$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: MmTU3EM9FAhtl/SjDANAEcoYdljT9RoJPXTuRHx2+gU= Subject key identifier: 81:7B:E7:51:95:A3:38:29:95:B1:2B:C8:7F:7D:C1:56:1E:D6:35:BF Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 0187 Signing time: Thu 23 Oct 2025 05:21:27 +0000 Manifest this update: Thu 23 Oct 2025 05:21:26 +0000 Manifest next update: Thu 30 Oct 2025 05:21:26 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: HZa7MNWyvGSb5xbs7qFWhvnFNfexfgmsbeJanEfWS2c=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 4: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Oct 23 05:21:26 2025 GMT Not After : Oct 30 05:21:26 2025 GMT Subject: CN=68f9bb57-dddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:34:25:2e:55:d0:af:16:9a:6b:3c:52:29: ad:3d:a0:23:1f:56:31:ea:d3:8e:dc:30:7c:c0:61: 98:4b:cf:54:62:f6:9a:ae:04:20:ae:93:7f:d3:2f: 56:4f:3b:b0:b4:fe:fe:65:a1:02:8b:75:9b:c6:fd: 34:ca:21:af:8c:29:42:d1:b6:2d:60:9b:6c:5c:a9: dc:31:e9:fa:f1:81:16:e6:b1:75:d0:f6:a3:c2:48: d2:cc:54:86:3d:15:41:bb:80:1b:71:f8:6c:cb:f6: 9d:70:3a:2c:a9:b8:7c:bb:58:22:7a:3c:f6:bd:62: b3:5b:13:51:8e:5a:3c:5f:10:5f:23:d8:a4:5c:95: 8e:42:88:02:95:09:64:2b:6b:fd:51:0c:21:97:ff: 89:60:3f:e0:f6:48:18:79:81:cc:56:68:8f:7c:3d: 0a:e5:8a:85:33:a4:07:79:df:69:54:4f:69:8e:c9: 84:06:2c:3c:d0:86:fa:ba:ba:87:d1:9c:28:56:c8: b8:ef:97:0f:d1:2d:7c:a7:2a:f6:af:68:34:54:33: 51:1a:4a:6e:d5:0d:ce:11:b6:66:04:d7:45:3b:bc: fc:ca:91:a1:50:f6:ff:b2:6e:a9:52:d0:13:4b:8e: 85:91:cd:10:9b:f1:35:f8:79:f2:79:12:04:da:38: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:E7:51:95:A3:38:29:95:B1:2B:C8:7F:7D:C1:56:1E:D6:35:BF X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:0f:3d:54:8a:9e:45:c4:34:ad:e8:fd:4e:36:43:c7:6e:23: e8:6f:fd:6b:87:fd:be:5f:a7:cd:68:ac:55:a1:65:5c:0f:ac: 86:2d:fb:44:18:1c:51:7f:17:c5:2c:c2:ff:2c:cd:04:62:21: f3:0d:2c:ea:8e:da:9c:d3:0d:da:85:67:99:b2:f2:1d:7e:0a: 45:05:4d:15:4d:01:2b:26:53:03:80:8f:21:81:bc:85:b1:bb: e4:a0:77:8e:ec:f5:dd:99:f1:9d:c7:21:68:cc:b5:6e:a0:5f: 8b:82:94:60:d7:af:fb:16:31:b7:d7:cd:b2:cb:ec:2c:81:da: 22:a9:bd:ff:47:20:3e:b1:3e:56:4c:1b:5f:76:6f:0f:43:4d: 4a:ba:ba:58:f2:aa:d9:d4:e2:4f:4a:ea:65:ee:49:d5:4e:1c: fe:61:3c:36:e4:3b:73:42:0b:1b:23:00:22:7e:ef:89:5a:44: 71:33:b7:af:9d:94:f0:4c:22:41:77:e3:0e:aa:73:b7:f7:62: 3d:c2:95:6c:d1:cc:de:2d:f5:e1:57:9e:19:d5:a1:71:c8:21: c1:39:0e:33:6c:51:fa:43:20:d0:45:0e:02:2a:57:de:68:24: 63:3a:67:14:2d:07:ca:79:cf:9d:71:f2:6e:2d:f9:1b:30:cb: 6f:a0:82:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUxMDIzMDUyMTI2WhcNMjUxMDMwMDUyMTI2WjAYMRYwFAYD VQQDEw02OGY5YmI1Ny1kZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnE0JS5V0K8Wmms8UimtPaAjH1Yx6tOO3DB8wGGYS89UYvaargQgrpN/0y9W TzuwtP7+ZaECi3Wbxv00yiGvjClC0bYtYJtsXKncMen68YEW5rF10PajwkjSzFSG PRVBu4Abcfhsy/adcDosqbh8u1giejz2vWKzWxNRjlo8XxBfI9ikXJWOQogClQlk K2v9UQwhl/+JYD/g9kgYeYHMVmiPfD0K5YqFM6QHed9pVE9pjsmEBiw80Ib6urqH 0ZwoVsi475cP0S18pyr2r2g0VDNRGkpu1Q3OEbZmBNdFO7z8ypGhUPb/sm6pUtAT S46Fkc0Qm/E1+HnyeRIE2jjqzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF751GV ozgplbEryH99wVYe1jW/MB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBDz1Uip5FxDSt6P1ONkPHbiPob/1rh/2+X6fNaKxVoWVcD6yGLftE GBxRfxfFLML/LM0EYiHzDSzqjtqc0w3ahWeZsvIdfgpFBU0VTQErJlMDgI8hgbyF sbvkoHeO7PXdmfGdxyFozLVuoF+LgpRg16/7FjG3182yy+wsgdoiqb3/RyA+sT5W TBtfdm8PQ01KurpY8qrZ1OJPSupl7knVThz+YTw25DtzQgsbIwAifu+JWkRxM7ev nZTwTCJBd+MOqnO392I9wpVs0czeLfXhV54Z1aFxyCHBOQ4zbFH6QyDQRQ4CKlfe aCRjOmcULQfKec+dcfJuLfkbMMtvoILS -----END CERTIFICATE-----Generated at Thu Oct 23 19:58:26 2025 by rpki-client