$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: EJheM4wdPe9rfph+/U1IxDqsaXuT3M009UwTIsDXA+g= Subject key identifier: 73:AA:20:F4:1B:CB:DB:1D:3D:D3:7B:DD:C2:52:23:24:00:EA:11:C6 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 1A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 1A01 Signing time: Sat 18 Oct 2025 16:43:50 +0000 Manifest this update: Sat 18 Oct 2025 16:43:49 +0000 Manifest next update: Sat 25 Oct 2025 16:43:49 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: P13V3lv3hDkZ6EuCG7z6qWGtBsBLab8uF2+IzsbNlLM=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6668 (0x1a0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Oct 18 16:43:49 2025 GMT Not After : Oct 25 16:43:49 2025 GMT Subject: CN=68f3c3c5-ee01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:47:02:89:57:c5:ab:07:6e:47:20:91:2e:2f: 4d:2e:bd:bb:d8:7d:92:cf:dc:c6:fe:7c:55:2b:a3: d2:81:10:6e:34:bd:c1:7a:73:93:a8:5c:6d:78:9a: c8:86:80:cd:72:7b:10:d5:5a:ba:1d:7d:7e:6b:96: 2a:ae:13:34:2b:79:bb:e8:3f:f6:14:c7:35:58:cc: 03:a3:e2:0e:6d:0e:6a:31:9a:db:0c:be:b8:9b:c5: c1:63:1d:00:1e:f1:8e:9f:10:12:0f:4f:75:8b:99: 17:e8:5d:98:3e:59:4c:62:37:e3:2a:f4:ac:b2:38: ce:5b:4e:3a:d1:8f:3e:ec:ec:a4:42:95:de:f9:fc: ed:cf:0a:d0:85:3f:a8:9f:24:08:f2:a3:21:97:03: 80:c5:f1:91:6e:17:b7:04:37:ee:79:08:f4:06:88: b9:ac:69:d4:08:98:da:99:0b:5a:b0:81:9c:d3:1b: 13:42:60:ff:bf:db:d0:20:11:48:ff:32:27:bd:b4: b4:01:88:55:ba:b3:35:ef:06:59:b6:36:46:8c:f9: 85:2f:18:a9:06:1f:45:b0:14:4f:97:83:03:f0:1d: fb:06:4f:14:f0:62:ea:20:de:13:ad:05:d2:f6:48: 01:f1:46:dc:5f:1d:6c:25:8b:71:58:c2:5a:ac:ed: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:20:F4:1B:CB:DB:1D:3D:D3:7B:DD:C2:52:23:24:00:EA:11:C6 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:c5:db:2b:ff:04:05:5b:40:5e:dc:26:0c:76:59:96:55:25: bd:d0:4d:b2:c8:ea:33:a9:5e:05:0a:f4:50:9e:f6:82:b2:32: dc:48:4a:82:09:fd:cd:67:ca:67:0d:23:91:9f:81:1b:9d:ae: e3:50:b1:0d:4e:a5:43:50:b7:4d:8e:42:b2:f8:8f:f8:2b:39: 09:c5:ac:d9:ee:92:ed:12:7b:fa:92:5c:36:81:dc:95:b7:3c: ab:30:a9:fe:2d:88:73:d8:c1:88:1d:4a:6f:c9:a7:9a:6c:e1: 20:df:82:31:2c:14:27:62:10:fd:78:70:ed:56:02:bc:08:f3: 98:4b:32:0a:7a:6c:d9:e0:cf:f1:11:7c:3f:d4:df:64:0c:60: 21:29:33:45:ed:4c:cd:91:31:b0:ce:9b:7d:94:4b:10:fe:e9: 1c:b9:6a:27:ed:ad:e3:11:fb:19:75:09:6f:50:f8:e8:17:64: 17:4a:3d:34:8e:f4:a6:a3:e1:ea:fa:e8:65:74:f5:cb:57:f0: 33:45:45:a1:ab:e5:d4:ed:c1:2c:cf:b2:f1:4d:08:00:c2:4d: 9f:ee:13:3e:18:76:0c:f1:5d:6b:31:bf:a1:c6:b7:f2:8c:85: 5a:f6:f9:43:60:b7:17:77:b5:83:65:5a:86:0d:b6:cc:72:d6: a3:68:5f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUxMDE4MTY0MzQ5WhcNMjUxMDI1MTY0MzQ5WjAYMRYwFAYD VQQDEw02OGYzYzNjNS1lZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60cCiVfFqwduRyCRLi9NLr272H2Sz9zG/nxVK6PSgRBuNL3BenOTqFxteJrI hoDNcnsQ1Vq6HX1+a5YqrhM0K3m76D/2FMc1WMwDo+IObQ5qMZrbDL64m8XBYx0A HvGOnxASD091i5kX6F2YPllMYjfjKvSssjjOW0460Y8+7OykQpXe+fztzwrQhT+o nyQI8qMhlwOAxfGRbhe3BDfueQj0Boi5rGnUCJjamQtasIGc0xsTQmD/v9vQIBFI /zInvbS0AYhVurM17wZZtjZGjPmFLxipBh9FsBRPl4MD8B37Bk8U8GLqIN4TrQXS 9kgB8UbcXx1sJYtxWMJarO3IIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOqIPQb y9sdPdN73cJSIyQA6hHGMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7xdsr/wQFW0Be3CYMdlmWVSW90E2yyOozqV4FCvRQnvaCsjLcSEqC Cf3NZ8pnDSORn4Ebna7jULENTqVDULdNjkKy+I/4KzkJxazZ7pLtEnv6klw2gdyV tzyrMKn+LYhz2MGIHUpvyaeabOEg34IxLBQnYhD9eHDtVgK8CPOYSzIKemzZ4M/x EXw/1N9kDGAhKTNF7UzNkTGwzpt9lEsQ/ukcuWon7a3jEfsZdQlvUPjoF2QXSj00 jvSmo+Hq+uhldPXLV/AzRUWhq+XU7cEsz7LxTQgAwk2f7hM+GHYM8V1rMb+hxrfy jIVa9vlDYLcXd7WDZVqGDbbMctajaF+Y -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:06 2025 by rpki-client