$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft File: w373yMNE0xhYKbwsuZbIlKqoDvM.mft (raw, json) Hash identifier: u7p2l8HcPs4wU4CPjRiN7m1jA/ML1dqYp2/yOyxkrK8= Subject key identifier: E4:A7:64:8A:7F:7A:EC:0F:1A:55:CC:16:EB:74:F8:BC:99:E4:3A:50 Authority key identifier: C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3 Certificate issuer: /CN=A912756D/serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft Manifest number: D4 Signing time: Sun 19 Oct 2025 08:43:11 +0000 Manifest this update: Sun 19 Oct 2025 08:43:11 +0000 Manifest next update: Sun 26 Oct 2025 08:43:10 +0000 Files and hashes: 1: w373yMNE0xhYKbwsuZbIlKqoDvM.crl (hash: +5d688JyHdDKYhgAjOxnpkJcPo6lJbv8Tr6Du8S93iQ=) 2: 95CB7E0E6B5611EFA00DA92FC4F9AE02.roa (hash: tF2RYxkXEartjuKw3NvyoqP8Beu7LtlH1hXZ9oBO5zI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=C37EF7C8C344D3185829BC2CB996C894AAA80EF3 Validity Not Before: Oct 19 08:43:11 2025 GMT Not After : Oct 26 08:43:10 2025 GMT Subject: CN=68f4a49f-588d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:d3:67:27:f9:43:60:e3:73:e3:3e:cf:b7: 13:72:25:40:ae:b6:a8:5e:80:40:b6:d1:88:25:19: 0f:a0:5f:65:77:4e:02:82:01:85:49:07:80:0c:a9: b9:92:99:a8:32:61:5a:e6:74:9d:55:c7:c5:6f:4c: a5:4d:fb:57:14:8a:75:b0:a8:5e:c6:43:eb:6f:bf: b4:81:e0:b9:6e:21:39:53:d7:20:1c:d2:5b:b0:ff: cc:d4:f3:02:8b:6e:b6:b4:83:e6:b5:79:e9:71:10: 77:0e:f6:d5:d6:3c:5f:99:c9:ff:23:06:03:55:27: 76:71:2c:94:0f:62:bb:6b:bf:6b:c6:48:e3:d2:a0: 79:a9:0c:0e:a4:96:cd:b7:bf:eb:c3:c2:8b:93:6a: df:d8:0a:d1:69:9c:f2:ed:a0:e3:23:c3:60:04:ea: 6b:0c:01:52:8d:db:98:90:08:de:27:7d:ea:98:75: b4:ac:e5:63:2f:eb:66:8d:d1:cd:3a:8d:2b:d2:db: 8a:47:06:0f:be:35:ed:78:5f:01:c7:d3:10:67:1a: 9d:0c:b9:c7:21:57:28:8c:2d:c8:de:7a:03:d7:35: 2f:18:48:56:de:69:3c:f0:98:df:c6:e2:27:06:5d: c3:d5:89:6a:33:47:9c:be:5a:e4:89:3f:8c:cf:b8: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:64:8A:7F:7A:EC:0F:1A:55:CC:16:EB:74:F8:BC:99:E4:3A:50 X509v3 Authority Key Identifier: keyid:C3:7E:F7:C8:C3:44:D3:18:58:29:BC:2C:B9:96:C8:94:AA:A8:0E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w373yMNE0xhYKbwsuZbIlKqoDvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/842206D46B5411EFB8A8A61AC4F9AE02/w373yMNE0xhYKbwsuZbIlKqoDvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:40:37:85:0e:58:f9:a1:9f:c1:88:59:56:3b:ef:60:e0:70: 28:c5:dc:3c:1d:27:2f:24:61:96:f2:a7:e8:34:21:f4:5a:04: 6d:84:7f:83:7b:71:56:7b:47:d0:3d:ef:1f:ac:56:0a:f6:2d: cc:22:35:3f:8a:49:7c:d2:21:62:05:c5:4e:09:28:e2:c5:76: 90:1b:db:2c:98:62:6a:c1:37:74:a6:62:54:6e:3a:cc:af:47: 08:1e:33:ca:94:aa:93:d1:7b:41:3d:14:d7:08:6b:a9:4d:79: 1f:2d:22:f0:eb:83:fc:52:e8:36:6c:c3:ae:ce:e4:33:af:f4: e1:79:26:b3:94:1c:80:14:bc:01:2e:41:3f:fd:4d:62:b7:b2: 39:16:c8:58:06:a2:63:16:9f:b3:5d:a5:c5:51:17:1e:10:07: d8:08:50:f3:db:bc:35:07:3a:62:07:6b:4f:a8:71:8b:a6:1d: 2d:39:74:a7:15:39:fe:8e:26:95:f4:d8:c0:39:ab:0d:24:ec: 9e:77:d5:af:d5:94:9a:1f:68:45:e7:b7:97:21:f6:aa:f5:76: 51:30:e4:f9:fe:ed:53:53:65:d6:e6:2e:7d:30:49:ca:60:fa: 32:5f:29:a9:3c:63:c4:07:f2:51:83:de:05:5d:2c:21:14:98: bd:6b:fc:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKEMzN0VGN0M4QzM0NEQzMTg1ODI5QkMyQ0I5OTZDODk0 QUFBODBFRjMwHhcNMjUxMDE5MDg0MzExWhcNMjUxMDI2MDg0MzEwWjAYMRYwFAYD VQQDEw02OGY0YTQ5Zi01ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRzTZyf5Q2Djc+M+z7cTciVArraoXoBAttGIJRkPoF9ld04CggGFSQeADKm5 kpmoMmFa5nSdVcfFb0ylTftXFIp1sKhexkPrb7+0geC5biE5U9cgHNJbsP/M1PMC i262tIPmtXnpcRB3DvbV1jxfmcn/IwYDVSd2cSyUD2K7a79rxkjj0qB5qQwOpJbN t7/rw8KLk2rf2ArRaZzy7aDjI8NgBOprDAFSjduYkAjeJ33qmHW0rOVjL+tmjdHN Oo0r0tuKRwYPvjXteF8Bx9MQZxqdDLnHIVcojC3I3noD1zUvGEhW3mk88JjfxuIn Bl3D1YlqM0ecvlrkiT+Mz7g3pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSnZIp/ euwPGlXMFut0+LyZ5DpQMB8GA1UdIwQYMBaAFMN+98jDRNMYWCm8LLmWyJSqqA7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84NDIyMDZENDZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi93MzczeU1ORTB4aFlLYndzdVpiSWxLcW9E dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3czNzN5TU5FMHhoWUtid3N1WmJJbEtxb0R2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84NDIyMDZENDZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi93MzczeU1ORTB4 aFlLYndzdVpiSWxLcW9Edk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqQDeFDlj5oZ/BiFlWO+9g4HAoxdw8HScvJGGW8qfoNCH0WgRthH+D e3FWe0fQPe8frFYK9i3MIjU/ikl80iFiBcVOCSjixXaQG9ssmGJqwTd0pmJUbjrM r0cIHjPKlKqT0XtBPRTXCGupTXkfLSLw64P8Uug2bMOuzuQzr/TheSazlByAFLwB LkE//U1it7I5FshYBqJjFp+zXaXFURceEAfYCFDz27w1BzpiB2tPqHGLph0tOXSn FTn+jiaV9NjAOasNJOyed9Wv1ZSaH2hF57eXIfaq9XZRMOT5/u1TU2XW5i59MEnK YPoyXympPGPEB/JRg94FXSwhFJi9a/xq -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:13 2025 by rpki-client