$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: 1eduvKKaVkrxbzVT4S56mTuX22ITYJgzzJczevVniMQ= Subject key identifier: 9A:0A:C8:D6:12:28:D2:73:60:8D:75:F0:07:86:B0:5F:AE:26:2C:C6 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0C8C Signing time: Sat 18 Oct 2025 19:03:58 +0000 Manifest this update: Sat 18 Oct 2025 19:03:58 +0000 Manifest next update: Sat 25 Oct 2025 19:03:58 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: Auv7lJuhOhgfkL/bMab5/NZjtqsADWED0WLNWbl4NO4=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: nPz5etvH54CH9fTIMVloTiUDB5Qsl1I9QXbAO8u0vO8=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: yDcvIxrioePtxpeJhvFLHJCVBxiycv8OBxChNhzEutw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Oct 18 19:03:58 2025 GMT Not After : Oct 25 19:03:58 2025 GMT Subject: CN=68f3e49e-91d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bc:d2:08:3b:73:37:31:44:9a:da:65:fa:9c: d8:87:f4:e9:f0:66:64:ca:d8:97:23:34:9a:c7:18: d4:7d:c8:55:3c:08:eb:a1:f1:4a:80:cf:4c:31:d0: 7a:2f:bf:70:29:13:e4:9a:3b:a6:a8:bd:8d:15:b3: d9:f9:e2:ca:c9:f1:e7:07:1f:e0:0e:93:01:47:2d: 1d:92:5f:13:db:b2:a2:9d:da:a0:dc:4c:28:96:0a: ad:85:e3:f9:eb:50:ed:15:25:ef:97:aa:a2:a4:65: 65:22:20:3f:7c:3e:5f:4d:c4:4b:9f:09:06:70:79: 87:85:9a:37:08:a3:de:9a:db:c4:a6:df:c4:17:b6: 0a:03:01:20:e9:b7:9e:ae:eb:c5:7a:85:dc:01:6d: 2e:0a:dc:91:d7:f5:97:26:11:53:51:7d:91:64:9b: f4:b0:48:16:89:76:bb:31:c3:3e:b2:07:02:6c:ae: 7f:5b:9c:a2:91:ed:72:5d:d5:cc:cd:a9:03:f6:da: 5e:2c:84:bc:61:33:c9:0c:f2:69:5a:96:40:a1:99: e6:86:bf:fd:73:48:7c:41:21:b1:10:8d:6d:e0:51: 65:08:1f:1c:fc:dd:a4:0f:4e:96:0f:56:87:38:92: 38:c1:d8:8c:cb:43:3b:c7:a0:16:38:99:42:76:8f: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0A:C8:D6:12:28:D2:73:60:8D:75:F0:07:86:B0:5F:AE:26:2C:C6 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a0:91:fb:77:6e:8b:3a:28:e2:04:c0:ea:88:4c:dd:38:b4: 22:f3:18:ab:5c:e1:0e:37:21:46:cd:05:b7:87:e8:e1:7f:fb: 30:63:57:12:84:28:1c:93:0a:53:7f:4b:35:12:cd:9c:0e:86: da:fb:87:0d:ea:eb:b0:67:4c:5d:0d:63:9c:24:d8:69:9d:e6: 2c:06:39:3b:35:18:fb:8f:2f:19:d3:75:91:bd:a7:68:6b:7c: 3f:92:7c:54:d0:2a:d3:bf:19:37:c6:d9:e5:16:fb:dd:71:d6: 49:59:bb:b1:09:7d:79:88:8d:bd:0e:63:04:ad:0b:80:fb:0e: ca:63:69:66:42:d5:33:c8:7b:44:e0:73:a2:fd:2f:c5:d6:55: 1e:1b:17:d4:1a:1a:20:10:d9:3e:74:76:5b:c6:e9:ae:47:48: ce:cf:da:05:a0:e7:24:8f:0d:eb:44:b1:b5:e1:4f:8b:bd:0f: e1:2c:e1:da:41:e5:96:ae:b4:15:8a:98:d1:b0:ef:1e:93:16: 84:95:ce:07:a9:dc:a9:2f:45:cd:f3:4d:08:7b:c9:b1:18:91: a2:00:39:c4:79:dc:1c:9c:df:e2:d2:94:7d:86:9b:f1:6a:dd: 6e:b1:ff:10:ad:47:c9:45:ea:4a:b2:dd:ee:8b:f1:cd:de:36: d6:03:da:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjUxMDE4MTkwMzU4WhcNMjUxMDI1MTkwMzU4WjAYMRYwFAYD VQQDEw02OGYzZTQ5ZS05MWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bzSCDtzNzFEmtpl+pzYh/Tp8GZkytiXIzSaxxjUfchVPAjrofFKgM9MMdB6 L79wKRPkmjumqL2NFbPZ+eLKyfHnBx/gDpMBRy0dkl8T27Kindqg3EwolgqtheP5 61DtFSXvl6qipGVlIiA/fD5fTcRLnwkGcHmHhZo3CKPemtvEpt/EF7YKAwEg6bee ruvFeoXcAW0uCtyR1/WXJhFTUX2RZJv0sEgWiXa7McM+sgcCbK5/W5yike1yXdXM zakD9tpeLIS8YTPJDPJpWpZAoZnmhr/9c0h8QSGxEI1t4FFlCB8c/N2kD06WD1aH OJI4wdiMy0M7x6AWOJlCdo+DCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoKyNYS KNJzYI118AeGsF+uJizGMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPoJH7d26LOijiBMDqiEzdOLQi8xirXOEONyFGzQW3h+jhf/swY1cS hCgckwpTf0s1Es2cDoba+4cN6uuwZ0xdDWOcJNhpneYsBjk7NRj7jy8Z03WRvado a3w/knxU0CrTvxk3xtnlFvvdcdZJWbuxCX15iI29DmMErQuA+w7KY2lmQtUzyHtE 4HOi/S/F1lUeGxfUGhogENk+dHZbxumuR0jOz9oFoOckjw3rRLG14U+LvQ/hLOHa QeWWrrQVipjRsO8ekxaElc4HqdypL0XN800Ie8mxGJGiADnEedwcnN/i0pR9hpvx at1usf8QrUfJRepKst3ui/HN3jbWA9p7 -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:53 2025 by rpki-client