$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: +RomZnwOBE/Ixb2R0Zk2u+QmvNWr5wFvAmxEUTqycYA= Subject key identifier: 66:44:EF:33:84:8B:29:22:69:58:9E:09:54:75:CE:66:63:F8:F6:D0 Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 03D9 Signing time: Sun 19 Oct 2025 02:32:10 +0000 Manifest this update: Sun 19 Oct 2025 02:32:09 +0000 Manifest next update: Sun 26 Oct 2025 02:32:09 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: fbqyisrtBtQNUs6xFZCSdAVu6bMyQz19IbhHkqII27Q=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Oct 19 02:32:09 2025 GMT Not After : Oct 26 02:32:09 2025 GMT Subject: CN=68f44daa-e9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:e9:41:11:f6:90:5e:17:fe:80:5b:32:01: e0:d1:48:38:4c:43:67:0d:84:8f:ef:8b:0b:f1:da: e5:b8:a5:64:be:07:84:70:ac:4f:90:99:d6:5e:be: 9f:22:8f:15:fc:81:a8:60:6f:08:d9:84:60:56:96: d9:27:13:61:4a:50:ad:30:a1:47:9e:a8:09:33:2e: 9d:be:41:e2:db:e4:03:bd:66:aa:2e:ae:00:87:df: a9:e0:8a:8b:58:81:85:03:d2:63:c8:71:7d:c2:b9: 53:42:45:52:8b:19:44:4c:61:6a:6f:a5:12:7a:9f: 5a:91:63:a1:0a:e5:32:c8:05:f3:f5:3c:ac:4c:fb: 39:ec:83:2b:60:ab:cb:60:a7:db:99:5e:33:87:9a: 94:44:d1:ae:91:0e:64:9c:e8:ad:43:02:0b:a4:fb: ae:33:79:04:48:aa:93:7f:66:51:c5:97:b0:2c:a7: 8e:35:a8:94:ab:ee:fa:05:51:f6:0d:83:9c:d1:ba: df:76:eb:f7:a8:09:9f:d8:e6:ac:ee:1f:7a:3b:72: 4f:0f:a0:96:4d:4f:fb:6d:82:9c:91:bc:e0:0d:9f: 45:5e:69:b4:29:1e:1f:e5:5e:76:d6:9e:30:f4:7f: e2:59:cb:8d:19:b2:43:25:1a:67:2b:e4:fa:f5:ba: e1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:44:EF:33:84:8B:29:22:69:58:9E:09:54:75:CE:66:63:F8:F6:D0 X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:6e:07:ab:04:52:bf:d9:2d:9c:ae:e5:77:6b:35:3d:f5:a3: e7:48:21:f2:5b:5d:f1:09:12:83:cc:a2:ff:71:07:7e:7e:f6: ab:d5:eb:2e:d4:10:dd:82:7c:f0:c8:1a:cf:40:87:b4:b8:d8: 6a:a5:fd:4b:6f:fe:82:25:a5:cf:31:bd:db:58:95:85:cb:bf: fc:5c:c5:15:6b:42:8f:d7:c0:09:ec:1d:6e:28:8b:e6:01:6c: 1b:e5:e0:ff:71:a1:7f:62:29:85:4f:19:85:d6:d8:3c:a3:fb: 95:2d:3b:70:c7:17:93:d1:c6:9a:42:28:3a:ad:2a:c9:c4:f6: 13:4d:7e:8d:28:75:d4:c7:92:25:8d:65:74:82:1d:02:84:ef: 54:07:03:42:aa:57:d7:54:19:8f:c4:00:ac:8b:98:10:2d:40: 46:0e:e2:90:d0:e7:ed:87:f5:05:cd:73:1f:ab:e3:6e:e8:8e: ff:87:4d:1c:df:03:1d:8a:eb:7d:cd:bd:51:31:f0:0f:4b:ad: 78:c6:b9:b0:3f:2f:41:7a:20:6b:fa:df:85:c6:f0:a1:be:0a: 72:31:2e:0e:7a:b9:41:36:53:7f:53:f7:47:45:79:5c:48:e6: fe:3f:8e:22:d4:5e:06:9a:8a:8a:b7:06:14:6a:89:09:96:7c: 3a:7e:5a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUxMDE5MDIzMjA5WhcNMjUxMDI2MDIzMjA5WjAYMRYwFAYD VQQDEw02OGY0NGRhYS1lOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/HpQRH2kF4X/oBbMgHg0Ug4TENnDYSP74sL8drluKVkvgeEcKxPkJnWXr6f Io8V/IGoYG8I2YRgVpbZJxNhSlCtMKFHnqgJMy6dvkHi2+QDvWaqLq4Ah9+p4IqL WIGFA9JjyHF9wrlTQkVSixlETGFqb6USep9akWOhCuUyyAXz9TysTPs57IMrYKvL YKfbmV4zh5qURNGukQ5knOitQwILpPuuM3kESKqTf2ZRxZewLKeONaiUq+76BVH2 DYOc0brfduv3qAmf2Oas7h96O3JPD6CWTU/7bYKckbzgDZ9FXmm0KR4f5V521p4w 9H/iWcuNGbJDJRpnK+T69brhvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZE7zOE iykiaVieCVR1zmZj+PbQMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvbgerBFK/2S2cruV3azU99aPnSCHyW13xCRKDzKL/cQd+fvar1esu 1BDdgnzwyBrPQIe0uNhqpf1Lb/6CJaXPMb3bWJWFy7/8XMUVa0KP18AJ7B1uKIvm AWwb5eD/caF/YimFTxmF1tg8o/uVLTtwxxeT0caaQig6rSrJxPYTTX6NKHXUx5Il jWV0gh0ChO9UBwNCqlfXVBmPxACsi5gQLUBGDuKQ0Ofth/UFzXMfq+Nu6I7/h00c 3wMdiut9zb1RMfAPS614xrmwPy9BeiBr+t+FxvChvgpyMS4OerlBNlN/U/dHRXlc SOb+P44i1F4GmoqKtwYUaokJlnw6floi -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:01 2025 by rpki-client