$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json) Hash identifier: qaCbJAD4wzyMKuRHOXUyV9SAUDFQI0CKo9JIAisL/+4= Subject key identifier: FD:7F:5B:D8:E9:7F:80:F2:D1:1F:31:DD:D1:56:57:6D:0E:95:E3:66 Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 170D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft Manifest number: 16FD Signing time: Sat 18 Oct 2025 17:03:25 +0000 Manifest this update: Sat 18 Oct 2025 17:03:23 +0000 Manifest next update: Sat 25 Oct 2025 17:03:23 +0000 Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: ZvJ+hB5mK54L/lzHHg5yF3sYjH/DZZq9OuycF39+9ZU=) 2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: h+OprAj4V1ZkpAEr5nFzxG5bkNU3flbAc659nqXKwps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5901 (0x170d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Oct 18 17:03:23 2025 GMT Not After : Oct 25 17:03:23 2025 GMT Subject: CN=68f3c85c-80b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:d7:30:47:23:76:3d:6f:a2:2e:8b:9f:fc: bf:6c:3a:9a:c7:d9:6a:e4:5f:ba:51:35:36:d3:e6: d8:e8:76:20:ea:d5:a0:49:16:4f:33:4e:fa:6f:44: 0f:45:b9:61:b2:de:d8:67:85:6a:a4:6f:99:96:9a: 1b:42:3e:30:1b:ad:be:c6:cb:48:97:b4:fc:28:8b: 6c:ba:bc:c9:a8:a9:e4:41:b2:ca:78:e1:d2:55:43: a9:cb:6f:46:a6:47:49:2d:c9:32:c0:b6:e5:df:04: 39:e6:3b:67:2f:0f:ac:84:59:e3:eb:c8:da:5c:79: 47:9c:eb:f2:99:7b:50:d2:dc:37:be:4d:63:b4:53: ed:5c:6b:55:f9:ce:a6:01:bb:a2:e5:cc:52:81:d2: d2:d7:e0:c4:82:0d:19:72:f6:c8:e0:3c:ee:72:99: b0:01:a0:8c:e0:6a:1d:28:28:7b:c4:11:5d:73:57: 88:7a:7a:24:04:d5:5a:d7:57:8e:da:a9:dc:58:91: da:39:23:d3:b7:45:b8:65:ff:20:ef:60:ee:4c:9c: c0:13:f2:54:56:8c:53:ad:4c:8b:97:43:32:03:f7: 2f:56:5c:ba:ba:fc:ae:f0:03:b3:ec:c8:27:cf:44: 36:ae:02:2b:6c:34:8d:08:33:15:cf:b4:7a:e0:01: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:5B:D8:E9:7F:80:F2:D1:1F:31:DD:D1:56:57:6D:0E:95:E3:66 X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:5f:ca:ab:2c:66:c9:a3:71:8d:6a:82:cc:53:f5:31:33:43: 45:8c:75:e7:ec:2d:58:e7:fe:a3:97:b0:72:0c:00:2a:69:6a: 51:a0:3e:ad:77:65:c9:96:02:77:82:52:44:51:6a:8b:f9:db: 4f:95:1e:21:5c:27:e2:cf:0f:70:ec:7d:7a:d3:cc:cf:18:76: bf:44:d7:35:34:16:31:f3:6d:f7:93:2c:91:f4:46:bd:15:2a: e6:91:eb:69:fb:a7:dd:aa:74:c5:98:ae:c0:00:77:5d:4f:20: 57:9c:d5:0e:d4:7c:75:13:64:2e:46:9d:b4:85:4c:3c:21:a6: f2:25:bd:ce:93:62:71:ce:e4:e1:77:1d:49:af:5b:68:51:d1: c0:8b:b8:1f:44:5f:f4:4b:76:5b:07:2f:a2:d5:e8:04:ee:5a: bd:c0:89:45:6e:ba:ad:ea:2c:cc:ee:13:b3:63:39:cb:1f:7a: 66:61:bf:6b:21:12:f6:06:d8:10:5f:d3:2e:75:a2:9e:eb:21: 90:be:f8:02:2f:43:1f:87:4c:e8:ff:33:b0:71:0c:ae:df:2e: cd:40:f0:a7:ab:a9:fb:a0:9d:d5:c1:d7:50:e4:e9:2d:93:f4: 54:a3:f3:57:54:07:0d:3c:94:b6:00:0d:2c:5e:2f:95:8e:3a: 49:fd:a7:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUxMDE4MTcwMzIzWhcNMjUxMDI1MTcwMzIzWjAYMRYwFAYD VQQDEw02OGYzYzg1Yy04MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfTXMEcjdj1voi6Ln/y/bDqax9lq5F+6UTU20+bY6HYg6tWgSRZPM076b0QP Rblhst7YZ4VqpG+ZlpobQj4wG62+xstIl7T8KItsurzJqKnkQbLKeOHSVUOpy29G pkdJLckywLbl3wQ55jtnLw+shFnj68jaXHlHnOvymXtQ0tw3vk1jtFPtXGtV+c6m Abui5cxSgdLS1+DEgg0ZcvbI4DzucpmwAaCM4GodKCh7xBFdc1eIenokBNVa11eO 2qncWJHaOSPTt0W4Zf8g72DuTJzAE/JUVoxTrUyLl0MyA/cvVly6uvyu8AOz7Mgn z0Q2rgIrbDSNCDMVz7R64AHxbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1/W9jp f4Dy0R8x3dFWV20OleNmMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSX8qrLGbJo3GNaoLMU/UxM0NFjHXn7C1Y5/6jl7ByDAAqaWpRoD6t d2XJlgJ3glJEUWqL+dtPlR4hXCfizw9w7H1608zPGHa/RNc1NBYx8233kyyR9Ea9 FSrmketp+6fdqnTFmK7AAHddTyBXnNUO1Hx1E2QuRp20hUw8IabyJb3Ok2JxzuTh dx1Jr1toUdHAi7gfRF/0S3ZbBy+i1egE7lq9wIlFbrqt6izM7hOzYznLH3pmYb9r IRL2BtgQX9MudaKe6yGQvvgCL0Mfh0zo/zOwcQyu3y7NQPCnq6n7oJ3VwddQ5Okt k/RUo/NXVAcNPJS2AA0sXi+VjjpJ/aeV -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:34 2025 by rpki-client