$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: blYTWxof3g2l9pPPBNu1vGYJPuyildLaoc8VITzybPY= Subject key identifier: F2:33:20:AF:23:F9:B8:4C:CD:28:08:39:00:39:27:D6:21:CD:94:B8 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 10DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 10D3 Signing time: Thu 18 Sep 2025 17:27:38 +0000 Manifest this update: Thu 18 Sep 2025 17:27:38 +0000 Manifest next update: Thu 25 Sep 2025 17:27:38 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: PBvkO/CgiagdwejHfnKL+9Ve5gHHwmttH3VDPoKb3uQ=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4315 (0x10db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Sep 18 17:27:38 2025 GMT Not After : Sep 25 17:27:38 2025 GMT Subject: CN=68cc410a-ff2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:09:5c:98:5c:27:3b:06:10:12:87:dc:40: 4c:78:db:2d:18:2d:6c:73:30:87:ef:34:53:f9:7e: 8b:2c:95:2b:87:12:51:ef:97:b7:50:a0:79:27:11: 81:ef:65:8c:81:d7:05:bf:3a:4c:15:58:e6:01:07: c5:56:99:bc:9b:7e:49:55:1d:3f:66:1f:22:85:24: a8:c0:19:d6:7e:ef:90:5a:57:9b:7f:72:9f:b7:db: 37:ad:83:0e:f9:e7:8b:8f:35:85:09:e8:b3:cf:3b: ee:c6:70:57:73:16:81:ef:7a:86:88:0a:40:bd:05: ca:5c:eb:4c:94:32:8b:e6:1e:fd:6d:8a:c1:3b:3f: 02:da:87:6e:30:c1:df:09:65:16:f6:b7:d4:72:d9: 75:5c:59:f8:54:70:41:23:a8:ac:91:72:bd:fe:4d: 3b:07:56:18:e6:13:e9:f1:84:49:ae:0f:af:11:47: ff:88:14:49:51:76:85:b5:e6:b4:30:ec:2d:7d:3a: 86:ac:d2:e3:65:27:cc:25:9b:1e:af:38:67:d3:f6: bb:bd:cb:34:cc:1b:7f:ca:df:3f:a6:1c:e1:f9:26: ed:3b:33:e0:99:bf:f5:3a:ad:cd:81:54:45:a0:f0: a3:ca:67:96:da:89:dd:ef:9c:2c:90:42:5b:12:66: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:33:20:AF:23:F9:B8:4C:CD:28:08:39:00:39:27:D6:21:CD:94:B8 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:33:78:85:c0:5f:8c:1f:c8:4a:2f:05:20:e8:c7:1c:0b:68: 04:f8:18:3a:36:5f:a4:93:b8:82:80:e7:77:1f:00:62:a1:5b: d7:21:38:b7:48:37:2b:b5:6b:4d:80:80:0f:07:1b:4a:ba:6a: 93:fb:b9:e4:2e:c0:36:5d:e5:13:a1:b8:6c:d6:89:51:16:22: f0:1e:25:6b:13:de:fa:85:6f:1e:bd:70:03:12:1d:cd:7b:8e: 2c:13:e9:ee:3b:e8:33:76:73:c7:b4:52:53:64:e9:b9:2e:34: c0:33:ac:51:91:91:f6:9c:11:0d:2c:18:90:45:9e:d8:f4:99: b6:ed:e6:f1:51:47:81:78:83:30:b0:a3:74:40:4a:69:1c:57: 38:22:1a:56:60:0a:c5:97:ac:2d:65:60:c7:06:9c:c8:16:5f: d2:fb:fa:08:9c:b7:0d:99:c4:a2:5a:6c:5d:85:d1:68:3a:3e: 9d:05:1f:0e:a8:10:f7:4e:e3:ba:ab:df:1d:aa:08:97:f4:c9: 3d:25:4c:1b:38:53:aa:b1:67:02:57:f1:e9:30:a5:23:68:42: a5:e6:48:70:ad:1c:e2:64:99:dd:6e:22:e2:18:55:1d:29:b4: de:39:8e:15:25:88:b5:45:c2:f3:61:27:be:41:37:4f:4f:b7: 44:d9:55:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUwOTE4MTcyNzM4WhcNMjUwOTI1MTcyNzM4WjAYMRYwFAYD VQQDEw02OGNjNDEwYS1mZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKwJXJhcJzsGEBKH3EBMeNstGC1sczCH7zRT+X6LLJUrhxJR75e3UKB5JxGB 72WMgdcFvzpMFVjmAQfFVpm8m35JVR0/Zh8ihSSowBnWfu+QWlebf3Kft9s3rYMO +eeLjzWFCeizzzvuxnBXcxaB73qGiApAvQXKXOtMlDKL5h79bYrBOz8C2oduMMHf CWUW9rfUctl1XFn4VHBBI6iskXK9/k07B1YY5hPp8YRJrg+vEUf/iBRJUXaFtea0 MOwtfTqGrNLjZSfMJZserzhn0/a7vcs0zBt/yt8/phzh+SbtOzPgmb/1Oq3NgVRF oPCjymeW2ond75wskEJbEmY7GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIzIK8j +bhMzSgIOQA5J9YhzZS4MB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFM3iFwF+MH8hKLwUg6MccC2gE+Bg6Nl+kk7iCgOd3HwBioVvXITi3 SDcrtWtNgIAPBxtKumqT+7nkLsA2XeUTobhs1olRFiLwHiVrE976hW8evXADEh3N e44sE+nuO+gzdnPHtFJTZOm5LjTAM6xRkZH2nBENLBiQRZ7Y9Jm27ebxUUeBeIMw sKN0QEppHFc4IhpWYArFl6wtZWDHBpzIFl/S+/oInLcNmcSiWmxdhdFoOj6dBR8O qBD3TuO6q98dqgiX9Mk9JUwbOFOqsWcCV/HpMKUjaEKl5khwrRziZJndbiLiGFUd KbTeOY4VJYi1RcLzYSe+QTdPT7dE2VUN -----END CERTIFICATE-----Generated at Fri Sep 19 12:40:28 2025 by rpki-client