$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: 7p2u8t5gsUoTqZmeyR9tC/RGM7BGdF/TXhDgI/1Xpl4= Subject key identifier: 9C:D8:55:C8:61:47:15:B8:BD:DC:86:37:E6:6F:6C:0E:A9:AA:C8:60 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 22CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 22CA Signing time: Mon 20 Oct 2025 14:42:14 +0000 Manifest this update: Mon 20 Oct 2025 14:42:13 +0000 Manifest next update: Mon 27 Oct 2025 14:42:13 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: x+jA/WZvI2syIa99eikljWC1HQTRTI/bmqPzXmjDkAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8906 (0x22ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Oct 20 14:42:13 2025 GMT Not After : Oct 27 14:42:13 2025 GMT Subject: CN=68f64a45-2667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:99:38:db:bf:e5:82:ad:6f:63:24:85:25: 02:dd:c7:ec:5e:92:0b:0e:b6:a3:6f:61:68:46:5e: 80:a7:d0:a1:7e:96:c7:fb:c3:91:44:68:5d:93:33: 72:06:c5:4f:ec:25:cb:c1:8f:c9:cb:65:e6:26:a9: 99:d1:4c:3e:fd:eb:09:d9:0c:98:eb:44:4a:37:ce: eb:d8:a8:fe:68:cc:05:17:db:7d:c0:99:dd:ed:be: 71:05:a4:28:0a:05:4b:ce:9f:72:bc:93:78:41:4f: 38:0d:cf:c1:15:38:4e:cf:f5:47:9e:42:3d:44:5d: 14:2a:42:8d:38:a3:79:1e:8b:51:82:1b:cb:7c:e3: 23:e3:a7:5d:da:db:ce:36:1c:57:4b:1d:da:82:6a: 24:38:d3:11:df:e9:9e:ac:c0:9f:68:d8:e1:1e:0c: 24:fd:b8:5c:41:61:c6:13:94:15:85:47:dd:1e:f7: f4:20:36:b9:01:6d:00:68:0e:da:14:37:23:28:fa: 4c:bb:30:ec:3b:c1:24:80:59:e4:87:c2:cc:e9:a2: 57:d7:36:8e:5d:44:7b:8b:c4:e3:30:d3:df:73:18: 09:a1:49:ab:f1:4d:70:35:c5:3d:d2:3a:a0:8a:7d: 76:71:48:78:82:97:d1:18:cc:4f:eb:bb:26:f2:7b: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D8:55:C8:61:47:15:B8:BD:DC:86:37:E6:6F:6C:0E:A9:AA:C8:60 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:68:57:69:bf:25:ab:32:5d:69:31:e4:58:83:9f:a0:4a:f0: 5d:c9:2a:58:1d:cf:b4:db:12:f8:5d:2a:30:8c:1c:71:40:07: 58:9f:db:57:f8:7d:ce:12:ff:a1:46:7b:f8:9e:cd:68:1c:c7: ce:4f:bb:c5:6b:ec:12:1f:e1:94:3b:43:c9:67:3e:5b:45:4c: 78:85:7e:5b:b2:fa:73:4a:1f:3a:12:59:c0:d4:e7:81:a5:ba: 75:06:80:91:f8:8e:2f:96:7e:76:7b:0c:1a:56:6c:73:01:05: 94:91:06:cc:12:2a:8b:1c:a6:e7:61:06:ad:4c:75:22:83:4f: cf:db:92:06:0b:b5:5b:9f:37:4e:fd:89:8d:91:27:d7:e2:4f: e0:c5:b5:78:13:0a:8e:b4:44:8e:c0:fc:35:cd:49:91:07:3e: 22:e1:a7:6a:ef:e0:f9:f6:56:55:71:c4:66:e9:18:92:6e:39: 78:75:97:b8:af:d7:b6:5c:70:81:97:c6:4f:83:bd:e9:e6:32: dd:10:dc:d9:67:91:cf:44:c9:76:88:b7:6a:b8:33:16:c3:2a: 65:84:d0:7f:2a:7c:53:7e:3e:d9:6e:e4:b4:7c:20:47:a3:a3: 5d:31:37:15:10:86:49:58:27:34:78:ec:aa:03:fd:cb:f3:3f: c6:64:03:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjUxMDIwMTQ0MjEzWhcNMjUxMDI3MTQ0MjEzWjAYMRYwFAYD VQQDEw02OGY2NGE0NS0yNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEOZONu/5YKtb2MkhSUC3cfsXpILDrajb2FoRl6Ap9ChfpbH+8ORRGhdkzNy BsVP7CXLwY/Jy2XmJqmZ0Uw+/esJ2QyY60RKN87r2Kj+aMwFF9t9wJnd7b5xBaQo CgVLzp9yvJN4QU84Dc/BFThOz/VHnkI9RF0UKkKNOKN5HotRghvLfOMj46dd2tvO NhxXSx3agmokONMR3+merMCfaNjhHgwk/bhcQWHGE5QVhUfdHvf0IDa5AW0AaA7a FDcjKPpMuzDsO8EkgFnkh8LM6aJX1zaOXUR7i8TjMNPfcxgJoUmr8U1wNcU90jqg in12cUh4gpfRGMxP67sm8nt3UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzYVchh RxW4vdyGN+ZvbA6pqshgMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCaFdpvyWrMl1pMeRYg5+gSvBdySpYHc+02xL4XSowjBxxQAdYn9tX +H3OEv+hRnv4ns1oHMfOT7vFa+wSH+GUO0PJZz5bRUx4hX5bsvpzSh86ElnA1OeB pbp1BoCR+I4vln52ewwaVmxzAQWUkQbMEiqLHKbnYQatTHUig0/P25IGC7VbnzdO /YmNkSfX4k/gxbV4EwqOtESOwPw1zUmRBz4i4adq7+D59lZVccRm6RiSbjl4dZe4 r9e2XHCBl8ZPg73p5jLdENzZZ5HPRMl2iLdquDMWwyplhNB/KnxTfj7ZbuS0fCBH o6NdMTcVEIZJWCc0eOyqA/3L8z/GZAPB -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:39 2025 by rpki-client