$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: MsMGiKoV2nfp5ExDyVHfDnRDDpbm41vyT5qONtseJVw= Subject key identifier: 91:1E:5F:DA:CD:FB:2B:1C:80:24:90:FE:48:1C:BF:8C:56:71:1C:1D Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 41 Signing time: Sun 19 Oct 2025 10:53:23 +0000 Manifest this update: Sun 19 Oct 2025 10:53:22 +0000 Manifest next update: Sun 26 Oct 2025 10:53:22 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: 4/lGThowQrlaMk6ldtipRv62p8+KllZpQSPIS44Tnp0=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Oct 19 10:53:22 2025 GMT Not After : Oct 26 10:53:22 2025 GMT Subject: CN=68f4c323-ae29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:41:1d:ed:d5:1f:9f:c4:ff:58:ac:e3:5a: 87:f1:20:65:4f:c0:4e:c7:28:fb:84:c7:91:1b:17: cc:75:d4:1b:03:dc:38:f1:c2:13:cd:d1:e0:53:1d: 02:8d:9e:59:7b:d7:5f:23:52:3e:32:69:8f:e5:17: 6f:59:e3:7f:d1:b0:f7:a6:37:02:db:87:e5:df:4c: 0e:88:f6:4a:29:42:e8:8b:02:31:25:81:5b:c8:9a: 77:f5:10:1e:35:a6:19:e5:b2:da:f1:cd:0f:bd:c8: 30:d6:81:d4:d8:8c:cd:73:f0:fc:5e:33:dc:6f:49: c6:c6:78:65:96:09:b3:1e:b4:60:8d:ca:f6:d0:05: 24:85:16:b2:ee:c9:06:9f:ff:01:44:ad:23:61:2b: 4e:76:bb:26:44:62:96:84:f4:7f:8a:1f:fc:a8:ac: 57:ca:fd:15:84:ef:a2:40:d1:99:b0:85:b8:d2:14: 11:77:42:1e:98:00:c7:72:0f:58:d5:ec:c6:f8:58: cd:13:a1:e5:5f:62:de:09:30:27:38:bb:b0:7f:af: d5:dc:aa:00:55:c6:8d:f0:b0:1b:b8:a1:68:bc:1b: ba:b8:c4:30:20:98:18:bb:8a:ce:e4:7f:2a:81:04: 45:71:33:77:45:6d:3b:96:32:43:0e:69:19:0f:57: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1E:5F:DA:CD:FB:2B:1C:80:24:90:FE:48:1C:BF:8C:56:71:1C:1D X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ab:9c:22:82:46:99:90:6d:cc:cc:77:4f:86:f9:1f:53:f8: da:2d:a6:a0:9a:5f:2a:42:cd:8d:15:55:ab:64:f8:6d:e7:0e: ab:64:00:43:d7:d4:dc:2f:bd:85:b6:d4:26:17:02:28:67:86: c4:9d:b1:9d:e1:2c:ec:63:aa:29:0a:be:28:ad:20:6d:bd:e5: 60:83:9b:61:b4:67:a7:6b:87:a8:1c:ba:2e:b0:86:cf:35:99: 4c:8b:97:f4:90:88:48:0e:67:70:56:b0:44:a0:6d:9b:fa:01: b6:5f:3c:d6:4b:c6:ca:f4:99:54:0b:e7:fe:95:27:9e:9c:e5: 25:ad:9b:f9:58:63:ae:64:31:37:df:1a:a9:ae:ae:65:fa:01: 65:f1:14:67:a1:ca:2e:ed:a2:b4:11:d4:7d:37:20:3b:e8:1a: ec:b4:bd:41:0b:37:29:ea:8a:06:9c:71:30:b2:17:25:fc:7a: 88:f1:36:43:74:c3:43:55:b2:5c:a4:64:9b:c7:ce:bf:3a:7e: 42:3c:b9:9b:ef:a5:4d:44:3e:9a:3a:b4:8e:ef:22:f4:60:f2: e7:09:77:30:1d:1e:ba:13:1c:90:f7:8f:aa:9e:74:29:ed:90: 51:07:f0:7b:73:df:6c:41:ea:e0:27:19:63:f8:f8:14:af:0c: c3:23:4a:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTEwMTkxMDUzMjJaFw0yNTEwMjYxMDUzMjJaMBgxFjAUBgNV BAMTDTY4ZjRjMzIzLWFlMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNxEEd7dUfn8T/WKzjWofxIGVPwE7HKPuEx5EbF8x11BsD3DjxwhPN0eBTHQKN nll7118jUj4yaY/lF29Z43/RsPemNwLbh+XfTA6I9kopQuiLAjElgVvImnf1EB41 phnlstrxzQ+9yDDWgdTYjM1z8PxeM9xvScbGeGWWCbMetGCNyvbQBSSFFrLuyQaf /wFErSNhK052uyZEYpaE9H+KH/yorFfK/RWE76JA0ZmwhbjSFBF3Qh6YAMdyD1jV 7Mb4WM0ToeVfYt4JMCc4u7B/r9XcqgBVxo3wsBu4oWi8G7q4xDAgmBi7is7kfyqB BEVxM3dFbTuWMkMOaRkPV1cRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkR5f2s37 KxyAJJD+SBy/jFZxHB0wHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABKrnCKCRpmQbczMd0+G+R9T+NotpqCaXypCzY0VVatk+G3nDqtkAEPX 1NwvvYW21CYXAihnhsSdsZ3hLOxjqikKviitIG295WCDm2G0Z6drh6gcui6whs81 mUyLl/SQiEgOZ3BWsESgbZv6AbZfPNZLxsr0mVQL5/6VJ56c5SWtm/lYY65kMTff GqmurmX6AWXxFGehyi7torQR1H03IDvoGuy0vUELNynqigaccTCyFyX8eojxNkN0 w0NVslykZJvHzr86fkI8uZvvpU1EPpo6tI7vIvRg8ucJdzAdHroTHJD3j6qedCnt kFEH8Htz32xB6uAnGWP4+BSvDMMjSp8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:46 2025 by rpki-client