$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: OoEerTTPh4AJ1jGVUM0wpPUopyaKhXgfV9fAj49Ig/0= Subject key identifier: C2:E1:04:68:3B:88:D2:40:E5:BC:78:C8:50:F8:35:D6:79:37:62:90 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 05B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 05A9 Signing time: Thu 18 Sep 2025 23:29:22 +0000 Manifest this update: Thu 18 Sep 2025 23:29:22 +0000 Manifest next update: Thu 25 Sep 2025 23:29:22 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: rOviMsiye8S1xAZGIHnm0Xej0n+8hluo4vdIoQ2r4zk=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1456 (0x5b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: Sep 18 23:29:22 2025 GMT Not After : Sep 25 23:29:22 2025 GMT Subject: CN=68cc95d2-ed75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:42:ab:0c:3a:f7:88:0d:6d:03:3d:9f:8d: 2d:b6:54:08:17:27:d9:10:e0:9c:41:8c:26:5d:20: 11:21:40:8d:94:bf:7d:ba:e1:93:96:26:ab:f8:fe: 7f:17:d4:79:2d:38:07:dd:14:c5:27:83:b4:b6:1d: 08:3a:2d:9f:03:f7:48:17:51:70:6d:5a:f4:99:7c: 5c:2a:db:55:2b:30:2f:c0:6d:7a:66:8f:4b:1e:93: f4:5d:59:a9:62:1f:c0:dd:ef:34:41:ca:e0:bd:1a: f9:4b:6d:6a:cd:42:b7:0c:09:99:54:3c:c9:76:ad: a4:e6:c6:90:4b:8d:32:86:6a:c8:39:d9:62:8b:d7: 0f:30:02:9e:9b:a4:73:22:d1:07:53:2f:02:0b:ca: 2b:ed:d5:1a:b4:ca:6b:42:20:cc:9f:27:ed:75:64: fe:50:e8:f6:92:85:0a:fc:52:d6:a4:7d:21:68:68: 42:fd:30:9d:02:ec:51:23:cb:58:58:f0:a7:54:e3: 99:3c:25:48:e8:a1:e8:45:c4:66:c8:1e:55:ed:5b: e2:b9:5e:40:c7:4e:60:a9:f1:4d:76:c9:c0:8c:10: 63:f5:f6:e3:4a:b4:fc:29:43:92:44:45:58:f3:49: 26:7c:43:5f:34:03:a5:68:e1:1f:b2:0d:f9:cf:41: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E1:04:68:3B:88:D2:40:E5:BC:78:C8:50:F8:35:D6:79:37:62:90 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9e:a1:73:f2:9a:ad:d7:b4:e1:7a:bf:44:7a:2b:21:8c:94: a8:39:72:80:e0:4b:ec:ed:f6:6e:31:c7:00:7a:0e:95:9f:1b: f7:f3:5c:9e:9e:7b:a9:68:41:76:99:6f:0a:71:94:b2:71:8d: 71:e6:36:7b:1d:2c:58:73:a0:f3:1d:c5:04:34:7b:42:56:f3: 76:fd:5c:3b:5e:22:5f:82:e3:2f:2c:d2:57:d9:5f:4c:33:52: fc:d6:6e:91:bc:56:7b:98:22:ea:9b:55:ee:fd:bd:b0:4f:22: 47:89:08:7a:d6:25:5d:56:98:1e:1d:05:b6:b3:a7:8e:ea:a0: 1d:4a:5e:b9:e7:44:90:99:68:65:6c:a7:a0:0f:fa:95:f3:2e: 97:a7:82:77:40:8e:e9:f1:00:d2:fe:d1:46:b0:57:2e:ee:9d: 1e:01:33:3f:ed:2a:b8:7c:cd:fb:35:01:f2:73:7e:98:cb:d4: e2:5e:c4:59:43:62:35:11:56:7f:c4:b6:07:bd:83:f5:e3:06: 7e:8c:85:fe:bc:d3:16:eb:11:1f:91:d0:24:dc:0a:e0:01:73: 36:b8:2f:af:dd:d8:84:50:2e:c8:86:3f:a3:6e:f3:57:d6:bd: d4:57:85:ee:83:4a:db:65:96:03:47:92:03:e5:d1:be:86:c0: 1d:44:2a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjUwOTE4MjMyOTIyWhcNMjUwOTI1MjMyOTIyWjAYMRYwFAYD VQQDEw02OGNjOTVkMi1lZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD1Cqww694gNbQM9n40ttlQIFyfZEOCcQYwmXSARIUCNlL99uuGTliar+P5/ F9R5LTgH3RTFJ4O0th0IOi2fA/dIF1FwbVr0mXxcKttVKzAvwG16Zo9LHpP0XVmp Yh/A3e80QcrgvRr5S21qzUK3DAmZVDzJdq2k5saQS40yhmrIOdlii9cPMAKem6Rz ItEHUy8CC8or7dUatMprQiDMnyftdWT+UOj2koUK/FLWpH0haGhC/TCdAuxRI8tY WPCnVOOZPCVI6KHoRcRmyB5V7VviuV5Ax05gqfFNdsnAjBBj9fbjSrT8KUOSREVY 80kmfENfNAOlaOEfsg35z0HEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLhBGg7 iNJA5bx4yFD4NdZ5N2KQMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGnqFz8pqt17Ther9EeishjJSoOXKA4Evs7fZuMccAeg6Vnxv381ye nnupaEF2mW8KcZSycY1x5jZ7HSxYc6DzHcUENHtCVvN2/Vw7XiJfguMvLNJX2V9M M1L81m6RvFZ7mCLqm1Xu/b2wTyJHiQh61iVdVpgeHQW2s6eO6qAdSl6550SQmWhl bKegD/qV8y6Xp4J3QI7p8QDS/tFGsFcu7p0eATM/7Sq4fM37NQHyc36Yy9TiXsRZ Q2I1EVZ/xLYHvYP14wZ+jIX+vNMW6xEfkdAk3ArgAXM2uC+v3diEUC7Ihj+jbvNX 1r3UV4Xug0rbZZYDR5ID5dG+hsAdRCrH -----END CERTIFICATE-----Generated at Fri Sep 19 07:34:16 2025 by rpki-client