$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json) Hash identifier: dFtJKTalg9wqTEreRR4FXwmH9urkyY6dGBL4lUV8bfg= Subject key identifier: 0A:14:70:AB:EF:74:A8:94:BF:68:54:34:06:AB:85:2B:2F:37:AE:9E Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft Manifest number: 12 Signing time: Sat 18 Oct 2025 22:16:07 +0000 Manifest this update: Sat 18 Oct 2025 22:16:06 +0000 Manifest next update: Sat 25 Oct 2025 22:16:06 +0000 Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: IUtMVXup2BEc1rBCVHU6GZO0Ir5h09m7fxdAH6/dfmM=) 2: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4IjRBRyjuEdbkIY8f1/iw3KdwGSRgiR78o99r2JvTFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 18 22:16:06 2025 GMT Not After : Oct 25 22:16:06 2025 GMT Subject: CN=68f411a6-0fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:57:31:43:06:22:6c:38:37:f6:fb:07:2b: 93:5d:13:29:99:6b:d6:32:e1:b3:b1:8a:9f:7f:2b: d6:2f:7f:a7:2e:17:67:14:52:1d:22:a7:18:73:e0: 96:12:43:da:76:83:5e:d2:83:0c:f2:62:7d:01:fe: 96:71:97:7f:e8:be:94:04:f3:6c:c6:51:0c:13:51: ad:65:6a:e6:73:36:b8:35:aa:27:08:19:3b:94:fc: 68:ec:bf:66:d8:cc:f3:53:d4:4e:1b:7d:e0:15:0d: bd:5c:d4:ac:49:37:28:37:f9:79:79:89:42:51:b6: a5:af:02:99:5d:ba:a7:ff:7e:1a:ea:37:96:bf:b0: dd:0a:2c:db:f7:c8:d5:58:23:a7:06:23:27:d9:5e: 58:50:27:4c:7b:4d:0c:17:d0:85:6b:c2:37:2a:6f: 8b:ec:8a:e5:73:fb:a6:0c:9d:61:cc:98:47:0c:5e: e4:bb:cf:aa:82:6e:d8:76:2e:0f:47:50:9b:47:3a: 79:4c:7f:44:1c:4c:e5:51:79:3b:23:b1:8a:1e:ee: 62:13:7e:1f:c6:6e:1b:ff:f0:bc:d9:d7:d9:2d:c9: 77:29:a1:26:71:eb:3e:bb:90:da:11:b6:7b:f6:9b: e0:ee:04:d2:8b:1d:c3:8a:d3:ce:39:de:c5:8a:7b: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:14:70:AB:EF:74:A8:94:BF:68:54:34:06:AB:85:2B:2F:37:AE:9E X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d5:cd:d6:32:a5:7b:9a:52:cb:02:f4:8d:b1:de:0a:bc:aa: 20:b4:63:49:94:3a:0d:ed:eb:92:28:7a:c3:4b:90:c2:18:58: 9c:23:57:1c:e2:62:3e:b2:7a:0d:22:26:ee:2a:fd:7a:33:c3: 3a:8f:2f:79:83:5e:5b:ec:c4:b5:e1:b6:21:5a:d3:ec:95:b7: be:f6:2e:23:d6:1a:ce:56:52:94:69:2a:4d:55:e1:11:df:ed: 6a:bf:10:18:eb:4f:ce:15:a0:e0:34:f7:3e:cf:53:88:a3:a9: c0:a1:f1:61:b2:8a:38:8c:26:0d:3e:e6:6f:d4:c5:de:d4:6f: 68:2d:64:33:d4:cd:d5:86:e0:11:42:38:dc:e5:12:27:f2:1d: a1:c8:69:90:65:34:bc:27:1b:7c:bc:af:b8:da:ad:24:35:db: 5d:6c:d8:60:ff:99:1e:86:75:9f:c8:f5:da:85:47:cd:e7:92: 45:d8:9a:8b:98:dc:13:14:60:d2:53:3d:a1:f0:4f:5a:de:19: 78:6f:7b:53:a5:23:e8:64:ef:d5:62:6b:62:a2:12:f7:e2:5c: 40:e1:24:94:75:a9:06:2c:02:9c:44:4b:81:2e:e9:27:5e:c1: d7:10:e7:10:77:83:68:5b:97:ce:8d:59:f0:73:77:e1:3c:6a: f5:fd:0e:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTEwMTgyMjE2MDZaFw0yNTEwMjUyMjE2MDZaMBgxFjAUBgNV BAMTDTY4ZjQxMWE2LTBmYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ/lcxQwYibDg39vsHK5NdEymZa9Yy4bOxip9/K9Yvf6cuF2cUUh0ipxhz4JYS Q9p2g17SgwzyYn0B/pZxl3/ovpQE82zGUQwTUa1lauZzNrg1qicIGTuU/Gjsv2bY zPNT1E4bfeAVDb1c1KxJNyg3+Xl5iUJRtqWvAplduqf/fhrqN5a/sN0KLNv3yNVY I6cGIyfZXlhQJ0x7TQwX0IVrwjcqb4vsiuVz+6YMnWHMmEcMXuS7z6qCbth2Lg9H UJtHOnlMf0QcTOVReTsjsYoe7mITfh/Gbhv/8LzZ19ktyXcpoSZx6z67kNoRtnv2 m+DuBNKLHcOK08453sWKeyvVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUChRwq+90 qJS/aFQ0BquFKy83rp4wHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0M2MkIyOTg2OTM0MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDht MWNQbnlYNXJkRHpkcHRONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGjVzdYypXuaUssC9I2x3gq8qiC0Y0mUOg3t65IoesNLkMIYWJwjVxzi Yj6yeg0iJu4q/XozwzqPL3mDXlvsxLXhtiFa0+yVt772LiPWGs5WUpRpKk1V4RHf 7Wq/EBjrT84VoOA09z7PU4ijqcCh8WGyijiMJg0+5m/Uxd7Ub2gtZDPUzdWG4BFC ONzlEifyHaHIaZBlNLwnG3y8r7jarSQ1211s2GD/mR6GdZ/I9dqFR83nkkXYmouY 3BMUYNJTPaHwT1reGXhve1OlI+hk79Via2KiEvfiXEDhJJR1qQYsApxES4Eu6Sde wdcQ5xB3g2hbl86NWfBzd+E8avX9DsA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:23 2025 by rpki-client