$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: dRSVKVY4SZzu8550Xs29zLzl+1OqCOXQLoYke/ezyoc= Subject key identifier: 93:33:0D:20:45:C1:B8:F5:AB:56:E6:67:90:86:39:AD:FF:0E:A9:55 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 34FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 34E1 Signing time: Sat 18 Oct 2025 14:49:50 +0000 Manifest this update: Sat 18 Oct 2025 14:49:50 +0000 Manifest next update: Sat 25 Oct 2025 14:49:50 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: bENfhoP8CcEEcVOG5fbWaPD+D5irFLv+9uHchUFVtMI=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: Z9gsewhzEhlUHszkRSNsuOY1JzZl8Vjgyk5xiyq8V24=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: iWI19VTOrnz2nGN4modDRd0Vbot3Y2khTy6hDIMLekE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13567 (0x34ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Oct 18 14:49:50 2025 GMT Not After : Oct 25 14:49:50 2025 GMT Subject: CN=68f3a90e-d931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:65:42:85:02:b3:a4:59:58:cd:db:c8:bb: 21:3a:55:78:3c:14:58:a1:f8:2b:d6:65:2d:73:b6: e9:fe:58:e3:f2:1c:1d:9c:2e:89:27:4a:e6:cd:cc: 9a:e3:70:d4:6c:ff:93:37:a0:ef:e8:03:98:d1:d2: ee:f5:36:a6:4d:0b:7a:3a:86:9d:f8:89:10:01:f5: dd:15:66:4a:28:9c:e4:90:47:8d:7b:db:86:81:67: e4:e5:9d:72:28:0b:02:9c:f3:5c:40:df:f9:76:4c: b5:7c:61:5f:35:a3:74:e3:fa:58:ff:6f:a4:ea:15: 65:4e:98:78:d0:41:fc:2f:ab:4a:ec:86:84:1d:f3: 67:66:25:31:a4:39:cb:24:76:45:4f:d9:cf:fe:47: b2:9c:7c:3f:7a:04:9f:7a:09:40:5a:f9:9e:6c:4d: 70:47:6b:94:33:e0:6b:48:2c:9b:d2:0d:d1:40:b2: 35:ed:89:59:a7:f5:0e:21:0a:03:df:49:be:e4:83: 25:9f:09:76:2b:21:6d:aa:85:e6:46:37:11:a4:d0: 60:9d:77:13:b2:1c:b2:9c:9d:ca:1c:28:33:c2:c0: 5c:86:a3:6f:d2:8a:3c:cc:1c:42:91:0e:a2:6e:b8: 00:e9:3f:5a:e1:9a:ae:41:90:8d:23:4a:a8:4b:a9: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:33:0D:20:45:C1:B8:F5:AB:56:E6:67:90:86:39:AD:FF:0E:A9:55 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ef:da:e0:66:7e:6e:0b:ff:0d:20:b6:5f:9b:c1:ae:f1:6b: c5:8a:30:b1:9b:21:ad:62:ec:94:f1:96:12:38:48:f6:cc:f0: cf:08:52:ed:f9:02:af:23:55:24:8a:95:66:4b:53:f7:bb:bd: a4:b5:8c:1b:b8:80:d4:8a:b9:5f:ea:1c:10:99:32:cd:f8:73: 10:02:71:09:39:00:9e:40:bf:ca:3c:07:d3:ca:c9:1e:a4:4c: a0:89:a1:d5:46:aa:04:49:c6:ea:b8:08:37:51:5c:9e:66:ed: c7:6e:81:f6:fb:b5:6c:f0:ce:f6:25:9a:65:61:b0:e2:66:ca: 66:eb:9a:cc:32:e8:74:e8:ff:50:54:4e:0d:a7:6b:a9:43:5d: 1e:0e:2c:98:08:6c:5a:0f:33:8d:fa:73:93:ca:d5:4e:a5:3e: b3:1b:87:24:24:10:e8:9c:df:8c:46:c3:c3:26:e1:e5:8c:26: 35:bd:05:12:65:13:6c:8b:71:b3:60:d9:68:ae:ed:78:76:dd: 7e:d3:dd:27:66:fb:f7:03:06:2f:e6:c3:40:a1:c6:39:40:46: 07:5c:f1:5e:63:63:db:8a:ea:99:1a:5a:3d:b8:cd:f8:a0:da: f9:4d:e0:24:1e:fc:f0:f5:dd:fd:2f:e6:97:72:8d:90:4d:b7: 9f:34:e0:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUxMDE4MTQ0OTUwWhcNMjUxMDI1MTQ0OTUwWjAYMRYwFAYD VQQDEw02OGYzYTkwZS1kOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgRlQoUCs6RZWM3byLshOlV4PBRYofgr1mUtc7bp/ljj8hwdnC6JJ0rmzcya 43DUbP+TN6Dv6AOY0dLu9TamTQt6Ooad+IkQAfXdFWZKKJzkkEeNe9uGgWfk5Z1y KAsCnPNcQN/5dky1fGFfNaN04/pY/2+k6hVlTph40EH8L6tK7IaEHfNnZiUxpDnL JHZFT9nP/keynHw/egSfeglAWvmebE1wR2uUM+BrSCyb0g3RQLI17YlZp/UOIQoD 30m+5IMlnwl2KyFtqoXmRjcRpNBgnXcTshyynJ3KHCgzwsBchqNv0oo8zBxCkQ6i brgA6T9a4ZquQZCNI0qoS6kFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMzDSBF wbj1q1bmZ5CGOa3/DqlVMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw79rgZn5uC/8NILZfm8Gu8WvFijCxmyGtYuyU8ZYSOEj2zPDPCFLt +QKvI1UkipVmS1P3u72ktYwbuIDUirlf6hwQmTLN+HMQAnEJOQCeQL/KPAfTyske pEygiaHVRqoEScbquAg3UVyeZu3HboH2+7Vs8M72JZplYbDiZspm65rMMuh06P9Q VE4Np2upQ10eDiyYCGxaDzON+nOTytVOpT6zG4ckJBDonN+MRsPDJuHljCY1vQUS ZRNsi3GzYNloru14dt1+090nZvv3AwYv5sNAocY5QEYHXPFeY2PbiuqZGlo9uM34 oNr5TeAkHvzw9d39L+aXco2QTbefNOBX -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:09 2025 by rpki-client