$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: CPXXPs4OPNZLd73UymAnARDw5X4avn1g+mBZJAIbHHY= Subject key identifier: 75:67:2A:CF:B2:D3:BA:5A:7F:A2:DF:45:5D:A1:BB:26:18:90:18:73 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0C94 Signing time: Sat 18 Oct 2025 19:02:54 +0000 Manifest this update: Sat 18 Oct 2025 19:02:53 +0000 Manifest next update: Sat 25 Oct 2025 19:02:53 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: o/CskwBEnbzqjcVvHE24nQpQrLz3U9+4sqEtcALi+1o=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: TFFXR7HvdoBBfkYQcKZFG8C4IZWcW3CzAFgZ6vyFYeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Oct 18 19:02:53 2025 GMT Not After : Oct 25 19:02:53 2025 GMT Subject: CN=68f3e45e-3301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:ee:3b:15:c8:d8:3e:93:fe:14:79:dd:b0: ad:7f:bf:81:ed:c0:76:45:26:21:4d:41:03:ac:a5: 69:77:32:75:73:9e:5a:91:c7:28:22:52:27:d7:23: 2a:42:a7:b4:1e:a0:cb:55:d8:fb:d0:7f:bb:0d:ac: e1:64:da:18:50:b0:f6:55:c9:44:35:e6:0d:af:73: fb:2b:36:f4:83:3a:a1:f0:e4:69:c7:ff:33:2c:b3: 42:c2:40:d7:11:c1:ae:81:8b:8b:ef:d4:3f:98:08: e8:d3:9f:fe:ca:db:5e:92:8c:0f:0a:94:38:84:e5: 1c:af:d2:a4:78:bd:54:d0:09:e7:c4:00:2a:b1:0d: ba:b6:c6:bb:ca:bb:43:b1:ad:ea:0f:d2:80:16:1d: bd:76:79:f5:92:69:5a:14:15:2f:fe:b5:06:dc:66: a8:9d:85:30:6d:62:e4:94:21:d0:01:27:1a:4a:16: d0:77:ca:33:75:a3:e9:22:08:0b:06:1e:d7:7e:51: 63:66:89:33:ad:9c:8e:01:f4:49:57:8f:cc:7f:36: e5:63:58:27:b9:e9:41:1b:da:4e:3d:cd:df:e0:eb: 8e:3a:5f:52:da:1f:e5:62:2e:30:ed:c4:07:d1:a1: 06:e8:d9:b3:80:3f:d3:56:64:db:a5:23:6d:5a:9c: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:67:2A:CF:B2:D3:BA:5A:7F:A2:DF:45:5D:A1:BB:26:18:90:18:73 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:7f:e0:27:25:33:e9:7f:ea:47:5e:49:4c:a3:cc:7a:53: bd:73:5d:f5:13:c7:0e:16:cf:6b:f8:7d:de:20:3f:91:88:43: af:38:5a:6f:1b:a4:bb:78:a7:56:77:d6:1b:4b:23:d1:6d:34: 77:ce:1b:85:e4:ef:89:b7:53:a9:49:5f:06:08:63:0d:d0:e6: 5f:a0:23:c9:60:b2:17:25:1b:64:39:0f:6c:f1:12:15:7f:1b: 71:28:51:6f:0e:5d:02:7e:70:75:74:de:9e:f0:6b:c8:13:c5: 0f:c7:dc:26:5f:4a:27:9c:27:0c:49:91:61:65:5f:32:38:91: 3d:da:4b:5d:59:b0:9d:3a:cd:c9:70:f1:50:c6:ec:2a:f4:fb: 14:1d:fe:ef:e3:26:0c:10:59:00:b5:d4:d8:02:f6:53:05:21: 7f:d1:27:b4:a4:9a:6f:c5:72:06:b7:00:78:71:c7:34:e6:20: 7e:89:72:85:ae:7b:22:9a:7f:19:c6:7e:b4:f9:ec:ba:28:0d: 68:3a:74:b3:88:ec:53:10:f3:a7:9e:71:b4:a4:c9:c5:78:c3: c4:93:92:df:c2:ca:1b:57:86:c0:98:9f:e3:05:b3:2d:a0:96: e6:1f:5f:88:f9:67:3a:30:98:1f:bf:4a:bf:2d:30:aa:45:9d: d0:94:de:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUxMDE4MTkwMjUzWhcNMjUxMDI1MTkwMjUzWjAYMRYwFAYD VQQDEw02OGYzZTQ1ZS0zMzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp7uOxXI2D6T/hR53bCtf7+B7cB2RSYhTUEDrKVpdzJ1c55akccoIlIn1yMq Qqe0HqDLVdj70H+7DazhZNoYULD2VclENeYNr3P7Kzb0gzqh8ORpx/8zLLNCwkDX EcGugYuL79Q/mAjo05/+yttekowPCpQ4hOUcr9KkeL1U0AnnxAAqsQ26tsa7yrtD sa3qD9KAFh29dnn1kmlaFBUv/rUG3GaonYUwbWLklCHQAScaShbQd8ozdaPpIggL Bh7XflFjZokzrZyOAfRJV4/MfzblY1gnuelBG9pOPc3f4OuOOl9S2h/lYi4w7cQH 0aEG6NmzgD/TVmTbpSNtWpxSpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVnKs+y 07paf6LfRV2huyYYkBhzMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnD3/gJyUz6X/qR15JTKPMelO9c131E8cOFs9r+H3eID+RiEOvOFpv G6S7eKdWd9YbSyPRbTR3zhuF5O+Jt1OpSV8GCGMN0OZfoCPJYLIXJRtkOQ9s8RIV fxtxKFFvDl0CfnB1dN6e8GvIE8UPx9wmX0onnCcMSZFhZV8yOJE92ktdWbCdOs3J cPFQxuwq9PsUHf7v4yYMEFkAtdTYAvZTBSF/0Se0pJpvxXIGtwB4ccc05iB+iXKF rnsimn8Zxn60+ey6KA1oOnSziOxTEPOnnnG0pMnFeMPEk5LfwsobV4bAmJ/jBbMt oJbmH1+I+Wc6MJgfv0q/LTCqRZ3QlN6P -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:08 2025 by rpki-client