$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json) Hash identifier: Oo7c/Zb4VICg2xXaFdpO/pwwtePLqcrH0VETo1ANmAQ= Subject key identifier: 21:A4:3D:0A:7F:E9:D5:F4:BB:24:C7:E8:AB:92:E9:34:54:EF:F9:33 Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft Manifest number: 11 Signing time: Thu 16 Oct 2025 22:23:22 +0000 Manifest this update: Thu 16 Oct 2025 22:23:21 +0000 Manifest next update: Thu 23 Oct 2025 22:23:21 +0000 Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: GUInrIXmhoRoWbFL7tHhzSGoPK4JFr49hwxZDOKO3lQ=) 2: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4IjRBRyjuEdbkIY8f1/iw3KdwGSRgiR78o99r2JvTFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 22:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE Validity Not Before: Oct 16 22:23:21 2025 GMT Not After : Oct 23 22:23:21 2025 GMT Subject: CN=68f17059-1ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:6c:5a:a7:90:9f:8d:a3:0b:33:67:ed:8d: 34:b3:b8:38:a6:d6:f8:de:89:d2:a5:c2:be:fd:3a: a3:b0:34:81:70:bf:96:c9:f1:6f:46:ca:88:6b:cd: f1:e7:7f:fa:a4:5c:97:4c:31:e7:29:ef:ec:c8:dc: f3:d5:86:c2:be:f2:c8:05:4c:d9:33:1a:27:7e:2f: c3:58:99:53:7e:65:e3:3f:b0:5f:cb:5f:cc:2c:2d: cb:6f:98:83:53:08:26:16:95:03:5b:e6:ee:e8:53: 36:ba:79:ad:ae:0a:5e:19:76:bf:a2:5c:81:af:a8: 0b:64:c3:8a:1e:28:a6:e3:3a:3b:d2:d1:03:c6:cf: f9:c8:5d:d9:c3:50:68:7d:b8:15:3a:96:e0:53:68: fc:d7:d1:fb:48:b9:42:c8:c9:d0:01:47:d6:62:8b: 03:a9:50:6f:66:a3:01:4b:58:65:ff:c8:c7:6c:f9: ed:13:d9:86:6a:3b:69:8e:f2:de:29:95:4b:22:09: e4:83:fa:0c:b8:a6:d8:cb:2e:4e:18:e1:80:9c:2d: 92:79:58:4a:77:fb:7a:33:f9:1a:6d:c8:41:9f:e0: 12:24:51:13:d5:00:b8:09:21:2e:dc:3a:31:4c:e6: 47:8f:ec:65:24:93:83:37:59:6c:e6:2a:53:0d:79: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A4:3D:0A:7F:E9:D5:F4:BB:24:C7:E8:AB:92:E9:34:54:EF:F9:33 X509v3 Authority Key Identifier: keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d6:32:59:52:0e:3e:78:1a:e2:86:85:ed:4a:e9:a9:fa:41: 5c:1d:92:6c:53:c6:e5:5b:1c:af:14:21:56:a6:b9:d8:3d:c8: d5:8b:d5:68:f1:e8:eb:91:e9:d4:31:1c:15:a9:cb:62:7c:9f: 5a:dd:8d:3f:97:61:96:22:28:c1:7f:1c:01:59:f8:a3:1a:26: 82:6c:85:fe:51:9d:81:3c:df:82:95:eb:e3:d3:3d:5d:50:1d: d9:07:df:b4:a2:70:f0:be:bf:8b:09:2e:a8:41:6c:f6:00:39: f6:7b:ba:0a:f2:e4:ff:83:53:26:64:fd:b1:30:06:6a:ff:e3: 6e:df:f1:2e:24:5c:a2:02:43:b4:93:16:16:51:24:d6:da:31: ec:25:5a:1f:d5:17:8e:1c:38:f1:6b:32:cb:fe:0e:16:37:31: 82:85:53:f9:a4:38:7c:27:e2:39:56:97:09:c5:34:8e:9f:05: 30:4a:0b:09:b5:97:50:36:ba:ee:5a:f8:4e:b0:57:d4:16:09: a2:5e:66:d9:35:83:2b:21:36:02:42:04:fc:fd:bc:d2:3c:e0: 4d:62:e4:f2:ba:2e:e1:d5:46:74:49:94:dc:6f:d0:22:dc:8b: ac:38:00:b6:76:2b:da:17:e4:8e:03:9c:3f:63:b6:fb:70:dc: e5:64:c8:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0Q2MjE2RDU1Q0I1NEZDOUI1NzBGOUYyNUY5QUREMEYz NzY5QjRERTAeFw0yNTEwMTYyMjIzMjFaFw0yNTEwMjMyMjIzMjFaMBgxFjAUBgNV BAMTDTY4ZjE3MDU5LTFhZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+CGxap5CfjaMLM2ftjTSzuDim1vjeidKlwr79OqOwNIFwv5bJ8W9GyohrzfHn f/qkXJdMMecp7+zI3PPVhsK+8sgFTNkzGid+L8NYmVN+ZeM/sF/LX8wsLctvmINT CCYWlQNb5u7oUza6ea2uCl4Zdr+iXIGvqAtkw4oeKKbjOjvS0QPGz/nIXdnDUGh9 uBU6luBTaPzX0ftIuULIydABR9ZiiwOpUG9mowFLWGX/yMds+e0T2YZqO2mO8t4p lUsiCeSD+gy4ptjLLk4Y4YCcLZJ5WEp3+3oz+RptyEGf4BIkURPVALgJIS7cOjFM 5keP7GUkk4M3WWzmKlMNeSwlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIaQ9Cn/p 1fS7JMfoq5LpNFTv+TMwHwYDVR0jBBgwFoAUPWIW1Vy1T8m1cPnyX5rdDzdptN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0M2MkIyOTg2OTM0 MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFdJVzFWeTFUOG0xY1BueVg1cmREemRwdE40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0M2MkIyOTg2OTM0MjExRjBBOTg3NzgzQkM0RjlBRTAyL1BXSVcxVnkxVDht MWNQbnlYNXJkRHpkcHRONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfWMllSDj54GuKGhe1K6an6QVwdkmxTxuVbHK8UIVamudg9yNWL1Wjx 6OuR6dQxHBWpy2J8n1rdjT+XYZYiKMF/HAFZ+KMaJoJshf5RnYE834KV6+PTPV1Q HdkH37SicPC+v4sJLqhBbPYAOfZ7ugry5P+DUyZk/bEwBmr/427f8S4kXKICQ7ST FhZRJNbaMewlWh/VF44cOPFrMsv+DhY3MYKFU/mkOHwn4jlWlwnFNI6fBTBKCwm1 l1A2uu5a+E6wV9QWCaJeZtk1gyshNgJCBPz9vNI84E1i5PK6LuHVRnRJlNxv0CLc i6w4ALZ2K9oX5I4DnD9jtvtw3OVkyAk= -----END CERTIFICATE-----Generated at Sat Oct 18 17:59:28 2025 by rpki-client