$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft File: CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json) Hash identifier: EB0RAOzci5UgJ7BA41xEFW2j/fezPwd2JxgB/YqerdI= Subject key identifier: 2C:24:C8:E8:0F:75:1B:B3:AD:3E:AA:38:D0:06:34:4F:C5:50:85:FE Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 Certificate issuer: /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft Manifest number: 08 Signing time: Sun 19 Oct 2025 11:39:23 +0000 Manifest this update: Sun 19 Oct 2025 11:39:22 +0000 Manifest next update: Sun 26 Oct 2025 11:39:22 +0000 Files and hashes: 1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: jUrlM/bk8R1WDm3N3ueBzrFoJrJppkOIEL/43sxEIIc=) 2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: Ff+TM86OU28LuAjmuMsbEF6hmH/6fMci4W3OBvaxsAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Validity Not Before: Oct 19 11:39:22 2025 GMT Not After : Oct 26 11:39:22 2025 GMT Subject: CN=68f4cdeb-feb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:b7:85:e5:f5:57:9e:9d:10:b0:09:fa:43: 03:39:93:80:d6:ee:86:9c:c9:25:4e:10:e7:1d:76: 17:f4:29:d7:2e:cf:43:01:3a:e4:f0:9e:60:5d:71: fb:f2:a0:98:cb:1e:6e:d2:d7:44:84:93:09:a8:8f: 27:ea:f8:48:5f:84:3c:5f:87:a2:f8:c1:17:c1:20: bf:47:c7:3d:32:af:8a:ac:72:df:2c:95:95:00:78: 15:9a:85:cf:45:81:37:a4:cd:da:6b:7e:b2:0d:42: 32:ef:20:b1:c2:8f:25:29:52:3c:14:18:69:a4:81: 46:fb:c0:d8:94:13:6f:2b:c8:f1:d0:3d:f1:9d:91: cd:03:66:f4:b7:6f:54:f6:dd:d5:82:85:e0:73:1b: 38:f3:ea:79:16:7e:ef:80:1f:af:a8:3e:45:83:9b: 54:06:20:04:dc:7c:e2:e8:54:e1:ca:6e:1c:a6:54: b7:19:e7:8b:b3:87:87:4e:76:ab:cc:21:7b:d8:d5: 40:e5:83:26:1f:6d:3b:e8:6d:17:54:ac:1c:13:19: 05:8a:44:e6:d6:3c:31:46:d9:5f:71:9d:79:81:da: 02:7a:73:c2:cd:b7:d7:11:22:68:3d:01:4a:4b:f7: de:13:c1:b6:9e:4d:f4:c6:d7:18:b9:19:5d:a2:03: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:24:C8:E8:0F:75:1B:B3:AD:3E:AA:38:D0:06:34:4F:C5:50:85:FE X509v3 Authority Key Identifier: keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:cf:07:2b:c6:18:2e:48:35:ba:e5:35:2d:30:bf:55:cc:d5: 4a:ac:71:3c:45:9b:d2:ed:03:04:0a:7b:2c:4c:a8:9c:d1:f2: 3d:40:ee:35:a0:a3:54:25:1b:de:61:26:c4:16:72:bd:87:40: 71:af:44:9b:a7:6b:95:e9:31:6d:2a:aa:f1:80:41:a8:a0:ab: 42:3f:c1:78:e6:2a:2e:98:84:6b:dc:d4:35:bd:61:a9:05:13: e9:92:c6:75:ec:4e:f3:56:06:df:79:44:d6:4e:09:69:29:55: 74:71:08:3c:fb:c3:b8:fb:dc:0b:97:19:92:06:63:10:7e:3c: 7f:da:94:7d:4c:36:a1:23:be:20:54:2c:41:69:6b:e0:69:49: fd:29:97:ff:81:78:29:7c:52:47:61:2a:12:16:9e:fb:a1:24: f4:2c:15:5b:9f:4e:f2:d4:db:07:9b:f3:cb:2e:dd:15:cb:59: 40:12:ab:33:83:f8:9a:11:12:77:8b:24:96:43:57:9f:6c:f6: b1:77:b6:bd:d7:05:e0:1b:aa:d3:1b:e6:6c:cc:0a:0a:16:90: 53:88:5a:93:75:9b:69:e9:d1:26:6e:28:52:83:c1:99:1e:88: 06:79:b2:d8:d8:8d:18:c7:ab:7c:87:b2:d2:31:dd:58:bc:19: 30:11:e7:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0NCMTExMC8GA1UEBRMoMDk2OENERUI2NDZDQjZBQUJDMEY0MjMyQ0UyM0IxRENF NTRDQUQyMDAeFw0yNTEwMTkxMTM5MjJaFw0yNTEwMjYxMTM5MjJaMBgxFjAUBgNV BAMTDTY4ZjRjZGViLWZlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDENreF5fVXnp0QsAn6QwM5k4DW7oacySVOEOcddhf0Kdcuz0MBOuTwnmBdcfvy oJjLHm7S10SEkwmojyfq+EhfhDxfh6L4wRfBIL9Hxz0yr4qsct8slZUAeBWahc9F gTekzdprfrINQjLvILHCjyUpUjwUGGmkgUb7wNiUE28ryPHQPfGdkc0DZvS3b1T2 3dWCheBzGzjz6nkWfu+AH6+oPkWDm1QGIATcfOLoVOHKbhymVLcZ54uzh4dOdqvM IXvY1UDlgyYfbTvobRdUrBwTGQWKRObWPDFG2V9xnXmB2gJ6c8LNt9cRImg9AUpL 994TwbaeTfTG1xi5GV2iA4DvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULCTI6A91 G7OtPqo40AY0T8VQhf4wHwYDVR0jBBgwFoAUCWjN62Rstqq8D0IyziOx3OVMrSAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3Q0IxLzFDODk0MEE2QTRE NzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFxOEQwSXl6aU94M09WTXJT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1dqTjYyUnN0cXE4RDBJeXppT3gzT1ZNclNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 Q0IxLzFDODk0MEE2QTRENzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFx OEQwSXl6aU94M09WTXJTQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMLPByvGGC5INbrlNS0wv1XM1UqscTxFm9LtAwQKeyxMqJzR8j1A7jWg o1QlG95hJsQWcr2HQHGvRJuna5XpMW0qqvGAQaigq0I/wXjmKi6YhGvc1DW9YakF E+mSxnXsTvNWBt95RNZOCWkpVXRxCDz7w7j73AuXGZIGYxB+PH/alH1MNqEjviBU LEFpa+BpSf0pl/+BeCl8UkdhKhIWnvuhJPQsFVufTvLU2web88su3RXLWUASqzOD +JoREneLJJZDV59s9rF3tr3XBeAbqtMb5mzMCgoWkFOIWpN1m2np0SZuKFKDwZke iAZ5stjYjRjHq3yHstIx3Vi8GTAR52g= -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:23 2025 by rpki-client