$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json) Hash identifier: oAGbvqU5xpTnJq2yAIzOQtBBYHZk4X12/oiIn3UVqOA= Subject key identifier: 4F:0A:F9:D3:5C:4A:1E:6C:F4:94:2B:40:35:D6:A4:D0:39:98:6B:12 Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Certificate serial: 34CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft Manifest number: 34CD Signing time: Sat 18 Oct 2025 15:15:23 +0000 Manifest this update: Sat 18 Oct 2025 15:15:23 +0000 Manifest next update: Sat 25 Oct 2025 15:15:23 +0000 Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: 9iijuFmzNDX9ALrr09RY1gUHVRw7GKWK84s6EIb26kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Validity Not Before: Oct 18 15:15:23 2025 GMT Not After : Oct 25 15:15:23 2025 GMT Subject: CN=68f3af0b-e985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:97:c3:3f:5e:61:3e:7f:c1:72:7b:a5:42: fe:3d:66:35:24:e0:7c:6c:56:bb:6d:08:2d:35:e9: b0:84:78:4c:05:0f:2d:12:cd:26:e7:03:7d:d5:15: 3e:c0:cb:80:70:51:20:c2:d7:16:6f:d2:0c:9d:2d: c0:ad:67:4d:b2:01:f2:17:b5:57:72:5b:40:8a:81: 50:92:67:92:fc:76:6a:12:eb:39:7f:be:20:d7:42: df:cf:43:85:04:0c:ea:4e:f0:00:a3:96:78:a2:f0: d3:33:69:eb:04:a5:0b:77:2c:77:55:f3:02:e9:8e: d7:6b:01:73:4d:c5:50:88:d3:2f:dc:6b:c5:f2:1b: 4b:2a:9c:17:21:84:93:b3:83:7f:ae:e9:60:de:ed: 49:e9:4b:44:41:df:eb:8e:6f:07:6f:da:b9:c0:5d: b3:bf:ef:b8:ec:62:06:61:fd:f2:48:d7:4c:64:c4: 73:fc:1f:1b:64:76:ca:ac:74:68:51:65:76:2c:1f: a1:62:1c:d0:73:6f:30:77:19:56:92:05:0a:ea:4a: f8:09:76:7b:5e:d4:14:9f:6e:29:41:76:f6:22:6b: f8:c3:4d:2a:b1:c0:22:03:a4:e5:ae:4c:68:96:e1: d3:d4:79:87:cf:b5:fd:e7:a8:da:58:27:97:3f:a3: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0A:F9:D3:5C:4A:1E:6C:F4:94:2B:40:35:D6:A4:D0:39:98:6B:12 X509v3 Authority Key Identifier: keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f4:11:79:3c:48:73:ec:83:b7:12:af:d3:c6:e8:34:b2:57: 88:8c:28:79:4a:a0:60:c5:05:8c:a0:84:32:78:de:fe:73:da: 20:54:01:9b:32:3f:bd:91:35:b6:ff:82:26:fd:9f:13:b9:b8: a0:07:97:52:d6:26:a6:29:46:45:48:31:bd:81:b0:69:a7:b9: 12:1d:2c:f2:13:fc:4b:96:f5:3c:1e:e5:d9:d8:42:22:a8:36: 5e:ab:89:04:67:bc:f1:68:48:ef:f7:48:93:ef:33:48:85:a1: fb:7c:66:7d:a4:38:fe:de:4c:83:f6:30:75:64:28:41:15:63: cc:6a:1c:d8:51:3f:7d:7a:43:08:77:f1:1e:5b:72:8f:6f:75: d3:6c:db:ae:11:b7:62:1c:e5:6e:d8:de:9f:63:b8:e8:75:0c: e4:fe:b4:3c:b4:77:77:2d:16:be:12:dd:1c:2f:a8:69:6e:f2: 4e:34:62:8e:33:b9:ef:2b:9c:6d:f7:bc:5f:c9:5a:09:3d:f4: be:53:38:eb:9a:72:2d:c0:3a:d2:1b:1d:d2:f6:47:38:13:04: a0:fd:cd:9b:09:09:f2:28:1b:b2:23:ed:20:ca:e7:c7:89:4d: 57:0d:39:9f:ee:ce:48:ad:66:4e:11:54:b3:85:0a:ed:5a:20: 47:07:7f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC RUMxMEMzMDkwHhcNMjUxMDE4MTUxNTIzWhcNMjUxMDI1MTUxNTIzWjAYMRYwFAYD VQQDEw02OGYzYWYwYi1lOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7SXwz9eYT5/wXJ7pUL+PWY1JOB8bFa7bQgtNemwhHhMBQ8tEs0m5wN91RU+ wMuAcFEgwtcWb9IMnS3ArWdNsgHyF7VXcltAioFQkmeS/HZqEus5f74g10Lfz0OF BAzqTvAAo5Z4ovDTM2nrBKULdyx3VfMC6Y7XawFzTcVQiNMv3GvF8htLKpwXIYST s4N/rulg3u1J6UtEQd/rjm8Hb9q5wF2zv++47GIGYf3ySNdMZMRz/B8bZHbKrHRo UWV2LB+hYhzQc28wdxlWkgUK6kr4CXZ7XtQUn24pQXb2Imv4w00qscAiA6Tlrkxo luHT1HmHz7X956jaWCeXP6M58QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8K+dNc Sh5s9JQrQDXWpNA5mGsSMB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3 d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB49BF5PEhz7IO3Eq/Txug0sleIjCh5SqBgxQWMoIQyeN7+c9ogVAGb Mj+9kTW2/4Im/Z8TubigB5dS1iamKUZFSDG9gbBpp7kSHSzyE/xLlvU8HuXZ2EIi qDZeq4kEZ7zxaEjv90iT7zNIhaH7fGZ9pDj+3kyD9jB1ZChBFWPMahzYUT99ekMI d/EeW3KPb3XTbNuuEbdiHOVu2N6fY7jodQzk/rQ8tHd3LRa+Et0cL6hpbvJONGKO M7nvK5xt97xfyVoJPfS+UzjrmnItwDrSGx3S9kc4EwSg/c2bCQnyKBuyI+0gyufH iU1XDTmf7s5IrWZOEVSzhQrtWiBHB38u -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:31 2025 by rpki-client