$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: /R+Iv31m0cSZYL1E5Uo5OZZaWzy4z8cayub+4jWGF94= Subject key identifier: E9:15:8F:45:1B:D3:2E:73:14:CF:2A:41:2A:16:0F:67:F4:CC:9E:DC Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 0217 Signing time: Sun 19 Oct 2025 04:27:16 +0000 Manifest this update: Sun 19 Oct 2025 04:27:15 +0000 Manifest next update: Sun 26 Oct 2025 04:27:15 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: YQKgZaUyZ7qnVccgijtaz7wMheYR8DyCjz3bjfPhmpg=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: n/BMRPFUHjUzsfa0GoSirwLl0k+pEwLO2kUv8wHTWRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Oct 19 04:27:15 2025 GMT Not After : Oct 26 04:27:15 2025 GMT Subject: CN=68f468a3-2341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:56:90:e6:fe:90:99:c1:64:3b:d8:ab:c9: 39:18:f3:5c:f7:e7:69:49:8d:3e:ae:13:f9:51:cf: f8:3d:69:0e:b5:f1:06:f2:47:90:17:1f:52:2b:fa: 37:ea:50:eb:8f:1c:c5:b7:42:e9:93:8b:59:f5:80: c3:f2:8a:04:52:dd:c3:57:fd:48:bb:71:7c:bc:ba: 79:5d:0b:d1:df:c2:91:84:01:4d:74:a2:0f:57:fe: e9:4e:f0:5b:33:38:9a:bb:6d:96:a3:b6:9f:2b:2f: ed:06:11:1e:84:6b:db:dd:a9:8e:46:ea:80:22:87: 88:fa:0f:31:48:d0:d3:92:cd:eb:3d:a2:54:3b:df: d9:47:ec:4c:1a:2e:f1:ff:b1:67:29:56:4f:53:08: 73:80:66:4c:bb:39:90:b5:95:39:c6:8f:a4:67:b3: 0b:6f:8c:ab:2f:97:0c:dd:25:df:ce:f9:5f:54:01: d0:3d:25:48:3c:e2:db:17:b5:92:7f:3e:95:38:3a: 62:90:cf:4a:ab:2d:e4:e1:8f:af:d3:90:ea:f4:f9: e6:67:7c:11:dc:aa:a3:b9:6c:ec:36:44:dd:70:a3: 0e:fd:d9:af:2c:7d:52:d7:3e:85:36:99:42:56:2a: 8f:ab:bf:54:7c:c0:97:10:f0:38:36:10:04:32:56: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:15:8F:45:1B:D3:2E:73:14:CF:2A:41:2A:16:0F:67:F4:CC:9E:DC X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7a:8b:d1:61:d8:45:9a:f8:45:c5:6d:bb:3b:8e:56:76:0b: 7b:39:17:ab:b4:47:f9:f4:95:1c:b1:25:4f:78:7a:33:76:2b: b0:3b:9d:7f:0e:ba:20:ca:52:51:0d:61:d9:54:0e:d5:87:88: ae:ad:64:c4:03:02:fc:bb:3d:f0:b4:b2:99:07:8b:1c:a3:83: 2c:e1:8a:ce:83:2b:ee:70:bd:f1:a1:27:73:cd:ef:7b:6e:73: dc:94:7a:a4:15:14:7c:08:ef:f6:66:81:18:a1:35:f6:9b:35: 55:24:c2:7f:cc:cc:0b:e2:b4:bd:ce:55:a8:39:6e:ec:4f:b8: 87:04:58:9a:c2:34:75:90:a0:e9:13:7c:66:38:2f:5f:89:5f: 5a:85:60:cf:c9:20:71:d9:7d:af:d7:41:f6:42:9c:f5:0e:a0: a9:fc:7d:b6:dc:02:a2:c0:00:96:08:26:16:29:7b:75:77:b7: a4:a2:b5:d9:62:53:29:bd:e7:be:4a:97:09:42:6a:31:01:b3: fa:63:62:3a:c1:70:ce:11:10:37:01:66:f1:d0:66:83:bf:83: 7b:a9:a7:f6:8a:36:77:3e:47:fd:26:67:15:8e:7a:86:6b:e0: 19:8c:0f:65:24:7b:fe:41:e7:13:2a:c2:24:1c:e1:23:c3:d9: 44:92:70:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjUxMDE5MDQyNzE1WhcNMjUxMDI2MDQyNzE1WjAYMRYwFAYD VQQDEw02OGY0NjhhMy0yMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIJWkOb+kJnBZDvYq8k5GPNc9+dpSY0+rhP5Uc/4PWkOtfEG8keQFx9SK/o3 6lDrjxzFt0Lpk4tZ9YDD8ooEUt3DV/1Iu3F8vLp5XQvR38KRhAFNdKIPV/7pTvBb Mziau22Wo7afKy/tBhEehGvb3amORuqAIoeI+g8xSNDTks3rPaJUO9/ZR+xMGi7x /7FnKVZPUwhzgGZMuzmQtZU5xo+kZ7MLb4yrL5cM3SXfzvlfVAHQPSVIPOLbF7WS fz6VODpikM9Kqy3k4Y+v05Dq9PnmZ3wR3KqjuWzsNkTdcKMO/dmvLH1S1z6FNplC ViqPq79UfMCXEPA4NhAEMlZdaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkVj0Ub 0y5zFM8qQSoWD2f0zJ7cMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzeovRYdhFmvhFxW27O45Wdgt7ORertEf59JUcsSVPeHozdiuwO51/ DrogylJRDWHZVA7Vh4iurWTEAwL8uz3wtLKZB4sco4Ms4YrOgyvucL3xoSdzze97 bnPclHqkFRR8CO/2ZoEYoTX2mzVVJMJ/zMwL4rS9zlWoOW7sT7iHBFiawjR1kKDp E3xmOC9fiV9ahWDPySBx2X2v10H2Qpz1DqCp/H223AKiwACWCCYWKXt1d7ekorXZ YlMpvee+SpcJQmoxAbP6Y2I6wXDOERA3AWbx0GaDv4N7qaf2ijZ3Pkf9JmcVjnqG a+AZjA9lJHv+QecTKsIkHOEjw9lEknCv -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:26 2025 by rpki-client