$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json) Hash identifier: JYJnr080H6u+Ma48sZ0pG85cVxm5vX8sEN0WPuji3Lg= Subject key identifier: 10:EF:45:39:F7:C9:BB:59:6C:DF:BA:EA:E7:08:ED:57:D8:84:4D:5F Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:29:34 +0000 Manifest this update: Sun 19 Oct 2025 11:29:33 +0000 Manifest next update: Sun 26 Oct 2025 11:29:33 +0000 Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: s9GuPQ0o0mgPQpcWehpwDf6WdCwEhF3F2nVt0dF2nEo=) 2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: kAhTjUWVZV9wMTU00Q644BmyUxt0di+mCyDgFqmBb/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Validity Not Before: Oct 19 11:29:33 2025 GMT Not After : Oct 26 11:29:33 2025 GMT Subject: CN=68f4cb9e-3c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:32:29:b6:5f:e4:ff:e5:c4:51:0f:48:88: 62:37:67:70:5a:0b:1c:84:9a:14:a9:dd:89:31:d7: 8f:3f:b5:fb:67:b5:65:63:2f:c5:f1:06:69:8b:ca: 43:fb:b8:c6:3f:95:58:11:3f:38:c4:99:07:20:7c: 44:84:dc:f4:cb:2d:85:4b:ef:93:22:47:18:d9:8f: 74:ad:2d:67:5c:c8:82:33:9d:71:73:82:a9:63:4d: fc:a7:95:7e:fd:06:7f:ab:cb:0e:41:c1:cf:a3:72: b9:ee:ee:55:d9:76:6d:22:46:34:09:02:bb:de:a4: ae:8f:f6:aa:59:d0:c9:2d:df:82:a5:15:3b:ec:55: e4:14:f9:91:63:e5:75:f3:3b:e9:41:9c:6b:af:74: 96:e2:d9:29:90:a5:27:84:d9:1e:ae:b7:2e:5b:22: 24:36:81:b5:5d:18:e1:c1:ab:42:7c:24:c5:11:10: 6d:fe:b2:a2:a2:54:67:c8:95:59:51:b0:09:88:56: bd:e8:b1:5c:0b:03:ee:eb:0a:50:af:9a:36:01:00: 53:b0:a8:80:8a:bf:75:4a:29:ce:97:3e:6b:fc:d5: fa:80:8e:76:ea:a8:42:af:99:b0:c0:c4:8a:5e:45: 3c:06:93:8d:72:8d:8a:ae:76:6e:f7:5f:e6:94:88: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EF:45:39:F7:C9:BB:59:6C:DF:BA:EA:E7:08:ED:57:D8:84:4D:5F X509v3 Authority Key Identifier: keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b5:7f:a3:29:52:bc:97:58:b6:30:db:7c:0d:d0:ca:65:39: 5f:bf:96:32:68:50:cc:5e:36:6c:dd:59:df:25:d4:c9:20:61: 31:26:a4:21:f5:a3:60:b1:df:a6:f4:08:fe:d8:1e:ad:6e:c4: 63:af:53:93:66:21:72:bc:46:d4:ea:7c:d4:7d:84:ea:db:21: 26:7d:34:72:6d:df:51:75:e9:68:40:e5:62:b7:a2:fc:51:88: 69:08:1c:ae:be:79:9d:10:87:f9:18:c0:80:3f:ac:83:80:3b: 7a:15:f4:d9:fe:8f:f1:b4:b1:b7:23:70:3c:e7:80:5b:69:ae: c0:c6:73:e5:4d:b7:74:15:bb:25:d5:5a:9b:b1:ea:e0:8f:40: 41:79:3e:f1:61:03:23:f1:43:34:86:c0:a6:73:56:c2:42:b2: ae:2e:a5:11:17:e3:f5:5f:62:ca:1a:4f:b7:56:b4:b5:11:7d: 9b:84:e3:ab:71:b2:fb:8d:31:5b:82:59:a9:0f:fb:74:9e:ec: 27:d6:cf:d0:41:53:9d:31:7b:fa:9e:2b:11:a6:2b:c6:2b:a9: 07:21:b3:20:61:c2:73:1c:83:1f:73:ca:ed:19:10:6f:78:20: b9:0e:28:9e:05:90:18:bd:e5:87:db:4e:67:de:ea:46:10:52: ce:df:f7:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoNUJGMDAwMTQ3MzRBRDFCNTY1QjEwODZEMTJGRkNBQjU5 MENDQjhCQjAeFw0yNTEwMTkxMTI5MzNaFw0yNTEwMjYxMTI5MzNaMBgxFjAUBgNV BAMTDTY4ZjRjYjllLTNjNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6jTIptl/k/+XEUQ9IiGI3Z3BaCxyEmhSp3Ykx148/tftntWVjL8XxBmmLykP7 uMY/lVgRPzjEmQcgfESE3PTLLYVL75MiRxjZj3StLWdcyIIznXFzgqljTfynlX79 Bn+ryw5Bwc+jcrnu7lXZdm0iRjQJArvepK6P9qpZ0Mkt34KlFTvsVeQU+ZFj5XXz O+lBnGuvdJbi2SmQpSeE2R6uty5bIiQ2gbVdGOHBq0J8JMUREG3+sqKiVGfIlVlR sAmIVr3osVwLA+7rClCvmjYBAFOwqICKv3VKKc6XPmv81fqAjnbqqEKvmbDAxIpe RTwGk41yjYqudm73X+aUiF/ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEO9FOffJ u1ls37rq5wjtV9iETV8wHwYDVR0jBBgwFoAUW/AAFHNK0bVlsQhtEv/KtZDMuLsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzE0MDA2NjJBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV19BQUZITkswYlZsc1FodEV2X0t0WkRNdUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzE0MDA2NjJBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJW bHNRaHRFdl9LdFpETXVMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJK1f6MpUryXWLYw23wN0MplOV+/ljJoUMxeNmzdWd8l1MkgYTEmpCH1 o2Cx36b0CP7YHq1uxGOvU5NmIXK8RtTqfNR9hOrbISZ9NHJt31F16WhA5WK3ovxR iGkIHK6+eZ0Qh/kYwIA/rIOAO3oV9Nn+j/G0sbcjcDzngFtprsDGc+VNt3QVuyXV Wpux6uCPQEF5PvFhAyPxQzSGwKZzVsJCsq4upREX4/VfYsoaT7dWtLURfZuE46tx svuNMVuCWakP+3Se7CfWz9BBU50xe/qeKxGmK8YrqQchsyBhwnMcgx9zyu0ZEG94 ILkOKJ4FkBi95YfbTmfe6kYQUs7f9+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:53 2025 by rpki-client