$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft File: 4WPw_lTxea9MbAlwmP774tQ4Wxk.mft (raw, json) Hash identifier: +/bKcW3he4YSsewmib0r3Q0DBDY5V5tvLritmugcTZA= Subject key identifier: 34:F7:93:0D:95:75:0A:CA:31:37:0B:F8:16:72:5A:BF:43:DE:56:61 Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft Manifest number: 65 Signing time: Wed 17 Sep 2025 07:47:25 +0000 Manifest this update: Wed 17 Sep 2025 07:47:25 +0000 Manifest next update: Wed 24 Sep 2025 07:47:25 +0000 Files and hashes: 1: 4WPw_lTxea9MbAlwmP774tQ4Wxk.crl (hash: ScJ3q5zcnf9ZAH6A7Yqw+9DNs7USOCdJG9hbGL3B+3w=) 2: 2CA96408FD8811EF9404CD48C4F9AE02.roa (hash: ijzYb1r/oyAKx1Hjreuyv8IcJPnhFB/m1NQeL+FUTHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Sep 17 07:47:25 2025 GMT Not After : Sep 24 07:47:25 2025 GMT Subject: CN=68ca678d-65c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:72:6d:c8:5e:16:b8:4e:1d:79:a9:55:65: f7:6f:24:04:24:78:a2:3c:7b:08:37:1e:97:f6:49: b2:e8:d7:16:a3:51:ef:dc:bc:84:07:77:cf:09:28: db:3a:08:8b:6f:af:2c:39:64:5b:52:40:37:04:0f: 52:50:55:2f:49:c1:22:0d:dd:cd:93:50:9f:2b:50: b5:97:4e:16:71:76:07:ea:6a:46:b2:41:79:28:4c: 89:0e:16:58:78:7a:39:b3:9c:be:d0:23:2b:53:f7: 78:f6:ce:af:bd:ed:c0:7f:0c:b7:c5:22:7f:99:b6: 36:d8:ea:99:8b:b3:58:61:12:07:85:4d:b8:3c:4d: a9:e7:96:8b:58:67:70:9d:86:73:36:e4:8e:15:da: 74:9a:bf:fa:69:2c:6f:2d:55:10:c4:c4:a1:ba:ae: be:09:cd:ed:0c:39:b9:36:68:56:8c:dc:73:a3:35: 24:7f:30:e7:6c:29:d5:88:fe:09:b7:38:17:8f:4b: b7:0a:56:6a:46:44:a0:06:c3:a9:08:d9:fd:1d:13: 7e:be:89:35:19:59:4f:98:1b:5e:51:8e:88:c2:b0: 0b:d9:fe:af:ec:25:8f:a4:27:f1:95:95:bb:36:50: d7:d6:21:b5:2d:a8:e1:84:f7:71:da:cc:10:1c:fa: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F7:93:0D:95:75:0A:CA:31:37:0B:F8:16:72:5A:BF:43:DE:56:61 X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:50:3a:cb:c7:f0:bc:0e:ff:ec:52:c2:ab:2f:dc:b2:fa:64: eb:12:ca:1f:8e:28:fb:25:9d:d0:5c:8e:86:3a:2a:1c:bf:d7: 09:58:4c:12:e1:97:a4:41:3d:fe:60:21:dc:0a:79:fd:df:18: a8:97:6a:a3:25:4c:fa:df:b0:87:3e:93:53:9c:c1:80:c5:a4: 9b:75:0d:87:63:79:fc:87:02:ca:43:c6:53:2d:fa:b7:f5:82: 98:44:29:53:f3:7a:33:13:22:68:b5:87:0a:d1:c6:4e:9f:0a: 30:a3:61:ba:d0:bb:00:50:e9:56:7b:0a:c8:17:27:a7:2f:74: b3:84:18:2c:62:e4:28:59:6b:8c:71:dd:f3:ae:7d:59:92:20: 15:10:31:90:6c:1b:ef:c8:25:3a:ed:dc:76:8b:85:69:27:97: 5c:9b:86:f8:01:34:42:63:da:d4:9b:8a:f3:0d:f2:cf:54:13: 9b:6a:5f:bd:af:20:20:12:ec:87:12:fc:9e:ee:5c:a1:89:98: 4b:49:b8:60:f4:06:b0:a1:84:66:49:64:3e:40:af:ff:65:31: 3e:0e:28:58:01:69:9d:7f:9b:d5:97:96:3a:06:61:9d:9b:b2: a6:eb:10:a2:6f:6d:76:67:13:20:57:c9:84:66:10:91:ac:84: 44:2d:9e:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTRDRDExMC8GA1UEBRMoRTE2M0YwRkU1NEYxNzlBRjRDNkMwOTcwOThGRUZCRTJE NDM4NUIxOTAeFw0yNTA5MTcwNzQ3MjVaFw0yNTA5MjQwNzQ3MjVaMBgxFjAUBgNV BAMTDTY4Y2E2NzhkLTY1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi/XJtyF4WuE4dealVZfdvJAQkeKI8ewg3Hpf2SbLo1xajUe/cvIQHd88JKNs6 CItvryw5ZFtSQDcED1JQVS9JwSIN3c2TUJ8rULWXThZxdgfqakayQXkoTIkOFlh4 ejmznL7QIytT93j2zq+97cB/DLfFIn+ZtjbY6pmLs1hhEgeFTbg8TannlotYZ3Cd hnM25I4V2nSav/ppLG8tVRDExKG6rr4Jze0MObk2aFaM3HOjNSR/MOdsKdWI/gm3 OBePS7cKVmpGRKAGw6kI2f0dE36+iTUZWU+YG15RjojCsAvZ/q/sJY+kJ/GVlbs2 UNfWIbUtqOGE93HazBAc+rcfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNPeTDZV1 CsoxNwv4FnJav0PeVmEwHwYDVR0jBBgwFoAU4WPw/lTxea9MbAlwmP774tQ4Wxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NENEL0QyRTJDQTdDRkQ4 NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFdQd19sVHhlYTlNYkFsd21QNzc0dFE0V3hrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NENEL0QyRTJDQTdDRkQ4NzExRUZCNjYyNEEyOEM0RjlBRTAyLzRXUHdfbFR4ZWE5 TWJBbHdtUDc3NHRRNFd4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVQOsvH8LwO/+xSwqsv3LL6ZOsSyh+OKPslndBcjoY6Khy/1wlYTBLh l6RBPf5gIdwKef3fGKiXaqMlTPrfsIc+k1OcwYDFpJt1DYdjefyHAspDxlMt+rf1 gphEKVPzejMTImi1hwrRxk6fCjCjYbrQuwBQ6VZ7CsgXJ6cvdLOEGCxi5ChZa4xx 3fOufVmSIBUQMZBsG+/IJTrt3HaLhWknl1ybhvgBNEJj2tSbivMN8s9UE5tqX72v ICAS7IcS/J7uXKGJmEtJuGD0BrChhGZJZD5Ar/9lMT4OKFgBaZ1/m9WXljoGYZ2b sqbrEKJvbXZnEyBXyYRmEJGshEQtnu4= -----END CERTIFICATE-----Generated at Fri Sep 19 06:57:25 2025 by rpki-client