$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: 7nYFjxuIZpyHiX4qBeUfRAYFLnHsPiKIZE/6PJrg/Ls= Subject key identifier: 12:DA:10:C4:C1:CD:D4:70:44:ED:E4:50:9D:F1:18:80:18:EB:73:99 Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: 8E Signing time: Sun 19 Oct 2025 00:51:28 +0000 Manifest this update: Sun 19 Oct 2025 00:51:28 +0000 Manifest next update: Sun 26 Oct 2025 00:51:28 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: Bm6DDIKqW2vEucs9qZlwWvFq6m2mFeUfmK5aZBfvp4s=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: IwOryXN0CLNaxtv7IBy7ZDsktAOlHn3+ya1AEPZi2Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Oct 19 00:51:28 2025 GMT Not After : Oct 26 00:51:28 2025 GMT Subject: CN=68f43610-7b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:40:d8:28:a4:a0:e0:5f:3a:72:6a:4a:ee: 0e:74:5d:63:8d:c3:55:96:be:ff:52:d3:63:74:16: e6:14:21:56:ab:ef:5e:b5:02:ed:73:a7:a4:53:0f: a7:b4:58:ee:61:36:df:27:27:69:54:84:c2:9d:0e: 4b:ac:81:be:0d:33:2c:05:10:91:99:7c:d3:c6:46: 47:c3:91:9c:70:b7:41:d2:8f:1f:24:72:1d:c3:9f: 25:de:5c:85:1f:1e:31:ee:63:76:0a:56:d0:5a:c5: 2f:bb:70:b1:3a:f3:89:36:ed:0b:14:51:da:2a:3a: af:4b:9a:e9:a1:8a:79:19:b7:75:a4:9e:d7:fe:bd: ab:e3:5e:79:e7:c7:15:93:49:bd:21:61:d8:01:76: 59:04:c6:da:4f:6d:4b:b9:46:2a:5b:3d:9f:77:38: 26:94:2f:f8:6f:ae:c6:37:8a:ae:b4:35:6c:ca:b0: 27:cf:5d:79:3b:43:69:80:22:61:19:6a:aa:ca:ae: 91:8d:f8:9c:a2:04:12:bb:61:59:df:fb:c1:e5:d0: 5f:e8:35:eb:7d:42:47:c3:12:19:57:03:80:0b:2f: c8:cd:a7:a9:9e:d0:e7:d1:20:1e:99:60:b1:08:4e: 2f:65:47:34:8a:b0:d7:fc:66:ea:b3:56:4c:ad:3c: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:10:C4:C1:CD:D4:70:44:ED:E4:50:9D:F1:18:80:18:EB:73:99 X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:23:76:ed:8d:cd:8b:50:3c:ce:0f:dd:19:b7:5b:4d:0e:57: 9f:24:ac:bc:52:a5:c0:1b:e5:d6:1e:e2:46:44:e7:63:c7:43: dc:29:1a:75:b8:83:0a:00:98:4a:ad:15:a2:b4:3a:0d:e5:46: 05:1d:09:0f:e1:04:55:34:9a:01:42:68:2b:d9:2e:2e:5b:62: 94:64:7c:fa:64:e4:4f:e3:3b:69:25:98:1a:5e:e6:20:ce:4d: 09:d9:7e:8b:e6:f8:db:10:3e:c8:fe:41:b0:ad:3b:d2:a4:ff: e4:fa:8f:c7:94:27:9a:ad:dc:3c:00:8f:d1:30:1e:15:f2:41: de:12:28:7e:a2:b7:29:5b:d5:21:57:32:4f:22:8c:3d:5a:c7: b8:26:2a:df:ca:74:36:47:f9:2a:11:64:db:1f:aa:4d:40:8d: a4:1b:1c:38:04:5a:fb:0b:d4:76:e9:5d:f2:61:0e:bc:b4:da: b8:80:4b:e6:80:76:00:c9:be:08:ea:1d:d2:41:1f:83:bd:d2: 0b:95:9f:26:e6:b0:10:e3:7b:73:9c:33:e7:99:51:71:88:12: 6d:b6:87:65:3a:a4:cc:ae:c1:a1:95:af:f2:e8:74:08:55:b7: 36:4f:aa:d1:2a:3c:7a:c6:d5:e9:43:00:72:07:b4:f4:64:32: 86:ad:39:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDA4MzU4NzQ5NzhCQTMwOUVEN0RBNDY3M0U3NzM5RDkz MjJGMjYyOUIwHhcNMjUxMDE5MDA1MTI4WhcNMjUxMDI2MDA1MTI4WjAYMRYwFAYD VQQDEw02OGY0MzYxMC03YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux5A2CikoOBfOnJqSu4OdF1jjcNVlr7/UtNjdBbmFCFWq+9etQLtc6ekUw+n tFjuYTbfJydpVITCnQ5LrIG+DTMsBRCRmXzTxkZHw5GccLdB0o8fJHIdw58l3lyF Hx4x7mN2ClbQWsUvu3CxOvOJNu0LFFHaKjqvS5rpoYp5Gbd1pJ7X/r2r415558cV k0m9IWHYAXZZBMbaT21LuUYqWz2fdzgmlC/4b67GN4qutDVsyrAnz115O0NpgCJh GWqqyq6RjficogQSu2FZ3/vB5dBf6DXrfUJHwxIZVwOACy/IzaepntDn0SAemWCx CE4vZUc0irDX/Gbqs1ZMrTzjQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLaEMTB zdRwRO3kUJ3xGIAY63OZMB8GA1UdIwQYMBaAFAg1h0l4ujCe19pGc+dznZMi8mKb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi83RDJCMURGMEQ3 RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1KN1gya1p6NTNPZGt5THlZ cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi83RDJCMURGMEQ3RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1K N1gya1p6NTNPZGt5THlZcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhI3btjc2LUDzOD90Zt1tNDlefJKy8UqXAG+XWHuJGROdjx0PcKRp1 uIMKAJhKrRWitDoN5UYFHQkP4QRVNJoBQmgr2S4uW2KUZHz6ZORP4ztpJZgaXuYg zk0J2X6L5vjbED7I/kGwrTvSpP/k+o/HlCeardw8AI/RMB4V8kHeEih+orcpW9Uh VzJPIow9Wse4JirfynQ2R/kqEWTbH6pNQI2kGxw4BFr7C9R26V3yYQ68tNq4gEvm gHYAyb4I6h3SQR+DvdILlZ8m5rAQ43tznDPnmVFxiBJttodlOqTMrsGhla/y6HQI Vbc2T6rRKjx6xtXpQwByB7T0ZDKGrTm+ -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:08 2025 by rpki-client