$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: +63sjhkc4EUqbVAQCKBpizqPR0XNyqmYUUQlzNtwOKc= Subject key identifier: 8D:FA:B6:68:F1:66:6D:28:5D:AD:74:71:DD:0D:66:66:6D:F3:00:BD Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 10EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 10E3 Signing time: Mon 20 Oct 2025 17:44:42 +0000 Manifest this update: Mon 20 Oct 2025 17:44:41 +0000 Manifest next update: Mon 27 Oct 2025 17:44:41 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: LVOZowjEKa1c+4TV6H31FtNeY10cxGyUOgMUkMmaYgo=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4331 (0x10eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Oct 20 17:44:41 2025 GMT Not After : Oct 27 17:44:41 2025 GMT Subject: CN=68f67509-90e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:4f:63:7f:aa:c0:40:42:4b:86:56:2f:e8: 81:35:d1:84:15:8b:58:c2:ee:fe:49:c8:19:f7:38: 06:49:b5:f6:a6:3f:e5:ae:36:b3:34:67:8e:84:c8: ef:0a:6e:c2:d9:cf:27:15:18:d3:27:dc:ec:9e:ab: e3:13:62:98:67:7d:ef:9f:7e:7c:2f:77:4f:34:70: 3a:d7:7b:06:5c:5d:6f:24:f0:30:13:74:c4:a6:f0: ae:f8:ab:dc:33:84:de:ef:58:48:50:cf:33:cc:80: 71:42:4d:01:5c:05:40:cf:9e:6e:b8:a1:85:a7:52: 11:80:54:a5:24:75:b6:43:05:59:db:1d:25:b3:8a: 41:0e:1c:ec:1b:d8:7b:40:7f:f9:ed:d0:a1:e0:3a: fc:22:fe:9c:ac:1b:a7:28:f2:b9:8f:28:d4:cd:ce: 96:87:ca:fd:a1:cc:9f:e8:b3:01:1c:77:11:aa:c0: d9:6b:67:58:4a:6d:bf:52:f6:77:c6:c6:8b:55:c8: 2a:d1:72:53:42:61:9e:fe:e4:41:aa:31:66:7f:93: 4c:15:7b:bd:cb:39:9c:2a:43:ef:c2:27:27:55:66: 78:23:7e:f1:b9:74:02:89:27:ac:79:dd:6f:23:e7: 7f:45:bc:b5:ff:be:46:a7:16:96:0b:54:e5:45:06: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:B6:68:F1:66:6D:28:5D:AD:74:71:DD:0D:66:66:6D:F3:00:BD X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d0:ee:66:97:3f:66:12:cd:52:e1:51:fc:d9:92:02:05:89: a1:9c:d6:08:63:6a:e8:b6:ab:c3:80:9d:b0:a7:77:3a:87:68: fe:db:e8:54:0d:61:2a:79:b0:04:ec:0c:9a:04:0d:bf:ba:f1: 91:56:bf:8f:23:40:2f:54:33:db:33:fa:f4:e6:58:57:e8:e3: 02:77:fd:4e:c7:f3:93:40:e7:89:a8:5e:b3:17:88:c0:a1:fd: bc:28:7e:c0:79:98:39:bf:23:35:5a:45:87:f3:48:e1:45:08: 94:f2:d0:cb:40:a0:53:e9:48:3d:5e:3e:57:7b:0e:29:de:3a: fa:fe:c9:93:ba:be:a2:45:fd:3b:6c:7f:3e:fa:d9:14:81:34: ea:90:c2:17:ff:ab:c2:7d:44:ae:10:49:21:f8:81:b6:01:31: d7:b8:c4:6c:33:91:c2:84:13:42:a7:bd:e6:52:9a:d8:65:f0: ef:eb:3e:8a:ef:4b:a7:ec:12:2f:77:9f:a7:8c:ec:24:37:7d: 71:09:e4:de:fd:de:d1:cd:7f:21:90:a0:af:63:26:1a:90:9b: 09:4c:e3:a3:14:80:11:2e:a0:f8:2b:6f:5a:f6:a7:05:16:e6: ad:db:09:39:d0:71:1c:f5:7b:5a:a9:61:c3:fb:b2:d5:5e:63: c4:40:0b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUxMDIwMTc0NDQxWhcNMjUxMDI3MTc0NDQxWjAYMRYwFAYD VQQDEw02OGY2NzUwOS05MGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQVPY3+qwEBCS4ZWL+iBNdGEFYtYwu7+ScgZ9zgGSbX2pj/lrjazNGeOhMjv Cm7C2c8nFRjTJ9zsnqvjE2KYZ33vn358L3dPNHA613sGXF1vJPAwE3TEpvCu+Kvc M4Te71hIUM8zzIBxQk0BXAVAz55uuKGFp1IRgFSlJHW2QwVZ2x0ls4pBDhzsG9h7 QH/57dCh4Dr8Iv6crBunKPK5jyjUzc6Wh8r9ocyf6LMBHHcRqsDZa2dYSm2/UvZ3 xsaLVcgq0XJTQmGe/uRBqjFmf5NMFXu9yzmcKkPvwicnVWZ4I37xuXQCiSesed1v I+d/Rby1/75GpxaWC1TlRQZiowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI36tmjx Zm0oXa10cd0NZmZt8wC9MB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB0O5mlz9mEs1S4VH82ZICBYmhnNYIY2rotqvDgJ2wp3c6h2j+2+hU DWEqebAE7AyaBA2/uvGRVr+PI0AvVDPbM/r05lhX6OMCd/1Ox/OTQOeJqF6zF4jA of28KH7AeZg5vyM1WkWH80jhRQiU8tDLQKBT6Ug9Xj5Xew4p3jr6/smTur6iRf07 bH8++tkUgTTqkMIX/6vCfUSuEEkh+IG2ATHXuMRsM5HChBNCp73mUprYZfDv6z6K 70un7BIvd5+njOwkN31xCeTe/d7RzX8hkKCvYyYakJsJTOOjFIARLqD4K29a9qcF Fuat2wk50HEc9XtaqWHD+7LVXmPEQAvB -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:56 2025 by rpki-client