$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft File: rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft (raw, json) Hash identifier: T9zzpE9edxHFpt9b6nFIzDYOWHdug9H5HJAvTi39jL4= Subject key identifier: 9B:B4:36:91:1A:E2:39:BD:F6:FE:E6:DE:AA:7D:23:4A:F0:A5:C4:8A Authority key identifier: AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF Certificate issuer: /CN=A91A6A74/serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft Manifest number: 0E Signing time: Sun 19 Oct 2025 11:34:35 +0000 Manifest this update: Sun 19 Oct 2025 11:34:35 +0000 Manifest next update: Sun 26 Oct 2025 11:34:34 +0000 Files and hashes: 1: rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl (hash: sgxfxZHYh4lHtCGVJWkE2UUVMIdBDyjvN/2l1iIOg1Y=) 2: 285C90D49A8911F0B2115222C4F9AE02.roa (hash: iL5Q8l5UWu94q64YaDJD+oexRS/HLLSzlzHuSDLmHTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6A74, serialNumber=AD6534839FE6A7A87760A1ED0A39C310693FB9FF Validity Not Before: Oct 19 11:34:35 2025 GMT Not After : Oct 26 11:34:34 2025 GMT Subject: CN=68f4cccb-0e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:61:d2:5a:54:aa:83:bb:ae:9d:88:e6:d8: 0f:fe:0a:b9:1e:92:52:9b:fe:8e:df:d1:43:a9:50: fe:e0:b0:25:2a:3e:38:f0:c2:0b:94:6d:2d:31:24: 76:2e:de:fa:5d:bd:8a:29:de:c9:c9:21:59:3a:d6: e1:43:7f:09:12:3d:62:67:dd:e7:0c:0d:ad:73:b1: c6:bb:10:9d:cf:47:9b:3a:0c:73:c3:4d:ac:ed:20: 86:3c:1e:cd:48:27:d2:e6:d5:55:3c:fe:4a:08:4f: 96:f0:9f:a7:55:eb:55:93:db:8d:b4:3b:1a:58:9c: 53:68:31:9e:ca:1f:cb:b2:ee:51:87:0f:bb:48:3e: 58:c9:ce:ea:7c:69:03:73:f7:43:c9:e1:e9:37:8d: 6a:8a:3c:e1:07:da:30:eb:bd:40:48:6b:2c:19:4f: a3:c0:9e:f0:03:7b:0c:24:4d:80:9e:d8:dd:ea:ab: a6:2d:bd:ca:2c:3c:ef:e6:e6:ce:fe:ec:b9:63:b3: 70:4e:86:34:3b:a3:b6:8e:62:83:a8:75:2e:b8:9f: 04:50:ba:99:32:bf:02:54:01:9a:f5:3e:15:e5:ba: 00:c2:94:f7:2a:53:e9:9e:48:54:a4:f1:43:81:d5: 4a:47:8a:ff:6c:5e:da:f8:15:0a:13:66:f2:26:fe: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:36:91:1A:E2:39:BD:F6:FE:E6:DE:AA:7D:23:4A:F0:A5:C4:8A X509v3 Authority Key Identifier: keyid:AD:65:34:83:9F:E6:A7:A8:77:60:A1:ED:0A:39:C3:10:69:3F:B9:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWU0g5_mp6h3YKHtCjnDEGk_uf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6A74/4C31FB449A8811F0A4779C10C4F9AE02/rWU0g5_mp6h3YKHtCjnDEGk_uf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:54:67:08:dd:16:4e:89:ea:b6:2c:81:dd:16:a0:f8:b5:31: 57:08:9b:49:6b:0a:49:81:f5:64:f6:af:f1:f1:e5:4e:d4:ed: e1:83:17:7c:7a:43:cc:5f:05:51:65:53:58:d9:55:03:d2:8b: 26:84:4d:32:75:4c:2c:0a:43:e5:cf:15:bd:c9:b9:95:8a:02: f8:57:b6:3f:29:1f:a0:50:00:4d:8c:36:c2:54:b0:31:d1:03: 65:1f:c8:8f:86:8b:1c:99:bd:de:59:25:20:0f:69:5d:ee:e1: cd:3b:4c:ae:e8:97:c7:e7:9b:5a:ed:a6:26:6d:ac:00:cb:43: f2:29:79:fa:88:11:d2:fc:79:cc:74:70:37:ef:4c:54:07:e3: 2b:56:5f:a7:05:e1:91:88:ac:f5:31:b6:17:31:f1:3b:99:ea: e5:c5:f3:14:d2:15:85:f6:7d:18:fb:38:c7:24:1a:b7:a6:3a: 3d:5a:d9:15:4f:7f:54:77:62:e6:68:9a:23:40:b4:1b:6d:ea: 05:b3:a1:2b:06:f9:8e:d1:80:53:57:f9:c0:8c:2a:1a:ca:1f: 3e:04:2e:de:03:eb:4d:50:01:6a:62:63:bf:87:b8:e6:a5:a5: 5c:27:51:c3:f9:3e:e1:74:f9:c8:26:52:d0:22:2a:40:72:37: d1:09:d5:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkE3NDExMC8GA1UEBRMoQUQ2NTM0ODM5RkU2QTdBODc3NjBBMUVEMEEzOUMzMTA2 OTNGQjlGRjAeFw0yNTEwMTkxMTM0MzVaFw0yNTEwMjYxMTM0MzRaMBgxFjAUBgNV BAMTDTY4ZjRjY2NiLTBlMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdSWHSWlSqg7uunYjm2A/+CrkeklKb/o7f0UOpUP7gsCUqPjjwwguUbS0xJHYu 3vpdvYop3snJIVk61uFDfwkSPWJn3ecMDa1zsca7EJ3PR5s6DHPDTaztIIY8Hs1I J9Lm1VU8/koIT5bwn6dV61WT2420OxpYnFNoMZ7KH8uy7lGHD7tIPljJzup8aQNz 90PJ4ek3jWqKPOEH2jDrvUBIaywZT6PAnvADewwkTYCe2N3qq6YtvcosPO/m5s7+ 7Lljs3BOhjQ7o7aOYoOodS64nwRQupkyvwJUAZr1PhXlugDClPcqU+meSFSk8UOB 1UpHiv9sXtr4FQoTZvIm/tUhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm7Q2kRri Ob32/ubeqn0jSvClxIowHwYDVR0jBBgwFoAUrWU0g5/mp6h3YKHtCjnDEGk/uf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QTc0LzRDMzFGQjQ0OUE4 ODExRjBBNDc3OUMxMEM0RjlBRTAyL3JXVTBnNV9tcDZoM1lLSHRDam5ERUdrX3Vm OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcldVMGc1X21wNmgzWUtIdENqbkRFR2tfdWY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QTc0LzRDMzFGQjQ0OUE4ODExRjBBNDc3OUMxMEM0RjlBRTAyL3JXVTBnNV9tcDZo M1lLSHRDam5ERUdrX3VmOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH5UZwjdFk6J6rYsgd0WoPi1MVcIm0lrCkmB9WT2r/Hx5U7U7eGDF3x6 Q8xfBVFlU1jZVQPSiyaETTJ1TCwKQ+XPFb3JuZWKAvhXtj8pH6BQAE2MNsJUsDHR A2UfyI+GixyZvd5ZJSAPaV3u4c07TK7ol8fnm1rtpiZtrADLQ/IpefqIEdL8ecx0 cDfvTFQH4ytWX6cF4ZGIrPUxthcx8TuZ6uXF8xTSFYX2fRj7OMckGremOj1a2RVP f1R3YuZomiNAtBtt6gWzoSsG+Y7RgFNX+cCMKhrKHz4ELt4D601QAWpiY7+HuOal pVwnUcP5PuF0+cgmUtAiKkByN9EJ1Qg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:33:12 2025 by rpki-client