$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: oldtEPU/IfSXlFy2D4RedWDzeTo3Gl/p9QsDdOyhGOQ= Subject key identifier: 17:B5:65:E9:60:D5:C8:EF:19:68:8A:27:67:4B:C6:89:8B:17:2E:1C Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 1165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 115B Signing time: Mon 20 Oct 2025 17:41:29 +0000 Manifest this update: Mon 20 Oct 2025 17:41:28 +0000 Manifest next update: Mon 27 Oct 2025 17:41:28 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: wkjRCQJZbYmZzG92LKB0BUBDHJiuUoBv9PKQ0Ifv5WQ=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: +yvtNS8LKQHKe3DTi4wIovOu3eQ4uVvjs9/gUB2eHD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4453 (0x1165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Oct 20 17:41:28 2025 GMT Not After : Oct 27 17:41:28 2025 GMT Subject: CN=68f67448-0047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:23:d4:39:aa:d6:d5:bf:72:5b:c8:a8:75: 1a:ba:5e:5f:41:27:26:4c:0b:58:81:4a:32:13:87: 86:12:e8:30:1c:dc:b9:1b:00:26:84:9c:6b:7d:fc: 0d:61:c4:67:63:30:6f:0c:52:cf:1e:95:91:df:79: 45:33:e4:53:ae:4d:39:81:3e:fc:96:35:ac:4a:ab: 5f:57:ca:7c:49:f4:62:30:d6:eb:ae:ee:fc:64:4d: 49:87:05:04:06:04:b2:7c:43:5b:fb:09:59:40:e0: 8d:ff:ba:4f:26:d3:f0:19:8e:44:ff:0a:f1:70:27: b9:aa:ad:4d:9c:85:1e:b9:f9:ae:7d:c5:d4:a3:e7: 06:53:1a:f9:2c:35:e3:48:ca:44:40:82:06:1f:df: e5:18:fd:4b:d9:ec:1f:38:37:50:fa:b3:f7:9f:43: 78:48:94:e2:99:a2:b7:35:73:40:c1:03:7c:18:f4: a7:a5:57:43:58:45:53:58:2f:90:b1:69:cd:3d:ae: cf:48:15:29:76:a0:45:e9:b8:2e:a2:28:72:b5:c1: 0b:4c:ce:35:ce:d2:ed:2b:eb:28:91:e6:fe:54:a8: 76:c2:95:64:99:af:7f:1d:eb:64:1e:28:db:3d:3d: d0:b9:71:6d:01:d2:9e:87:51:58:92:c5:67:b5:ee: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B5:65:E9:60:D5:C8:EF:19:68:8A:27:67:4B:C6:89:8B:17:2E:1C X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:3c:c0:24:bc:f8:86:0c:4b:49:c2:9c:e4:cc:a1:7e:67:36: 28:46:04:16:0e:eb:d1:27:26:e4:37:21:8b:4d:44:a8:a3:fc: c5:d5:e5:d8:0c:e6:65:f8:8e:32:1a:ae:97:75:86:18:d3:3d: 39:fe:f5:1c:3f:0e:a0:b8:2a:9b:b2:97:73:48:8f:6a:11:e1: 38:fe:01:27:b5:9e:99:09:59:b8:a5:7c:87:e3:65:52:15:7a: 5d:40:97:3f:d5:97:a6:7e:d0:30:85:25:2b:ba:49:99:cf:4b: c1:81:9e:42:46:50:19:33:3d:47:a4:79:57:bf:c4:55:96:0d: 37:ae:59:9e:15:98:b0:3b:22:56:7a:9b:e5:a6:2a:4c:fc:03: de:5c:cb:73:16:50:5b:49:ed:6c:b1:fb:84:e9:c0:88:88:5c: 37:93:01:cb:ea:38:da:55:73:82:8f:b4:cb:d1:23:1b:d0:dc: a6:79:d4:ed:22:7c:2d:70:c0:00:32:0e:ef:ae:98:7d:32:c3: 6a:e7:ea:4e:45:d9:bc:e6:8a:1b:1e:cb:f1:63:cd:27:05:f2: 74:73:31:92:05:48:85:ba:d0:3c:f7:f2:8a:bc:1b:a4:1b:a5: 35:f1:84:21:70:99:a5:9b:0d:b0:41:76:29:89:62:f8:4c:35: a0:c6:62:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUxMDIwMTc0MTI4WhcNMjUxMDI3MTc0MTI4WjAYMRYwFAYD VQQDEw02OGY2NzQ0OC0wMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth4j1Dmq1tW/clvIqHUaul5fQScmTAtYgUoyE4eGEugwHNy5GwAmhJxrffwN YcRnYzBvDFLPHpWR33lFM+RTrk05gT78ljWsSqtfV8p8SfRiMNbrru78ZE1JhwUE BgSyfENb+wlZQOCN/7pPJtPwGY5E/wrxcCe5qq1NnIUeufmufcXUo+cGUxr5LDXj SMpEQIIGH9/lGP1L2ewfODdQ+rP3n0N4SJTimaK3NXNAwQN8GPSnpVdDWEVTWC+Q sWnNPa7PSBUpdqBF6bguoihytcELTM41ztLtK+sokeb+VKh2wpVkma9/HetkHijb PT3QuXFtAdKeh1FYksVnte41TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe1Zelg 1cjvGWiKJ2dLxomLFy4cMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1PMAkvPiGDEtJwpzkzKF+ZzYoRgQWDuvRJybkNyGLTUSoo/zF1eXY DOZl+I4yGq6XdYYY0z05/vUcPw6guCqbspdzSI9qEeE4/gEntZ6ZCVm4pXyH42VS FXpdQJc/1ZemftAwhSUrukmZz0vBgZ5CRlAZMz1HpHlXv8RVlg03rlmeFZiwOyJW epvlpipM/APeXMtzFlBbSe1ssfuE6cCIiFw3kwHL6jjaVXOCj7TL0SMb0NymedTt InwtcMAAMg7vrph9MsNq5+pORdm85oobHsvxY80nBfJ0czGSBUiFutA89/KKvBuk G6U18YQhcJmlmw2wQXYpiWL4TDWgxmJ9 -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:03 2025 by rpki-client