$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft File: CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json) Hash identifier: F8c/WfIx/zOj+Vqf/FHCM0rlv8FWJCiQpdk4fNG6yXM= Subject key identifier: 66:FB:48:B8:12:99:51:34:97:0C:B2:01:C7:E7:52:17:42:19:DE:E3 Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 Certificate issuer: /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft Manifest number: 0F Signing time: Mon 03 Nov 2025 07:57:38 +0000 Manifest this update: Mon 03 Nov 2025 07:57:38 +0000 Manifest next update: Mon 10 Nov 2025 07:57:38 +0000 Files and hashes: 1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: 6xShnocO3VrgzI9DDwQ4AS8nmVcS4i0V7sJk5Dm4oo4=) 2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: Ff+TM86OU28LuAjmuMsbEF6hmH/6fMci4W3OBvaxsAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Validity Not Before: Nov 3 07:57:38 2025 GMT Not After : Nov 10 07:57:38 2025 GMT Subject: CN=69086072-05af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:63:a4:07:99:42:53:06:af:db:b4:28:ad: 20:52:dc:e0:c1:68:76:b5:9f:6a:36:e2:15:23:2e: 10:9a:4b:7c:c2:19:cc:02:04:c7:1c:e5:3c:ba:ef: 2a:7b:42:0f:d1:1f:18:a3:91:ee:15:a9:50:b9:39: d4:f8:bc:98:09:32:57:93:47:38:19:e4:85:2a:f5: 1a:89:38:20:95:6c:e9:4b:ce:10:4e:c1:44:28:0e: 5a:99:20:26:bd:c1:e8:af:a7:0d:da:11:6b:6e:f5: 12:2a:cf:71:83:f7:78:f8:5b:ef:59:13:d9:8a:4d: 0d:fd:b8:bb:40:35:33:81:f6:b9:0e:15:39:93:5c: d2:e1:af:df:d1:78:af:4f:c8:64:6c:40:6f:70:d7: 31:e3:75:8e:7e:f8:a2:58:14:aa:76:f3:8b:7f:1a: 65:75:1e:a4:a5:cc:19:08:a2:1b:70:42:71:13:34: 8c:b7:f6:c8:3b:22:50:30:90:6e:bf:bb:f8:45:ca: fa:0b:3e:4a:da:13:cb:df:81:d9:f0:52:6d:0b:54: 3a:44:21:9e:4f:48:73:a9:d9:c1:2f:db:2b:27:ab: ef:ae:39:79:39:fe:35:6c:ab:9c:87:c0:94:f1:ac: d8:8b:f1:7c:f6:e8:dc:88:f7:3b:9f:90:75:34:3b: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FB:48:B8:12:99:51:34:97:0C:B2:01:C7:E7:52:17:42:19:DE:E3 X509v3 Authority Key Identifier: keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:56:27:00:a3:18:ac:94:c9:df:3c:11:90:ac:6a:f6:fb:5e: 6a:21:ec:80:39:58:a0:87:a2:85:da:40:1a:29:5d:aa:d4:44: bd:a0:12:24:71:3b:d3:ba:6d:4d:6c:6f:2c:c6:84:e0:dd:20: 31:72:00:e0:4c:92:98:d5:3c:83:63:e6:f0:7a:fd:cd:4f:5b: f8:e9:5b:75:94:e4:f1:09:a8:46:fb:4f:67:b3:ba:1f:c1:f6: 1a:27:6a:0c:4c:07:cc:d4:a7:83:a9:8b:f7:64:65:95:5c:e2: 6c:fa:4b:a1:23:9b:23:41:e2:c0:6f:4e:30:0d:ec:1f:af:ae: 8b:d7:73:3e:45:ad:a7:0d:cb:13:e4:f2:10:f1:9f:d6:0b:bf: 87:e9:ae:d6:cd:15:ed:90:8c:ec:1e:dd:55:fd:e9:c9:26:38: 39:52:3a:a8:f6:4d:ed:7b:35:60:d4:7c:df:0d:b5:87:ce:51: 71:f6:96:a1:7f:68:cf:b6:8a:83:cb:0c:e2:d8:f1:70:06:e4: fb:92:14:19:47:9e:55:67:54:08:56:7e:43:f9:1e:45:58:6f: a1:05:dc:fe:fb:d7:03:72:93:f0:a0:d5:7f:f3:64:4d:f8:34: d9:2f:20:78:26:f5:48:da:d6:67:22:01:5d:ed:28:c2:db:13: 71:a0:9b:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0NCMTExMC8GA1UEBRMoMDk2OENERUI2NDZDQjZBQUJDMEY0MjMyQ0UyM0IxRENF NTRDQUQyMDAeFw0yNTExMDMwNzU3MzhaFw0yNTExMTAwNzU3MzhaMBgxFjAUBgNV BAMTDTY5MDg2MDcyLTA1YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb9mOkB5lCUwav27QorSBS3ODBaHa1n2o24hUjLhCaS3zCGcwCBMcc5Ty67yp7 Qg/RHxijke4VqVC5OdT4vJgJMleTRzgZ5IUq9RqJOCCVbOlLzhBOwUQoDlqZICa9 weivpw3aEWtu9RIqz3GD93j4W+9ZE9mKTQ39uLtANTOB9rkOFTmTXNLhr9/ReK9P yGRsQG9w1zHjdY5++KJYFKp284t/GmV1HqSlzBkIohtwQnETNIy39sg7IlAwkG6/ u/hFyvoLPkraE8vfgdnwUm0LVDpEIZ5PSHOp2cEv2ysnq++uOXk5/jVsq5yHwJTx rNiL8Xz26NyI9zufkHU0O9d3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZvtIuBKZ UTSXDLIBx+dSF0IZ3uMwHwYDVR0jBBgwFoAUCWjN62Rstqq8D0IyziOx3OVMrSAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3Q0IxLzFDODk0MEE2QTRE NzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFxOEQwSXl6aU94M09WTXJT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1dqTjYyUnN0cXE4RDBJeXppT3gzT1ZNclNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 Q0IxLzFDODk0MEE2QTRENzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFx OEQwSXl6aU94M09WTXJTQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB5WJwCjGKyUyd88EZCsavb7Xmoh7IA5WKCHooXaQBopXarURL2gEiRx O9O6bU1sbyzGhODdIDFyAOBMkpjVPINj5vB6/c1PW/jpW3WU5PEJqEb7T2ezuh/B 9honagxMB8zUp4Opi/dkZZVc4mz6S6EjmyNB4sBvTjAN7B+vrovXcz5FracNyxPk 8hDxn9YLv4fprtbNFe2QjOwe3VX96ckmODlSOqj2Te17NWDUfN8NtYfOUXH2lqF/ aM+2ioPLDOLY8XAG5PuSFBlHnlVnVAhWfkP5HkVYb6EF3P771wNyk/Cg1X/zZE34 NNkvIHgm9Uja1mciAV3tKMLbE3Ggmx0= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:47 2025 by rpki-client