$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: JojGNnvQYHfUrT7Gv+ym6b8YVEjQ3kh5aJOaZ3TcdsY= Subject key identifier: 75:7B:DC:5A:6C:9D:82:2C:0D:49:6B:58:94:B3:8A:0D:7E:2E:B4:D8 Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 08E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 08E0 Signing time: Wed 22 Oct 2025 21:08:10 +0000 Manifest this update: Wed 22 Oct 2025 21:08:09 +0000 Manifest next update: Wed 29 Oct 2025 21:08:09 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: 5W3tOgc7MaodcfX3PDlGemhkN5lvlhAW9yC2GJpb1hM=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: iEKLFIlgP3vBIYZmAwF1E6tOhF1PBH49QZl2P/lCL8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2280 (0x8e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Oct 22 21:08:09 2025 GMT Not After : Oct 29 21:08:09 2025 GMT Subject: CN=68f947ba-7317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:db:7b:6e:23:b0:cb:94:7b:1b:6e:3e:96: 5f:7a:03:da:70:c2:90:29:d5:2d:ec:50:5f:c1:c7: 21:f3:25:ee:94:f6:e2:df:c3:3b:32:54:17:37:7a: 0e:d1:0a:a0:b2:90:60:53:17:f2:15:4e:09:2a:62: ac:0c:ec:fa:61:a9:43:ca:f7:23:81:8f:d5:00:0c: 5f:dc:21:67:f4:3c:87:ae:8f:87:3a:65:96:38:23: 87:e5:81:56:0d:c9:66:3f:47:0c:22:14:f5:47:43: bc:be:17:ec:88:1d:f0:59:32:ae:5e:01:52:b9:51: c5:d0:d4:3d:ff:4d:6e:04:49:2c:64:e8:65:79:d0: 3a:f6:e3:29:e5:32:8f:2a:4f:12:7d:65:23:ab:20: c6:e2:1f:94:76:f6:e4:9a:c8:aa:a5:20:40:cb:a0: f1:7b:63:30:13:cf:03:ab:ca:56:87:9c:18:e8:d4: 89:d4:5b:dc:36:ad:07:cf:c5:93:65:5e:87:97:13: d4:5b:3a:9b:43:a7:eb:47:c6:09:f9:d5:5e:f1:b2: 54:89:e9:87:66:02:fa:07:08:c2:5b:5b:46:84:10: 10:cd:58:77:c5:67:a5:a4:f0:76:42:55:8e:de:c1: cb:ca:32:e8:ac:49:42:ba:6e:6c:7a:e5:c3:8f:28: eb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:DC:5A:6C:9D:82:2C:0D:49:6B:58:94:B3:8A:0D:7E:2E:B4:D8 X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:bf:52:3a:43:0f:ba:bb:d8:c4:35:22:b0:2b:8d:9c:0e:e5: bb:0a:b1:72:14:fb:8f:66:3b:b5:b8:1a:67:95:44:b1:aa:9c: 9d:2b:e1:1b:df:e6:45:e2:3e:cc:f3:c8:6a:d3:09:7c:9d:cf: b0:53:ed:22:1a:82:bb:68:47:eb:23:cf:08:4d:a0:95:4c:b1: 1e:b2:26:93:15:ee:6b:a4:5a:c9:dd:aa:a0:d1:1a:87:58:c4: 3b:0c:78:bf:04:72:21:2f:1f:91:13:96:13:ea:be:ff:dd:3b: d2:c7:4e:13:f0:01:3b:30:60:c6:57:c6:07:04:44:47:64:b8: b9:58:d8:3a:15:81:ee:58:28:c5:8e:ec:e0:02:9b:f8:1f:cc: 6e:9a:bd:28:77:8b:54:a2:e4:f2:cf:ef:6c:0f:4b:15:79:1e: cb:9e:ae:5d:b7:8d:f3:2f:c7:26:11:9d:a2:0d:ee:51:b9:6d: b5:ba:ec:b3:aa:5e:8f:25:62:49:30:ec:0a:e3:6a:d5:e5:81: 6c:62:77:e6:9a:07:cc:c4:7d:55:4e:05:b5:ba:e3:5a:3e:9a: a6:9e:8a:12:03:2e:5b:bb:05:c7:2f:31:55:29:ed:43:54:99: f1:d7:2f:20:a4:0b:72:17:6b:1d:30:6a:d4:0f:80:04:c5:0a: a9:7d:aa:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUxMDIyMjEwODA5WhcNMjUxMDI5MjEwODA5WjAYMRYwFAYD VQQDEw02OGY5NDdiYS03MzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzTbe24jsMuUextuPpZfegPacMKQKdUt7FBfwcch8yXulPbi38M7MlQXN3oO 0QqgspBgUxfyFU4JKmKsDOz6YalDyvcjgY/VAAxf3CFn9DyHro+HOmWWOCOH5YFW DclmP0cMIhT1R0O8vhfsiB3wWTKuXgFSuVHF0NQ9/01uBEksZOhledA69uMp5TKP Kk8SfWUjqyDG4h+UdvbkmsiqpSBAy6Dxe2MwE88Dq8pWh5wY6NSJ1FvcNq0Hz8WT ZV6HlxPUWzqbQ6frR8YJ+dVe8bJUiemHZgL6BwjCW1tGhBAQzVh3xWelpPB2QlWO 3sHLyjLorElCum5seuXDjyjrGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV73Fps nYIsDUlrWJSzig1+LrTYMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMv1I6Qw+6u9jENSKwK42cDuW7CrFyFPuPZju1uBpnlUSxqpydK+Eb 3+ZF4j7M88hq0wl8nc+wU+0iGoK7aEfrI88ITaCVTLEesiaTFe5rpFrJ3aqg0RqH WMQ7DHi/BHIhLx+RE5YT6r7/3TvSx04T8AE7MGDGV8YHBERHZLi5WNg6FYHuWCjF juzgApv4H8xumr0od4tUouTyz+9sD0sVeR7Lnq5dt43zL8cmEZ2iDe5RuW21uuyz ql6PJWJJMOwK42rV5YFsYnfmmgfMxH1VTgW1uuNaPpqmnooSAy5buwXHLzFVKe1D VJnx1y8gpAtyF2sdMGrUD4AExQqpfaoP -----END CERTIFICATE-----Generated at Thu Oct 23 05:09:00 2025 by rpki-client