$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: 7G8OsOjKMI5WIGYhgAl9p8Dei007XDrqIiA14LlL8a0= Subject key identifier: 39:BA:95:07:1E:4D:6D:00:40:A8:45:40:97:CA:66:95:77:DF:0A:72 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: C4 Signing time: Wed 17 Sep 2025 06:28:04 +0000 Manifest this update: Wed 17 Sep 2025 06:28:04 +0000 Manifest next update: Wed 24 Sep 2025 06:28:03 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: uUlnMXNDCRrrBJ4P8qZu8BtvTIchzszAhMXkWZP5h74=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Sep 17 06:28:04 2025 GMT Not After : Sep 24 06:28:03 2025 GMT Subject: CN=68ca54f4-01aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:b2:25:a3:ae:95:3d:83:e0:ca:74:04:a4: b4:ad:77:8c:66:df:bf:f0:eb:7c:ab:8d:fe:69:39: 6f:0a:8a:f2:b3:f7:4f:c0:97:a5:4f:5b:68:bb:89: 13:83:9d:00:42:b7:79:61:04:93:a1:95:fc:d5:df: eb:17:6a:ca:cc:76:0e:8c:c2:0f:a4:2c:67:aa:d7: a7:d5:fc:6c:23:08:cf:6d:ac:8d:88:dd:c8:dd:cf: 3e:0c:c0:f7:08:da:18:c3:c5:49:cc:bc:a8:26:ca: 4b:8f:32:75:51:c9:e4:d7:79:2f:a0:f3:3f:cb:bd: bf:be:7d:e1:96:e5:db:71:ff:cb:a3:d5:e1:2f:b7: c9:38:7f:e0:f9:c9:d0:6c:1e:39:d1:2d:3d:45:01: d2:46:db:24:0b:66:ef:4d:8a:fe:2c:3c:db:20:b9: f3:47:78:b7:9c:e4:8e:24:58:c2:07:c7:96:a8:f5: e4:f0:0b:bd:16:c0:1e:73:6b:55:23:8a:1f:b0:f2: 24:9e:a6:d9:8f:b4:b4:4d:28:34:86:e8:d9:4d:ee: f5:ff:77:b6:52:89:38:28:0e:1e:ea:e6:e7:29:68: ed:2b:49:b7:63:01:4c:43:38:f3:a8:f9:61:f1:6b: 16:ee:72:d0:c2:db:54:7d:51:4a:44:40:34:59:3f: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BA:95:07:1E:4D:6D:00:40:A8:45:40:97:CA:66:95:77:DF:0A:72 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a4:7d:d4:a5:91:77:76:4b:b8:ae:fa:ee:ba:37:b8:f1:72: a4:89:12:7f:69:c2:36:78:61:62:65:f1:18:4e:ce:19:67:80: 78:3b:6f:e7:27:43:2b:b3:a0:d0:fa:2e:74:48:ca:ee:e3:93: 60:c4:40:b1:b7:62:08:1d:9a:1a:33:91:af:c0:61:16:36:17: 80:ad:e5:ac:c8:ad:14:2c:ef:cc:04:a9:e2:79:3b:f3:98:22: a6:62:b6:ef:fe:45:7c:50:84:30:79:dc:2a:fc:8d:b5:7d:bd: a1:74:02:7c:de:ff:b6:5e:be:de:a5:63:64:b1:3f:52:eb:22: 90:ef:90:4f:9e:a6:75:8c:86:f9:36:2e:1d:58:e2:d6:23:a1: 67:c3:b2:fa:55:0b:f6:ea:aa:d0:5d:28:2e:b2:e1:5d:a8:27: 35:87:8b:7e:61:52:c6:fe:3f:04:ed:87:ab:39:c5:20:c8:5b: 0b:dd:1e:f3:9f:59:cd:25:7c:5a:1e:ca:a8:d8:e4:36:7a:a8: 9d:80:f7:42:b7:01:c6:8e:be:da:63:21:34:64:e0:e8:25:f8: 3b:b9:b5:1a:bd:7a:f8:1a:c9:f8:3f:76:6b:59:f3:11:fd:e0: 75:46:d9:85:d2:50:64:b9:cf:91:7a:34:e7:aa:9b:78:0d:cd: 63:9d:db:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwOTE3MDYyODA0WhcNMjUwOTI0MDYyODAzWjAYMRYwFAYD VQQDEw02OGNhNTRmNC0wMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvSyJaOulT2D4Mp0BKS0rXeMZt+/8Ot8q43+aTlvCorys/dPwJelT1tou4kT g50AQrd5YQSToZX81d/rF2rKzHYOjMIPpCxnqten1fxsIwjPbayNiN3I3c8+DMD3 CNoYw8VJzLyoJspLjzJ1Ucnk13kvoPM/y72/vn3hluXbcf/Lo9XhL7fJOH/g+cnQ bB450S09RQHSRtskC2bvTYr+LDzbILnzR3i3nOSOJFjCB8eWqPXk8Au9FsAec2tV I4ofsPIknqbZj7S0TSg0hujZTe71/3e2Uok4KA4e6ubnKWjtK0m3YwFMQzjzqPlh 8WsW7nLQwttUfVFKREA0WT/RUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm6lQce TW0AQKhFQJfKZpV33wpyMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnpH3UpZF3dku4rvruuje48XKkiRJ/acI2eGFiZfEYTs4ZZ4B4O2/n J0Mrs6DQ+i50SMru45NgxECxt2IIHZoaM5GvwGEWNheAreWsyK0ULO/MBKnieTvz mCKmYrbv/kV8UIQwedwq/I21fb2hdAJ83v+2Xr7epWNksT9S6yKQ75BPnqZ1jIb5 Ni4dWOLWI6Fnw7L6VQv26qrQXSgusuFdqCc1h4t+YVLG/j8E7YerOcUgyFsL3R7z n1nNJXxaHsqo2OQ2eqidgPdCtwHGjr7aYyE0ZODoJfg7ubUavXr4Gsn4P3ZrWfMR /eB1RtmF0lBkuc+RejTnqpt4Dc1jnds5 -----END CERTIFICATE-----Generated at Thu Sep 18 23:38:22 2025 by rpki-client