$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: BnWDPYKXBHxmBCqLyXC+E4f36NqgnIsJlNxPAJ39YKM= Subject key identifier: 2C:21:FD:F0:B1:7F:8A:14:7B:5B:04:5D:15:70:85:EB:D3:A5:D7:10 Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 74 Signing time: Sun 19 Oct 2025 10:12:15 +0000 Manifest this update: Sun 19 Oct 2025 10:12:14 +0000 Manifest next update: Sun 26 Oct 2025 10:12:14 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: JfMjtJDr19G3/Tms4Ft+Xq80uSQGeSlmwncb1kEeUyw=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Oct 19 10:12:14 2025 GMT Not After : Oct 26 10:12:14 2025 GMT Subject: CN=68f4b97e-726e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:2a:f4:2f:b1:7f:65:11:91:7f:13:33:6f: 6e:be:ec:59:55:d9:5d:05:b3:f7:40:30:bd:58:a0: 47:e6:3b:7c:cb:d6:86:38:4f:2a:da:35:3b:17:d3: a9:37:2e:76:35:89:26:9e:55:83:9a:d5:20:e5:c6: a0:74:34:46:b5:a6:00:e7:68:ee:d3:dd:87:92:ea: e0:ef:56:7c:f2:45:00:72:75:fa:0f:e3:5a:c7:d4: 1a:bb:49:20:aa:54:3e:bf:74:70:4b:b0:c8:38:2c: 6d:c0:da:b7:4b:f0:a6:fa:94:51:7e:13:8a:8b:73: 60:14:aa:f8:9d:36:52:5f:66:af:a3:5c:45:38:34: 87:bf:d4:c9:8e:2c:ac:90:bf:e5:8e:46:65:01:f4: 76:9e:20:2b:6c:c0:65:9e:e1:a7:3b:10:a6:37:0c: b2:0c:27:0d:6c:d8:c8:1a:ed:7e:e4:9a:bc:8b:42: 85:1c:54:d8:ed:80:87:89:d8:9e:77:f4:01:d5:21: a9:c2:f0:cd:73:17:88:a7:59:09:ab:30:52:3c:46: 20:9c:a4:d5:34:4f:35:c1:97:59:d2:46:53:62:b0: a5:70:52:97:47:6c:04:a5:d7:9f:35:87:fa:7b:52: 2f:ff:f5:0d:40:90:bb:d4:0b:8c:00:81:1a:7a:02: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:21:FD:F0:B1:7F:8A:14:7B:5B:04:5D:15:70:85:EB:D3:A5:D7:10 X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7e:74:e9:29:c8:31:15:98:a7:ac:fa:f9:a1:a7:6b:f8:f3: df:e9:5d:1c:1d:15:1f:bc:63:f1:56:d5:c4:22:fd:87:11:ee: f9:b0:dd:ee:e6:bd:55:e5:bb:2b:ec:87:56:1a:f8:f5:5c:c0: d4:02:d4:95:4a:e0:3d:5a:34:db:17:d7:4e:4f:d4:75:86:47: 1c:9e:bf:1e:4b:3e:c0:5f:3c:6a:c1:43:45:42:78:b9:1c:01: 1d:0c:1a:98:57:c5:83:58:54:ff:d9:0a:f9:c2:ef:92:7c:7a: 71:2a:23:5f:09:94:ec:53:3d:49:66:b6:2d:31:72:31:47:cd: f0:eb:57:b7:22:ab:28:d1:1c:ea:b5:07:55:d2:8b:d1:50:3d: 8b:3a:05:ea:6b:a3:c1:d2:24:89:95:1f:be:a7:10:df:9e:ef: 1b:d5:f3:f4:dc:c1:b9:97:30:43:f6:4f:29:8b:12:a0:f2:2b: c3:14:21:5f:77:4d:37:4a:d4:38:70:2d:3e:09:fa:93:9c:a2: f3:db:bf:da:d7:5d:67:25:01:c3:0f:37:cc:05:75:47:3d:13: 46:17:6b:be:d3:89:fa:7b:f6:d8:a9:9b:5e:cf:74:6e:6b:6c: 2e:04:f0:42:44:40:9c:27:d6:a7:89:8a:e6:f8:c8:7f:44:4a: 61:d1:84:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTEwMTkxMDEyMTRaFw0yNTEwMjYxMDEyMTRaMBgxFjAUBgNV BAMTDTY4ZjRiOTdlLTcyNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Eyr0L7F/ZRGRfxMzb26+7FlV2V0Fs/dAML1YoEfmO3zL1oY4TyraNTsX06k3 LnY1iSaeVYOa1SDlxqB0NEa1pgDnaO7T3YeS6uDvVnzyRQBydfoP41rH1Bq7SSCq VD6/dHBLsMg4LG3A2rdL8Kb6lFF+E4qLc2AUqvidNlJfZq+jXEU4NIe/1MmOLKyQ v+WORmUB9HaeICtswGWe4ac7EKY3DLIMJw1s2Mga7X7kmryLQoUcVNjtgIeJ2J53 9AHVIanC8M1zF4inWQmrMFI8RiCcpNU0TzXBl1nSRlNisKVwUpdHbASl1581h/p7 Ui//9Q1AkLvUC4wAgRp6AqDzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULCH98LF/ ihR7WwRdFXCF69Ol1xAwHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1+dOkpyDEVmKes+vmhp2v489/pXRwdFR+8Y/FW1cQi/YcR7vmw3e7m vVXluyvsh1Ya+PVcwNQC1JVK4D1aNNsX105P1HWGRxyevx5LPsBfPGrBQ0VCeLkc AR0MGphXxYNYVP/ZCvnC75J8enEqI18JlOxTPUlmti0xcjFHzfDrV7ciqyjRHOq1 B1XSi9FQPYs6Bepro8HSJImVH76nEN+e7xvV8/TcwbmXMEP2TymLEqDyK8MUIV93 TTdK1DhwLT4J+pOcovPbv9rXXWclAcMPN8wFdUc9E0YXa77Tifp79tipm17PdG5r bC4E8EJEQJwn1qeJiub4yH9ESmHRhOo= -----END CERTIFICATE-----Generated at Tue Oct 21 12:46:02 2025 by rpki-client