$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: dC0wxEYCHbyx2bQXKMYyRKl7HfEGsmx/PzK9W8aWAWI= Subject key identifier: 8A:C9:83:22:AB:5E:D6:F5:C4:93:9C:C3:BB:29:5E:C9:51:90:27:56 Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 070F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 0709 Signing time: Thu 18 Sep 2025 22:09:51 +0000 Manifest this update: Thu 18 Sep 2025 22:09:50 +0000 Manifest next update: Thu 25 Sep 2025 22:09:50 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: e7nr0YWpyvTbDpcEG6GLTMOMLUipIiFD+AKAP2sA3f0=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1807 (0x70f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: Sep 18 22:09:50 2025 GMT Not After : Sep 25 22:09:50 2025 GMT Subject: CN=68cc832f-068d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:c7:d3:85:8d:3f:ce:6b:92:2b:51:6c:74: d6:f0:76:55:b7:6e:80:83:c1:7a:8f:3f:b2:b8:a4: 61:29:38:c9:c4:c2:7e:d0:73:d8:4f:17:11:dc:c6: 07:d2:d2:2c:eb:01:fc:b2:8f:35:ac:1f:00:1e:f0: b7:d6:f4:d9:9b:c0:5a:88:54:d3:dc:5d:14:71:b4: 17:2e:8b:0c:7f:0f:2f:93:3b:0d:0d:02:61:44:f8: 07:2e:ef:71:7e:dd:ae:69:bc:f1:1b:53:b2:0c:a4: b1:34:73:1c:06:7b:cb:7e:87:db:51:12:d2:88:24: 0b:5c:bf:5e:5f:91:8d:ad:11:4e:ab:aa:2b:31:38: 25:0d:8f:55:a5:4e:f3:21:6c:76:ec:36:99:61:88: 21:b8:d2:30:0c:3e:11:22:24:6f:93:3e:cc:9d:be: 09:4b:c0:2c:6c:dc:10:45:ed:ef:f6:47:b3:b8:8c: 92:47:e4:38:5e:3b:18:7d:e4:3f:2f:07:12:48:92: b2:d9:f9:2c:78:7b:c3:f2:f8:47:06:87:37:91:83: ae:80:98:91:38:84:df:74:41:6c:0b:99:d7:de:b3: 0b:d9:43:e8:7b:49:cc:e9:96:ce:0e:45:39:83:17: 05:47:f4:de:42:17:1b:b2:fb:a7:5a:6b:04:f1:f9: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:83:22:AB:5E:D6:F5:C4:93:9C:C3:BB:29:5E:C9:51:90:27:56 X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:19:05:95:e7:11:58:87:6b:71:8c:19:ea:b4:c4:c9:9d:eb: fa:9d:06:f1:fa:2f:fd:21:8e:e5:96:a9:02:6e:75:5e:8b:00: 75:02:06:6c:2d:49:5b:f4:8c:21:09:4a:23:5a:93:ac:b0:d9: 90:68:5d:a3:41:1b:97:ff:77:4c:21:e5:35:a7:3b:b2:53:99: a5:2f:1e:19:62:5c:ab:ac:90:e7:9e:ff:2e:a4:72:0b:70:a1: bf:78:a1:94:88:02:b3:61:22:da:30:86:0c:83:fa:ba:7d:a1: 9e:eb:de:f7:52:cd:d4:59:54:3c:f0:36:77:06:cf:9f:a3:41: 07:7e:25:e5:1a:e8:09:0c:c1:e9:57:c1:f7:2f:ec:d9:57:ce: 64:4a:f5:7a:61:27:0b:dd:60:32:b8:77:07:00:9d:f7:a7:84: f6:36:35:ae:c9:4a:5b:b8:3d:c4:b3:99:aa:f5:d0:93:39:bd: bc:6f:de:00:a4:c1:f4:9e:b0:de:bd:db:bf:86:a2:8b:75:a9: 6f:28:bc:c2:54:86:cd:5d:c1:b2:54:92:cf:19:47:ce:ca:bd: 09:8e:ea:c5:32:f0:f5:40:ac:96:39:25:fb:ef:43:5b:33:a9: da:15:a3:a1:a9:9e:7e:ae:ab:08:0f:27:d7:35:0d:e6:e6:73: 30:ff:26:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwOTE4MjIwOTUwWhcNMjUwOTI1MjIwOTUwWjAYMRYwFAYD VQQDEw02OGNjODMyZi0wNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI3H04WNP85rkitRbHTW8HZVt26Ag8F6jz+yuKRhKTjJxMJ+0HPYTxcR3MYH 0tIs6wH8so81rB8AHvC31vTZm8BaiFTT3F0UcbQXLosMfw8vkzsNDQJhRPgHLu9x ft2uabzxG1OyDKSxNHMcBnvLfofbURLSiCQLXL9eX5GNrRFOq6orMTglDY9VpU7z IWx27DaZYYghuNIwDD4RIiRvkz7Mnb4JS8AsbNwQRe3v9kezuIySR+Q4XjsYfeQ/ LwcSSJKy2fkseHvD8vhHBoc3kYOugJiROITfdEFsC5nX3rML2UPoe0nM6ZbODkU5 gxcFR/TeQhcbsvunWmsE8flyBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrJgyKr Xtb1xJOcw7spXslRkCdWMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXGQWV5xFYh2txjBnqtMTJnev6nQbx+i/9IY7llqkCbnVeiwB1AgZs LUlb9IwhCUojWpOssNmQaF2jQRuX/3dMIeU1pzuyU5mlLx4ZYlyrrJDnnv8upHIL cKG/eKGUiAKzYSLaMIYMg/q6faGe6973Us3UWVQ88DZ3Bs+fo0EHfiXlGugJDMHp V8H3L+zZV85kSvV6YScL3WAyuHcHAJ33p4T2NjWuyUpbuD3Es5mq9dCTOb28b94A pMH0nrDevdu/hqKLdalvKLzCVIbNXcGyVJLPGUfOyr0JjurFMvD1QKyWOSX770Nb M6naFaOhqZ5+rqsIDyfXNQ3m5nMw/ybP -----END CERTIFICATE-----Generated at Fri Sep 19 03:56:59 2025 by rpki-client