$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: NvPVO5cURcVIgZG7DQPxguS4E0HOAeRPfWfHgFknXZU= Subject key identifier: 98:5F:CB:FE:38:E0:93:9F:22:CC:C8:E2:07:C0:0B:D7:44:29:E9:35 Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 0186 Signing time: Sun 19 Oct 2025 06:17:35 +0000 Manifest this update: Sun 19 Oct 2025 06:17:34 +0000 Manifest next update: Sun 26 Oct 2025 06:17:34 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: wPhqXkIxx9y2YiNx0bCryvRnkCJMgqqLGbGrRFMflTc=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 4: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Oct 19 06:17:34 2025 GMT Not After : Oct 26 06:17:34 2025 GMT Subject: CN=68f4827e-bb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:80:b1:c5:f9:8c:3e:66:a5:06:80:01:18:7f: 18:30:f6:2b:ed:52:67:7a:91:e1:9c:9c:a9:52:5e: b2:7f:bf:ec:53:d3:c6:d1:94:51:8d:ee:72:12:6a: 76:5d:63:31:1a:b8:80:b8:17:e0:04:e2:51:0a:b8: db:04:38:94:4b:d0:98:4d:72:ff:b7:af:38:d0:fe: 9b:09:96:9c:2b:b4:68:31:cd:93:fc:ac:9d:4a:55: f1:1c:aa:44:64:3e:e9:e2:ab:72:93:87:0b:48:dc: 1f:dd:ba:de:71:95:a4:da:f9:7f:cc:c6:34:65:89: c9:c1:f3:49:50:2d:b7:88:aa:2d:5d:ac:dc:dd:2b: a1:7a:85:08:aa:de:eb:de:b5:ae:e5:8f:78:ca:8c: c6:fe:8f:da:cb:7f:59:07:38:c5:29:02:b9:e3:94: c8:77:4f:34:80:c9:1f:69:b6:33:df:68:2d:a7:c7: 0b:40:cd:5a:b8:35:26:4b:6b:37:ac:d4:8d:ef:f5: 48:c9:20:a3:40:f3:11:bd:94:57:f1:71:0e:8e:3f: e0:03:7e:55:cc:8e:4c:f2:ed:0a:60:9d:b5:38:1e: c0:31:15:3f:29:96:3c:c4:6f:16:6f:1e:da:96:18: ee:cf:14:d0:a0:4e:a3:d2:4d:ff:b9:88:2b:38:fe: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:CB:FE:38:E0:93:9F:22:CC:C8:E2:07:C0:0B:D7:44:29:E9:35 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:aa:67:18:9d:17:e9:34:23:bb:47:9a:05:ca:08:db:93:67: 8d:79:a5:48:5b:fd:42:11:54:79:ae:37:fb:71:44:b4:04:98: ee:ab:57:c7:a7:de:a9:2f:0f:a4:24:91:02:4a:04:1d:c8:70: 28:74:de:9f:47:bf:78:51:0c:a8:3f:7f:1b:42:09:70:7c:10: 2b:6b:76:7a:0a:4f:f9:4b:e8:1e:90:85:3b:e7:17:5d:31:3d: 48:fb:48:a7:49:9d:3b:52:90:b7:bc:59:6c:84:db:1e:10:d5: ff:ea:65:fb:4f:c8:2d:be:15:c6:99:1f:30:5a:c1:7f:d7:f4: aa:a9:5c:48:57:2b:12:51:92:79:7e:74:4c:6b:37:f1:71:11: 1f:d9:ee:6d:a0:15:ae:90:7f:bc:d5:90:62:94:22:3e:38:a2: 79:cc:63:f4:f8:2a:cb:2a:9f:83:36:c0:79:7f:1a:cd:93:b3: a3:cb:fb:00:4f:93:82:13:d2:0d:1b:7e:3e:19:52:f4:2f:da: 8b:92:d8:bf:64:eb:37:0b:e0:2a:42:74:3e:51:5a:1c:28:e3: 1b:1e:c3:55:4f:a6:3a:ed:fd:12:d1:a9:15:bc:84:cf:e1:c0: 71:ee:e1:04:ef:28:de:33:99:ed:8f:af:00:e3:b7:c6:95:10: c1:f6:d3:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUxMDE5MDYxNzM0WhcNMjUxMDI2MDYxNzM0WjAYMRYwFAYD VQQDEw02OGY0ODI3ZS1iYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+YCxxfmMPmalBoABGH8YMPYr7VJnepHhnJypUl6yf7/sU9PG0ZRRje5yEmp2 XWMxGriAuBfgBOJRCrjbBDiUS9CYTXL/t6840P6bCZacK7RoMc2T/KydSlXxHKpE ZD7p4qtyk4cLSNwf3brecZWk2vl/zMY0ZYnJwfNJUC23iKotXazc3SuheoUIqt7r 3rWu5Y94yozG/o/ay39ZBzjFKQK545TId080gMkfabYz32gtp8cLQM1auDUmS2s3 rNSN7/VIySCjQPMRvZRX8XEOjj/gA35VzI5M8u0KYJ21OB7AMRU/KZY8xG8Wbx7a lhjuzxTQoE6j0k3/uYgrOP5O4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhfy/44 4JOfIszI4gfAC9dEKek1MB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvqmcYnRfpNCO7R5oFygjbk2eNeaVIW/1CEVR5rjf7cUS0BJjuq1fH p96pLw+kJJECSgQdyHAodN6fR794UQyoP38bQglwfBAra3Z6Ck/5S+gekIU75xdd MT1I+0inSZ07UpC3vFlshNseENX/6mX7T8gtvhXGmR8wWsF/1/SqqVxIVysSUZJ5 fnRMazfxcREf2e5toBWukH+81ZBilCI+OKJ5zGP0+CrLKp+DNsB5fxrNk7Ojy/sA T5OCE9ING34+GVL0L9qLkti/ZOs3C+AqQnQ+UVocKOMbHsNVT6Y67f0S0akVvITP 4cBx7uEE7yjeM5ntj68A47fGlRDB9tMW -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:29 2025 by rpki-client