$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft File: dw8omR3mSPiWHFfA3NrX1YtKafQ.mft (raw, json) Hash identifier: B/MtJuQN/Qq1uujC3j/J6LCg1S95OC21PqQjbA4zC1A= Subject key identifier: BC:75:99:01:EE:04:94:0B:0B:44:B5:95:76:F6:14:5C:71:75:58:25 Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft Manifest number: 09CD Signing time: Sat 18 Oct 2025 20:59:18 +0000 Manifest this update: Sat 18 Oct 2025 20:59:18 +0000 Manifest next update: Sat 25 Oct 2025 20:59:18 +0000 Files and hashes: 1: dw8omR3mSPiWHFfA3NrX1YtKafQ.crl (hash: CedIBNTKKouYNYXa+zI00Mjf+O4CT5xvDGSslm9qj2s=) 2: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (hash: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C, serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Validity Not Before: Oct 18 20:59:18 2025 GMT Not After : Oct 25 20:59:18 2025 GMT Subject: CN=68f3ffa6-a607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:d6:b5:dd:e1:b1:d9:0f:9b:a0:de:74:de: d1:46:69:5e:13:90:09:77:a3:59:e2:e5:1c:33:f9: 38:eb:b2:ff:a6:29:86:b1:e4:50:df:41:fc:21:9b: 4a:0d:d4:c6:8b:ea:7e:e3:f0:7b:75:78:2d:1f:2d: de:77:5f:57:ab:bd:2b:7c:c1:5a:12:01:a6:0c:5d: 68:fe:fc:07:7a:e5:30:89:67:4e:33:88:8c:1a:bb: 18:c8:1c:73:d4:67:b4:d4:70:fb:e6:b5:8a:a8:9d: bd:a7:ca:4a:c7:2f:1c:2e:ac:aa:23:29:10:4b:10: c5:71:5f:5d:8e:7b:92:d4:20:19:7e:6d:1c:01:ba: 0c:cd:c2:a7:6e:a7:a0:87:6d:7e:35:2a:2a:d1:4d: ca:89:7d:d3:a1:d5:72:50:29:df:3b:93:22:ef:27: 95:c1:f3:ce:3f:1c:ba:5e:c9:97:db:d1:21:a1:09: b5:a8:eb:e3:87:4b:26:09:2b:63:0f:82:ef:dc:c2: 9c:6c:84:90:ee:ea:70:4d:fe:1c:04:f1:8a:5b:49: 88:41:e3:d0:85:e9:36:e7:e3:64:c2:ce:ad:78:e9: fe:0d:b0:b6:f1:18:b5:9e:d6:a8:4d:4d:74:1f:f8: a9:94:d5:79:c9:ca:68:33:b3:81:e7:ca:8e:32:24: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:75:99:01:EE:04:94:0B:0B:44:B5:95:76:F6:14:5C:71:75:58:25 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d8:52:e5:ad:8b:0d:a4:6e:de:a4:c9:08:3e:64:5c:f4:ef: b6:29:d2:c9:fd:94:d6:21:54:92:bc:56:c7:4d:a1:3d:fa:94: ba:e1:df:5d:b6:e1:8d:20:a8:2b:81:8e:ad:06:c8:02:69:03: 00:91:ff:d7:43:eb:29:9b:9e:9d:80:80:fd:7c:f7:09:64:da: 0b:0d:02:18:63:0a:6d:a8:3f:42:68:69:87:9f:6b:a2:8d:00: af:cd:5d:71:9a:30:c9:ca:ce:5d:f5:ca:c9:dc:80:fe:7b:48: 7d:f2:dc:3a:e3:58:b6:ac:27:8f:6d:39:26:fa:88:95:b9:80: a1:96:bd:89:db:71:ab:16:df:45:49:d1:87:2f:a7:bc:53:b8: 4a:a5:0d:b0:aa:2f:d1:57:4e:3b:58:ce:b4:c8:ad:40:f7:be: 16:01:8e:1a:86:ad:58:3b:74:2b:e2:37:90:4f:9b:46:66:f9: 1b:a2:48:e7:68:1d:e8:bc:83:73:f7:a3:1a:7c:b5:9c:4e:d9: f1:b8:35:8b:ef:60:de:17:38:6c:6b:76:1f:2e:bb:52:73:c8: 7d:57:a1:45:db:7c:9d:34:87:f5:17:c6:b6:6c:cd:a3:31:6f: f2:3f:59:48:c6:52:b5:25:fc:4e:b3:5d:0d:7a:c8:5b:88:8a: 27:ee:61:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUxMDE4MjA1OTE4WhcNMjUxMDI1MjA1OTE4WjAYMRYwFAYD VQQDEw02OGYzZmZhNi1hNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hTWtd3hsdkPm6DedN7RRmleE5AJd6NZ4uUcM/k467L/pimGseRQ30H8IZtK DdTGi+p+4/B7dXgtHy3ed19Xq70rfMFaEgGmDF1o/vwHeuUwiWdOM4iMGrsYyBxz 1Ge01HD75rWKqJ29p8pKxy8cLqyqIykQSxDFcV9djnuS1CAZfm0cAboMzcKnbqeg h21+NSoq0U3KiX3TodVyUCnfO5Mi7yeVwfPOPxy6XsmX29EhoQm1qOvjh0smCStj D4Lv3MKcbISQ7upwTf4cBPGKW0mIQePQhek25+Nkws6teOn+DbC28Ri1ntaoTU10 H/iplNV5ycpoM7OB58qOMiTTfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLx1mQHu BJQLC0S1lXb2FFxxdVglMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Njk5Qy9BRTk5QkM3MDhFN0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQ aVdIRmZBM05yWDFZdEthZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ2FLlrYsNpG7epMkIPmRc9O+2KdLJ/ZTWIVSSvFbHTaE9+pS64d9d tuGNIKgrgY6tBsgCaQMAkf/XQ+spm56dgID9fPcJZNoLDQIYYwptqD9CaGmHn2ui jQCvzV1xmjDJys5d9crJ3ID+e0h98tw641i2rCePbTkm+oiVuYChlr2J23GrFt9F SdGHL6e8U7hKpQ2wqi/RV047WM60yK1A974WAY4ahq1YO3Qr4jeQT5tGZvkbokjn aB3ovINz96MafLWcTtnxuDWL72DeFzhsa3YfLrtSc8h9V6FF23ydNIf1F8a2bM2j MW/yP1lIxlK1JfxOs10NeshbiIon7mH/ -----END CERTIFICATE-----Generated at Mon Oct 20 22:23:32 2025 by rpki-client