$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: Cl+pPqWk7X6u86O0X2+4hLLnJLiFpr5a7bvSIzPyEHI= Subject key identifier: 8A:BD:A6:AC:C7:DC:27:60:85:B0:02:CB:FA:C0:75:45:8B:3B:9E:E5 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 2640 Signing time: Tue 16 Sep 2025 15:46:14 +0000 Manifest this update: Tue 16 Sep 2025 15:46:14 +0000 Manifest next update: Tue 23 Sep 2025 15:46:14 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: +OBxO4524Iplc56ViexFgldj8DsnfOyf9AIxTTpAR0k=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 15:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9830 (0x2666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Sep 16 15:46:14 2025 GMT Not After : Sep 23 15:46:14 2025 GMT Subject: CN=68c98646-0fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:5d:eb:2e:97:80:d8:2e:d2:d1:3b:90:1f: d1:fb:aa:ab:45:0f:4b:8e:05:c3:a5:17:9a:13:2b: 70:5d:a0:ee:d2:e0:71:a8:29:b4:ba:a0:fd:8b:5e: 36:ae:ea:29:d7:a9:50:40:e6:b2:fd:72:d6:bd:0d: ba:ec:52:2f:54:0a:5d:14:2a:eb:bf:c4:17:56:3b: 09:92:f8:47:61:d7:b0:5a:64:13:f0:9d:73:20:9e: 6c:73:f4:18:b3:d7:c8:14:25:bd:08:78:0f:a0:33: 79:38:27:a1:70:bc:6b:88:21:5d:19:a9:e9:d4:c3: ae:0e:f0:f3:92:3c:92:49:5c:d9:ed:34:36:26:46: ad:ac:bb:8b:69:40:60:c5:2f:71:0e:6a:6b:37:7a: ef:40:2f:c6:76:46:5a:67:42:2c:32:54:33:8c:21: 3d:e6:fe:7f:39:fc:be:e1:6a:7c:41:39:24:15:04: cb:75:66:4e:b0:d0:02:f2:33:a4:cc:51:d6:e6:d4: 45:23:90:06:36:40:45:d5:9d:b4:66:9d:19:5a:41: 03:b9:69:71:b2:34:ab:cc:7f:c6:03:16:ab:ba:15: 60:42:77:b4:83:56:10:90:83:8a:54:0b:65:d3:2e: f0:2d:0f:0a:2c:57:12:e7:59:5e:1d:6e:5b:78:a2: d1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BD:A6:AC:C7:DC:27:60:85:B0:02:CB:FA:C0:75:45:8B:3B:9E:E5 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:46:2b:df:d6:2e:53:a6:28:b0:66:7d:6c:5b:1d:4e:63:d9: 15:fb:3a:c4:a1:72:be:0c:e7:bf:72:f1:d4:e9:4b:ec:e2:10: c2:97:0d:c1:36:c3:69:16:79:59:0b:7f:39:97:98:8c:1c:b9: 61:e3:05:9f:81:03:70:46:04:81:61:61:22:58:74:1e:7d:b0: 02:e5:72:eb:96:a9:55:a5:f0:c5:5a:18:ae:3d:6f:de:84:9b: 92:f6:b5:a2:cc:2c:c9:8b:94:9e:20:e5:92:fc:23:57:1b:fb: 8a:41:fe:1c:94:79:93:10:a1:70:86:7e:6b:37:d3:90:f7:9b: 06:20:75:c7:8d:ad:15:7b:c7:58:f8:3b:a6:ad:ca:5e:b9:0a: a2:ab:29:f0:3b:a4:ea:90:22:9c:58:ad:67:dc:73:54:82:ec: ea:50:5a:61:5b:04:9e:9c:d1:bf:0b:31:92:63:b2:27:75:61: 1c:b8:91:3b:67:3b:44:e2:9e:20:03:d2:07:23:2c:ef:a8:61: ad:42:c3:b0:4e:a6:5b:ef:84:0d:6a:dc:37:17:84:64:0b:3d: bd:8f:aa:e2:d6:32:1c:4c:24:94:23:7d:21:83:70:be:f6:3e: 94:8b:89:ee:cd:5b:67:fd:39:ae:fd:7e:11:b9:2d:43:44:52: cf:2f:11:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwOTE2MTU0NjE0WhcNMjUwOTIzMTU0NjE0WjAYMRYwFAYD VQQDEw02OGM5ODY0Ni0wZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywdd6y6XgNgu0tE7kB/R+6qrRQ9LjgXDpReaEytwXaDu0uBxqCm0uqD9i142 ruop16lQQOay/XLWvQ267FIvVApdFCrrv8QXVjsJkvhHYdewWmQT8J1zIJ5sc/QY s9fIFCW9CHgPoDN5OCehcLxriCFdGanp1MOuDvDzkjySSVzZ7TQ2JkatrLuLaUBg xS9xDmprN3rvQC/GdkZaZ0IsMlQzjCE95v5/Ofy+4Wp8QTkkFQTLdWZOsNAC8jOk zFHW5tRFI5AGNkBF1Z20Zp0ZWkEDuWlxsjSrzH/GAxaruhVgQne0g1YQkIOKVAtl 0y7wLQ8KLFcS51leHW5beKLRnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIq9pqzH 3CdghbACy/rAdUWLO57lMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCRivf1i5TpiiwZn1sWx1OY9kV+zrEoXK+DOe/cvHU6Uvs4hDClw3B NsNpFnlZC385l5iMHLlh4wWfgQNwRgSBYWEiWHQefbAC5XLrlqlVpfDFWhiuPW/e hJuS9rWizCzJi5SeIOWS/CNXG/uKQf4clHmTEKFwhn5rN9OQ95sGIHXHja0Ve8dY +DumrcpeuQqiqynwO6TqkCKcWK1n3HNUguzqUFphWwSenNG/CzGSY7IndWEcuJE7 ZztE4p4gA9IHIyzvqGGtQsOwTqZb74QNatw3F4RkCz29j6ri1jIcTCSUI30hg3C+ 9j6Ui4nuzVtn/Tmu/X4RuS1DRFLPLxE/ -----END CERTIFICATE-----Generated at Thu Sep 18 08:39:54 2025 by rpki-client