$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json) Hash identifier: 6O0YQwb4LwdpL35Y1061xz+3w1RkF4MLLMz1BCcmINo= Subject key identifier: 33:3D:26:DB:7D:A3:8F:0D:F6:B0:77:DD:CB:DB:2F:32:A6:EF:96:33 Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Certificate serial: 302D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft Manifest number: 3023 Signing time: Sat 18 Oct 2025 15:38:53 +0000 Manifest this update: Sat 18 Oct 2025 15:38:52 +0000 Manifest next update: Sat 25 Oct 2025 15:38:52 +0000 Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: CDxqG4kTogMPc/lrhm65/2In/oTwnIsrgu9E+R7n3MM=) 2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: LEtlM4YuHVZO4hp1ekYsLvEULMY1rw4omfHoEthYUqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12333 (0x302d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Validity Not Before: Oct 18 15:38:52 2025 GMT Not After : Oct 25 15:38:52 2025 GMT Subject: CN=68f3b48d-46db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:13:e0:de:9d:33:37:e3:34:2c:2b:67:73:38: 9b:f1:84:1f:57:9d:15:70:b9:b9:cb:b0:d5:ab:55: 6f:6f:52:25:56:6b:05:92:d2:41:8d:e5:a9:82:79: 1a:54:d3:74:44:8d:d5:22:3a:52:b1:e0:b6:c5:67: 8f:14:4e:fd:5b:8a:59:f7:ac:90:9a:ad:90:4b:31: e0:a0:8b:0a:74:f9:cf:de:fc:9f:4a:83:6d:1a:75: 92:ee:0e:a8:fb:d4:45:c2:8e:9b:9c:36:1a:bc:66: eb:77:42:5b:13:3e:97:66:44:32:9a:78:af:ce:a8: 6c:33:d9:d1:b0:80:ba:c3:da:4d:d9:86:cd:83:8d: d9:f2:95:af:83:1a:17:44:c5:d5:84:d2:7b:44:f5: 96:13:a3:a1:a5:f3:0f:97:39:93:6d:3e:e7:57:62: c8:31:9d:14:96:41:d2:54:cd:59:76:01:63:74:1e: 74:18:09:d2:2d:eb:de:5b:e5:19:84:88:f6:77:7e: 4b:34:e6:75:b0:cf:1f:cd:18:41:e0:af:bf:49:3e: 04:c1:59:c6:e9:44:f2:63:9b:33:6e:0a:cf:10:40: d6:35:08:cc:d2:d3:8f:9b:b2:f1:6a:cd:dd:d5:52: d3:78:a2:a8:05:80:35:50:62:2c:c3:8b:be:3d:10: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:26:DB:7D:A3:8F:0D:F6:B0:77:DD:CB:DB:2F:32:A6:EF:96:33 X509v3 Authority Key Identifier: keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:29:36:b7:b1:44:9e:42:1c:24:a9:54:e4:d5:f4:49:18:ad: 6a:0d:f3:0e:e9:ed:e9:e6:7d:f0:c5:ec:a3:e6:ec:5e:0e:26: a4:5b:39:67:0a:f0:a7:48:27:33:c1:52:a2:9c:de:a3:24:e6: 47:cf:de:12:26:4b:db:54:2e:66:42:81:d5:51:ed:6f:ed:ed: 80:ff:9a:c8:e4:eb:98:ea:36:59:1a:1c:40:2d:0d:02:5a:b1: 03:7c:7b:37:67:23:95:3d:fd:3a:24:ae:5a:c1:a2:dd:32:7d: 6a:a6:78:ed:b4:d7:5d:05:87:b1:a4:4a:e5:23:0c:ea:bf:55: 65:30:0b:66:79:14:57:3f:86:66:79:db:08:aa:60:1c:f4:cc: 67:7d:73:94:47:55:33:92:fb:e1:f0:43:5a:a0:8c:a8:9f:5b: d4:d2:79:0a:ec:f5:18:f0:16:e9:93:14:5d:fe:b9:a9:49:ba: 34:45:8d:2d:82:dd:1c:85:38:3d:e8:3c:7e:98:d5:cc:39:ed: 64:95:de:94:7f:1f:f1:4e:53:05:46:24:dc:7c:0b:b9:cc:ab: 96:06:49:b1:0a:34:41:0b:e6:63:9e:3b:3c:ee:be:ca:8a:b6: 24:2f:7c:a3:21:2f:4b:f4:61:9d:da:e0:df:7a:11:d2:68:23: cc:5e:ef:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG RTE1MDcyMTkwHhcNMjUxMDE4MTUzODUyWhcNMjUxMDI1MTUzODUyWjAYMRYwFAYD VQQDEw02OGYzYjQ4ZC00NmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+RPg3p0zN+M0LCtnczib8YQfV50VcLm5y7DVq1Vvb1IlVmsFktJBjeWpgnka VNN0RI3VIjpSseC2xWePFE79W4pZ96yQmq2QSzHgoIsKdPnP3vyfSoNtGnWS7g6o +9RFwo6bnDYavGbrd0JbEz6XZkQymnivzqhsM9nRsIC6w9pN2YbNg43Z8pWvgxoX RMXVhNJ7RPWWE6OhpfMPlzmTbT7nV2LIMZ0UlkHSVM1ZdgFjdB50GAnSLeveW+UZ hIj2d35LNOZ1sM8fzRhB4K+/ST4EwVnG6UTyY5szbgrPEEDWNQjM0tOPm7Lxas3d 1VLTeKKoBYA1UGIsw4u+PRDRawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM9Jtt9 o48N9rB33cvbLzKm75YzMB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz WmY5dlBpLXpOX3otRlFjaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKKTa3sUSeQhwkqVTk1fRJGK1qDfMO6e3p5n3wxeyj5uxeDiakWzln CvCnSCczwVKinN6jJOZHz94SJkvbVC5mQoHVUe1v7e2A/5rI5OuY6jZZGhxALQ0C WrEDfHs3ZyOVPf06JK5awaLdMn1qpnjttNddBYexpErlIwzqv1VlMAtmeRRXP4Zm edsIqmAc9MxnfXOUR1Uzkvvh8ENaoIyon1vU0nkK7PUY8BbpkxRd/rmpSbo0RY0t gt0chTg96Dx+mNXMOe1kld6Ufx/xTlMFRiTcfAu5zKuWBkmxCjRBC+Zjnjs87r7K irYkL3yjIS9L9GGd2uDfehHSaCPMXu8Y -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:58 2025 by rpki-client