$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: +eDp0gF7jGvQrYpIFyvjK39/S9KvnRGp2wTMwd0cAxM= Subject key identifier: 12:4D:35:23:13:F7:21:52:D5:F8:4F:B8:F0:02:3C:F5:7D:0E:B3:70 Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 0173 Signing time: Sun 19 Oct 2025 06:31:16 +0000 Manifest this update: Sun 19 Oct 2025 06:31:15 +0000 Manifest next update: Sun 26 Oct 2025 06:31:15 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: EVyKE6hAQ7svt1HeB4FPcU6TsWxbPYK1mWj+8CR2NVw=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: S6QQQa5Sp7ukB1rfGQxAaqwrRf0T3shgxPjmjI4d6zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: Oct 19 06:31:15 2025 GMT Not After : Oct 26 06:31:15 2025 GMT Subject: CN=68f485b4-3e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:eb:9c:b0:72:0d:5b:da:9b:77:53:5f:9d: 2f:37:6f:b2:3c:1a:a2:89:26:48:17:7d:c7:44:fd: ee:b9:91:cc:5a:21:ff:f0:37:e0:d6:69:8a:2c:40: 9b:77:43:5c:f1:a8:13:9f:a8:64:dd:61:ad:f3:25: 5b:b1:58:76:ab:5e:2c:ed:95:6f:57:f5:c0:f5:3e: dd:07:d6:c3:ff:c5:15:61:bc:a6:9b:da:7b:02:6c: d6:a9:e5:0d:a9:c8:7f:88:0b:3e:16:b2:4b:0f:c1: b8:30:11:28:71:0a:f8:c4:34:73:11:a8:42:da:4e: f5:d8:65:61:01:c6:6c:e0:82:64:08:39:ea:d6:63: a6:e8:6a:f0:15:91:e5:38:c5:3a:81:1a:61:e0:6f: 91:a1:db:38:a0:f5:3d:1f:00:f1:fa:8c:a6:b7:2b: 8f:00:1d:1f:e5:51:36:d5:a2:6e:af:00:ea:1d:08: 64:f1:a0:c2:2d:47:c2:50:b2:45:7b:0e:c5:58:a0: 7a:87:a2:75:fc:82:c2:9e:dc:e3:34:f6:9b:d3:17: 68:f1:35:88:aa:1a:dd:fb:4d:1b:41:e1:9e:5b:ff: 37:36:5e:d9:d1:0f:c5:48:a2:22:ff:c3:c4:d7:68: ff:6c:37:8a:03:28:c5:e7:46:a2:e8:06:17:7d:7f: 67:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4D:35:23:13:F7:21:52:D5:F8:4F:B8:F0:02:3C:F5:7D:0E:B3:70 X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c0:b3:cf:6f:12:fb:67:65:f6:1f:08:b8:ed:6f:c5:e6:7e: f1:b6:8b:4e:0b:67:78:3c:52:5f:77:6c:ab:1c:e7:82:dc:3d: 57:5f:fd:d0:75:38:bb:8b:92:9d:62:96:47:81:b1:37:4f:a9: 1d:cc:59:2d:13:1e:04:30:fa:6f:66:b4:e7:82:c2:d9:64:e1: 6c:05:fe:88:0c:c6:34:7b:3d:ac:e8:ad:c3:bb:49:71:b2:9b: 8c:12:59:6e:0d:df:38:c0:6f:d1:77:74:5f:34:f1:19:33:7a: 69:de:fd:44:a3:ef:21:57:01:16:0d:ed:a0:6b:1e:c7:62:df: 79:f0:61:36:f8:60:31:4f:f7:40:6c:22:cf:c2:f8:6b:6e:7d: c8:31:ab:a3:81:fb:ad:9c:43:cb:98:17:79:74:74:a9:f6:92: 60:83:0f:1c:2e:98:1a:02:77:ed:67:6a:cf:bb:0c:5d:95:7e: 25:46:4a:47:a4:bb:65:b9:ba:42:22:c5:b8:1d:c7:92:4c:0e: fe:3f:0b:b9:c4:3a:a9:c8:4b:a6:1a:58:9d:55:fd:fa:2d:0d: 2b:ed:be:ef:3c:a4:50:f8:da:be:44:ef:10:5e:45:4e:17:a5: 93:16:4d:85:2b:bc:c3:12:4a:74:36:49:b2:1c:d5:43:35:8a: 27:15:30:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUxMDE5MDYzMTE1WhcNMjUxMDI2MDYzMTE1WjAYMRYwFAYD VQQDEw02OGY0ODViNC0zZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkTrnLByDVvam3dTX50vN2+yPBqiiSZIF33HRP3uuZHMWiH/8Dfg1mmKLECb d0Nc8agTn6hk3WGt8yVbsVh2q14s7ZVvV/XA9T7dB9bD/8UVYbymm9p7AmzWqeUN qch/iAs+FrJLD8G4MBEocQr4xDRzEahC2k712GVhAcZs4IJkCDnq1mOm6GrwFZHl OMU6gRph4G+Rods4oPU9HwDx+oymtyuPAB0f5VE21aJurwDqHQhk8aDCLUfCULJF ew7FWKB6h6J1/ILCntzjNPab0xdo8TWIqhrd+00bQeGeW/83Nl7Z0Q/FSKIi/8PE 12j/bDeKAyjF50ai6AYXfX9nqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJNNSMT 9yFS1fhPuPACPPV9DrNwMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpwLPPbxL7Z2X2Hwi47W/F5n7xtotOC2d4PFJfd2yrHOeC3D1XX/3Q dTi7i5KdYpZHgbE3T6kdzFktEx4EMPpvZrTngsLZZOFsBf6IDMY0ez2s6K3Du0lx spuMElluDd84wG/Rd3RfNPEZM3pp3v1Eo+8hVwEWDe2gax7HYt958GE2+GAxT/dA bCLPwvhrbn3IMaujgfutnEPLmBd5dHSp9pJggw8cLpgaAnftZ2rPuwxdlX4lRkpH pLtlubpCIsW4HceSTA7+Pwu5xDqpyEumGlidVf36LQ0r7b7vPKRQ+Nq+RO8QXkVO F6WTFk2FK7zDEkp0NkmyHNVDNYonFTBH -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:36 2025 by rpki-client