$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft File: p-wiWGgvb66fhDj6JicYnlQvTe8.mft (raw, json) Hash identifier: BZh6Xeto9g+4pquMYbA1V2iTJ2uEv/ab/KWZJ9lwWuI= Subject key identifier: 37:F8:F9:04:DC:94:BB:F3:F9:25:AF:92:F4:3B:54:A0:81:6B:F5:6B Authority key identifier: A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF Certificate issuer: /CN=A91FA92A/serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Certificate serial: 1A34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft Manifest number: 1A24 Signing time: Sat 18 Oct 2025 16:43:33 +0000 Manifest this update: Sat 18 Oct 2025 16:43:32 +0000 Manifest next update: Sat 25 Oct 2025 16:43:32 +0000 Files and hashes: 1: p-wiWGgvb66fhDj6JicYnlQvTe8.crl (hash: MyqYt66E2UNGquPmjfx8FCA2kRF9ruyj/W2vb1vVz1k=) 2: 3A1C441A5A4E11E7965D9A75C4F9AE02.roa (hash: Pn8qccQRQVn2V5b6lFX/FWa2+EXb/L20S5gebLb7vvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6708 (0x1a34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA92A, serialNumber=A7EC2258682F6FAE9F8438FA2627189E542F4DEF Validity Not Before: Oct 18 16:43:32 2025 GMT Not After : Oct 25 16:43:32 2025 GMT Subject: CN=68f3c3b5-4cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e1:ef:fd:8b:3e:44:a5:82:44:02:0e:f8:23: e4:31:ec:2f:14:92:58:a7:92:cd:b3:6e:df:c5:bf: c1:98:60:ef:dd:71:42:90:ff:71:ef:e7:13:72:c4: 86:99:48:86:92:04:5d:51:2c:9a:5b:aa:d9:62:4a: 96:e2:3e:40:69:ba:33:a0:ee:df:8c:2c:e7:7c:0b: f4:d9:87:28:04:05:65:d6:f0:32:47:fe:19:e2:cc: c8:5f:e6:6e:f4:47:d7:40:4a:79:e5:8b:fa:4d:57: 2c:29:0c:b6:75:ed:42:52:37:eb:e8:db:5e:8b:b3: 75:c0:80:66:fa:50:50:4c:49:35:b1:d4:c7:b4:5d: ce:f8:fc:0f:06:3d:88:6f:ca:86:8e:d8:40:b3:52: 0a:82:8d:c1:90:91:4f:89:e7:cb:8a:3b:4d:6b:a4: d5:72:0d:37:2e:9d:c3:55:07:b3:e6:e1:54:bd:4c: 05:01:5a:fc:e7:bd:d3:40:27:0a:c2:89:44:95:59: 68:11:35:64:26:7d:43:20:e5:e3:87:24:be:4d:7b: 01:b7:84:b2:54:97:3b:9d:9c:af:58:05:9b:99:50: f7:a8:03:b9:04:c2:a2:7b:02:48:54:17:e3:51:f8: e0:68:e3:e9:af:02:b2:b6:c4:9a:3d:9e:83:dd:7d: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:F9:04:DC:94:BB:F3:F9:25:AF:92:F4:3B:54:A0:81:6B:F5:6B X509v3 Authority Key Identifier: keyid:A7:EC:22:58:68:2F:6F:AE:9F:84:38:FA:26:27:18:9E:54:2F:4D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-wiWGgvb66fhDj6JicYnlQvTe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA92A/45797C5C5A4D11E799F46B74C4F9AE02/p-wiWGgvb66fhDj6JicYnlQvTe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4c:08:2b:75:c4:90:90:41:a9:a4:80:5d:6b:99:c4:9d:b9: dc:d1:85:22:ee:bd:46:c8:bd:33:75:bf:cc:cb:76:a2:15:08: 41:94:73:c9:b6:76:f0:71:82:aa:53:30:ac:47:9c:5a:05:b5: 90:bf:d6:71:7f:97:63:05:34:42:b3:22:a4:35:bb:dc:c0:72: 89:44:dc:4c:2a:2e:5e:c8:4a:e0:1a:d0:2c:e7:b5:0d:3d:35: e4:dc:79:22:46:ec:8d:12:46:bf:17:c1:1d:6c:7d:9c:55:92: 33:bd:c7:08:5a:93:00:c9:f4:01:b4:a6:01:98:8c:65:ed:11: 23:44:39:85:14:c2:95:e0:a4:c9:33:26:56:e5:dc:67:f8:3a: a5:74:a2:43:5b:4d:84:4d:47:c2:fa:3e:31:a6:8f:28:9b:7c: c3:c0:ac:39:ef:a8:a5:0e:dd:d4:f6:22:97:ba:19:00:1a:16: 0d:34:da:b7:e3:72:22:6f:df:24:82:c8:48:eb:1e:cf:9a:7d: 59:03:7e:df:66:5d:4f:ed:88:0e:b5:9b:bb:e1:09:cf:97:78: 87:02:0f:ec:77:59:99:01:48:7d:d7:21:7e:2d:6f:68:9f:0e: 10:b6:00:4f:9c:f5:27:2a:02:d7:d6:7a:86:26:3f:1f:0f:91: 70:8f:1f:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5MkExMTAvBgNVBAUTKEE3RUMyMjU4NjgyRjZGQUU5Rjg0MzhGQTI2MjcxODlF NTQyRjRERUYwHhcNMjUxMDE4MTY0MzMyWhcNMjUxMDI1MTY0MzMyWjAYMRYwFAYD VQQDEw02OGYzYzNiNS00Y2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OHv/Ys+RKWCRAIO+CPkMewvFJJYp5LNs27fxb/BmGDv3XFCkP9x7+cTcsSG mUiGkgRdUSyaW6rZYkqW4j5AabozoO7fjCznfAv02YcoBAVl1vAyR/4Z4szIX+Zu 9EfXQEp55Yv6TVcsKQy2de1CUjfr6Ntei7N1wIBm+lBQTEk1sdTHtF3O+PwPBj2I b8qGjthAs1IKgo3BkJFPiefLijtNa6TVcg03Lp3DVQez5uFUvUwFAVr8573TQCcK wolElVloETVkJn1DIOXjhyS+TXsBt4SyVJc7nZyvWAWbmVD3qAO5BMKiewJIVBfj UfjgaOPprwKytsSaPZ6D3X1nSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf4+QTc lLvz+SWvkvQ7VKCBa/VrMB8GA1UdIwQYMBaAFKfsIlhoL2+un4Q4+iYnGJ5UL03v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTkyQS80NTc5N0M1QzVB NEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2NmZoRGo2SmljWW5sUXZU ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Atd2lXR2d2YjY2ZmhEajZKaWNZbmxRdlRlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTkyQS80NTc5N0M1QzVBNEQxMUU3OTlGNDZCNzRDNEY5QUUwMi9wLXdpV0dndmI2 NmZoRGo2SmljWW5sUXZUZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2TAgrdcSQkEGppIBda5nEnbnc0YUi7r1GyL0zdb/My3aiFQhBlHPJ tnbwcYKqUzCsR5xaBbWQv9Zxf5djBTRCsyKkNbvcwHKJRNxMKi5eyErgGtAs57UN PTXk3HkiRuyNEka/F8EdbH2cVZIzvccIWpMAyfQBtKYBmIxl7REjRDmFFMKV4KTJ MyZW5dxn+DqldKJDW02ETUfC+j4xpo8om3zDwKw576ilDt3U9iKXuhkAGhYNNNq3 43Iib98kgshI6x7Pmn1ZA37fZl1P7YgOtZu74QnPl3iHAg/sd1mZAUh91yF+LW9o nw4QtgBPnPUnKgLX1nqGJj8fD5Fwjx/7 -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:33 2025 by rpki-client