$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: ixWRgaNN59QiaYfLtonxj32EAsjX/LN3UapCXTnDGyQ= Subject key identifier: C9:20:DA:99:BF:43:4D:5C:29:44:72:3C:6D:EE:A0:CF:2E:A1:50:2E Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01EA Signing time: Sun 19 Oct 2025 04:59:10 +0000 Manifest this update: Sun 19 Oct 2025 04:59:09 +0000 Manifest next update: Sun 26 Oct 2025 04:59:09 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: azsrX9r9Z+qvS+vbMAijBZs25VgrYITTFXQa8dyDEdE=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Oct 19 04:59:09 2025 GMT Not After : Oct 26 04:59:09 2025 GMT Subject: CN=68f4701e-b3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:76:6b:98:cf:04:b4:42:a1:37:2f:62:ae: 8d:69:e5:7a:1d:68:e9:7a:ce:6c:22:a1:a2:d7:38: 66:71:fc:0c:d9:fe:20:db:35:b9:75:0d:e3:42:60: d0:de:6b:00:d3:aa:a9:5f:d5:fe:4c:a1:24:26:c6: 51:b7:c5:c5:de:50:37:75:5f:eb:48:c1:15:41:26: b8:a9:79:e3:d0:b0:93:a5:10:ca:64:cd:77:8e:be: a3:75:e4:e5:62:c2:c7:64:b3:cb:79:5c:d7:27:3e: bc:e5:da:7e:ee:b9:72:6d:75:4f:cd:86:b9:06:53: 0b:fc:ab:43:7d:be:5c:70:fa:45:32:91:40:42:68: 0b:9d:56:0e:fc:0b:36:48:19:90:5a:40:9c:d5:42: a5:ce:99:c0:f1:88:77:7a:6d:98:5f:4e:3e:70:51: c1:dc:05:c7:c5:38:44:55:61:2d:67:db:07:f5:d3: a4:5c:b9:92:05:0c:1b:97:b3:4e:35:97:0e:65:7f: 25:2d:ff:81:97:3e:5c:20:37:b0:62:cb:7b:e0:45: 9a:4b:61:66:52:a5:52:b1:a7:88:73:d1:fd:30:df: cf:1a:d7:83:0a:c6:cc:5e:9d:28:e4:7e:f7:08:9c: 17:8a:32:8f:02:bb:48:76:14:f7:01:e2:8e:f3:f9: 0c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:DA:99:BF:43:4D:5C:29:44:72:3C:6D:EE:A0:CF:2E:A1:50:2E X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8f:4c:cf:c1:08:f8:5c:de:cb:3c:b8:5b:aa:83:05:2e:77: f9:be:86:98:69:8a:3c:04:1d:8f:d6:20:5c:3f:52:b4:bd:97: 94:5a:b8:24:e3:bd:3c:a7:65:83:39:32:a8:66:90:09:56:ae: 33:06:a5:7b:53:83:50:b3:24:7f:80:71:1b:b5:89:32:8a:a1: 8b:14:a5:a9:30:a5:99:9b:5f:c7:2a:7e:61:30:a9:f7:62:62: 4a:65:a9:12:50:97:f4:c2:4e:6e:25:4d:c8:31:dc:3c:15:d5: dc:0b:81:0c:a9:0d:e9:bc:bb:f8:27:f4:44:a5:9c:84:72:7d: 27:6f:38:dd:95:98:4b:1a:6f:b3:b3:e2:90:a0:6b:dc:20:f1: a2:8b:64:03:9a:03:1a:a3:75:fe:c4:c2:7d:3e:04:04:6d:95: c5:ae:cc:5b:71:6a:ff:61:7f:73:0b:f4:cd:16:ec:6f:f0:4d: 4a:c3:bc:50:cf:ef:ae:a8:fa:26:84:dd:c1:1f:46:a1:1d:f8: d6:97:d2:f5:fa:6d:52:2d:75:bd:33:00:f5:c0:e0:36:e8:80: 3b:79:37:99:73:ea:d4:55:fe:53:98:16:35:05:57:5a:d1:ea: df:13:90:7e:fa:a6:b5:8c:ea:a1:e3:4c:bb:7c:76:81:ee:21: c8:25:41:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUxMDE5MDQ1OTA5WhcNMjUxMDI2MDQ1OTA5WjAYMRYwFAYD VQQDEw02OGY0NzAxZS1iM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR12a5jPBLRCoTcvYq6NaeV6HWjpes5sIqGi1zhmcfwM2f4g2zW5dQ3jQmDQ 3msA06qpX9X+TKEkJsZRt8XF3lA3dV/rSMEVQSa4qXnj0LCTpRDKZM13jr6jdeTl YsLHZLPLeVzXJz685dp+7rlybXVPzYa5BlML/KtDfb5ccPpFMpFAQmgLnVYO/As2 SBmQWkCc1UKlzpnA8Yh3em2YX04+cFHB3AXHxThEVWEtZ9sH9dOkXLmSBQwbl7NO NZcOZX8lLf+Blz5cIDewYst74EWaS2FmUqVSsaeIc9H9MN/PGteDCsbMXp0o5H73 CJwXijKPArtIdhT3AeKO8/kM0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkg2pm/ Q01cKURyPG3uoM8uoVAuMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpj0zPwQj4XN7LPLhbqoMFLnf5voaYaYo8BB2P1iBcP1K0vZeUWrgk 4708p2WDOTKoZpAJVq4zBqV7U4NQsyR/gHEbtYkyiqGLFKWpMKWZm1/HKn5hMKn3 YmJKZakSUJf0wk5uJU3IMdw8FdXcC4EMqQ3pvLv4J/REpZyEcn0nbzjdlZhLGm+z s+KQoGvcIPGii2QDmgMao3X+xMJ9PgQEbZXFrsxbcWr/YX9zC/TNFuxv8E1Kw7xQ z++uqPomhN3BH0ahHfjWl9L1+m1SLXW9MwD1wOA26IA7eTeZc+rUVf5TmBY1BVda 0erfE5B++qa1jOqh40y7fHaB7iHIJUE+ -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:46 2025 by rpki-client