$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft File: w9iTsikbOh4b9fTwQdEFLizLslo.mft (raw, json) Hash identifier: r4ytT3BWKongX/v/lvbgMGtkU8WxnytoH3Co2iRpo3A= Subject key identifier: 06:BA:6B:97:16:4C:15:BE:7C:0D:49:80:39:B4:B5:6E:16:F0:F8:C6 Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft Manifest number: 017E Signing time: Mon 27 Oct 2025 06:07:56 +0000 Manifest this update: Mon 27 Oct 2025 06:07:55 +0000 Manifest next update: Mon 03 Nov 2025 06:07:55 +0000 Files and hashes: 1: w9iTsikbOh4b9fTwQdEFLizLslo.crl (hash: RRKob9nNNqI+ux5LcwhdFqXiJnh0pKbn+HxbLAqFREQ=) 2: ACFC76964A0E11EF91642A7AC4F9AE02.roa (hash: gez5Qlcfm6c6NA79ftuR/sN6GbAgowRygpjom7unUmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 06:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A Validity Not Before: Oct 27 06:07:55 2025 GMT Not After : Nov 3 06:07:55 2025 GMT Subject: CN=68ff0c3b-9de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:d8:df:66:19:8c:06:c8:21:83:c4:1d:99: d8:2a:38:c7:0e:c2:ce:36:c1:53:d1:6b:53:fa:92: 85:81:95:e4:7e:8f:13:3c:cd:dd:19:de:b7:27:bd: 63:ac:f4:5f:8b:ee:33:59:f9:f3:f5:b6:68:3c:89: 0f:58:b3:7f:75:6a:70:ba:0e:fb:7b:a1:7c:1b:8f: 56:ce:9f:23:da:b8:71:94:62:54:5e:91:ce:b2:6d: ca:31:6b:31:df:07:10:00:95:70:f7:8a:fc:1a:34: be:b4:71:ab:94:2f:a6:80:6a:77:43:a9:33:2c:b0: 6a:e0:c6:8d:99:ff:2b:ad:38:ea:14:12:ed:97:77: 8f:2e:58:23:7a:98:0f:fe:8f:fe:72:32:82:1f:57: 1a:aa:6e:0d:06:ca:5b:72:9b:95:63:a6:96:b5:ba: 25:9f:68:5a:ab:5c:09:7d:b6:11:45:7c:24:85:ea: 26:61:0f:05:7a:29:a3:d7:c4:3e:dc:eb:e4:84:72: 3b:2e:9e:6e:76:52:e2:c6:1d:14:bc:44:c5:dd:a0: a9:c3:ec:d6:da:a3:cd:79:36:cf:c2:2a:99:62:49: 75:2b:c3:f3:c5:b2:0d:c2:f4:e3:7e:6a:b0:e2:2b: ca:0d:0b:4e:a7:53:4e:f3:9f:61:8a:bc:2c:82:22: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BA:6B:97:16:4C:15:BE:7C:0D:49:80:39:B4:B5:6E:16:F0:F8:C6 X509v3 Authority Key Identifier: keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:4c:3c:fe:15:a8:dd:72:d6:b9:b4:4e:7f:bb:b5:eb:ce: c1:16:ed:a8:5e:62:38:85:1c:8c:b3:d4:84:9e:84:72:b2:80: b2:bb:0b:7d:c2:02:c5:0d:b4:6f:d8:de:e4:97:77:18:b3:a7: 8c:af:28:50:d4:58:e6:87:c9:4b:53:79:d5:0e:23:3c:b4:15: 63:cd:c4:12:1c:7d:6f:ae:57:ad:51:b8:93:e0:7c:d5:63:ec: 55:41:6a:d6:67:12:97:f3:85:45:8c:61:aa:a1:e1:08:18:ae: 67:42:06:fb:a6:18:cd:b3:43:1f:30:f3:51:3f:d1:a9:59:9b: 2e:40:8b:e8:ac:2e:1f:33:e7:f1:e9:42:01:ab:41:c9:a3:da: 0d:0d:d6:a8:ef:28:34:f7:68:20:51:58:e8:ac:87:d3:e8:05: 55:11:2b:4a:5c:25:59:f9:d8:1a:8c:aa:48:4c:dd:fe:a0:3e: 9e:53:28:4f:e5:49:28:90:7a:21:04:6b:8e:d6:98:1e:b7:fd: 62:e3:f5:28:f6:0d:99:a8:45:6e:50:af:68:73:4f:79:27:ad: 5e:5f:4c:5d:f6:02:94:82:b9:7c:5b:5b:72:90:89:d2:74:ab: 5f:54:02:88:5c:92:70:fd:f5:b4:28:48:f2:b0:0b:40:aa:f9: 19:84:ff:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF MkNDQkIyNUEwHhcNMjUxMDI3MDYwNzU1WhcNMjUxMTAzMDYwNzU1WjAYMRYwFAYD VQQDEw02OGZmMGMzYi05ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjLY32YZjAbIIYPEHZnYKjjHDsLONsFT0WtT+pKFgZXkfo8TPM3dGd63J71j rPRfi+4zWfnz9bZoPIkPWLN/dWpwug77e6F8G49Wzp8j2rhxlGJUXpHOsm3KMWsx 3wcQAJVw94r8GjS+tHGrlC+mgGp3Q6kzLLBq4MaNmf8rrTjqFBLtl3ePLlgjepgP /o/+cjKCH1caqm4NBspbcpuVY6aWtboln2haq1wJfbYRRXwkheomYQ8Feimj18Q+ 3OvkhHI7Lp5udlLixh0UvETF3aCpw+zW2qPNeTbPwiqZYkl1K8PzxbINwvTjfmqw 4ivKDQtOp1NO859hirwsgiLe+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa6a5cW TBW+fA1JgDm0tW4W8PjGMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QURDNC8yRkE0MzRDQUFBQTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9o NGI5ZlR3UWRFRkxpekxzbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJXEw8/hWo3XLWubROf7u1687BFu2oXmI4hRyMs9SEnoRysoCyuwt9 wgLFDbRv2N7kl3cYs6eMryhQ1Fjmh8lLU3nVDiM8tBVjzcQSHH1vrletUbiT4HzV Y+xVQWrWZxKX84VFjGGqoeEIGK5nQgb7phjNs0MfMPNRP9GpWZsuQIvorC4fM+fx 6UIBq0HJo9oNDdao7yg092ggUVjorIfT6AVVEStKXCVZ+dgajKpITN3+oD6eUyhP 5UkokHohBGuO1pget/1i4/Uo9g2ZqEVuUK9oc095J61eX0xd9gKUgrl8W1tykInS dKtfVAKIXJJw/fW0KEjysAtAqvkZhP99 -----END CERTIFICATE-----Generated at Tue Oct 28 07:37:07 2025 by rpki-client