$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft File: 906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json) Hash identifier: 8p0fwyyDtRjb/CPezuHYLshu7ljcy56GsX+Vv/vpca4= Subject key identifier: E4:52:7D:40:96:23:0E:19:26:D7:30:77:F0:01:7B:71:AF:B7:6E:A7 Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D Certificate issuer: /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft Manifest number: 01DE Signing time: Sun 19 Oct 2025 05:09:55 +0000 Manifest this update: Sun 19 Oct 2025 05:09:54 +0000 Manifest next update: Sun 26 Oct 2025 05:09:54 +0000 Files and hashes: 1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: b6s6a2LLt2Bz+MX/Ll61547QJZjed9ouV7NmdnSEeuA=) 2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=) 3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=) 4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D Validity Not Before: Oct 19 05:09:54 2025 GMT Not After : Oct 26 05:09:54 2025 GMT Subject: CN=68f472a3-67da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:92:d2:7e:7b:90:4f:c5:22:55:11:1c:28:7e: 3b:9d:09:50:7b:5e:a5:2d:3c:6a:85:31:bf:05:99: 9d:91:bf:2a:b9:31:c9:7b:e9:65:da:5c:46:f0:99: 26:e6:b7:7c:85:51:33:9a:ba:20:66:97:82:d8:83: f6:84:b4:1f:69:ed:76:7b:ef:e3:72:82:25:f5:bd: 37:bb:df:7e:d5:5a:dd:8e:68:97:cb:14:f1:eb:7e: 3e:78:e4:9a:f4:9c:53:31:fc:7d:7a:43:61:8e:92: b9:f5:c3:79:b1:fd:ec:d5:07:20:7b:02:d4:65:78: 5d:08:8c:ad:1a:e9:03:6c:6f:23:4c:1b:ea:bd:90: 32:26:b4:31:18:5a:7f:d5:29:7a:f4:3d:3f:dc:c4: 3e:b1:12:ea:62:58:30:af:37:63:cf:55:e4:94:c8: 29:50:08:f3:55:f6:42:22:f0:43:aa:d5:0a:b9:01: 83:66:98:76:f5:70:92:38:1e:c7:68:66:95:b6:fb: 10:09:d0:8e:9e:a2:8a:c5:66:fe:55:c2:3d:b7:72: c6:0b:12:e8:cf:0a:1f:ac:94:fc:a6:8d:7b:ec:18: cb:3f:4b:f0:43:e8:bc:af:fc:c3:25:f0:4e:03:28: 1f:09:a7:a3:e8:6e:2c:39:80:78:8f:4d:7e:de:82: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:52:7D:40:96:23:0E:19:26:D7:30:77:F0:01:7B:71:AF:B7:6E:A7 X509v3 Authority Key Identifier: keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:04:70:56:a4:16:76:08:57:30:f4:dc:46:c7:c5:13:13:07: 76:8a:0f:3b:fb:38:68:5d:11:a9:bf:79:52:4f:07:f5:00:e1: 3d:eb:3f:df:54:25:22:97:f1:a2:d2:61:f7:14:f0:11:cd:ea: c6:44:28:ae:8e:07:1b:16:a5:1d:95:38:05:b3:02:7f:7f:3b: a8:e3:8c:52:dd:ae:89:b9:6c:ca:a1:60:cb:3a:90:0a:91:77: 8b:67:f2:cd:86:93:96:58:25:91:2b:9a:6b:2f:74:f6:c4:ed: 91:df:b8:c3:a9:d2:37:c2:3b:e2:27:d4:54:33:89:ea:97:2d: 11:55:e7:d1:4b:42:a7:bc:9e:a0:bd:b3:32:d9:05:c8:99:9a: 44:5a:42:06:be:33:62:6e:7f:3b:2c:22:da:2c:7d:6a:0a:03: 38:50:47:d2:28:e4:f7:88:4d:c1:2d:64:ed:44:15:6d:3b:ae: e1:8a:7a:40:c3:98:9b:6d:0b:3b:24:d8:84:f7:7d:63:2a:44: 07:47:b8:82:a2:c3:71:68:d4:30:7b:b8:01:f5:fe:46:39:08: fb:18:b6:f9:f6:e9:9e:fc:68:30:79:6c:ee:e8:a8:0c:27:c8: 9d:37:49:6b:7d:fa:28:32:6e:fe:01:28:0e:6e:0e:65:66:bc: b5:2c:8b:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAzMjkxMTAvBgNVBAUTKEY3NEU5NkNBOUVFOTM2MDc0NTY0MjkyOTYwRkJDMUY5 Q0YzNDg1NEQwHhcNMjUxMDE5MDUwOTU0WhcNMjUxMDI2MDUwOTU0WjAYMRYwFAYD VQQDEw02OGY0NzJhMy02N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZLSfnuQT8UiVREcKH47nQlQe16lLTxqhTG/BZmdkb8quTHJe+ll2lxG8Jkm 5rd8hVEzmrogZpeC2IP2hLQfae12e+/jcoIl9b03u99+1VrdjmiXyxTx634+eOSa 9JxTMfx9ekNhjpK59cN5sf3s1QcgewLUZXhdCIytGukDbG8jTBvqvZAyJrQxGFp/ 1Sl69D0/3MQ+sRLqYlgwrzdjz1XklMgpUAjzVfZCIvBDqtUKuQGDZph29XCSOB7H aGaVtvsQCdCOnqKKxWb+VcI9t3LGCxLozwofrJT8po177BjLP0vwQ+i8r/zDJfBO AygfCaej6G4sOYB4j01+3oI7DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORSfUCW Iw4ZJtcwd/ABe3Gvt26nMB8GA1UdIwQYMBaAFPdOlsqe6TYHRWQpKWD7wfnPNIVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDMyOS80NUQ2RUZGQ0Qz OUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5nZEZaQ2twWVB2Qi1jODBo VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwNld5cDdwTmdkRlpDa3BZUHZCLWM4MGhVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDMyOS80NUQ2RUZGQ0QzOUQxMUVEQkJDQjI4MEZDNEY5QUUwMi85MDZXeXA3cE5n ZEZaQ2twWVB2Qi1jODBoVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlBHBWpBZ2CFcw9NxGx8UTEwd2ig87+zhoXRGpv3lSTwf1AOE96z/f VCUil/Gi0mH3FPARzerGRCiujgcbFqUdlTgFswJ/fzuo44xS3a6JuWzKoWDLOpAK kXeLZ/LNhpOWWCWRK5prL3T2xO2R37jDqdI3wjviJ9RUM4nqly0RVefRS0KnvJ6g vbMy2QXImZpEWkIGvjNibn87LCLaLH1qCgM4UEfSKOT3iE3BLWTtRBVtO67hinpA w5ibbQs7JNiE931jKkQHR7iCosNxaNQwe7gB9f5GOQj7GLb59ume/GgweWzu6KgM J8idN0lrffooMm7+ASgObg5lZry1LItQ -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:40 2025 by rpki-client