$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft File: pwfo7Wx0uvNh3UByccajTUQCIqw.mft (raw, json) Hash identifier: DOuraqiA2Dxkz+NVmDkf1mu52uqrLg1Y55/yuvdZ+xs= Subject key identifier: F9:B8:CC:48:C9:C8:D4:E3:D5:93:04:4B:4A:D9:2D:0E:3C:82:8D:C6 Authority key identifier: A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC Certificate issuer: /CN=A91D0C14/serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft Manifest number: 023A Signing time: Sun 19 Oct 2025 04:07:21 +0000 Manifest this update: Sun 19 Oct 2025 04:07:21 +0000 Manifest next update: Sun 26 Oct 2025 04:07:21 +0000 Files and hashes: 1: pwfo7Wx0uvNh3UByccajTUQCIqw.crl (hash: +oC4jbLiVVrjBL6smSsUTOQ2FmJTROoiJBuEx+wQ3KY=) 2: 111C77744E1811EDADB36913C4F9AE02.roa (hash: AKQfVSoyvedil4fBrswJw8Fk2im5oq9KA2WJlwXE+SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=A707E8ED6C74BAF361DD407271C6A34D440222AC Validity Not Before: Oct 19 04:07:21 2025 GMT Not After : Oct 26 04:07:21 2025 GMT Subject: CN=68f463f9-c108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:30:37:b3:b6:f0:46:0f:22:eb:95:23:13: bd:07:b9:a8:a9:70:c5:a3:1e:35:c0:97:2d:b5:7e: 35:6a:21:d2:a8:0e:74:5f:9a:f3:33:d9:ee:43:7d: 33:89:4d:cb:22:4f:d3:c4:e8:a0:8c:11:5f:29:b7: e9:f0:70:46:14:9f:50:60:29:61:5c:8c:a6:35:a8: 6c:6a:34:f3:2c:b0:d8:d1:45:60:05:91:df:63:f5: c3:f3:07:30:1a:10:07:8c:c6:46:bd:ee:c1:51:59: 70:24:85:59:da:40:da:23:89:b5:2a:cc:91:c9:35: 61:fa:0b:e4:e6:99:2c:ec:97:75:a1:8d:81:89:75: 04:1b:84:13:83:f4:87:ee:ef:25:19:cc:c1:1a:c5: 50:12:68:b0:22:7b:ad:23:fb:94:78:ad:36:26:d0: fe:69:84:65:71:ea:77:0f:bb:1a:af:fa:36:a1:bc: 31:e0:ba:95:d8:64:91:fb:d6:e3:df:70:e2:f1:2a: 4f:24:2b:47:99:15:e3:4b:5c:58:12:46:e6:77:04: b1:85:42:3d:b0:df:5f:12:c6:10:7f:eb:6d:2b:46: 40:9b:6f:3a:1f:a6:70:9e:4a:c4:ed:f9:a2:aa:03: 23:3d:a8:50:73:84:9c:f2:ea:90:3b:cb:e3:3e:86: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B8:CC:48:C9:C8:D4:E3:D5:93:04:4B:4A:D9:2D:0E:3C:82:8D:C6 X509v3 Authority Key Identifier: keyid:A7:07:E8:ED:6C:74:BA:F3:61:DD:40:72:71:C6:A3:4D:44:02:22:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwfo7Wx0uvNh3UByccajTUQCIqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/188C1C264E1311EDB12F3C6FC4F9AE02/pwfo7Wx0uvNh3UByccajTUQCIqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:23:2e:d8:3e:d8:61:d6:cb:9f:52:94:79:1a:db:87:6d:90: 7c:a7:bd:a6:9b:1f:10:19:00:c6:6e:83:5c:5e:fb:96:6c:2c: dd:34:15:fa:46:90:d9:0f:20:d4:63:ef:a1:75:46:69:c7:a9: 79:ed:84:43:20:14:19:3f:81:dc:45:5b:3e:93:64:aa:c9:f2: 4f:4f:c5:fb:14:fe:0b:11:56:d6:53:ed:15:20:29:66:9e:5a: 58:af:58:83:92:ad:99:2a:52:fb:2a:c3:a8:c9:c1:f0:ba:c4: af:e4:96:b1:5d:61:bf:35:2a:e1:5d:dc:4d:c7:de:94:e3:0a: 73:44:b3:46:9f:2c:c4:08:28:a3:f5:17:6a:df:41:bf:70:0a: 3b:e3:02:e1:43:e7:15:72:39:40:85:e9:44:30:be:e7:6b:d3: 0a:c1:2e:47:ef:e1:df:bb:cb:2a:c1:68:ff:c5:97:c5:f9:9d: 00:4b:08:10:c0:0e:1f:d9:1d:7c:85:d1:61:3d:56:95:32:e1: 44:17:6d:63:8f:d1:f6:7e:3c:fb:ab:f0:92:d6:a4:42:ff:c1: f9:e8:7c:7a:dd:75:3c:76:37:e1:89:d4:80:10:6a:6f:8c:dd: 78:6b:fc:97:43:60:8e:55:4a:72:1e:91:ad:d9:c5:47:e7:27: 81:3f:28:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEE3MDdFOEVENkM3NEJBRjM2MURENDA3MjcxQzZBMzRE NDQwMjIyQUMwHhcNMjUxMDE5MDQwNzIxWhcNMjUxMDI2MDQwNzIxWjAYMRYwFAYD VQQDEw02OGY0NjNmOS1jMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZQwN7O28EYPIuuVIxO9B7moqXDFox41wJcttX41aiHSqA50X5rzM9nuQ30z iU3LIk/TxOigjBFfKbfp8HBGFJ9QYClhXIymNahsajTzLLDY0UVgBZHfY/XD8wcw GhAHjMZGve7BUVlwJIVZ2kDaI4m1KsyRyTVh+gvk5pks7Jd1oY2BiXUEG4QTg/SH 7u8lGczBGsVQEmiwInutI/uUeK02JtD+aYRlcep3D7sar/o2obwx4LqV2GSR+9bj 33Di8SpPJCtHmRXjS1xYEkbmdwSxhUI9sN9fEsYQf+ttK0ZAm286H6ZwnkrE7fmi qgMjPahQc4Sc8uqQO8vjPoYmOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPm4zEjJ yNTj1ZMES0rZLQ48go3GMB8GA1UdIwQYMBaAFKcH6O1sdLrzYd1AcnHGo01EAiKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC8xODhDMUMyNjRF MTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2TmgzVUJ5Y2NhalRVUUNJ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B3Zm83V3gwdXZOaDNVQnljY2FqVFVRQ0lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxNC8xODhDMUMyNjRFMTMxMUVEQjEyRjNDNkZDNEY5QUUwMi9wd2ZvN1d4MHV2 TmgzVUJ5Y2NhalRVUUNJcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFIy7YPthh1sufUpR5GtuHbZB8p72mmx8QGQDGboNcXvuWbCzdNBX6 RpDZDyDUY++hdUZpx6l57YRDIBQZP4HcRVs+k2SqyfJPT8X7FP4LEVbWU+0VIClm nlpYr1iDkq2ZKlL7KsOoycHwusSv5JaxXWG/NSrhXdxNx96U4wpzRLNGnyzECCij 9Rdq30G/cAo74wLhQ+cVcjlAhelEML7na9MKwS5H7+Hfu8sqwWj/xZfF+Z0ASwgQ wA4f2R18hdFhPVaVMuFEF21jj9H2fjz7q/CS1qRC/8H56Hx63XU8djfhidSAEGpv jN14a/yXQ2COVUpyHpGt2cVH5yeBPyg+ -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:02 2025 by rpki-client