$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: Pqg+Gp8qP0/ENb8BeiecKGT9INsNyuroSrdmX9fASCs= Subject key identifier: E1:56:44:BD:57:E6:47:25:FC:A9:FD:7A:76:74:A5:DF:CA:91:6E:D1 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 1A0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 1A03 Signing time: Wed 22 Oct 2025 16:39:02 +0000 Manifest this update: Wed 22 Oct 2025 16:39:02 +0000 Manifest next update: Wed 29 Oct 2025 16:39:02 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: Vj9PXoP9lyOBc3ga9zMsni8W1PxLYxdzq6DXre6gVek=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6670 (0x1a0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Oct 22 16:39:02 2025 GMT Not After : Oct 29 16:39:02 2025 GMT Subject: CN=68f908a6-bfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:91:7c:b2:05:44:55:1c:9f:51:c2:e9:bc: 5f:06:7d:6e:cf:56:3e:0a:51:91:12:1a:52:64:2d: 7e:e7:56:f0:80:c4:53:57:25:6e:f6:64:42:c0:60: e7:31:c7:38:8c:ea:1d:b2:88:2f:df:dd:c9:45:4a: 8a:22:10:6b:c8:30:bf:4a:a0:69:4f:78:78:ec:05: 4d:b2:14:6c:6c:89:e3:29:7f:ab:3a:d4:c2:98:97: a2:17:30:43:83:7d:7b:10:a2:42:f8:d5:6f:4b:4a: b2:e6:6e:07:be:3a:b7:da:15:d0:d5:dd:ca:d7:d6: 84:d6:22:b0:87:cd:2a:1d:1d:2c:0e:b1:d4:ea:6b: 4f:3e:ea:59:44:73:e1:25:93:e2:13:3a:05:49:52: 7e:14:2e:20:26:2e:41:52:fc:c3:ed:9f:40:7e:1f: 4a:42:2e:75:a3:4c:85:7d:41:65:1d:55:51:7e:83: d9:13:48:48:55:44:fa:5b:e2:3d:f7:70:fb:00:e8: 12:02:bd:de:a7:93:04:74:f2:cb:f4:48:5d:ab:4d: 31:1c:69:80:f6:cd:49:49:7b:31:98:dd:e5:a8:eb: ce:39:dd:30:ca:c9:ed:61:55:32:f2:bb:53:ea:8f: 5c:47:a2:d5:d6:d5:7b:54:06:dc:b8:7c:76:4a:0e: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:56:44:BD:57:E6:47:25:FC:A9:FD:7A:76:74:A5:DF:CA:91:6E:D1 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d5:bb:d8:75:b9:1d:a6:68:61:db:82:95:69:d4:d6:ad:f8: 41:c2:b3:58:de:e5:5d:a0:dd:1f:29:f1:93:05:e3:9a:e5:bf: 6d:36:8c:8e:f0:7e:77:61:63:24:5b:e4:f3:4a:e4:ed:36:3d: b9:04:0f:6f:64:13:44:e9:07:00:bf:47:4e:f1:9a:9a:9b:70: 41:60:7c:65:71:83:d8:d4:9e:a9:27:e7:4c:12:8e:70:3e:03: 10:42:01:f0:cc:82:84:5d:59:ee:d2:7b:73:8c:a5:87:75:66: 45:6b:23:4d:13:a4:f0:a3:5e:e6:aa:b0:d3:e4:50:f4:33:69: 27:aa:f2:74:70:44:2a:03:8f:73:c1:14:3e:4f:a9:89:a0:e9: ed:a9:7b:7a:26:0d:16:a4:e4:93:04:d3:33:2b:2b:d0:79:8b: 0d:ee:b9:c7:7b:34:25:47:f3:4e:99:db:7a:de:74:1b:e6:fa: e7:d1:6e:f8:7d:66:45:4b:e2:6f:7c:c6:ed:a9:fd:85:27:b5: b7:54:a8:a0:97:9a:8a:e4:18:79:37:3e:c3:ef:a9:3a:9b:37: 0d:19:9d:ae:00:0d:ac:5e:a3:3f:61:4b:53:b2:ba:0e:db:e0: 0d:b2:13:df:7e:3c:17:bd:0c:9b:48:58:1e:5d:5d:13:e8:1a: bb:ed:30:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUxMDIyMTYzOTAyWhcNMjUxMDI5MTYzOTAyWjAYMRYwFAYD VQQDEw02OGY5MDhhNi1iZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscCRfLIFRFUcn1HC6bxfBn1uz1Y+ClGREhpSZC1+51bwgMRTVyVu9mRCwGDn Mcc4jOodsogv393JRUqKIhBryDC/SqBpT3h47AVNshRsbInjKX+rOtTCmJeiFzBD g317EKJC+NVvS0qy5m4Hvjq32hXQ1d3K19aE1iKwh80qHR0sDrHU6mtPPupZRHPh JZPiEzoFSVJ+FC4gJi5BUvzD7Z9Afh9KQi51o0yFfUFlHVVRfoPZE0hIVUT6W+I9 93D7AOgSAr3ep5MEdPLL9Ehdq00xHGmA9s1JSXsxmN3lqOvOOd0wysntYVUy8rtT 6o9cR6LV1tV7VAbcuHx2Sg7jXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFWRL1X 5kcl/Kn9enZ0pd/KkW7RMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB91bvYdbkdpmhh24KVadTWrfhBwrNY3uVdoN0fKfGTBeOa5b9tNoyO 8H53YWMkW+TzSuTtNj25BA9vZBNE6QcAv0dO8Zqam3BBYHxlcYPY1J6pJ+dMEo5w PgMQQgHwzIKEXVnu0ntzjKWHdWZFayNNE6Two17mqrDT5FD0M2knqvJ0cEQqA49z wRQ+T6mJoOntqXt6Jg0WpOSTBNMzKyvQeYsN7rnHezQlR/NOmdt63nQb5vrn0W74 fWZFS+JvfMbtqf2FJ7W3VKigl5qK5Bh5Nz7D76k6mzcNGZ2uAA2sXqM/YUtTsroO 2+ANshPffjwXvQybSFgeXV0T6Bq77TBF -----END CERTIFICATE-----Generated at Fri Oct 24 06:02:50 2025 by rpki-client