$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: NuVBNOKwDyZT58w3hjUHW2o9M2fW4VI12l3U0oNT5ew= Subject key identifier: 02:3F:E1:8C:CD:79:90:B1:7B:F7:C0:58:D1:9F:2F:4A:98:A2:F4:85 Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 08AA Signing time: Sat 18 Oct 2025 21:39:32 +0000 Manifest this update: Sat 18 Oct 2025 21:39:32 +0000 Manifest next update: Sat 25 Oct 2025 21:39:32 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: /AHAQDU4MO31ak2uVS+XJGRx41KzJU21GsX1rSlmeAY=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Oct 18 21:39:32 2025 GMT Not After : Oct 25 21:39:32 2025 GMT Subject: CN=68f40914-ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:17:12:87:5f:f8:e6:e2:f8:5b:7c:0b:d6: 6a:28:66:c4:61:93:6a:9c:c3:87:ec:79:ad:ef:23: 98:80:d3:a3:2d:8c:98:5e:1a:b4:38:92:d4:a4:cb: 06:1d:e1:2f:85:5d:b9:7a:15:37:85:f1:a5:87:7d: 86:8d:35:24:02:d7:01:ef:fb:db:f5:0c:1e:e4:dc: 22:74:db:ed:5c:71:a4:ff:0a:71:f9:8a:6c:40:72: b9:51:fd:47:c8:39:a3:cc:26:33:2a:f2:43:28:d6: 6d:91:9f:54:0a:69:00:9f:61:25:a8:6e:be:59:ff: 31:43:65:cf:c8:2f:ee:83:ca:ba:b5:a4:15:41:2a: 56:62:71:20:62:25:49:97:c4:49:9b:13:32:7c:6f: 63:6b:5b:4a:ab:3a:0b:2c:9a:c6:b0:05:80:8f:05: d2:92:19:51:db:39:19:35:5b:8d:32:94:fd:a7:fc: ea:a0:c4:d6:fc:3a:6a:70:53:13:6c:7f:ca:bc:92: cc:bc:27:41:db:73:09:b3:6d:71:8e:91:19:be:18: c4:29:25:57:d4:22:41:fe:e4:0c:4e:b7:09:e6:aa: a7:c7:67:f5:f2:54:3e:cb:89:bd:2a:22:7c:06:76: 12:33:d2:f0:9c:69:b9:0e:1e:9f:ce:aa:88:be:27: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3F:E1:8C:CD:79:90:B1:7B:F7:C0:58:D1:9F:2F:4A:98:A2:F4:85 X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:8f:78:5d:e8:72:fb:33:47:6a:74:31:87:f1:f0:b9:23:4c: b0:a7:73:02:ac:a2:db:8b:85:fa:ef:ca:c3:97:17:ec:e9:2b: 83:68:2a:e1:d7:a7:11:e7:85:15:da:c4:78:ea:93:19:9e:8e: 11:99:8b:5b:46:92:31:8d:f0:20:85:ff:4d:43:62:dc:79:93: 9e:30:61:73:8d:54:4f:93:ea:9b:38:97:40:8d:c6:d6:5d:ec: 9b:95:1c:41:07:63:69:24:89:ce:cb:fa:e0:cf:77:1c:94:9d: 69:f2:46:f9:1e:db:2e:ef:a1:d4:93:51:87:f1:4b:10:73:e3: 6d:00:3b:ab:0d:3b:dc:ff:86:de:ab:43:3f:06:15:d9:e6:7b: bf:5e:04:a9:fc:54:d4:7a:b1:12:2b:df:cd:4d:4c:3e:1c:a6: cf:f5:77:ed:63:88:25:76:e8:bb:24:ba:56:8a:66:da:b7:91: 0e:ca:fc:6f:c3:53:fb:36:e9:01:63:b7:c0:f6:ca:43:52:bf: 1b:ee:5d:2a:88:44:38:9a:97:f9:2c:f1:a2:61:23:61:4a:a2: b6:a1:3b:4e:38:df:db:fa:88:b9:08:b1:33:06:b4:c9:48:da: f7:9d:06:7e:c6:80:9b:5c:c3:ab:d3:11:71:bf:6e:88:f8:9f: 6a:cf:b5:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUxMDE4MjEzOTMyWhcNMjUxMDI1MjEzOTMyWjAYMRYwFAYD VQQDEw02OGY0MDkxNC1lY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FgXEodf+Obi+Ft8C9ZqKGbEYZNqnMOH7Hmt7yOYgNOjLYyYXhq0OJLUpMsG HeEvhV25ehU3hfGlh32GjTUkAtcB7/vb9Qwe5NwidNvtXHGk/wpx+YpsQHK5Uf1H yDmjzCYzKvJDKNZtkZ9UCmkAn2ElqG6+Wf8xQ2XPyC/ug8q6taQVQSpWYnEgYiVJ l8RJmxMyfG9ja1tKqzoLLJrGsAWAjwXSkhlR2zkZNVuNMpT9p/zqoMTW/DpqcFMT bH/KvJLMvCdB23MJs21xjpEZvhjEKSVX1CJB/uQMTrcJ5qqnx2f18lQ+y4m9KiJ8 BnYSM9LwnGm5Dh6fzqqIvie8iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAI/4YzN eZCxe/fAWNGfL0qYovSFMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGj3hd6HL7M0dqdDGH8fC5I0ywp3MCrKLbi4X678rDlxfs6SuDaCrh 16cR54UV2sR46pMZno4RmYtbRpIxjfAghf9NQ2LceZOeMGFzjVRPk+qbOJdAjcbW XeyblRxBB2NpJInOy/rgz3cclJ1p8kb5Htsu76HUk1GH8UsQc+NtADurDTvc/4be q0M/BhXZ5nu/XgSp/FTUerESK9/NTUw+HKbP9XftY4gldui7JLpWimbat5EOyvxv w1P7NukBY7fA9spDUr8b7l0qiEQ4mpf5LPGiYSNhSqK2oTtOON/b+oi5CLEzBrTJ SNr3nQZ+xoCbXMOr0xFxv26I+J9qz7Va -----END CERTIFICATE-----Generated at Mon Oct 20 13:51:43 2025 by rpki-client