$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: jHr+ibVa3NN3kuSwDYXwEM0lTt4meIr9254zOdOOrTU= Subject key identifier: 4A:4C:D3:78:8E:60:2F:3E:21:C8:C0:08:FD:E3:34:4E:E0:C3:F0:91 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: CB Signing time: Sat 25 Oct 2025 09:34:38 +0000 Manifest this update: Sat 25 Oct 2025 09:34:37 +0000 Manifest next update: Sat 01 Nov 2025 09:34:37 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: IxQhwLTZARUxtxfgDoJbMPgJCvkiCNOWntlhMvnj4Aw=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: IVAag2n39OgPxLOhqGGK4t8maSAxh28CoPmeH83pRE4=) 3: EFC2CA2489D311F0B3F8631DC4F9AE02.roa (hash: vaEXmxxOCfh4t7B3q+8C9by77OCY+clJhF+kP80doZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Oct 25 09:34:37 2025 GMT Not After : Nov 1 09:34:37 2025 GMT Subject: CN=68fc99ae-e737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:51:41:20:09:f5:49:a6:40:17:4a:87:46: 42:20:e0:fd:17:e6:50:46:67:f4:f1:a7:b3:ba:93: 8f:2d:38:4e:8d:5d:8e:c5:60:3d:8c:c6:e6:66:2b: 27:30:04:28:0a:95:ef:34:b6:f7:19:dd:37:7b:bb: f1:aa:6b:c1:81:da:a2:5b:ec:3e:b9:1a:59:25:a6: 95:10:2b:10:0c:80:c9:9e:62:8d:3e:fb:29:92:36: 57:57:79:1e:e7:df:fe:4d:21:f0:77:24:db:8c:08: 8b:d8:ec:bb:0e:d9:60:67:65:1a:70:31:a8:58:31: 5b:5f:ed:b5:bc:95:8d:72:29:64:07:ee:02:af:b7: 78:88:ef:69:bf:fb:ab:b2:3b:c7:af:a9:1b:3a:0f: 4f:f8:e9:53:61:d4:7c:08:18:ca:e7:1e:ad:6f:7e: 57:88:e7:d9:45:0c:68:02:24:7e:f7:f5:0d:8a:2b: e3:ed:de:17:3f:05:74:da:09:40:2b:6b:3f:47:e4: 13:11:6b:a3:42:00:b3:bb:b7:04:5a:4f:ff:bc:e6: c1:13:a8:f4:d5:0d:9c:5e:bc:7f:ed:07:f7:dc:bf: dc:9e:e6:8e:33:19:be:8a:3a:ef:65:bb:a9:94:33: fe:8c:a4:18:47:64:1f:10:4d:20:b2:c8:26:78:36: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:D3:78:8E:60:2F:3E:21:C8:C0:08:FD:E3:34:4E:E0:C3:F0:91 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:68:4b:e3:90:32:bb:36:2d:7f:63:58:40:40:d6:6d:92:d8: a6:c9:3a:ba:a4:fb:87:a6:e9:c0:2b:38:99:5c:e9:f4:5c:6a: 02:be:a6:55:12:67:6b:92:b1:3b:46:82:e2:a9:37:9a:7e:66: b6:e9:3d:8c:3e:05:ba:c5:3f:24:d2:c3:f9:7b:69:81:76:eb: 24:ec:17:40:81:69:bb:27:11:4a:df:63:5b:8a:7a:f6:1d:72: ba:70:76:85:c7:0a:17:c2:19:88:d3:cb:97:8f:63:33:78:9f: 2b:82:d0:da:a9:4a:2a:77:11:20:9a:96:86:34:ec:cd:6d:b1: 67:7e:88:1b:80:c2:9d:50:8e:0b:0f:07:ca:0f:bb:f5:38:e8: bb:31:58:9e:a8:42:a7:1a:84:ec:2c:fd:18:ac:b4:90:c6:1e: 84:c3:26:20:ee:f3:00:93:c7:67:06:35:e7:87:3e:85:6e:32: 3a:ba:15:07:ae:a4:06:a4:6d:8b:30:c3:f8:08:62:62:5b:f9: 6c:3d:ad:ff:a0:a9:97:44:2b:94:6b:37:62:88:f0:17:e8:b4: 45:bb:48:9c:47:6d:c5:0f:9e:26:81:53:49:cd:5d:a1:d2:cf: 67:43:6e:a8:4e:ff:1f:c7:70:11:ee:95:d5:36:fb:56:d8:af: 5a:41:ca:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIzNjQxMTAvBgNVBAUTKDQ3MENERkQ0OUY1REZGMjEyNTc4REVDNURBMjFGMjFE QTBCM0ZBRDIwHhcNMjUxMDI1MDkzNDM3WhcNMjUxMTAxMDkzNDM3WjAYMRYwFAYD VQQDEw02OGZjOTlhZS1lNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzVRQSAJ9UmmQBdKh0ZCIOD9F+ZQRmf08aezupOPLThOjV2OxWA9jMbmZisn MAQoCpXvNLb3Gd03e7vxqmvBgdqiW+w+uRpZJaaVECsQDIDJnmKNPvspkjZXV3ke 59/+TSHwdyTbjAiL2Oy7DtlgZ2UacDGoWDFbX+21vJWNcilkB+4Cr7d4iO9pv/ur sjvHr6kbOg9P+OlTYdR8CBjK5x6tb35XiOfZRQxoAiR+9/UNiivj7d4XPwV02glA K2s/R+QTEWujQgCzu7cEWk//vObBE6j01Q2cXrx/7Qf33L/cnuaOMxm+ijrvZbup lDP+jKQYR2QfEE0gssgmeDaCmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpM03iO YC8+IcjACP3jNE7gw/CRMB8GA1UdIwQYMBaAFEcM39SfXf8hJXjexdoh8h2gs/rS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjM2NC8wNDA1NjZBODg0 Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95RWxlTjdGMmlIeUhhQ3ot dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjM2NC8wNDA1NjZBODg0Q0MxMUVGODRFRTNFNTBDNEY5QUUwMi9Sd3pmMUo5ZF95 RWxlTjdGMmlIeUhhQ3otdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqaEvjkDK7Ni1/Y1hAQNZtktimyTq6pPuHpunAKziZXOn0XGoCvqZV EmdrkrE7RoLiqTeafma26T2MPgW6xT8k0sP5e2mBdusk7BdAgWm7JxFK32Nbinr2 HXK6cHaFxwoXwhmI08uXj2MzeJ8rgtDaqUoqdxEgmpaGNOzNbbFnfogbgMKdUI4L DwfKD7v1OOi7MVieqEKnGoTsLP0YrLSQxh6EwyYg7vMAk8dnBjXnhz6FbjI6uhUH rqQGpG2LMMP4CGJiW/lsPa3/oKmXRCuUazdiiPAX6LRFu0icR23FD54mgVNJzV2h 0s9nQ26oTv8fx3AR7pXVNvtW2K9aQcrO -----END CERTIFICATE-----Generated at Sat Oct 25 12:36:22 2025 by rpki-client