$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft File: k-Wm1UXgDFaegN4yLrINV1d1BXU.mft (raw, json) Hash identifier: 3Y7MzV4DOOBjK411qWPpA9zchVd3JAjCB6uQPi+Qqz4= Subject key identifier: 62:26:35:F5:F0:FF:95:44:77:1E:E3:6C:8A:B4:29:D2:32:1D:24:F5 Authority key identifier: 93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75 Certificate issuer: /CN=A9171A47/serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft Manifest number: 13 Signing time: Sun 19 Oct 2025 11:36:26 +0000 Manifest this update: Sun 19 Oct 2025 11:36:26 +0000 Manifest next update: Sun 26 Oct 2025 11:36:25 +0000 Files and hashes: 1: k-Wm1UXgDFaegN4yLrINV1d1BXU.crl (hash: PSWmPYR3T6SXdVH0ddTWMeEoFL5Hroh6ZG2rMYDqiHg=) 2: 1805E4389DE011F0B44FDA76C4F9AE02.roa (hash: BVg645b1ajGzj9xavjn4EeQ2fjsg53CBWQRexvbeM1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A47, serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575 Validity Not Before: Oct 19 11:36:26 2025 GMT Not After : Oct 26 11:36:25 2025 GMT Subject: CN=68f4cd3a-42e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f6:cc:85:20:d6:18:3f:c9:62:d9:17:4d:91: 64:45:c7:1c:20:d4:51:57:4b:6b:6e:95:55:d3:c7: 44:8a:9a:a1:35:73:9d:81:36:be:9b:3e:c4:c0:0a: 4e:82:d1:c0:a7:70:08:f7:72:9f:ac:33:f0:ee:b6: b8:de:49:8e:cb:11:49:fb:b1:32:35:b6:f2:45:c1: e9:9a:17:45:80:4a:86:d7:a5:8b:44:f7:92:7c:e3: 79:38:7d:8e:0d:20:e9:ee:07:f3:56:12:a9:7b:aa: d5:74:e1:e7:8d:ab:1c:83:72:e4:d7:d3:56:33:5e: 0c:94:51:47:e9:19:d6:fa:0d:88:2c:ba:b8:96:2f: be:b6:ce:e3:bc:24:b0:1d:53:79:15:5d:b2:40:c7: 56:78:6d:1a:b9:2c:38:42:79:8c:eb:d2:6d:be:82: e2:a5:7e:cf:36:e3:d6:68:b4:9b:e9:9a:39:3d:2a: 9e:30:f7:b4:5c:d9:b6:46:ff:d7:f3:b0:a2:b1:ee: 1d:dc:aa:5f:94:e4:61:4d:d7:6e:fa:39:21:66:da: 50:f3:64:fa:b6:d5:db:24:c5:a4:59:b9:70:84:b6: 43:d4:e4:63:7d:74:3e:db:f6:45:dc:dd:3a:a5:bc: 82:27:75:78:dd:e8:23:d0:46:51:aa:04:bd:a8:de: de:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:26:35:F5:F0:FF:95:44:77:1E:E3:6C:8A:B4:29:D2:32:1D:24:F5 X509v3 Authority Key Identifier: keyid:93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d5:35:63:07:dc:7f:2a:8e:8d:05:44:66:e9:95:9b:91:56: d3:d2:05:03:2e:62:fd:32:77:28:2c:a2:8c:94:92:a5:af:4a: de:ad:6d:31:dc:54:c9:82:52:8b:a7:db:06:c0:a8:6c:e8:e6: 03:56:ff:9a:61:6b:6e:5c:85:fb:63:06:7b:ce:19:77:f1:c6: 75:a7:2d:09:da:fe:ee:0a:cb:df:fb:60:a5:60:3a:cc:68:53: 92:92:ac:27:0b:2e:9e:b5:b4:1b:6b:7f:65:e5:77:40:e6:3f: 8b:cf:00:53:43:6e:16:ac:43:39:13:65:5e:d7:c9:41:44:fd: 38:aa:cb:3c:89:0c:3f:9e:f8:27:d8:e1:a0:9f:70:dc:e7:91: 3f:4d:bf:be:9a:ea:0a:7f:d8:ba:3a:5f:9f:1b:75:cb:84:c7: f8:44:62:3d:90:92:73:49:41:02:7c:02:e6:63:6c:69:14:be: 44:44:41:48:b6:75:6a:65:91:c9:dc:40:41:b3:62:04:04:7e: 92:3e:cd:86:28:54:1b:ac:87:6f:01:53:8f:d3:32:18:a2:9c: 19:79:0d:13:ba:8e:9d:c4:91:e2:cf:3f:d2:6b:1a:d5:e5:7a: 8d:02:69:9e:57:59:a7:59:71:e3:e0:cf:b1:b6:3c:a3:b5:c3: c0:8c:5c:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUE0NzExMC8GA1UEBRMoOTNFNUE2RDU0NUUwMEM1NjlFODBERTMyMkVCMjBENTc1 Nzc1MDU3NTAeFw0yNTEwMTkxMTM2MjZaFw0yNTEwMjYxMTM2MjVaMBgxFjAUBgNV BAMTDTY4ZjRjZDNhLTQyZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf9syFINYYP8li2RdNkWRFxxwg1FFXS2tulVXTx0SKmqE1c52BNr6bPsTACk6C 0cCncAj3cp+sM/DutrjeSY7LEUn7sTI1tvJFwemaF0WASobXpYtE95J843k4fY4N IOnuB/NWEql7qtV04eeNqxyDcuTX01YzXgyUUUfpGdb6DYgsuriWL762zuO8JLAd U3kVXbJAx1Z4bRq5LDhCeYzr0m2+guKlfs8249ZotJvpmjk9Kp4w97Rc2bZG/9fz sKKx7h3cql+U5GFN1276OSFm2lDzZPq21dskxaRZuXCEtkPU5GN9dD7b9kXc3Tql vIIndXjd6CPQRlGqBL2o3t4lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYiY19fD/ lUR3HuNsirQp0jIdJPUwHwYDVR0jBBgwFoAUk+Wm1UXgDFaegN4yLrINV1d1BXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQTQ3Lzk3QzVBMDE0OURE NjExRjBBNDMxNUUwQUM0RjlBRTAyL2stV20xVVhnREZhZWdONHlMcklOVjFkMUJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvay1XbTFVWGdERmFlZ040eUxySU5WMWQxQlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QTQ3Lzk3QzVBMDE0OURENjExRjBBNDMxNUUwQUM0RjlBRTAyL2stV20xVVhnREZh ZWdONHlMcklOVjFkMUJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK7VNWMH3H8qjo0FRGbplZuRVtPSBQMuYv0ydygsooyUkqWvSt6tbTHc VMmCUoun2wbAqGzo5gNW/5pha25chftjBnvOGXfxxnWnLQna/u4Ky9/7YKVgOsxo U5KSrCcLLp61tBtrf2Xld0DmP4vPAFNDbhasQzkTZV7XyUFE/TiqyzyJDD+e+CfY 4aCfcNznkT9Nv76a6gp/2Lo6X58bdcuEx/hEYj2QknNJQQJ8AuZjbGkUvkREQUi2 dWplkcncQEGzYgQEfpI+zYYoVBush28BU4/TMhiinBl5DRO6jp3EkeLPP9JrGtXl eo0CaZ5XWadZcePgz7G2PKO1w8CMXA8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:24:24 2025 by rpki-client