$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft File: axGMFY4LjZuYTs3ceLJEgC5HBUc.mft (raw, json) Hash identifier: foyQ0Y3yz5DBhpHDyqXl++vXWY1QsUfmZQuviNLwdGg= Subject key identifier: 1B:DE:5C:77:FA:38:CF:80:4F:0A:84:78:38:3A:DE:C4:DB:7C:C5:67 Authority key identifier: 6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 Certificate issuer: /CN=A91F1F2A/serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft Manifest number: 0B Signing time: Sun 19 Oct 2025 11:37:07 +0000 Manifest this update: Sun 19 Oct 2025 11:37:06 +0000 Manifest next update: Sun 26 Oct 2025 11:37:06 +0000 Files and hashes: 1: axGMFY4LjZuYTs3ceLJEgC5HBUc.crl (hash: m3/Vj5HxLm3PupVduO5yurOm8BiAdCHbAdErjGFo/zU=) 2: DE6BD6189F8F11F08976857BC4F9AE02.roa (hash: z3P+QwqIAVJ2kDpSoqWTAoJ/rezdLH3YQLa5NxQBxaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1F2A, serialNumber=6B118C158E0B8D9B984ECDDC78B244802E470547 Validity Not Before: Oct 19 11:37:06 2025 GMT Not After : Oct 26 11:37:06 2025 GMT Subject: CN=68f4cd63-0e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:36:49:4f:6d:a6:43:61:70:4f:13:71:c8:3b: 3b:b1:cb:1a:21:c7:b8:0f:79:d3:f6:8a:91:59:8d: 4f:88:bb:62:dc:d0:fa:6b:8d:d0:bc:2e:1b:97:3d: 8b:eb:c9:2b:54:1c:eb:e5:ba:ed:4d:00:50:ef:98: bb:72:70:1e:e8:12:e1:24:cf:bc:b3:0a:0f:cc:17: 07:ae:18:88:d3:8d:c1:9f:f9:e9:2b:9d:a0:c6:1e: fc:e6:88:0e:5e:0f:ba:8d:0b:60:ba:3e:60:6b:31: c4:c6:e0:3b:af:a8:24:98:02:0f:cb:0d:9b:7c:b3: 22:af:46:b5:e7:cf:16:33:98:35:fe:8b:23:3e:47: 2b:51:ae:0c:f0:b6:10:b0:29:11:40:ea:ef:e1:07: 90:e0:d8:2e:7f:2d:26:f8:44:4a:f6:f8:aa:0f:3a: 0d:c1:2f:5e:07:c8:f3:3d:a3:d4:ed:f9:89:97:e5: 36:bb:96:20:09:2a:52:59:8b:bd:58:5b:52:1f:45: 71:40:f9:2a:0f:fe:65:00:17:69:12:48:8e:24:ba: d8:64:aa:7d:73:f1:67:43:0f:22:fd:a2:80:7c:be: 32:18:bf:74:e3:98:fb:4b:13:10:b8:88:8f:2d:da: 0a:58:1c:f4:a3:ea:77:74:e5:01:18:17:7e:86:d9: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DE:5C:77:FA:38:CF:80:4F:0A:84:78:38:3A:DE:C4:DB:7C:C5:67 X509v3 Authority Key Identifier: keyid:6B:11:8C:15:8E:0B:8D:9B:98:4E:CD:DC:78:B2:44:80:2E:47:05:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/axGMFY4LjZuYTs3ceLJEgC5HBUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1F2A/932F85BE9F8F11F0BB974B2DC4F9AE02/axGMFY4LjZuYTs3ceLJEgC5HBUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:32:51:e6:5d:4c:6a:f3:45:1d:ab:f6:f3:11:c2:ef:f3: 52:77:32:1f:20:f8:1b:1e:a6:c6:0a:0d:61:8d:37:40:89:a8: de:71:9f:b9:4b:93:34:8d:e3:ee:1f:e2:e8:12:25:28:3f:68: 20:d7:7f:25:df:0d:61:2f:c2:07:98:00:4f:88:e8:21:ce:32: a6:a7:a8:88:dd:9e:8c:d5:fc:a2:e8:2a:be:f3:cb:40:19:09: 04:9d:9c:a1:a5:e8:8d:a4:f4:47:01:87:3a:f5:77:aa:2c:05: 25:d1:33:dc:ba:31:d4:7f:60:20:b1:d2:b0:c8:88:01:32:bf: 2c:01:9c:f7:a2:9b:74:a3:34:d3:6c:66:8d:0d:e3:f6:93:ef: 49:1f:35:e3:8c:c7:f1:da:0b:cf:a5:7a:9f:64:34:13:87:87: 7d:a9:2a:14:e1:36:50:80:ae:1e:0d:7c:8e:87:59:62:cb:e6: b6:48:ee:ad:7b:82:29:60:30:8d:2a:d4:30:3c:9a:78:70:7f: a4:7b:2b:4c:38:2d:09:cd:cd:55:be:24:60:e0:30:32:62:96: 0b:60:92:96:91:ab:b1:ee:cb:a0:cc:d1:3b:de:7b:bc:f8:59: 2b:a7:50:c6:c4:6f:9a:6d:df:62:6f:bc:56:a9:5c:d2:b5:4f: 1e:5a:d5:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MUYyQTExMC8GA1UEBRMoNkIxMThDMTU4RTBCOEQ5Qjk4NEVDRERDNzhCMjQ0ODAy RTQ3MDU0NzAeFw0yNTEwMTkxMTM3MDZaFw0yNTEwMjYxMTM3MDZaMBgxFjAUBgNV BAMTDTY4ZjRjZDYzLTBlOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxNklPbaZDYXBPE3HIOzuxyxohx7gPedP2ipFZjU+Iu2Lc0PprjdC8LhuXPYvr yStUHOvluu1NAFDvmLtycB7oEuEkz7yzCg/MFweuGIjTjcGf+ekrnaDGHvzmiA5e D7qNC2C6PmBrMcTG4DuvqCSYAg/LDZt8syKvRrXnzxYzmDX+iyM+RytRrgzwthCw KRFA6u/hB5Dg2C5/LSb4REr2+KoPOg3BL14HyPM9o9Tt+YmX5Ta7liAJKlJZi71Y W1IfRXFA+SoP/mUAF2kSSI4kuthkqn1z8WdDDyL9ooB8vjIYv3TjmPtLExC4iI8t 2gpYHPSj6nd05QEYF36G2YnvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG95cd/o4 z4BPCoR4ODrexNt8xWcwHwYDVR0jBBgwFoAUaxGMFY4LjZuYTs3ceLJEgC5HBUcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxRjJBLzkzMkY4NUJFOUY4 RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1WVRzM2NlTEpFZ0M1SEJV Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXhHTUZZNExqWnVZVHMzY2VMSkVnQzVIQlVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx RjJBLzkzMkY4NUJFOUY4RjExRjBCQjk3NEIyREM0RjlBRTAyL2F4R01GWTRMalp1 WVRzM2NlTEpFZ0M1SEJVYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI91MlHmXUxq80Udq/bzEcLv81J3Mh8g+BsepsYKDWGNN0CJqN5xn7lL kzSN4+4f4ugSJSg/aCDXfyXfDWEvwgeYAE+I6CHOMqanqIjdnozV/KLoKr7zy0AZ CQSdnKGl6I2k9EcBhzr1d6osBSXRM9y6MdR/YCCx0rDIiAEyvywBnPeim3SjNNNs Zo0N4/aT70kfNeOMx/HaC8+lep9kNBOHh32pKhThNlCArh4NfI6HWWLL5rZI7q17 gilgMI0q1DA8mnhwf6R7K0w4LQnNzVW+JGDgMDJilgtgkpaRq7Huy6DM0Tvee7z4 WSunUMbEb5pt32JvvFapXNK1Tx5a1YU= -----END CERTIFICATE-----Generated at Mon Oct 20 01:25:14 2025 by rpki-client