$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: pcSU+9tN4pUzLvvfnCGPg/7fKJYD57PcyYiu05bjJlI= Subject key identifier: 7B:A9:91:6C:86:B3:B5:90:FF:01:B6:50:00:BD:D2:F5:14:82:1B:2D Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0BC4 Signing time: Sat 18 Oct 2025 19:45:55 +0000 Manifest this update: Sat 18 Oct 2025 19:45:55 +0000 Manifest next update: Sat 25 Oct 2025 19:45:55 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: qNqEhDrh07508iQglKeCFwGXyjHa2EZvuWdIq2YEfWo=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: mo/NLmT3qTw906fWZIYD+HCMnaLWUZhtdPeHn3oqJ6A=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: vucacXYSTLw3pjicQM0MXD2U1//BsbEO3gpX4wVcXB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: Oct 18 19:45:55 2025 GMT Not After : Oct 25 19:45:55 2025 GMT Subject: CN=68f3ee73-b36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:ee:d9:35:60:f6:68:82:55:86:3c:2c:93: b9:fd:97:76:a6:6c:61:b7:24:dd:66:e1:e2:2e:34: 5b:06:cd:f3:29:e8:84:d4:a5:88:bd:2f:33:b0:ea: 9b:ef:7b:bb:a1:e7:da:45:f6:b3:83:54:84:16:eb: 8f:b2:ef:79:19:4d:85:77:a8:e8:00:23:91:cf:12: 1f:ca:d6:df:c0:2e:b9:ee:df:63:04:cb:94:94:0f: a4:c8:24:c6:63:7b:da:90:45:82:0a:e9:4d:ce:81: c3:1d:af:f9:49:26:13:e0:e1:73:ed:a9:fd:68:07: 29:1e:d5:64:62:1c:91:a7:16:c9:fb:ff:14:b3:92: 0d:78:23:22:5c:9f:a2:b3:3e:1d:4a:2e:4e:c2:a6: 54:ff:0b:fe:46:a1:df:54:57:cc:bd:9a:61:ae:e1: ea:24:39:90:9f:df:8d:3b:3b:fa:02:75:b6:c2:8b: 24:14:cb:15:e4:93:f6:d9:12:5a:77:9d:87:c6:29: 8b:ab:b9:b9:9f:86:34:75:af:d0:44:f3:26:14:c7: de:8e:8a:45:64:35:f2:ab:d1:71:5c:28:b4:10:53: b3:9b:65:92:d4:0f:81:65:76:f3:3e:7c:ab:ec:4e: da:56:9d:a9:02:2e:99:48:52:65:6f:b8:fd:be:43: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A9:91:6C:86:B3:B5:90:FF:01:B6:50:00:BD:D2:F5:14:82:1B:2D X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1a:de:7f:31:0f:b3:14:cc:62:be:7d:3a:01:1c:0f:a3:2a: 00:cf:a7:53:36:56:19:86:ba:20:1c:a0:77:38:b0:2d:4c:51: 97:94:84:74:64:74:5c:bc:3f:b2:85:a3:61:26:34:69:22:51: ad:f9:15:89:96:59:1b:f2:dd:54:f1:f2:f3:5b:c1:b8:d9:31: 0b:67:f8:43:91:67:23:66:64:ad:2c:ea:79:e3:4f:e0:30:64: 11:86:35:d8:e7:7f:13:31:98:f3:b2:06:b3:4e:68:28:73:ca: 29:0e:bd:01:96:44:41:1b:bd:66:3c:cd:3f:f7:d9:b7:12:2c: 88:c0:da:22:40:06:0a:00:d5:ad:32:bf:42:a1:7a:5a:4a:92: f3:7f:3b:9c:55:d8:99:31:8f:53:3d:df:62:1c:9d:d4:6d:d2: 08:ac:30:a8:ca:2a:17:49:39:bf:6d:34:02:68:0d:fe:be:d5: e6:88:c3:1a:84:05:7d:5b:89:fd:01:65:29:ee:3b:5b:04:8a: 35:99:ef:20:db:58:ac:75:0a:b7:f0:f8:f5:da:6f:fb:24:56: f4:4f:8d:65:c0:6a:48:e9:cd:8a:57:4f:95:e8:15:9d:71:fb: 12:74:9d:85:13:63:84:7c:7f:9c:3c:db:26:af:9c:d0:e2:04: fb:0f:52:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjUxMDE4MTk0NTU1WhcNMjUxMDI1MTk0NTU1WjAYMRYwFAYD VQQDEw02OGYzZWU3My1iMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5h7u2TVg9miCVYY8LJO5/Zd2pmxhtyTdZuHiLjRbBs3zKeiE1KWIvS8zsOqb 73u7oefaRfazg1SEFuuPsu95GU2Fd6joACORzxIfytbfwC657t9jBMuUlA+kyCTG Y3vakEWCCulNzoHDHa/5SSYT4OFz7an9aAcpHtVkYhyRpxbJ+/8Us5INeCMiXJ+i sz4dSi5OwqZU/wv+RqHfVFfMvZphruHqJDmQn9+NOzv6AnW2woskFMsV5JP22RJa d52HximLq7m5n4Y0da/QRPMmFMfejopFZDXyq9FxXCi0EFOzm2WS1A+BZXbzPnyr 7E7aVp2pAi6ZSFJlb7j9vkPlxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHupkWyG s7WQ/wG2UAC90vUUghstMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuGt5/MQ+zFMxivn06ARwPoyoAz6dTNlYZhrogHKB3OLAtTFGXlIR0 ZHRcvD+yhaNhJjRpIlGt+RWJllkb8t1U8fLzW8G42TELZ/hDkWcjZmStLOp540/g MGQRhjXY538TMZjzsgazTmgoc8opDr0BlkRBG71mPM0/99m3EiyIwNoiQAYKANWt Mr9CoXpaSpLzfzucVdiZMY9TPd9iHJ3UbdIIrDCoyioXSTm/bTQCaA3+vtXmiMMa hAV9W4n9AWUp7jtbBIo1me8g21isdQq38Pj12m/7JFb0T41lwGpI6c2KV0+V6BWd cfsSdJ2FE2OEfH+cPNsmr5zQ4gT7D1Ko -----END CERTIFICATE-----Generated at Mon Oct 20 05:37:27 2025 by rpki-client