$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json) Hash identifier: 8plqIpADIpz8jmAnUrxJZKXQ/39qLUPT2YRxcAPBYCM= Subject key identifier: 1A:5A:3C:29:45:A2:8E:F0:F8:0B:FA:B6:B7:71:00:6D:E0:F1:C6:F0 Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 1934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft Manifest number: 192B Signing time: Mon 20 Oct 2025 16:45:50 +0000 Manifest this update: Mon 20 Oct 2025 16:45:49 +0000 Manifest next update: Mon 27 Oct 2025 16:45:49 +0000 Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: I1vQfZNTrh+r5wAjgVi5ObsGuqu5qhbbQL0+2K8o59A=) 2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: yM+bb0tbw3lI4O8r0K9h632lO1j6QVkb8a+ZzJmYzqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6452 (0x1934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Oct 20 16:45:49 2025 GMT Not After : Oct 27 16:45:49 2025 GMT Subject: CN=68f6673d-dd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:a2:7d:e6:a5:98:7e:8b:8e:6a:97:4f:95: 23:49:f2:51:43:97:ab:cc:d1:24:f1:d2:f7:3a:90: 00:ec:83:50:3f:69:76:48:7d:9c:2e:4a:94:79:da: e3:d1:47:4b:ce:97:b9:94:5a:65:07:c7:56:f7:a6: 26:8d:55:13:bf:42:3c:32:ca:46:7f:63:55:4b:7a: cc:1a:6e:0a:39:09:85:06:0b:6e:8a:b6:ea:bc:5a: 13:9c:f7:07:5f:39:20:bd:3f:5b:29:6c:05:91:8b: 93:63:48:f7:0f:ff:8d:c2:85:22:83:8b:6f:12:78: 8b:53:64:6b:d7:1a:41:12:b4:58:49:64:16:55:a2: 64:58:32:99:9e:3f:d6:37:12:b8:94:1e:ec:16:e8: 3a:a6:08:d3:27:34:81:25:ee:72:9e:91:9e:c7:b5: 8a:1a:c2:a1:2c:32:4c:58:89:50:10:07:44:a7:63: 59:46:0a:65:e3:e3:40:ff:34:a2:84:04:4b:b0:b6: 5a:43:70:78:0d:3e:70:f3:c6:ae:ef:96:d5:3d:2b: f1:18:bd:38:87:47:5e:b9:79:d0:e5:54:8f:32:9d: be:6e:e4:fe:36:7e:e9:0b:78:6d:a6:9a:58:b9:f3: b9:eb:ae:0b:85:81:13:61:9a:53:2f:89:e2:7f:29: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:3C:29:45:A2:8E:F0:F8:0B:FA:B6:B7:71:00:6D:E0:F1:C6:F0 X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:50:31:22:d5:33:f9:c0:9f:08:e6:4a:39:a3:45:02:3d: 34:f0:a7:79:d8:ad:77:83:ca:e3:f5:1c:3d:3f:d1:2e:62:4e: c2:00:61:35:4d:4d:55:7b:67:4d:09:0f:52:37:76:61:a7:fa: 3e:c7:e7:4b:57:83:f7:83:8a:24:16:b8:d1:75:02:2e:9e:8f: 98:96:17:be:de:6c:c2:a9:2b:71:28:23:d6:00:ab:6b:72:ef: de:5c:44:54:17:a2:c1:a7:b9:4a:3e:b2:63:24:1a:7c:56:92: 80:28:52:8b:67:ac:35:8b:bc:56:84:a8:36:b3:2f:aa:d7:8d: c5:c1:51:fa:6e:ff:33:4b:17:dc:c2:58:07:e2:ab:22:64:a1: 0f:f4:a6:a6:cd:a1:c9:d0:8a:b1:f0:0e:06:1c:33:ef:54:aa: d9:cb:a9:ca:86:ec:26:70:d8:5d:68:3f:a4:79:18:4f:37:3f: 15:c7:7a:56:3b:98:95:6b:9b:7c:6c:98:a2:1f:65:49:ba:e0: 51:17:43:6c:9e:f9:ba:e0:67:26:3a:c0:45:99:ee:cf:93:00: ac:3b:26:1d:31:39:30:73:e9:76:53:58:1b:8c:bc:a0:59:e9: 41:9c:f0:a1:ba:39:81:53:05:39:b9:d3:7f:cd:67:5a:d5:ed: d7:cf:9e:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjUxMDIwMTY0NTQ5WhcNMjUxMDI3MTY0NTQ5WjAYMRYwFAYD VQQDEw02OGY2NjczZC1kZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroaifealmH6LjmqXT5UjSfJRQ5erzNEk8dL3OpAA7INQP2l2SH2cLkqUedrj 0UdLzpe5lFplB8dW96YmjVUTv0I8MspGf2NVS3rMGm4KOQmFBgtuirbqvFoTnPcH XzkgvT9bKWwFkYuTY0j3D/+NwoUig4tvEniLU2Rr1xpBErRYSWQWVaJkWDKZnj/W NxK4lB7sFug6pgjTJzSBJe5ynpGex7WKGsKhLDJMWIlQEAdEp2NZRgpl4+NA/zSi hARLsLZaQ3B4DT5w88au75bVPSvxGL04h0deuXnQ5VSPMp2+buT+Nn7pC3htpppY ufO5664LhYETYZpTL4nifykltwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpaPClF oo7w+Av6trdxAG3g8cbwMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t SU9zSnFyTGVyV0EwdUNqcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKvFAxItUz+cCfCOZKOaNFAj008Kd52K13g8rj9Rw9P9EuYk7CAGE1 TU1Ve2dNCQ9SN3Zhp/o+x+dLV4P3g4okFrjRdQIuno+Ylhe+3mzCqStxKCPWAKtr cu/eXERUF6LBp7lKPrJjJBp8VpKAKFKLZ6w1i7xWhKg2sy+q143FwVH6bv8zSxfc wlgH4qsiZKEP9KamzaHJ0Iqx8A4GHDPvVKrZy6nKhuwmcNhdaD+keRhPNz8Vx3pW O5iVa5t8bJiiH2VJuuBRF0Nsnvm64GcmOsBFme7PkwCsOyYdMTkwc+l2U1gbjLyg WelBnPChujmBUwU5udN/zWda1e3Xz57B -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:59 2025 by rpki-client