$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: PuMXMO5nho05QbPsNV9SjU4eZhFjS59p+R1Vqzcf6VA= Subject key identifier: 0B:AB:DE:63:32:D1:8E:B6:55:11:E9:A5:91:78:28:3D:F8:C7:E0:0B Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 08A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 089B Signing time: Thu 18 Sep 2025 20:48:34 +0000 Manifest this update: Thu 18 Sep 2025 20:48:33 +0000 Manifest next update: Thu 25 Sep 2025 20:48:33 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: RMFCrSAysOSHG8ZcVyYntqoepuUrWFbI8cYv+deGSPM=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 5xxVenqDrTtB+LAX8MyCpAEyaZJVl5DXQjRG3qyTajU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Sep 18 20:48:33 2025 GMT Not After : Sep 25 20:48:33 2025 GMT Subject: CN=68cc7022-0ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:60:69:d0:3e:fe:aa:4e:57:cf:ce:03:94: c9:9c:89:03:9d:78:4a:bb:13:39:b2:8c:a9:a6:c6: 12:70:c9:16:0c:36:7c:25:bc:bb:66:bc:8d:a0:11: 5c:30:f6:27:fa:4a:49:6b:2c:c6:0d:e6:c8:2c:fd: b4:19:7f:35:9c:b8:c6:88:77:60:8e:8e:72:1e:d1: df:6b:ce:40:d7:ac:71:8f:e7:78:f8:96:49:b4:66: 29:59:67:38:0c:1b:e4:56:cc:e5:90:15:37:18:9b: 06:9b:2a:c4:ee:b8:47:61:97:54:77:3c:b6:87:c2: 22:94:56:63:7f:e3:7c:05:30:81:aa:1a:67:25:e4: 7e:3a:76:85:2d:11:97:95:e4:b0:a2:a5:4b:a3:33: a7:e1:e3:b1:2f:ec:6b:b3:8e:29:b5:1e:59:e5:06: da:d0:43:ec:10:aa:b0:cf:7e:7d:6a:9e:e2:99:79: 54:40:ed:34:36:82:c4:6e:7d:5f:3e:ac:d0:fc:9a: b0:46:a1:5c:0a:2a:fc:a8:cc:0b:9f:01:87:10:ee: 08:b2:6e:c6:b3:bb:23:50:3f:55:2e:45:6c:ee:fc: 6c:1e:79:26:5e:f2:19:c6:b4:71:cf:08:0a:70:ab: e9:d9:09:7c:cc:21:50:e1:2f:2d:8d:b9:19:2a:bd: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AB:DE:63:32:D1:8E:B6:55:11:E9:A5:91:78:28:3D:F8:C7:E0:0B X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:65:13:ef:34:f8:53:92:64:29:9d:44:5e:a6:83:22:f1:59: 72:bc:e6:9d:b0:60:27:f8:c0:16:74:b0:5e:1b:0a:4b:55:09: d7:38:12:04:d7:4e:60:a0:d6:38:fe:3b:a1:51:08:ed:a0:1b: b5:e4:18:1b:31:76:a0:1d:42:92:37:9c:9c:97:5d:bb:fa:e9: 0d:6d:6d:ff:2c:63:e6:84:95:27:f6:34:89:a8:50:bd:46:d7: d1:9c:12:9e:ff:0b:17:6c:2e:a5:8d:2f:40:e8:18:e7:cb:d7: 35:58:80:7a:16:d5:6c:78:ae:51:45:16:a5:5b:25:48:37:83: 9d:01:5a:33:20:0e:60:64:58:b0:5e:dd:48:5f:ad:27:d5:1d: 11:ec:53:ed:6c:19:b5:7f:10:42:67:70:4a:32:9d:62:c0:11: 7e:a6:60:c1:3f:c2:86:33:e3:0e:c9:a3:23:0c:b7:2a:9d:ef: 91:69:18:7e:8b:83:78:32:c1:3c:b4:9e:de:19:85:d6:ac:ab: ad:96:2c:b1:b3:32:19:c1:15:3d:1a:11:8f:15:8b:13:40:ba: c4:2b:20:54:ac:60:47:c9:55:cd:e4:df:16:a9:40:9d:d5:0f: bf:b2:e8:e0:7d:ef:b6:9b:aa:62:6f:b7:75:cf:1b:d3:d0:ab: af:97:72:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUwOTE4MjA0ODMzWhcNMjUwOTI1MjA0ODMzWjAYMRYwFAYD VQQDEw02OGNjNzAyMi0wZWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvphgadA+/qpOV8/OA5TJnIkDnXhKuxM5soyppsYScMkWDDZ8Jby7ZryNoBFc MPYn+kpJayzGDebILP20GX81nLjGiHdgjo5yHtHfa85A16xxj+d4+JZJtGYpWWc4 DBvkVszlkBU3GJsGmyrE7rhHYZdUdzy2h8IilFZjf+N8BTCBqhpnJeR+OnaFLRGX leSwoqVLozOn4eOxL+xrs44ptR5Z5Qba0EPsEKqwz359ap7imXlUQO00NoLEbn1f PqzQ/JqwRqFcCir8qMwLnwGHEO4Ism7Gs7sjUD9VLkVs7vxsHnkmXvIZxrRxzwgK cKvp2Ql8zCFQ4S8tjbkZKr1blwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAur3mMy 0Y62VRHppZF4KD34x+ALMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdZRPvNPhTkmQpnURepoMi8VlyvOadsGAn+MAWdLBeGwpLVQnXOBIE 105goNY4/juhUQjtoBu15BgbMXagHUKSN5ycl127+ukNbW3/LGPmhJUn9jSJqFC9 RtfRnBKe/wsXbC6ljS9A6Bjny9c1WIB6FtVseK5RRRalWyVIN4OdAVozIA5gZFiw Xt1IX60n1R0R7FPtbBm1fxBCZ3BKMp1iwBF+pmDBP8KGM+MOyaMjDLcqne+RaRh+ i4N4MsE8tJ7eGYXWrKutliyxszIZwRU9GhGPFYsTQLrEKyBUrGBHyVXN5N8WqUCd 1Q+/sujgfe+2m6pib7d1zxvT0Kuvl3KX -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:51 2025 by rpki-client