$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft File: pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft (raw, json) Hash identifier: lLQn6y3EXdXgWpdhH1QCaxapiyzucD9w7S7wDzotBjE= Subject key identifier: 47:70:15:56:28:A1:BD:82:5F:F0:FD:23:1F:8E:4F:7F:12:6D:FF:F5 Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 Certificate issuer: /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft Manifest number: 0161 Signing time: Sun 19 Oct 2025 06:43:22 +0000 Manifest this update: Sun 19 Oct 2025 06:43:21 +0000 Manifest next update: Sun 26 Oct 2025 06:43:21 +0000 Files and hashes: 1: pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl (hash: Bi5wuuJSTgBQPXj72IXNKXQL25RKKGYTLxYf0Nrem9k=) 2: AC21E1E8924411EE96AA9544C4F9AE02.roa (hash: 84BaytmnsBEk+UaP5PFkzVU27GE8sU0iFIMHsasg/ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780 Validity Not Before: Oct 19 06:43:21 2025 GMT Not After : Oct 26 06:43:21 2025 GMT Subject: CN=68f48889-f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:b8:5f:01:7b:72:6b:f3:ca:b7:82:51:4a: 14:cb:df:ae:0b:b3:6d:ac:d6:1a:5c:2f:cc:25:d5: 95:9d:80:52:ae:55:b4:e9:17:f8:5b:c5:fb:45:da: cc:3f:64:4b:d4:df:40:e2:df:c0:3c:b7:df:72:f4: 80:6c:69:76:fa:c1:1c:f3:24:de:d7:60:0e:82:0a: 80:ff:3b:49:3a:e1:20:2f:2e:88:12:c9:60:d1:6a: 15:48:67:f9:a5:c7:0c:ad:e3:0e:c5:cb:b5:01:62: c1:99:e4:13:b8:69:fa:72:04:8f:f5:ac:a3:fc:f3: 65:c2:dd:40:26:76:91:e1:b3:33:89:4f:fd:a8:44: a8:dd:e6:87:c4:0a:9d:77:8c:b6:43:4e:08:f9:ab: fe:0d:3d:81:03:15:5c:74:e9:8b:e4:c7:f2:fa:61: 53:60:2f:10:fb:b4:36:6d:d7:6c:4e:4c:11:c3:15: 75:0d:35:db:b9:dd:75:9d:71:24:88:28:8f:59:71: bb:dc:08:d8:e2:16:7c:dd:69:42:8f:f8:72:82:16: 4d:7c:32:34:47:59:32:ef:6f:e4:9e:7d:eb:7e:c3: 90:8a:c2:8d:5d:cd:c0:ad:78:73:ab:93:06:d9:2f: 66:49:6d:9b:8b:a7:a2:26:48:f8:7f:2b:44:c6:c6: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:15:56:28:A1:BD:82:5F:F0:FD:23:1F:8E:4F:7F:12:6D:FF:F5 X509v3 Authority Key Identifier: keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:78:31:74:01:f1:e9:66:31:58:34:98:ae:d1:c8:1c:ea:8d: 66:aa:04:44:cb:58:bb:24:fd:55:a3:08:3a:18:71:2e:23:c5: de:2a:81:e1:b0:ea:f5:78:ab:3e:0f:a8:a6:83:62:eb:91:47: 18:6b:74:06:2d:69:01:86:16:83:ee:b6:0f:c4:47:6a:f8:d1: be:aa:0e:0c:86:0a:b7:00:44:d1:c6:7b:aa:58:93:e8:8d:a6: a4:d3:e8:83:5f:88:ed:05:2b:a1:f3:dc:bd:a3:95:d3:2b:f3: 94:a5:4e:89:de:ca:17:ae:0d:d8:91:b5:c1:23:7a:78:bf:d6: e9:28:31:b9:b0:66:54:85:68:f9:1d:cc:ec:30:7a:62:1f:73: d4:b4:0d:87:41:b4:97:2d:47:1c:b6:7a:51:43:8f:e9:c8:cf: 3f:ac:3f:6c:b0:62:dd:c3:75:17:4b:0c:8b:1e:87:47:c3:53: 8b:ac:e1:27:a2:77:da:94:80:fb:ab:63:89:8c:2a:86:ab:2b: 77:91:d7:ee:f5:80:82:8e:de:13:18:8e:80:3b:75:42:1c:24: 10:a7:d5:c6:70:04:c2:56:b4:fc:72:74:f1:1c:31:7a:1a:35: a2:1c:09:1f:35:36:00:ab:b6:c5:4b:c3:69:f9:88:d8:51:c7: 68:d5:ca:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2 MzY5MDI3ODAwHhcNMjUxMDE5MDY0MzIxWhcNMjUxMDI2MDY0MzIxWjAYMRYwFAYD VQQDEw02OGY0ODg4OS1mNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6W4XwF7cmvzyreCUUoUy9+uC7NtrNYaXC/MJdWVnYBSrlW06Rf4W8X7RdrM P2RL1N9A4t/APLffcvSAbGl2+sEc8yTe12AOggqA/ztJOuEgLy6IEslg0WoVSGf5 pccMreMOxcu1AWLBmeQTuGn6cgSP9ayj/PNlwt1AJnaR4bMziU/9qESo3eaHxAqd d4y2Q04I+av+DT2BAxVcdOmL5Mfy+mFTYC8Q+7Q2bddsTkwRwxV1DTXbud11nXEk iCiPWXG73AjY4hZ83WlCj/hyghZNfDI0R1ky72/knn3rfsOQisKNXc3ArXhzq5MG 2S9mSW2bi6eiJkj4fytExsZJUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdwFVYo ob2CX/D9Ix+OT38Sbf/1MB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTQ3MS82RkU4QTJFRTkyM0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRt SjV5TXljRHY1UE5qYVFKNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoeDF0AfHpZjFYNJiu0cgc6o1mqgREy1i7JP1Vowg6GHEuI8XeKoHh sOr1eKs+D6img2LrkUcYa3QGLWkBhhaD7rYPxEdq+NG+qg4Mhgq3AETRxnuqWJPo jaak0+iDX4jtBSuh89y9o5XTK/OUpU6J3soXrg3YkbXBI3p4v9bpKDG5sGZUhWj5 HczsMHpiH3PUtA2HQbSXLUcctnpRQ4/pyM8/rD9ssGLdw3UXSwyLHodHw1OLrOEn onfalID7q2OJjCqGqyt3kdfu9YCCjt4TGI6AO3VCHCQQp9XGcATCVrT8cnTxHDF6 GjWiHAkfNTYAq7bFS8Np+YjYUcdo1cqh -----END CERTIFICATE-----Generated at Mon Oct 20 08:48:31 2025 by rpki-client