$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: UACV9AUJzkeZ5Pbm9Qu4pYAC85ZiAvMN8JFl4jNy51E= Subject key identifier: 31:8F:D5:4C:B1:80:AF:93:30:10:47:F0:71:4E:4D:5F:0F:C0:B1:AC Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 45 Signing time: Sun 19 Oct 2025 10:50:41 +0000 Manifest this update: Sun 19 Oct 2025 10:50:40 +0000 Manifest next update: Sun 26 Oct 2025 10:50:40 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: a0nD/Ss9Vtf3bmvd9CC4GgAbZ45oMkqi8qkSNM2S5K8=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Oct 19 10:50:40 2025 GMT Not After : Oct 26 10:50:40 2025 GMT Subject: CN=68f4c280-e39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:03:18:f9:29:f8:0f:c6:ec:5b:ad:00:67: b1:56:6a:fc:88:a3:09:b5:db:82:03:6a:85:f2:8e: 94:74:6e:e2:ab:ea:f0:e3:62:cd:4b:64:95:c5:3e: 01:24:a7:ba:d0:2f:81:c5:a7:7a:e9:34:fa:02:c6: 05:40:8a:e6:0e:76:ed:62:1a:ce:18:2b:14:ab:fc: 4e:7d:da:cc:29:a7:76:09:7b:f1:24:87:cf:83:2c: d0:85:36:5e:aa:f6:81:97:4f:cc:3b:33:98:2e:f8: 92:d5:4d:bd:76:60:01:55:07:ac:dd:65:4e:99:03: ff:bd:d8:50:c8:69:f0:36:6b:22:c3:d2:b5:0b:04: b4:4c:b0:a1:4d:ad:12:cc:0b:68:29:dc:5f:9c:71: 9a:db:9f:fc:8e:e2:3d:3a:3f:7f:0f:e1:e6:a4:5e: 48:a5:14:d6:e6:6d:7d:52:58:9e:4f:93:9c:92:77: d9:8f:3d:c8:bc:5a:89:1c:54:eb:7b:f7:7f:d1:6d: 41:b7:47:a7:9d:da:69:5d:81:9c:bd:58:95:a3:c6: 23:d3:4e:9b:0a:f2:2e:66:63:81:bc:97:a4:3d:cc: 2f:63:ff:7c:b3:93:92:f3:69:6d:bb:e6:92:50:f0: 6f:6d:9c:a7:53:5a:70:36:3f:84:32:3a:df:59:53: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8F:D5:4C:B1:80:AF:93:30:10:47:F0:71:4E:4D:5F:0F:C0:B1:AC X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:46:f7:61:ae:08:84:63:14:4c:ef:8f:b2:6b:84:fa:a0:7b: 9d:73:1c:f8:e8:7e:53:c4:26:e7:f4:ce:9b:bc:80:08:f2:c3: 4a:ea:45:d5:48:3f:68:d5:50:b3:2a:09:43:97:dc:53:33:c7: 8c:9f:35:73:61:bd:44:2d:16:3b:04:d1:3b:95:a9:ec:02:2d: 41:51:b2:02:38:34:d2:cf:8f:98:74:d1:d0:fe:98:d8:49:65: 44:10:c6:8e:5f:bc:37:03:e5:c6:5b:02:22:02:a4:7e:d2:a0: f9:0d:9a:75:81:f5:32:3f:83:da:b3:56:ef:15:a9:68:c2:59: 27:7d:71:e7:d8:64:6b:cb:44:3f:66:ce:74:fa:4e:83:9d:70: 99:ad:bc:f0:99:07:40:48:28:a7:b8:a7:99:05:c2:e8:89:12: ac:b9:b9:af:f7:0f:70:44:83:46:2b:f1:48:3a:6e:cd:29:36: 86:69:18:d9:28:a3:3e:6e:76:d8:a9:6d:73:5c:81:db:c3:fe: f6:27:3a:ff:74:1c:bd:da:df:3e:a7:5a:0c:35:02:d4:df:c1: ae:88:79:fb:b3:5a:f2:82:f4:3b:94:6b:b0:dd:ed:38:90:6a: 7c:38:50:50:be:2a:e5:0e:fc:dd:db:cd:74:9b:f3:18:03:72: 94:db:2e:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTEwMTkxMDUwNDBaFw0yNTEwMjYxMDUwNDBaMBgxFjAUBgNV BAMTDTY4ZjRjMjgwLWUzOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGfAMY+Sn4D8bsW60AZ7FWavyIowm124IDaoXyjpR0buKr6vDjYs1LZJXFPgEk p7rQL4HFp3rpNPoCxgVAiuYOdu1iGs4YKxSr/E592swpp3YJe/Ekh8+DLNCFNl6q 9oGXT8w7M5gu+JLVTb12YAFVB6zdZU6ZA/+92FDIafA2ayLD0rULBLRMsKFNrRLM C2gp3F+ccZrbn/yO4j06P38P4eakXkilFNbmbX1SWJ5Pk5ySd9mPPci8WokcVOt7 93/RbUG3R6ed2mldgZy9WJWjxiPTTpsK8i5mY4G8l6Q9zC9j/3yzk5LzaW275pJQ 8G9tnKdTWnA2P4QyOt9ZU0aJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMY/VTLGA r5MwEEfwcU5NXw/AsawwHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIpG92GuCIRjFEzvj7JrhPqge51zHPjoflPEJuf0zpu8gAjyw0rqRdVI P2jVULMqCUOX3FMzx4yfNXNhvUQtFjsE0TuVqewCLUFRsgI4NNLPj5h00dD+mNhJ ZUQQxo5fvDcD5cZbAiICpH7SoPkNmnWB9TI/g9qzVu8VqWjCWSd9cefYZGvLRD9m znT6ToOdcJmtvPCZB0BIKKe4p5kFwuiJEqy5ua/3D3BEg0Yr8Ug6bs0pNoZpGNko oz5udtipbXNcgdvD/vYnOv90HL3a3z6nWgw1AtTfwa6IefuzWvKC9DuUa7Dd7TiQ anw4UFC+KuUO/N3bzXSb8xgDcpTbLp8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:40:55 2025 by rpki-client