$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: 5hRFVFK8FheQpMscL4plyhHWHne/RAaYoSZadRcw8eA= Subject key identifier: 45:89:3C:07:35:52:BD:22:1B:ED:D0:2A:21:3F:BD:9D:3B:C5:6E:CB Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 40 Signing time: Fri 17 Oct 2025 11:08:50 +0000 Manifest this update: Fri 17 Oct 2025 11:08:49 +0000 Manifest next update: Fri 24 Oct 2025 11:08:49 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: s0uhABIKkQC34k3kdMIOvRCe2TOHese0S44UFXUmiKk=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Oct 17 11:08:49 2025 GMT Not After : Oct 24 11:08:49 2025 GMT Subject: CN=68f223c2-fa45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:02:95:d1:5b:37:64:36:35:47:a9:63:d3: f1:64:86:98:4b:31:0f:e2:56:44:e5:db:0f:1e:22: f3:ed:73:fc:fb:dd:76:29:e7:d1:62:31:9a:b3:4b: b3:5e:8e:d8:f6:d6:0a:0f:66:f9:f6:6a:76:16:e0: 17:f8:9a:26:b5:6e:4b:d9:f8:56:cb:4b:e7:4e:27: 52:de:20:ff:56:73:18:23:f1:56:46:55:b6:e7:6b: 12:3d:97:ca:37:97:1e:0f:c4:1e:fc:12:cd:cf:b0: ac:3c:42:a5:40:d3:15:6a:67:f4:6c:5e:c9:33:e1: f2:a8:43:34:ec:bd:e7:87:f7:5c:08:29:bb:38:17: be:35:3d:aa:e5:b2:5d:1a:77:d2:a1:f1:02:99:f4: 57:19:46:46:4f:ed:a8:70:de:8e:3d:78:32:c5:4b: 18:6c:32:44:f0:6a:c1:97:9f:d5:2c:a7:65:f4:4a: d5:9f:fb:6c:b7:2f:29:ec:a0:a2:9b:05:25:ad:86: 85:4d:e9:7d:90:76:78:70:04:6b:9f:d7:70:43:cb: 8a:fd:a6:c8:c5:d8:03:5a:2d:0d:9f:ca:f9:32:06: 99:ef:05:d0:31:3a:34:65:fe:51:61:65:0d:5f:a3: 85:07:2b:0a:b5:74:42:c2:b9:ef:80:6c:ff:7a:e3: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:3C:07:35:52:BD:22:1B:ED:D0:2A:21:3F:BD:9D:3B:C5:6E:CB X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ad:40:8b:30:5e:ff:62:97:b3:8b:0f:c5:47:03:0d:66:f8: 7d:f0:78:69:d1:13:f5:6f:dd:b2:d1:9f:12:51:30:64:ff:12: 26:d4:97:b5:81:ff:1a:dc:4d:9f:e4:d3:33:85:e7:bf:79:e2: d8:8c:13:65:20:67:e4:da:fe:21:dc:47:fd:93:df:7e:8d:df: d1:a9:e8:61:ff:58:a1:95:e1:92:d7:0a:22:b0:24:50:31:00: 87:ce:be:d2:1c:e4:22:19:f3:8d:f1:7f:1d:8f:74:74:bd:d6: fd:fb:98:8f:01:62:01:1c:e7:38:27:97:77:df:65:49:f4:83: f3:c4:e1:f5:11:13:c3:e7:17:2f:c3:23:70:15:1d:ef:6d:63: b7:4d:5e:8b:02:2d:b6:cc:1c:0f:bc:62:c4:c9:bc:3f:98:00: f9:ed:38:0f:63:f0:d2:4f:01:ec:c6:36:da:40:48:36:7c:7d: 36:89:ed:f8:bc:c5:4f:df:23:18:0a:89:3e:6a:f3:9e:d6:61: 23:40:99:da:24:79:5d:1a:c4:b2:ca:d1:42:a4:12:30:a8:07: af:51:a4:b3:30:ab:4e:b0:b2:be:ab:44:67:de:04:f3:cc:7e: 8a:88:27:49:52:e7:95:19:7c:39:39:cd:47:c4:71:9d:4a:a2: 6f:ae:7a:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTEwMTcxMTA4NDlaFw0yNTEwMjQxMTA4NDlaMBgxFjAUBgNV BAMTDTY4ZjIyM2MyLWZhNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw8wKV0Vs3ZDY1R6lj0/FkhphLMQ/iVkTl2w8eIvPtc/z73XYp59FiMZqzS7Ne jtj21goPZvn2anYW4Bf4mia1bkvZ+FbLS+dOJ1LeIP9Wcxgj8VZGVbbnaxI9l8o3 lx4PxB78Es3PsKw8QqVA0xVqZ/RsXskz4fKoQzTsveeH91wIKbs4F741Parlsl0a d9Kh8QKZ9FcZRkZP7ahw3o49eDLFSxhsMkTwasGXn9Usp2X0StWf+2y3LynsoKKb BSWthoVN6X2QdnhwBGuf13BDy4r9psjF2ANaLQ2fyvkyBpnvBdAxOjRl/lFhZQ1f o4UHKwq1dELCue+AbP964yEfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURYk8BzVS vSIb7dAqIT+9nTvFbsswHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIitQIswXv9il7OLD8VHAw1m+H3weGnRE/Vv3bLRnxJRMGT/EibUl7WB /xrcTZ/k0zOF57954tiME2UgZ+Ta/iHcR/2T336N39Gp6GH/WKGV4ZLXCiKwJFAx AIfOvtIc5CIZ843xfx2PdHS91v37mI8BYgEc5zgnl3ffZUn0g/PE4fURE8PnFy/D I3AVHe9tY7dNXosCLbbMHA+8YsTJvD+YAPntOA9j8NJPAezGNtpASDZ8fTaJ7fi8 xU/fIxgKiT5q857WYSNAmdokeV0axLLK0UKkEjCoB69RpLMwq06wsr6rRGfeBPPM foqIJ0lS55UZfDk5zUfEcZ1Kom+uets= -----END CERTIFICATE-----Generated at Sat Oct 18 23:36:32 2025 by rpki-client