$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json) Hash identifier: QDO904y49TtSiKkTV/QZbrXDoKpsUrDIyM9rwarblWU= Subject key identifier: 45:93:06:E9:6A:D7:B2:7B:3B:C1:23:AC:A7:89:0D:10:12:F4:03:4B Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft Manifest number: 072B Signing time: Sat 18 Oct 2025 23:10:13 +0000 Manifest this update: Sat 18 Oct 2025 23:10:12 +0000 Manifest next update: Sat 25 Oct 2025 23:10:12 +0000 Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: Zzih9Ff0sVSx/p89AvWARBQdF8UbXQnyGbDwkr8wu44=) 2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Validity Not Before: Oct 18 23:10:12 2025 GMT Not After : Oct 25 23:10:12 2025 GMT Subject: CN=68f41e54-ddc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:bc:b3:6a:b2:aa:fe:d2:54:a4:0a:3d:e1: e0:e6:48:35:d3:06:f9:74:75:d5:65:30:6c:bc:58: 2c:16:3c:7e:7b:7d:4e:08:1d:ff:4a:67:10:6f:9c: cf:64:93:3c:9a:4d:05:18:d5:87:b6:e3:a4:2e:67: 47:71:01:2a:0c:de:c7:26:53:5c:73:54:e9:b8:3a: 33:a6:b9:40:fa:93:02:87:3e:47:63:45:88:43:4c: c5:40:6e:18:b0:ab:89:06:64:20:56:7c:52:b3:97: d2:a6:7d:c8:6d:9a:cf:3c:e9:2d:36:d1:37:92:a8: 1c:b8:a3:60:71:26:7a:b1:db:4d:26:94:83:7f:36: 54:bf:ff:1e:0d:7f:71:52:3e:16:e9:d7:78:09:c3: 11:46:65:89:cd:aa:32:bb:28:09:48:71:13:a8:c2: 84:c6:ae:29:0e:6d:ef:fd:95:ef:07:d7:56:11:05: 98:5d:ff:70:48:a9:43:00:52:ca:b7:b6:60:4b:1b: f5:13:cc:bc:3d:f6:cb:52:3d:a0:ef:68:87:d3:e9: 65:76:f2:56:df:db:12:68:ec:29:7c:50:58:46:8e: 10:df:d3:8c:38:d2:e3:d8:cb:72:44:8f:3f:b1:58: 54:86:8f:a0:e4:12:e2:15:e8:07:15:44:0e:5a:08: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:93:06:E9:6A:D7:B2:7B:3B:C1:23:AC:A7:89:0D:10:12:F4:03:4B X509v3 Authority Key Identifier: keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:68:42:0f:7d:59:8f:3d:f8:46:c8:dc:9d:24:ca:1e:56:72: 71:54:33:65:f8:be:30:be:34:df:a5:ec:ff:8e:66:a7:cd:eb: 37:ba:da:02:b7:05:4b:88:92:3f:c5:12:0e:5b:8e:87:8a:b4: 0f:04:46:34:43:1a:14:22:9f:c3:c2:5d:e8:8d:6c:1c:da:2d: f1:e6:53:52:96:f4:0b:a3:ee:66:02:72:22:14:e3:d9:21:0d: f0:ec:1a:81:47:7f:7f:8a:55:6f:2f:7e:ae:34:aa:0b:89:53: 8f:a3:2c:71:c6:33:30:d9:dc:42:20:c9:ba:9f:b0:27:f2:5f: a3:a2:f4:4d:f5:2e:6d:22:e0:70:3e:7d:10:b7:be:31:35:49: dc:9e:98:b6:7e:ac:73:f7:93:9f:f6:b6:62:17:e4:de:ed:98: 74:0d:01:b6:7e:23:9a:59:0c:82:e5:52:b6:b9:71:17:f1:6f: 53:f7:74:55:08:26:8b:1c:2c:7b:42:62:29:f2:a4:4c:5a:e0: 26:a2:e4:3f:cc:c7:fd:dd:02:a5:51:0a:6d:64:4d:2a:0b:bd: de:bf:ab:58:43:e3:b7:1b:d0:ba:5f:d7:5c:6a:87:22:e2:64: 97:41:88:a2:98:b4:42:00:0d:af:bb:9f:55:68:fc:d2:f4:06: a2:57:82:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw MERDNTNBMzgwHhcNMjUxMDE4MjMxMDEyWhcNMjUxMDI1MjMxMDEyWjAYMRYwFAYD VQQDEw02OGY0MWU1NC1kZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1d68s2qyqv7SVKQKPeHg5kg10wb5dHXVZTBsvFgsFjx+e31OCB3/SmcQb5zP ZJM8mk0FGNWHtuOkLmdHcQEqDN7HJlNcc1TpuDozprlA+pMChz5HY0WIQ0zFQG4Y sKuJBmQgVnxSs5fSpn3IbZrPPOktNtE3kqgcuKNgcSZ6sdtNJpSDfzZUv/8eDX9x Uj4W6dd4CcMRRmWJzaoyuygJSHETqMKExq4pDm3v/ZXvB9dWEQWYXf9wSKlDAFLK t7ZgSxv1E8y8PfbLUj2g72iH0+lldvJW39sSaOwpfFBYRo4Q39OMONLj2MtyRI8/ sVhUho+g5BLiFegHFUQOWgh7nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWTBulq 17J7O8EjrKeJDRAS9ANLMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzZEOS82QTVGMTMyNDRGRDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFND Q0J1eHZYd1R2bDhBM0ZPamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcaEIPfVmPPfhGyNydJMoeVnJxVDNl+L4wvjTfpez/jmanzes3utoC twVLiJI/xRIOW46HirQPBEY0QxoUIp/Dwl3ojWwc2i3x5lNSlvQLo+5mAnIiFOPZ IQ3w7BqBR39/ilVvL36uNKoLiVOPoyxxxjMw2dxCIMm6n7An8l+jovRN9S5tIuBw Pn0Qt74xNUncnpi2fqxz95Of9rZiF+Te7Zh0DQG2fiOaWQyC5VK2uXEX8W9T93RV CCaLHCx7QmIp8qRMWuAmouQ/zMf93QKlUQptZE0qC73ev6tYQ+O3G9C6X9dcaoci 4mSXQYiimLRCAA2vu59VaPzS9AaiV4La -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:20 2025 by rpki-client