$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json) Hash identifier: aOXftIl6YASuxxCHRbt6JK3a5dIqFqwXvwJII6ZF8+M= Subject key identifier: 33:85:58:70:9D:06:77:F1:78:A1:C7:D8:6C:CA:77:4A:A7:5D:92:DA Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft Manifest number: DC Signing time: Sun 19 Oct 2025 08:35:54 +0000 Manifest this update: Sun 19 Oct 2025 08:35:54 +0000 Manifest next update: Sun 26 Oct 2025 08:35:54 +0000 Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: 2OMAcAp0Hp6Lwdq+nIE3Q+Lv/RQJEJhlhkZYTG5GtRw=) 2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 9QvR+q9usp35MPBZykna9F1NepFSoFk8M5dJdWZQYbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: Oct 19 08:35:54 2025 GMT Not After : Oct 26 08:35:54 2025 GMT Subject: CN=68f4a2ea-5202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:0f:3e:79:bc:e2:03:a3:7d:26:8d:16:60: b2:1b:9e:51:c9:8e:dc:94:26:96:65:11:5a:ae:77: f2:34:47:c1:23:c5:99:2f:1d:3d:98:b9:a8:36:33: 58:2c:f3:32:61:04:c3:c7:da:e0:3a:62:1b:00:1c: 63:c1:d0:1f:e7:a8:9d:b2:24:f3:11:08:41:27:1f: 94:eb:44:db:9d:b9:27:c4:cb:56:e3:b6:4a:00:06: 13:51:f2:c9:a4:fd:1f:ca:b9:96:3e:35:54:33:c4: ba:69:2b:c4:77:54:f3:88:33:89:b7:f6:9b:5d:14: 2f:7e:06:db:d3:89:32:cb:d6:a9:a0:b6:aa:23:c2: 72:6e:06:31:90:d2:3e:0b:d1:9b:03:fb:e3:3b:74: 51:83:f2:c8:3a:ab:62:be:8b:3b:9c:f7:09:bf:0f: 6b:b1:5d:1a:8c:e1:6c:08:ff:db:b4:cf:f4:dd:be: 02:bd:79:42:2e:ec:b7:57:66:77:d5:cc:d5:f1:15: df:e1:31:08:0f:ca:04:3c:75:9f:71:d2:ad:75:c8: 91:94:90:e6:23:ce:ca:d0:e2:63:86:9f:df:58:f1: 92:62:87:3f:ae:9b:3a:dc:a7:ef:b0:44:0d:c6:73: 3b:33:58:0e:ca:53:a3:1e:bb:a7:77:dc:e9:6d:43: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:58:70:9D:06:77:F1:78:A1:C7:D8:6C:CA:77:4A:A7:5D:92:DA X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:69:24:98:1d:97:83:47:7c:7e:81:d6:0f:d0:f7:c7:03:fc: 8a:d0:87:31:54:4f:2e:e6:7a:69:42:72:e9:26:22:07:a3:e0: d3:e6:2b:a2:bf:83:6b:e3:6c:b7:cf:ce:28:0d:d4:72:1f:81: 99:ac:d2:ed:59:15:3f:9e:89:28:64:25:22:ee:d1:27:7b:f4: 7d:ba:db:db:9b:1b:bb:b9:25:66:cb:84:da:39:02:b6:31:3a: 73:54:c3:a3:b0:10:3d:6e:1a:0d:e3:31:fa:3b:de:c2:31:ce: 4d:68:e9:d1:37:75:39:ad:8b:10:18:92:9c:69:44:06:fb:96: de:b8:6f:3c:f6:30:e8:83:6e:c6:ad:d6:88:08:a2:38:82:69: 6a:6b:5b:b3:f1:18:45:0e:27:3d:85:62:76:93:4e:00:9d:2e: 17:e5:1d:d7:29:0c:84:5c:1c:b2:d1:fa:5a:d9:92:4e:9b:cf: 8f:d8:e8:e9:3d:39:08:a9:e2:d4:6c:75:88:63:70:81:e1:23: 7a:26:7b:67:4f:ef:e8:7a:4a:02:eb:0a:55:38:fe:55:45:d0: 5e:36:97:b2:4c:83:a9:ed:6b:d8:9a:37:28:19:8c:4c:64:cb: 34:c5:8f:d7:0a:ae:c9:d6:54:66:bb:c4:4e:8c:49:b5:45:db: 95:0e:38:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEMwREQyQzU1ODU3QTkyRkZFN0NEQ0JBMjk0OTk4M0Q0 OEE0MkI5RDgwHhcNMjUxMDE5MDgzNTU0WhcNMjUxMDI2MDgzNTU0WjAYMRYwFAYD VQQDEw02OGY0YTJlYS01MjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcoPPnm84gOjfSaNFmCyG55RyY7clCaWZRFarnfyNEfBI8WZLx09mLmoNjNY LPMyYQTDx9rgOmIbABxjwdAf56idsiTzEQhBJx+U60TbnbknxMtW47ZKAAYTUfLJ pP0fyrmWPjVUM8S6aSvEd1TziDOJt/abXRQvfgbb04kyy9apoLaqI8JybgYxkNI+ C9GbA/vjO3RRg/LIOqtivos7nPcJvw9rsV0ajOFsCP/btM/03b4CvXlCLuy3V2Z3 1czV8RXf4TEID8oEPHWfcdKtdciRlJDmI87K0OJjhp/fWPGSYoc/rps63KfvsEQN xnM7M1gOylOjHrund9zpbUMnBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOFWHCd BnfxeKHH2GzKd0qnXZLaMB8GA1UdIwQYMBaAFMDdLFWFepL/583LopSZg9SKQrnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85NDEwNEI0QTVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2X256Y3VpbEptRDFJcEN1 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3VkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85NDEwNEI0QTVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2 X256Y3VpbEptRDFJcEN1ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3aSSYHZeDR3x+gdYP0PfHA/yK0IcxVE8u5nppQnLpJiIHo+DT5iui v4Nr42y3z84oDdRyH4GZrNLtWRU/nokoZCUi7tEne/R9utvbmxu7uSVmy4TaOQK2 MTpzVMOjsBA9bhoN4zH6O97CMc5NaOnRN3U5rYsQGJKcaUQG+5beuG889jDog27G rdaICKI4gmlqa1uz8RhFDic9hWJ2k04AnS4X5R3XKQyEXByy0fpa2ZJOm8+P2Ojp PTkIqeLUbHWIY3CB4SN6JntnT+/oekoC6wpVOP5VRdBeNpeyTIOp7WvYmjcoGYxM ZMs0xY/XCq7J1lRmu8ROjEm1RduVDjgD -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:19 2025 by rpki-client