$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: dQum0yhPBDtGcUD9Uw1Us9hlbKiKiF3IwxDCrz5nGPY= Subject key identifier: 8B:22:3A:C4:32:EA:B4:02:67:3C:5B:4B:FC:F0:DC:60:CA:B6:A2:86 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 095B Signing time: Sat 18 Oct 2025 21:12:44 +0000 Manifest this update: Sat 18 Oct 2025 21:12:43 +0000 Manifest next update: Sat 25 Oct 2025 21:12:43 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: kKTVBViW3YC/449jtQzr416qBCHzixNENi+06sdI18Q=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Oct 18 21:12:43 2025 GMT Not After : Oct 25 21:12:43 2025 GMT Subject: CN=68f402cc-ec9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:5e:e2:83:68:6f:56:1a:98:93:53:90:5e: 54:f3:59:07:cc:b4:af:b0:14:b7:6a:4b:59:19:6f: 84:d7:28:11:ee:e2:35:80:ef:08:30:10:33:32:35: 0e:7e:8e:40:55:19:b4:f8:09:17:7d:e9:07:c5:2e: 27:70:97:3c:61:03:f4:fe:9c:25:39:81:b5:5a:7b: 14:15:fb:c0:c9:a4:63:da:2c:69:14:56:2d:84:a9: 09:18:ee:32:0c:c4:e6:45:f9:69:37:cb:65:4e:39: 2f:6f:e3:99:f3:25:96:78:b4:fe:e1:58:a9:3c:36: 96:2a:81:7d:61:ab:d4:e8:79:9b:85:e4:4d:a5:5a: 95:64:30:f0:49:06:b2:0a:81:07:71:74:bb:41:4b: ce:ab:b3:6a:90:e5:79:20:f7:13:7e:7a:33:05:ee: 66:1a:fb:74:2c:8d:5e:27:df:54:7e:6d:11:57:29: 86:42:70:83:27:17:c3:d7:cd:18:a1:84:68:90:01: 8d:78:2a:8b:d3:ee:81:7c:31:d4:9a:78:80:d8:37: ef:71:33:45:e1:e6:60:68:e3:ca:02:63:64:ab:cd: cd:f2:17:60:57:ec:ed:4a:c2:9f:61:7f:78:9c:4e: a3:1b:2d:1f:fa:5d:74:4b:36:18:5b:ee:e7:d6:01: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:3A:C4:32:EA:B4:02:67:3C:5B:4B:FC:F0:DC:60:CA:B6:A2:86 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:cf:ca:26:4d:7a:0c:8b:ff:ce:f9:a2:95:61:8a:a5:d8:77: 8e:da:1f:1e:07:e6:86:41:02:15:56:b2:52:fe:d8:1d:f4:ad: cf:29:98:e8:3d:c7:e2:f8:74:76:83:ef:e7:35:86:c4:71:18: 4d:19:91:f2:33:72:43:a6:2f:66:51:2b:46:2d:44:a9:42:db: 27:30:52:2b:56:a9:3b:4e:ff:40:a5:8e:70:61:b4:8c:f9:70: e3:cf:7e:a0:2f:72:a7:ba:8a:f2:e5:b4:2f:0c:a3:fc:a6:21: 5e:e8:2d:3f:12:c2:6d:2a:26:3c:73:72:8e:77:1c:54:0c:b3: fe:3e:33:cd:9b:16:08:54:1e:0a:92:9a:76:ff:e6:9e:65:ef: 7a:db:a0:e9:94:c6:84:90:ca:a2:f9:93:78:1f:f0:1f:ad:05: 37:dd:6c:cd:ee:21:df:cf:22:b0:b3:24:1d:cf:66:7b:95:7b: f9:45:21:98:c9:60:4a:d5:6e:c8:90:db:aa:29:69:87:2d:2f: ec:b9:20:54:85:91:bf:2e:30:90:de:d2:5e:e5:d3:ca:04:70: 18:e4:af:1e:ea:43:15:45:8e:ee:9c:7f:ca:9d:db:e8:48:57: eb:e5:2e:a2:c4:5f:f2:fc:b2:37:b8:6b:90:c5:cb:df:6c:8b: e3:8c:db:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUxMDE4MjExMjQzWhcNMjUxMDI1MjExMjQzWjAYMRYwFAYD VQQDEw02OGY0MDJjYy1lYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Wde4oNob1YamJNTkF5U81kHzLSvsBS3aktZGW+E1ygR7uI1gO8IMBAzMjUO fo5AVRm0+AkXfekHxS4ncJc8YQP0/pwlOYG1WnsUFfvAyaRj2ixpFFYthKkJGO4y DMTmRflpN8tlTjkvb+OZ8yWWeLT+4VipPDaWKoF9YavU6HmbheRNpVqVZDDwSQay CoEHcXS7QUvOq7NqkOV5IPcTfnozBe5mGvt0LI1eJ99Ufm0RVymGQnCDJxfD180Y oYRokAGNeCqL0+6BfDHUmniA2DfvcTNF4eZgaOPKAmNkq83N8hdgV+ztSsKfYX94 nE6jGy0f+l10SzYYW+7n1gFrcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsiOsQy 6rQCZzxbS/zw3GDKtqKGMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDpz8omTXoMi//O+aKVYYql2HeO2h8eB+aGQQIVVrJS/tgd9K3PKZjo Pcfi+HR2g+/nNYbEcRhNGZHyM3JDpi9mUStGLUSpQtsnMFIrVqk7Tv9ApY5wYbSM +XDjz36gL3Knuory5bQvDKP8piFe6C0/EsJtKiY8c3KOdxxUDLP+PjPNmxYIVB4K kpp2/+aeZe9626DplMaEkMqi+ZN4H/AfrQU33WzN7iHfzyKwsyQdz2Z7lXv5RSGY yWBK1W7IkNuqKWmHLS/suSBUhZG/LjCQ3tJe5dPKBHAY5K8e6kMVRY7unH/Kndvo SFfr5S6ixF/y/LI3uGuQxcvfbIvjjNve -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:26 2025 by rpki-client