$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: bGpxZRZ5FHAgh9cIUhhtE6cPsfGBPx+GjVsUJb6iWVc= Subject key identifier: A6:85:00:F4:E6:FE:8B:41:42:2C:CC:8E:A4:03:50:42:7F:18:FF:2C Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: E8 Signing time: Sun 19 Oct 2025 08:23:44 +0000 Manifest this update: Sun 19 Oct 2025 08:23:43 +0000 Manifest next update: Sun 26 Oct 2025 08:23:43 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: dTUJL68YNQpG7W7eUTwFK4cg4UH3zy6xjZg8heUzxsM=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: R4BuH0z4o97i8tZeyVvIgqOfDLo2IBdC5O5u6V1sdyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Oct 19 08:23:43 2025 GMT Not After : Oct 26 08:23:43 2025 GMT Subject: CN=68f4a00f-bfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:cc:f7:a7:e6:6c:0d:46:9e:e0:ec:e8:7f: c4:50:43:5f:66:e5:89:51:00:da:3d:0e:b7:b9:0d: 08:94:af:4f:99:b1:90:e5:ef:6f:ac:b8:1e:2b:f5: b8:98:47:e4:75:5d:e7:ad:f3:bf:7d:1b:65:86:1a: 93:1e:31:5d:16:2f:af:a9:c9:85:e9:ba:80:4f:21: 7f:42:b9:fb:0f:c1:9c:41:fc:07:aa:01:3c:7a:ec: 32:81:96:f8:0e:51:d9:7e:93:0b:97:ac:91:d4:6c: 80:a5:29:86:83:81:ec:99:e1:bc:a9:64:e1:2d:43: 09:ec:9f:91:c2:3a:2a:1f:3c:e3:76:d2:e7:21:0d: 37:bc:cc:85:1b:a7:09:ec:32:7d:8a:4a:c1:16:dd: 3c:50:9d:7d:e0:85:fe:89:3c:c1:4b:ea:9c:dc:98: d6:95:f2:2f:be:f5:2c:4f:0e:90:1b:38:96:07:46: 36:80:90:11:80:f1:5b:75:5b:62:6a:e0:af:71:f0: e4:f7:44:f2:63:cb:e3:4b:d8:f0:db:06:34:e2:54: 57:7b:03:40:b8:cd:50:7c:ce:41:1c:2b:c0:18:3b: 1c:15:6a:97:31:e9:4f:8b:e5:d0:c1:77:b7:fd:cb: cb:c9:57:43:1c:ad:9e:1d:ae:7c:8f:46:f7:c6:42: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:00:F4:E6:FE:8B:41:42:2C:CC:8E:A4:03:50:42:7F:18:FF:2C X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b3:e9:91:aa:79:6f:58:38:f7:27:ab:ea:92:0d:11:32:0d: 4d:ec:a6:79:96:bd:ca:fb:0e:23:3e:90:b6:57:c5:f7:9e:65: 0e:3a:d8:54:b2:6e:2c:1a:b1:c3:83:38:f3:62:d3:17:30:01: 17:c3:de:9d:60:9e:a1:94:03:3a:e1:ab:97:c2:08:d1:b7:80: 63:4e:bf:7b:26:41:81:28:b9:b4:8f:70:f1:ab:26:88:9e:3b: 9d:27:5a:9c:04:91:7b:2e:a8:fe:0c:df:99:2c:2e:0d:7f:66: 6c:ea:98:f8:ed:f3:03:f1:df:9d:12:a4:84:fd:cf:40:35:02: c0:89:a3:e3:f3:4e:2a:f2:20:56:0a:6a:0c:42:73:ec:47:c0: 65:c3:a0:41:46:37:d4:bc:99:ab:e1:36:80:fd:f6:a1:a4:f9: c3:b0:69:d6:fe:b4:21:b7:34:28:e7:93:75:5a:66:18:00:66: f1:ca:b2:30:2d:34:6c:63:1f:13:21:2b:c1:07:f3:8c:38:6b: 52:85:b8:01:09:21:64:32:6e:16:8a:09:05:00:94:e3:98:fe: 63:e0:42:65:a0:0b:e3:ad:b3:56:c5:ce:86:b3:da:b3:82:c4: 99:7f:0a:51:bf:91:88:d0:8f:d5:df:56:0d:0b:d7:95:4f:b0: 33:34:3f:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUxMDE5MDgyMzQzWhcNMjUxMDI2MDgyMzQzWjAYMRYwFAYD VQQDEw02OGY0YTAwZi1iZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8XM96fmbA1GnuDs6H/EUENfZuWJUQDaPQ63uQ0IlK9PmbGQ5e9vrLgeK/W4 mEfkdV3nrfO/fRtlhhqTHjFdFi+vqcmF6bqATyF/Qrn7D8GcQfwHqgE8euwygZb4 DlHZfpMLl6yR1GyApSmGg4HsmeG8qWThLUMJ7J+RwjoqHzzjdtLnIQ03vMyFG6cJ 7DJ9ikrBFt08UJ194IX+iTzBS+qc3JjWlfIvvvUsTw6QGziWB0Y2gJARgPFbdVti auCvcfDk90TyY8vjS9jw2wY04lRXewNAuM1QfM5BHCvAGDscFWqXMelPi+XQwXe3 /cvLyVdDHK2eHa58j0b3xkLLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaFAPTm /otBQizMjqQDUEJ/GP8sMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXs+mRqnlvWDj3J6vqkg0RMg1N7KZ5lr3K+w4jPpC2V8X3nmUOOthU sm4sGrHDgzjzYtMXMAEXw96dYJ6hlAM64auXwgjRt4BjTr97JkGBKLm0j3DxqyaI njudJ1qcBJF7Lqj+DN+ZLC4Nf2Zs6pj47fMD8d+dEqSE/c9ANQLAiaPj804q8iBW CmoMQnPsR8Blw6BBRjfUvJmr4TaA/fahpPnDsGnW/rQhtzQo55N1WmYYAGbxyrIw LTRsYx8TISvBB/OMOGtShbgBCSFkMm4WigkFAJTjmP5j4EJloAvjrbNWxc6Gs9qz gsSZfwpRv5GI0I/V31YNC9eVT7AzND+a -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:15 2025 by rpki-client