$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: WWhx+wqA6ars8/Q/q3LF7Xeg/Efggf3XyQ54GcfgfBQ= Subject key identifier: A9:AA:2F:D2:61:89:E0:E8:D6:B3:11:9E:BE:18:32:01:A5:1A:28:99 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 096C Signing time: Mon 20 Oct 2025 20:58:05 +0000 Manifest this update: Mon 20 Oct 2025 20:58:05 +0000 Manifest next update: Mon 27 Oct 2025 20:58:05 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: RJNfxgIe9g8ojUz+eXGtdF0yQo6x4vl5vTd1kxbPQMw=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2419 (0x973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Oct 20 20:58:05 2025 GMT Not After : Oct 27 20:58:05 2025 GMT Subject: CN=68f6a25d-b3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:04:e2:3e:69:11:d8:8a:4f:25:0a:eb:b1: 68:c8:ee:50:82:3b:e5:de:ba:d0:7d:4b:63:e8:bc: 41:62:a2:cf:15:d6:5a:23:cf:ab:b3:b7:5e:4b:9d: 47:eb:14:78:26:07:55:53:ce:2b:24:a8:39:a4:ea: 71:7a:49:c6:68:be:f7:7a:c7:b8:61:c8:93:39:a5: f1:82:b5:a6:c8:53:03:ba:55:e7:a8:05:49:ba:5d: 2a:79:c0:f7:6c:2f:7a:d1:f7:18:27:64:ef:27:0b: 76:a4:50:5a:a6:49:85:bf:2d:66:d4:9f:d2:4d:8c: 05:bc:81:3c:79:45:e7:29:ad:a5:e2:33:b6:65:ad: 12:dd:48:dd:1d:7d:5c:9f:10:85:28:bf:f6:76:af: f8:a0:c3:17:c3:db:08:1c:31:a9:c4:88:d8:85:ab: 96:9b:00:14:05:a4:1a:ef:db:e9:52:7d:cd:8d:11: 4f:22:e2:39:92:1f:3b:7d:ef:eb:28:bb:7c:8a:99: 10:8f:b0:9b:e4:24:b0:b1:08:75:ff:e5:46:53:26: 9b:28:5d:3f:55:ae:0b:5f:21:f3:0d:e3:86:3b:61: db:20:97:d0:0d:26:79:a2:06:aa:e9:77:d0:a9:9e: 94:87:fd:ee:96:15:7b:24:3b:ad:26:6f:ca:8e:d6: ac:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AA:2F:D2:61:89:E0:E8:D6:B3:11:9E:BE:18:32:01:A5:1A:28:99 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:03:13:44:c9:2f:54:54:3a:29:77:0b:d5:1a:e8:78:18:01: c5:40:60:12:f6:9b:c2:a0:da:7f:e3:3b:a4:71:ad:c9:09:3d: 88:1e:73:da:bb:4e:66:b8:6a:ba:12:7f:66:18:22:e7:80:f3: c9:be:84:00:38:4a:b4:4c:63:4a:1d:39:b6:06:3c:c2:5f:e2: de:91:23:91:fb:3e:a6:30:fa:9c:b7:20:ca:4f:9a:43:4c:49: bd:89:21:8f:5d:49:3e:cc:ab:45:e6:62:e1:ad:69:1f:b8:20: 5b:0e:34:01:f2:16:a7:80:72:cf:fa:05:a1:d5:10:37:30:a6: c9:52:ba:d5:ee:72:02:a0:96:fd:f8:22:05:8f:3c:15:67:16: ef:0a:60:14:53:08:ba:0e:d0:9a:18:e1:c6:20:b3:fa:4d:e9: 11:be:83:b6:7e:32:b5:74:48:04:6e:df:c5:1b:f1:d4:a6:3b: ec:86:29:7d:5c:9c:66:ca:c1:4c:86:da:df:a2:39:99:26:ab: ef:ea:b7:b3:c4:5c:17:b5:66:dc:4e:39:8f:55:da:d1:ec:52: a6:f0:be:51:a4:13:5d:3d:7b:81:3c:ab:14:d7:ac:ae:6b:6c: 54:44:77:1c:2a:66:1c:08:ff:5a:af:a2:85:7f:37:6b:41:a2: 25:6c:b9:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUxMDIwMjA1ODA1WhcNMjUxMDI3MjA1ODA1WjAYMRYwFAYD VQQDEw02OGY2YTI1ZC1iM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwAE4j5pEdiKTyUK67FoyO5Qgjvl3rrQfUtj6LxBYqLPFdZaI8+rs7deS51H 6xR4JgdVU84rJKg5pOpxeknGaL73ese4YciTOaXxgrWmyFMDulXnqAVJul0qecD3 bC960fcYJ2TvJwt2pFBapkmFvy1m1J/STYwFvIE8eUXnKa2l4jO2Za0S3UjdHX1c nxCFKL/2dq/4oMMXw9sIHDGpxIjYhauWmwAUBaQa79vpUn3NjRFPIuI5kh87fe/r KLt8ipkQj7Cb5CSwsQh1/+VGUyabKF0/Va4LXyHzDeOGO2HbIJfQDSZ5ogaq6XfQ qZ6Uh/3ulhV7JDutJm/KjtasPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmqL9Jh ieDo1rMRnr4YMgGlGiiZMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9AxNEyS9UVDopdwvVGuh4GAHFQGAS9pvCoNp/4zukca3JCT2IHnPa u05muGq6En9mGCLngPPJvoQAOEq0TGNKHTm2BjzCX+LekSOR+z6mMPqctyDKT5pD TEm9iSGPXUk+zKtF5mLhrWkfuCBbDjQB8hangHLP+gWh1RA3MKbJUrrV7nICoJb9 +CIFjzwVZxbvCmAUUwi6DtCaGOHGILP6TekRvoO2fjK1dEgEbt/FG/HUpjvshil9 XJxmysFMhtrfojmZJqvv6rezxFwXtWbcTjmPVdrR7FKm8L5RpBNdPXuBPKsU16yu a2xURHccKmYcCP9ar6KFfzdrQaIlbLl7 -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:18 2025 by rpki-client