$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json) Hash identifier: 66En9fsQICImd5eYc9HbcLJ/kQwbJ7ousbEUixTz9b8= Subject key identifier: 45:20:E7:A3:67:0C:C6:BB:91:13:58:C8:09:E0:26:C1:A5:5D:64:20 Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft Manifest number: D4 Signing time: Sun 19 Oct 2025 08:41:46 +0000 Manifest this update: Sun 19 Oct 2025 08:41:46 +0000 Manifest next update: Sun 26 Oct 2025 08:41:46 +0000 Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: xeS/q3fxy7qvTx6JmIT1ffndfapVk4eC8USc8Nq7Orc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Validity Not Before: Oct 19 08:41:46 2025 GMT Not After : Oct 26 08:41:46 2025 GMT Subject: CN=68f4a44a-4a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:80:5d:a4:22:63:a8:e4:0f:43:5b:fe:85:59: 58:2b:3c:0c:1d:d6:ac:fa:67:0a:50:ad:ff:48:18: 7e:64:4d:47:71:65:96:91:8d:39:9d:1c:d2:84:ed: 17:7d:d4:65:1a:a6:2a:72:0b:70:54:5c:fa:d6:94: b6:96:34:84:4f:18:e4:ee:5d:60:b6:65:3e:95:f8: 4b:df:f7:a2:ef:bc:9f:95:7e:cb:5c:42:34:9d:d7: 40:f7:3e:72:9e:b2:64:fa:2a:0a:1e:2c:ae:64:51: d3:53:e5:f8:6f:2e:6f:c5:94:65:7d:3b:2c:7b:86: 0a:e7:35:76:84:eb:cb:29:98:c1:e5:8c:23:3c:74: 32:31:83:35:91:15:13:09:77:a7:60:a9:82:3a:3f: f6:0c:a3:c1:3a:f7:12:81:2c:f1:e3:5d:09:be:46: ae:6c:38:55:3b:a5:f9:67:d1:06:f5:12:05:5f:f6: 6d:31:62:25:e0:e5:96:d3:a4:f4:66:cf:8c:47:12: 5b:88:b3:64:a8:45:b9:da:d1:f7:16:19:08:95:81: cc:d6:27:20:70:b4:a8:99:64:63:20:82:30:36:47: 11:e2:21:e0:e4:a2:65:fa:fc:1c:21:90:4e:ca:50: 50:e3:74:b4:27:6b:74:4e:7a:1a:1e:fb:fc:60:31: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:20:E7:A3:67:0C:C6:BB:91:13:58:C8:09:E0:26:C1:A5:5D:64:20 X509v3 Authority Key Identifier: keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e0:8a:18:09:2b:27:ed:94:02:f3:3d:48:eb:51:bf:33:7d: da:19:c5:d6:18:21:a3:ca:2c:c2:87:91:01:4b:f4:11:78:f1: 72:36:79:e2:19:a5:a8:55:b2:7d:63:70:1f:fe:56:97:64:3e: 80:95:7e:80:44:2d:5a:5d:7b:2f:11:f1:40:e2:9b:ad:4c:c9: 83:f3:4d:30:6f:d1:15:b8:bf:04:9c:c9:fe:06:de:44:27:42: ed:7e:35:af:e4:8a:0a:22:32:e5:08:25:fd:84:e4:ad:cf:8e: c1:6b:3b:a0:cb:ec:ed:dd:52:62:2c:e2:57:9c:48:7c:c9:a7: ad:6a:26:52:c6:d8:ae:c5:48:59:72:d9:0b:59:05:91:20:69: 22:6d:01:27:bc:0b:da:3b:5c:4e:69:b7:23:c4:e3:46:43:3b: 6c:4c:cf:ef:35:8d:09:3b:8b:07:3b:0b:b6:6f:cd:15:16:e2: 10:85:22:67:40:e7:84:aa:e6:d9:7e:1f:ca:9b:0d:cb:42:11: 71:4b:7b:d5:1d:b2:d5:46:56:b0:79:0d:51:98:42:4e:36:0a: ab:83:13:29:ab:76:70:cb:25:ed:c1:f0:c8:08:74:71:bc:a6: 7c:00:d2:e6:5c:4d:6d:94:b5:a2:30:dc:53:e9:bd:4d:20:d8: 09:9e:e8:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKEMyOTYzRjNBODU0RkQ2RDRFNjEwMTk5RTY3NDA4M0Q4 QUFBMTJFNTAwHhcNMjUxMDE5MDg0MTQ2WhcNMjUxMDI2MDg0MTQ2WjAYMRYwFAYD VQQDEw02OGY0YTQ0YS00YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YBdpCJjqOQPQ1v+hVlYKzwMHdas+mcKUK3/SBh+ZE1HcWWWkY05nRzShO0X fdRlGqYqcgtwVFz61pS2ljSETxjk7l1gtmU+lfhL3/ei77yflX7LXEI0nddA9z5y nrJk+ioKHiyuZFHTU+X4by5vxZRlfTsse4YK5zV2hOvLKZjB5YwjPHQyMYM1kRUT CXenYKmCOj/2DKPBOvcSgSzx410JvkaubDhVO6X5Z9EG9RIFX/ZtMWIl4OWW06T0 Zs+MRxJbiLNkqEW52tH3FhkIlYHM1icgcLSomWRjIIIwNkcR4iHg5KJl+vwcIZBO ylBQ43S0J2t0TnoaHvv8YDHWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUg56Nn DMa7kRNYyAngJsGlXWQgMB8GA1UdIwQYMBaAFMKWPzqFT9bU5hAZnmdAg9iqoS5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wQjJFOEI1MDY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0VG1FQm1lWjBDRDJLcWhM bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wQjJFOEI1MDY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0 VG1FQm1lWjBDRDJLcWhMbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe4IoYCSsn7ZQC8z1I61G/M33aGcXWGCGjyizCh5EBS/QRePFyNnni GaWoVbJ9Y3Af/laXZD6AlX6ARC1aXXsvEfFA4putTMmD800wb9EVuL8EnMn+Bt5E J0LtfjWv5IoKIjLlCCX9hOStz47Bazugy+zt3VJiLOJXnEh8yaetaiZSxtiuxUhZ ctkLWQWRIGkibQEnvAvaO1xOabcjxONGQztsTM/vNY0JO4sHOwu2b80VFuIQhSJn QOeEqubZfh/Kmw3LQhFxS3vVHbLVRlaweQ1RmEJONgqrgxMpq3ZwyyXtwfDICHRx vKZ8ANLmXE1tlLWiMNxT6b1NINgJnug5 -----END CERTIFICATE-----Generated at Tue Oct 21 00:11:14 2025 by rpki-client