$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: yjWa4Vp7jHK68qvadHOvS0k35fHfDUxnLuRyt0PAu70= Subject key identifier: 7A:88:4B:B0:86:62:9A:28:A1:AC:B5:06:C8:12:84:E1:99:D2:44:5A Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 05C0 Signing time: Sun 02 Nov 2025 23:05:23 +0000 Manifest this update: Sun 02 Nov 2025 23:05:22 +0000 Manifest next update: Sun 09 Nov 2025 23:05:22 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: b6gXtwT5w86tgRsKf65Q4dlRTEXrj4bkrFMdL35r5UU=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: Nov 2 23:05:22 2025 GMT Not After : Nov 9 23:05:22 2025 GMT Subject: CN=6907e3b2-205b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:63:6a:df:ac:09:58:cb:7b:c3:bf:56:39: a2:e6:88:7e:3a:8f:d1:54:ae:78:fb:f0:75:4f:88: 21:d1:33:4b:7b:49:9b:d0:20:54:ec:20:d3:f3:d9: 0e:19:fc:2f:c3:36:85:18:a1:56:a5:7e:40:9b:47: 4a:3f:b9:81:94:38:eb:e9:c7:9f:44:50:e0:5c:e9: 16:f5:02:65:3e:e1:2f:93:e4:d5:80:b5:d1:d5:0b: a5:f3:59:da:94:dc:ad:89:aa:34:ee:8d:c0:17:13: 39:23:d2:f8:18:22:90:ab:33:3d:eb:bc:40:d3:47: d1:13:fa:51:21:39:31:fb:e7:ba:ca:0f:9d:f9:ff: d5:d2:c8:e1:04:af:2b:c0:00:a4:d8:78:ee:68:31: bc:50:d8:89:f8:c1:02:7e:0f:f5:83:f4:f4:aa:82: f2:d2:07:7d:4b:43:80:97:9e:e5:7a:0e:f1:5d:e6: 81:4f:36:63:ab:fd:b5:7a:d7:d8:21:35:6c:26:50: c2:37:5c:e0:1c:ef:61:9e:19:dc:5f:99:ac:89:b3: bb:91:3a:6b:98:de:09:2b:f6:39:70:28:ec:f8:4d: 43:90:8d:ae:60:7f:a3:15:aa:c3:7d:e5:57:9a:fe: 0f:86:5d:44:5f:58:54:e1:b5:c2:95:0f:6d:0a:ee: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:4B:B0:86:62:9A:28:A1:AC:B5:06:C8:12:84:E1:99:D2:44:5A X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:1b:7a:40:fd:85:18:20:ce:b1:d3:93:e1:cd:da:66:76:4a: d3:22:c2:85:5f:5d:c9:1c:d5:cd:f6:66:20:8b:3f:75:ae:4c: 86:05:71:95:ae:6c:8f:e4:6f:68:56:71:55:65:cd:a0:22:6f: ba:d2:21:72:51:63:bc:85:d4:29:ab:ce:af:b6:d9:0f:a9:1d: e2:e9:69:24:ac:e6:0f:ea:c8:a9:90:60:12:a3:c1:03:25:44: 77:01:ad:bb:70:62:71:a1:5e:19:13:eb:84:8b:c2:6b:6d:13: 78:ea:d4:22:9d:92:5e:e7:82:cf:38:55:16:f8:cb:ba:81:60: 80:6c:f8:ee:d7:62:48:2f:2d:dc:bb:24:49:b9:0c:e7:87:d3: 9f:a1:6a:53:a4:3c:00:95:36:f1:94:96:2f:0f:d5:8a:e4:07: 95:f8:54:24:ad:63:48:8a:27:a3:72:7c:76:ab:cc:22:e5:d5: 0d:48:d9:12:21:a4:af:8e:e0:0d:46:06:cf:ee:18:64:13:c9: 9c:aa:18:7a:2d:58:67:36:3a:67:23:04:88:ae:f6:f2:1a:ab: 6a:58:55:96:71:51:75:e5:24:f8:00:c0:cc:8e:15:8b:70:8a: fc:df:6a:71:59:d2:99:f6:7b:6a:08:06:0f:d6:d9:d2:a4:d6: 73:e4:97:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjUxMTAyMjMwNTIyWhcNMjUxMTA5MjMwNTIyWjAYMRYwFAYD VQQDEw02OTA3ZTNiMi0yMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaVjat+sCVjLe8O/Vjmi5oh+Oo/RVK54+/B1T4gh0TNLe0mb0CBU7CDT89kO GfwvwzaFGKFWpX5Am0dKP7mBlDjr6cefRFDgXOkW9QJlPuEvk+TVgLXR1Qul81na lNytiao07o3AFxM5I9L4GCKQqzM967xA00fRE/pRITkx++e6yg+d+f/V0sjhBK8r wACk2HjuaDG8UNiJ+MECfg/1g/T0qoLy0gd9S0OAl57leg7xXeaBTzZjq/21etfY ITVsJlDCN1zgHO9hnhncX5msibO7kTprmN4JK/Y5cCjs+E1DkI2uYH+jFarDfeVX mv4Phl1EX1hU4bXClQ9tCu7NawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqIS7CG Ypoooay1BsgShOGZ0kRaMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0G3pA/YUYIM6x05PhzdpmdkrTIsKFX13JHNXN9mYgiz91rkyGBXGV rmyP5G9oVnFVZc2gIm+60iFyUWO8hdQpq86vttkPqR3i6WkkrOYP6sipkGASo8ED JUR3Aa27cGJxoV4ZE+uEi8JrbRN46tQinZJe54LPOFUW+Mu6gWCAbPju12JILy3c uyRJuQznh9OfoWpTpDwAlTbxlJYvD9WK5AeV+FQkrWNIiiejcnx2q8wi5dUNSNkS IaSvjuANRgbP7hhkE8mcqhh6LVhnNjpnIwSIrvbyGqtqWFWWcVF15ST4AMDMjhWL cIr832pxWdKZ9ntqCAYP1tnSpNZz5JdO -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:51 2025 by rpki-client