$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: dqAIEZcrvB67Dhsp1XiGPAxYRQTb4a/BsPWObpaX6sU= Subject key identifier: 2A:C0:CD:19:47:71:B9:65:AE:D0:24:3B:E5:5C:07:EF:36:8F:F9:FE Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 4C Signing time: Mon 03 Nov 2025 07:18:27 +0000 Manifest this update: Mon 03 Nov 2025 07:18:26 +0000 Manifest next update: Mon 10 Nov 2025 07:18:26 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: +i71UFOX+KQ1TBjphLcjt/ZJ8fEhAmj5hZSsGpFmsi4=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Nov 3 07:18:26 2025 GMT Not After : Nov 10 07:18:26 2025 GMT Subject: CN=69085742-c1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:6d:23:bf:42:37:34:d7:6b:20:1d:43:03: 95:92:f5:2c:48:be:f0:b3:3e:97:c5:4c:7a:69:37: 63:40:c8:b8:c9:32:14:32:ad:d7:8e:a7:ea:93:ff: 68:f2:1a:7d:e1:26:a4:43:95:c9:fb:0d:ae:18:3a: 63:3b:dd:fb:a2:83:74:0a:7d:1c:65:09:10:e8:34: 01:24:a4:92:a2:af:2c:3f:de:c6:87:9e:b6:de:77: 75:b4:53:3a:3c:5d:a1:57:c6:69:e9:f7:b4:2c:9a: 9e:50:01:d3:c7:32:c9:f2:94:18:bd:66:ad:fb:45: 28:fe:54:37:be:37:13:8b:75:8d:aa:3d:18:f3:d2: 0d:37:d1:f3:8a:0a:e2:20:cb:d3:9e:1d:ff:bc:42: 49:d8:0e:ea:69:87:8c:ed:c1:11:8f:e2:1c:f8:58: 5c:57:c9:d0:26:ad:33:53:d1:2e:05:25:bd:ec:70: 2b:7c:f6:19:0d:1c:a4:c8:07:90:f9:14:47:d4:d2: 0b:f5:a7:4a:25:3a:3a:0d:8d:6f:08:20:74:89:73: e2:b2:8f:65:b8:a5:93:e0:fc:bc:b8:86:4e:d5:e8: 44:5c:f5:98:97:d1:7d:3b:77:81:35:0f:a5:d4:1a: bd:23:9c:17:ce:ae:d4:a7:fb:18:82:18:1c:9d:a1: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:CD:19:47:71:B9:65:AE:D0:24:3B:E5:5C:07:EF:36:8F:F9:FE X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b9:29:01:fd:5f:68:43:a4:74:29:54:14:68:45:62:4d:a4: 75:ea:94:f8:6b:28:81:90:27:64:f5:51:88:f9:5b:e7:bb:89: d2:26:70:6c:38:8e:51:a2:87:ba:40:40:a4:ce:fd:15:37:ef: f6:0d:cf:ec:a2:62:c9:b5:e5:3e:c4:57:38:24:f2:11:47:40: 01:ee:36:26:ec:a7:34:82:84:6a:7f:d5:9f:ed:c8:c5:e1:62: 3a:58:cc:1b:e3:93:a3:28:17:ee:ae:e6:c8:18:a0:10:72:32: f1:78:63:95:08:2f:0a:ee:f6:ed:e9:1b:93:61:9d:fc:3d:6d: 6f:3c:c4:8a:92:a6:15:3e:70:eb:38:d9:fd:b9:78:36:f2:c8: 68:97:0d:82:81:c6:63:c5:d7:2a:be:f2:af:28:8e:03:ee:09: 7b:38:e3:67:9c:5e:1b:6f:fa:04:29:74:80:69:55:98:c7:10: 48:64:62:da:03:4f:2d:ac:65:d9:7e:29:fd:40:2c:c4:2e:52: 6b:54:c3:6f:45:2b:e2:1f:dd:e5:67:1b:72:5f:58:51:3e:58: 72:29:8d:d7:4c:e3:e8:13:ec:fc:34:6e:dd:2a:b6:fb:5b:c4: f5:9d:b6:00:99:08:63:eb:24:53:ae:1a:7f:7d:1b:69:23:3e: 2f:4c:4c:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTExMDMwNzE4MjZaFw0yNTExMTAwNzE4MjZaMBgxFjAUBgNV BAMTDTY5MDg1NzQyLWMxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPdW0jv0I3NNdrIB1DA5WS9SxIvvCzPpfFTHppN2NAyLjJMhQyrdeOp+qT/2jy Gn3hJqRDlcn7Da4YOmM73fuig3QKfRxlCRDoNAEkpJKiryw/3saHnrbed3W0Uzo8 XaFXxmnp97Qsmp5QAdPHMsnylBi9Zq37RSj+VDe+NxOLdY2qPRjz0g030fOKCuIg y9OeHf+8QknYDupph4ztwRGP4hz4WFxXydAmrTNT0S4FJb3scCt89hkNHKTIB5D5 FEfU0gv1p0olOjoNjW8IIHSJc+Kyj2W4pZPg/Ly4hk7V6ERc9ZiX0X07d4E1D6XU Gr0jnBfOrtSn+xiCGBydodIlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKsDNGUdx uWWu0CQ75VwH7zaP+f4wHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEW5KQH9X2hDpHQpVBRoRWJNpHXqlPhrKIGQJ2T1UYj5W+e7idImcGw4 jlGih7pAQKTO/RU37/YNz+yiYsm15T7EVzgk8hFHQAHuNibspzSChGp/1Z/tyMXh YjpYzBvjk6MoF+6u5sgYoBByMvF4Y5UILwru9u3pG5Nhnfw9bW88xIqSphU+cOs4 2f25eDbyyGiXDYKBxmPF1yq+8q8ojgPuCXs442ecXhtv+gQpdIBpVZjHEEhkYtoD Ty2sZdl+Kf1ALMQuUmtUw29FK+If3eVnG3JfWFE+WHIpjddM4+gT7Pw0bt0qtvtb xPWdtgCZCGPrJFOuGn99G2kjPi9MTAE= -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:53 2025 by rpki-client