$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json) Hash identifier: +qPOcMp+eTcF7fXGa9HczN1fq/4LWaZupR+5njeun7c= Subject key identifier: CE:1B:96:EF:84:A5:B0:A0:7D:86:F8:BB:3D:E4:BF:CB:14:39:F1:BB Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft Manifest number: 012C Signing time: Sun 19 Oct 2025 07:25:47 +0000 Manifest this update: Sun 19 Oct 2025 07:25:46 +0000 Manifest next update: Sun 26 Oct 2025 07:25:46 +0000 Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: dYuqwogt1wmzPj+kPCQu0BtbjLkRTBMtUSkaY29zUGQ=) 2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: Fb0vXPsGENJ9HpaLetk+Rjo+o9pYvcloVY8N7cgyCIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: Oct 19 07:25:46 2025 GMT Not After : Oct 26 07:25:46 2025 GMT Subject: CN=68f4927a-9871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:0b:df:78:3c:f2:af:c8:be:d2:b2:fb:42: ba:f2:dd:bd:14:6c:11:de:da:02:d3:e0:91:d9:0e: 3d:d6:07:cd:51:ad:d9:0c:15:8e:7d:df:35:a9:59: 7f:bb:41:10:db:b9:b3:7c:00:42:82:ea:e0:7c:f7: 4f:2f:52:71:29:68:51:71:fd:d8:72:74:8f:db:ef: f7:33:8a:4a:3b:96:cf:74:1e:4a:db:41:67:ad:4f: 24:ab:bc:9a:55:e4:4e:d5:6b:d9:7d:41:fb:c8:75: d6:f5:e5:2f:62:00:82:43:ad:ef:f9:23:a3:49:d2: 48:3d:af:73:7d:05:6d:d5:c4:eb:35:aa:e3:d7:a2: 91:30:61:8c:82:e1:a4:66:5d:bc:69:40:91:d9:85: a8:2f:8e:d2:97:7e:cd:45:5a:4c:97:0c:6d:f4:f8: 3b:f1:74:72:e8:38:0a:45:de:80:30:44:05:19:be: b1:e1:c3:a9:1f:35:4c:36:74:e8:0d:58:2b:bf:95: 3f:ef:5e:4f:55:bd:7c:03:e0:a4:5e:0b:64:bd:57: 1c:1b:5f:d1:97:1e:9b:d0:f5:05:28:4e:01:dc:ed: 92:b1:b8:3c:10:fb:01:ff:60:b8:e1:0b:d8:dd:fc: cd:11:2f:cd:3d:e1:4a:a9:2f:43:ef:07:15:05:48: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1B:96:EF:84:A5:B0:A0:7D:86:F8:BB:3D:E4:BF:CB:14:39:F1:BB X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fc:5e:73:5b:c3:cf:c6:a4:0f:ef:89:c6:be:d6:e9:48:f1: 4f:9b:b8:49:20:e7:86:b7:6f:dd:1a:09:00:6c:16:75:69:b5: dd:13:78:3a:54:af:ab:8c:f0:22:9f:9d:01:44:24:e9:3f:25: c7:8d:1d:c7:4c:2e:0f:3c:c3:2c:03:91:66:13:fe:34:d3:d0: 18:49:54:98:be:25:9d:a2:80:50:4c:9b:e4:3a:ce:94:c6:c2: 62:45:e0:a2:5f:10:bc:11:18:49:44:e6:62:8e:64:d0:bb:e2: 26:95:42:25:33:22:72:cb:3a:be:c2:6f:15:d0:99:b0:5e:e6: 4a:c4:31:38:49:6f:69:67:6f:0a:8f:07:a4:60:be:4c:14:a3: fb:f3:7e:ff:72:f3:4d:fc:bd:d0:8c:f0:62:d4:b1:20:7a:8d: 2d:6f:5d:0f:37:7c:51:5c:57:09:65:7a:8b:09:93:c6:3d:f8: 66:21:02:19:cb:77:00:82:dd:ce:e4:8b:1a:80:44:4a:dd:33: 01:a2:fc:9d:53:59:d6:1e:db:f0:cc:2c:89:33:55:f9:cf:f5: 67:9e:1a:86:eb:18:d1:59:dc:45:9f:3a:5d:9e:34:ed:d9:81: 97:ac:d5:e4:cb:98:35:df:c2:cb:75:bb:ee:a5:80:d9:bc:eb: fc:dd:a9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjUxMDE5MDcyNTQ2WhcNMjUxMDI2MDcyNTQ2WjAYMRYwFAYD VQQDEw02OGY0OTI3YS05ODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/kL33g88q/IvtKy+0K68t29FGwR3toC0+CR2Q491gfNUa3ZDBWOfd81qVl/ u0EQ27mzfABCgurgfPdPL1JxKWhRcf3YcnSP2+/3M4pKO5bPdB5K20FnrU8kq7ya VeRO1WvZfUH7yHXW9eUvYgCCQ63v+SOjSdJIPa9zfQVt1cTrNarj16KRMGGMguGk Zl28aUCR2YWoL47Sl37NRVpMlwxt9Pg78XRy6DgKRd6AMEQFGb6x4cOpHzVMNnTo DVgrv5U/715PVb18A+CkXgtkvVccG1/Rlx6b0PUFKE4B3O2Ssbg8EPsB/2C44QvY 3fzNES/NPeFKqS9D7wcVBUhA+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4blu+E pbCgfYb4uz3kv8sUOfG7MB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdl d0s2MDJQYmdBX2c0X0p4STgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs/F5zW8PPxqQP74nGvtbpSPFPm7hJIOeGt2/dGgkAbBZ1abXdE3g6 VK+rjPAin50BRCTpPyXHjR3HTC4PPMMsA5FmE/4009AYSVSYviWdooBQTJvkOs6U xsJiReCiXxC8ERhJROZijmTQu+ImlUIlMyJyyzq+wm8V0JmwXuZKxDE4SW9pZ28K jwekYL5MFKP7837/cvNN/L3QjPBi1LEgeo0tb10PN3xRXFcJZXqLCZPGPfhmIQIZ y3cAgt3O5IsagERK3TMBovydU1nWHtvwzCyJM1X5z/VnnhqG6xjRWdxFnzpdnjTt 2YGXrNXky5g138LLdbvupYDZvOv83amE -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:50 2025 by rpki-client