$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: Qy6iAuBsk+64hhtcp1BsTYjO0jAm+O2LK24OYIgeCzM= Subject key identifier: 35:B8:63:BD:C3:4E:69:C0:A0:CA:97:4B:A7:6B:BC:84:BD:29:52:C5 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 0726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 0720 Signing time: Sun 02 Nov 2025 21:48:32 +0000 Manifest this update: Sun 02 Nov 2025 21:48:32 +0000 Manifest next update: Sun 09 Nov 2025 21:48:32 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: uPn6/4PDrYHgwVqHc864V7F6qwjWMxMGBsmMkVKp+xg=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1830 (0x726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: Nov 2 21:48:32 2025 GMT Not After : Nov 9 21:48:32 2025 GMT Subject: CN=6907d1b0-2b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:52:80:c3:42:b3:23:82:d5:f2:c6:3a:bb: 84:9c:bb:f5:57:48:02:5d:ff:37:0a:b6:2c:8b:e5: 84:8b:ed:7b:6e:65:14:12:79:87:33:f5:05:03:b5: 6b:d0:e6:3e:fc:98:f7:81:cd:b4:c8:b2:a1:11:f2: ac:52:29:e5:9d:45:c5:5d:71:83:8f:60:4d:b2:9e: d5:59:a3:cf:b0:8b:e5:65:ed:2c:ac:28:df:74:53: 29:29:d9:33:90:c3:44:33:58:18:7a:ff:74:54:15: 66:0e:27:1f:4d:07:12:5b:96:7d:3f:d9:8d:ad:c4: 7d:f5:90:6f:dd:7a:f4:8b:5f:1a:0e:33:c0:b2:80: 0e:bc:fe:e5:62:45:87:66:ea:1f:f0:f3:ae:0e:ce: 7a:a8:78:9c:c1:4a:20:a1:30:d2:60:a1:b7:a6:62: 8f:81:a2:69:e1:30:9c:04:ee:bd:01:88:3d:6a:49: 0e:65:9b:ac:06:15:f7:f7:8e:df:5e:af:72:39:ae: 80:76:bc:bb:ff:df:7c:06:5c:cb:64:78:41:4e:47: f6:8a:3e:ec:63:55:56:bd:ad:b4:9a:66:bf:86:f1: 1d:31:fd:ef:32:84:19:06:83:db:cc:de:37:34:38: 4c:a2:78:33:e9:57:82:7e:70:cc:d5:7d:d0:0e:48: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:63:BD:C3:4E:69:C0:A0:CA:97:4B:A7:6B:BC:84:BD:29:52:C5 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:35:5b:b6:31:9f:aa:72:62:7a:a2:5f:f8:70:f7:d8:df:26: 2a:14:32:6f:3d:0e:d3:c9:37:16:7a:27:95:d8:e5:c7:34:e4: 92:e1:e2:ce:07:ca:42:fb:d7:de:a4:e7:7d:c2:28:44:8b:93: b4:4f:ee:68:96:dd:c0:53:64:6e:59:55:be:fd:af:78:63:05: 32:e1:60:85:11:df:6a:90:53:80:8c:f7:91:4e:de:7c:e1:20: d2:13:d3:d6:35:ab:85:ce:b7:26:15:15:9c:50:11:14:8c:84: f2:98:14:02:65:7d:bc:58:63:db:7b:ac:f0:bf:30:85:a6:c6: cd:ba:e7:4e:5c:e6:89:42:55:df:1e:5d:84:51:1f:b0:73:32: 4a:fe:6e:1d:ea:61:7d:5a:bd:0f:ba:fc:e3:b1:44:ca:88:10: 3d:25:4f:1d:f2:ca:92:68:1e:89:60:7d:13:e3:fa:6b:ee:91: fd:f6:08:64:40:30:e7:0b:4b:fa:38:94:a9:13:64:fc:e4:1c: a9:7c:0c:8e:e0:72:bb:bf:cf:31:26:1a:b6:b7:d0:3f:11:77: f2:9a:aa:6e:3a:da:55:33:e3:23:37:cc:e2:52:8b:06:5e:7b: 65:35:d2:76:75:ae:7a:33:d1:d8:ad:ab:bb:5f:23:33:8d:3f: ac:11:a1:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUxMTAyMjE0ODMyWhcNMjUxMTA5MjE0ODMyWjAYMRYwFAYD VQQDEw02OTA3ZDFiMC0yYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIZSgMNCsyOC1fLGOruEnLv1V0gCXf83CrYsi+WEi+17bmUUEnmHM/UFA7Vr 0OY+/Jj3gc20yLKhEfKsUinlnUXFXXGDj2BNsp7VWaPPsIvlZe0srCjfdFMpKdkz kMNEM1gYev90VBVmDicfTQcSW5Z9P9mNrcR99ZBv3Xr0i18aDjPAsoAOvP7lYkWH Zuof8POuDs56qHicwUogoTDSYKG3pmKPgaJp4TCcBO69AYg9akkOZZusBhX3947f Xq9yOa6Adry7/998BlzLZHhBTkf2ij7sY1VWva20mma/hvEdMf3vMoQZBoPbzN43 NDhMongz6VeCfnDM1X3QDki+oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDW4Y73D TmnAoMqXS6drvIS9KVLFMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJNVu2MZ+qcmJ6ol/4cPfY3yYqFDJvPQ7TyTcWeieV2OXHNOSS4eLO B8pC+9fepOd9wihEi5O0T+5olt3AU2RuWVW+/a94YwUy4WCFEd9qkFOAjPeRTt58 4SDSE9PWNauFzrcmFRWcUBEUjITymBQCZX28WGPbe6zwvzCFpsbNuudOXOaJQlXf Hl2EUR+wczJK/m4d6mF9Wr0PuvzjsUTKiBA9JU8d8sqSaB6JYH0T4/pr7pH99ghk QDDnC0v6OJSpE2T85BypfAyO4HK7v88xJhq2t9A/EXfymqpuOtpVM+MjN8ziUosG XntlNdJ2da56M9HYrau7XyMzjT+sEaFq -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:45 2025 by rpki-client