$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: FzG4lx/+Jh3Ur2OnS0Nnt09Se5Kx/+tZa8fTTfpvrJc= Subject key identifier: 09:2A:AB:05:BB:19:0D:A8:4B:7E:4F:45:82:C7:A1:9A:EA:C1:BC:AB Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: D6 Signing time: Sun 19 Oct 2025 08:40:22 +0000 Manifest this update: Sun 19 Oct 2025 08:40:21 +0000 Manifest next update: Sun 26 Oct 2025 08:40:21 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: SyIgpaoeSgD7uJMYSn5SDi4EfkiFqkTBX1v2CeZgY7A=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: S//h0FvEyaMaAGxiOxnAlzaIIXmPhHgkfb3U/Ur0Y5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Oct 19 08:40:21 2025 GMT Not After : Oct 26 08:40:21 2025 GMT Subject: CN=68f4a3f6-9b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:ae:3a:96:bf:79:c3:7f:6f:40:e3:07:3d: 0a:85:58:4c:8c:cc:98:e6:a2:39:09:7f:16:d9:66: 19:b0:80:df:e2:7f:85:44:36:06:c3:b0:98:84:79: cc:ea:94:e1:a3:91:6b:12:36:21:89:be:ca:1f:8a: 73:2e:ed:d6:94:0a:93:35:58:a3:8e:d2:b1:5b:49: 41:85:13:22:39:61:23:86:6b:5f:61:1b:bb:2e:00: 72:b4:3f:9a:1a:fd:d7:10:58:37:17:63:aa:68:9d: 73:79:67:55:28:58:e3:23:63:23:d8:91:04:ee:59: a1:dd:da:77:4b:50:61:f8:92:dc:2e:0b:65:93:12: a0:e7:85:da:aa:73:c5:d0:15:0d:8d:0e:59:dd:3e: 0d:46:b9:73:59:99:68:45:bf:19:56:62:54:05:9e: 14:c6:fc:20:95:57:48:10:e2:ac:fc:21:27:3b:85: 5d:94:7c:a6:0b:4b:4e:68:a8:88:54:0a:c8:01:21: 0d:21:45:f9:d9:f5:3b:ef:a7:ca:76:eb:db:1c:87: 67:18:8c:22:fe:d5:5a:2b:07:fa:54:24:af:96:01: 6b:4b:09:57:27:3d:3e:4d:79:b8:6e:9e:29:ee:ad: 92:8b:1a:09:3b:27:85:51:94:2f:f8:ae:e8:3d:7e: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:AB:05:BB:19:0D:A8:4B:7E:4F:45:82:C7:A1:9A:EA:C1:BC:AB X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:67:e9:04:05:85:b9:81:d3:7e:fa:e2:35:52:13:62:ac:6e: 56:88:ba:86:25:c7:80:c8:86:d6:21:7b:03:5b:86:0c:fd:58: 59:77:5e:07:ca:73:f0:82:73:5f:3b:27:f0:2b:28:40:f0:5b: 70:48:7f:95:42:6a:a6:69:c3:77:8d:1a:9f:9d:90:c6:02:a3: 14:22:12:d1:70:9e:55:fd:63:3f:09:12:e5:a4:6f:bc:14:cd: 7a:cb:f0:f8:33:96:d9:bf:61:64:16:9d:2f:8f:c4:d5:57:fc: 16:2a:b2:b1:01:39:3e:1c:05:8a:53:0e:6c:be:7c:15:65:1d: df:5a:d8:87:53:f9:bf:d3:b9:08:6a:97:d0:9f:17:2b:7d:c1: 28:12:f0:fd:b4:ff:07:6d:2d:e2:ea:a4:be:27:ec:99:bc:14: 2b:5f:ed:c0:9b:62:bb:8e:3d:7c:19:85:1e:cb:6a:8f:b7:f7: f0:9b:20:3e:ac:91:70:bc:d9:1b:62:1a:df:5b:97:be:f8:e5: cf:8e:f9:9a:1f:c1:24:0b:77:57:81:c4:1f:7e:03:65:b1:78: e9:5a:2e:9e:b7:1c:2e:c3:8c:77:e9:ef:57:5f:b5:e7:d2:22: c4:3e:0c:a7:5c:b5:1e:c9:91:d0:6f:5f:04:d7:a9:c0:2d:b1: c9:eb:6d:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUxMDE5MDg0MDIxWhcNMjUxMDI2MDg0MDIxWjAYMRYwFAYD VQQDEw02OGY0YTNmNi05YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ECuOpa/ecN/b0DjBz0KhVhMjMyY5qI5CX8W2WYZsIDf4n+FRDYGw7CYhHnM 6pTho5FrEjYhib7KH4pzLu3WlAqTNVijjtKxW0lBhRMiOWEjhmtfYRu7LgBytD+a Gv3XEFg3F2OqaJ1zeWdVKFjjI2Mj2JEE7lmh3dp3S1Bh+JLcLgtlkxKg54XaqnPF 0BUNjQ5Z3T4NRrlzWZloRb8ZVmJUBZ4UxvwglVdIEOKs/CEnO4VdlHymC0tOaKiI VArIASENIUX52fU776fKduvbHIdnGIwi/tVaKwf6VCSvlgFrSwlXJz0+TXm4bp4p 7q2SixoJOyeFUZQv+K7oPX5XjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkqqwW7 GQ2oS35PRYLHoZrqwbyrMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaZ+kEBYW5gdN++uI1UhNirG5WiLqGJceAyIbWIXsDW4YM/VhZd14H ynPwgnNfOyfwKyhA8FtwSH+VQmqmacN3jRqfnZDGAqMUIhLRcJ5V/WM/CRLlpG+8 FM16y/D4M5bZv2FkFp0vj8TVV/wWKrKxATk+HAWKUw5svnwVZR3fWtiHU/m/07kI apfQnxcrfcEoEvD9tP8HbS3i6qS+J+yZvBQrX+3Am2K7jj18GYUey2qPt/fwmyA+ rJFwvNkbYhrfW5e++OXPjvmaH8EkC3dXgcQffgNlsXjpWi6etxwuw4x36e9XX7Xn 0iLEPgynXLUeyZHQb18E16nALbHJ623m -----END CERTIFICATE-----Generated at Mon Oct 20 07:00:32 2025 by rpki-client