$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: aORgtvI19FLR0JYyrGmrjs/9s2wZ9KZeMxk37cyQ8Io= Subject key identifier: 46:ED:CE:AD:86:50:4B:06:4D:8B:11:55:6D:C8:58:5D:6C:74:69:99 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 2652 Signing time: Sat 18 Oct 2025 15:55:59 +0000 Manifest this update: Sat 18 Oct 2025 15:55:58 +0000 Manifest next update: Sat 25 Oct 2025 15:55:58 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: 5zr4Xubv3jXcXXyZp0Wt0EpBMm1/kinuVfOd7Xpimxk=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: i5fhQnu6bmgNPwIHRR7tap/ay2sUVMlNWD5eOeQV4OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9849 (0x2679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Oct 18 15:55:58 2025 GMT Not After : Oct 25 15:55:58 2025 GMT Subject: CN=68f3b88e-4954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:1c:59:29:a2:c4:4a:9d:46:85:bf:96:3d: 3d:d0:c0:cd:c9:b0:28:54:da:96:fd:8f:96:eb:98: 64:c7:98:fd:30:db:4a:3e:8f:e7:3c:e1:b9:97:4a: 16:09:2b:81:e5:5a:53:87:8b:6d:ab:2a:1c:46:6e: c1:be:51:df:bc:7f:d3:7e:7c:db:50:c1:b0:ce:bf: 37:9f:c2:9d:c1:98:f8:86:a6:db:e4:fb:db:cc:97: 46:9e:07:d9:16:d4:c8:5d:7d:18:2e:35:29:9b:b6: 89:c7:77:c7:cb:bf:35:92:42:df:2e:1a:67:55:39: 34:0c:d7:cb:8d:e8:82:3b:17:ae:0a:e0:4a:0a:4b: cf:f6:72:c3:ee:df:80:ed:6e:d4:a3:3b:46:c7:97: e3:01:01:b7:f7:e5:8a:ad:e2:40:ee:0f:9e:96:dc: 84:67:8d:54:ec:32:6a:19:43:50:fd:a0:34:57:65: 2f:1e:21:ed:f4:28:b4:0b:a3:7e:0d:1c:8c:d6:72: fd:c7:86:ea:32:7b:88:41:c2:2a:7a:3a:16:43:32: cf:db:bb:8d:7c:1a:21:64:ba:f0:84:09:92:9b:50: cd:da:66:f5:d5:e5:03:37:16:19:8a:d5:94:7e:46: 3b:82:b0:5b:8e:fd:17:43:90:0e:b1:3e:ef:7f:47: ec:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:ED:CE:AD:86:50:4B:06:4D:8B:11:55:6D:C8:58:5D:6C:74:69:99 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:00:1f:76:2a:8d:dd:c2:b0:e9:4e:01:15:be:d4:9a:19:3d: 64:80:07:23:84:fd:f1:d1:03:8c:8b:5d:00:8e:36:0e:56:08: 97:7d:2c:c8:ff:02:29:f0:48:9d:cf:f8:42:da:fb:50:bf:4a: ad:79:e6:32:90:2c:80:33:95:63:49:22:ef:55:24:09:e5:13: 5d:4c:7c:38:14:77:40:bf:1a:81:c0:b6:c4:de:39:75:4d:d6: 3a:5d:a8:3c:a2:8c:d0:89:04:6c:4b:77:c2:7e:4d:29:c7:97: a6:0c:dd:df:07:8b:16:e5:09:f3:ea:fd:17:f8:d2:ae:e6:b1: 8d:92:39:f7:a1:1a:f8:2a:90:84:21:98:6c:1e:20:aa:1e:70: 31:79:88:37:3a:2e:41:7f:d2:7d:6e:8a:1f:ab:7c:d5:27:28: 00:96:17:55:ae:00:fd:04:40:94:e6:4a:96:fa:7e:31:74:ff: a2:47:7a:32:a6:f5:5e:f0:f5:47:19:19:24:82:10:89:fb:8d: df:a5:1c:63:a8:7a:42:3e:dd:52:b1:10:e0:79:8e:1b:92:7c: 22:ef:27:53:b5:a1:47:d1:be:99:03:3a:2a:37:49:13:ea:d6: 96:55:bf:de:1b:1f:31:f5:47:42:83:b4:b4:74:b3:5a:ba:b8: 1f:e4:0b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUxMDE4MTU1NTU4WhcNMjUxMDI1MTU1NTU4WjAYMRYwFAYD VQQDEw02OGYzYjg4ZS00OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23AcWSmixEqdRoW/lj090MDNybAoVNqW/Y+W65hkx5j9MNtKPo/nPOG5l0oW CSuB5VpTh4ttqyocRm7BvlHfvH/TfnzbUMGwzr83n8KdwZj4hqbb5PvbzJdGngfZ FtTIXX0YLjUpm7aJx3fHy781kkLfLhpnVTk0DNfLjeiCOxeuCuBKCkvP9nLD7t+A 7W7UoztGx5fjAQG39+WKreJA7g+eltyEZ41U7DJqGUNQ/aA0V2UvHiHt9Ci0C6N+ DRyM1nL9x4bqMnuIQcIqejoWQzLP27uNfBohZLrwhAmSm1DN2mb11eUDNxYZitWU fkY7grBbjv0XQ5AOsT7vf0fsLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbtzq2G UEsGTYsRVW3IWF1sdGmZMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8AB92Ko3dwrDpTgEVvtSaGT1kgAcjhP3x0QOMi10AjjYOVgiXfSzI /wIp8Eidz/hC2vtQv0qteeYykCyAM5VjSSLvVSQJ5RNdTHw4FHdAvxqBwLbE3jl1 TdY6Xag8oozQiQRsS3fCfk0px5emDN3fB4sW5Qnz6v0X+NKu5rGNkjn3oRr4KpCE IZhsHiCqHnAxeYg3Oi5Bf9J9boofq3zVJygAlhdVrgD9BECU5kqW+n4xdP+iR3oy pvVe8PVHGRkkghCJ+43fpRxjqHpCPt1SsRDgeY4bknwi7ydTtaFH0b6ZAzoqN0kT 6taWVb/eGx8x9UdCg7S0dLNaurgf5Avh -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:09 2025 by rpki-client