OkIVwtEcdNqYovJBctcMaY2ufKewDdPzBxfpp7ACzXN0qLMaYEQX2ELI5 QxCMy4Is3+0EvuIWk/HBhKY0oKqGzvpuugoKWUs7wPjGHuispgEGVX0w+QlAWttr l5nfn1Qpm5Nrpo9YFiAd7sBbawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo/Dko4 lhaZgHGBoR4TC5rDWdXYMB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnOR4SIHgvtqPcCRKNBpVN7DxR1XdBEUraHzOk91RblhlkNh0r5vY6 377yoV9+cfUNNp/tv89GsrXLBpxE4hfVCQ0tUO/SBEss5xZXXZ82SiYukS92aU0e lavuRAxgQ2d3At9QsNZ6wHdE0WF9cd1NNhJTqEwzfy4yNFKnRaKktEVx1E787Ivy YwZHbggS00ENZYIq3S9SqiV9Tfihw7jNxq7fdRaS6hjpENSgnC1YfEQtlE90arC7 tYx+7VMH0kSyfkrjyM+PZtAh56c+tdyCcmHQzOZ0QKHZPyxRel8wK83pj2xFRE51 NivyLZ9cs89dVlDyo0tt7fLwchMCfxVT -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:26 2025 by rpki-client