$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: ehTdi1a+wqD8KRCEbF6LHUteFOVkBxUKlJUDgYX3JxM= Subject key identifier: C9:9A:4E:D0:84:24:E9:AD:73:F4:24:A0:DE:98:F0:C6:45:C7:23:D9 Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 0147 Signing time: Wed 05 Nov 2025 04:10:59 +0000 Manifest this update: Wed 05 Nov 2025 04:10:59 +0000 Manifest next update: Wed 12 Nov 2025 04:10:59 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: 8klHQ0SH7M+1yjn+r3QC6q01sOMN1BI0fD5MfGHKQ3M=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: vRb+yhb2srl8xWf7no5GmTVIZuGppjwK0W3JgKbtn6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Nov 5 04:10:59 2025 GMT Not After : Nov 12 04:10:59 2025 GMT Subject: CN=690ace53-2c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:20:ad:94:ba:03:b8:b9:ac:65:b5:bf:ff: ed:3b:16:2a:73:9c:18:ff:42:c2:f0:64:b3:5c:66: 53:de:a4:c9:06:b0:c6:b8:0b:c8:93:10:88:fc:ea: 6e:e2:92:e4:5e:0c:80:13:80:51:c9:63:1b:30:d8: 35:1a:77:09:05:d7:d4:d6:d3:e7:19:ce:17:8c:a7: f1:ab:b1:6a:3a:73:1b:2e:d4:19:b0:0c:07:17:43: d4:76:da:56:47:ad:99:e5:e2:4c:cf:63:97:4c:f4: b9:fa:fd:b2:c1:1c:12:6d:d9:fc:e0:7b:13:78:c6: 58:b4:15:35:1a:d3:6d:fd:af:1c:0d:34:e1:b6:4f: e9:9b:17:71:c9:83:56:03:cd:9b:58:8a:63:2e:df: ca:1b:80:f3:2d:0e:9c:0d:a6:e2:48:5c:e7:ac:aa: e5:cf:69:58:1c:b1:5c:25:ad:33:6e:5a:0c:41:8a: 5a:e4:aa:8b:bc:8b:92:f3:4c:bf:7c:66:8d:2f:f5: 87:7c:a3:94:ab:d3:d1:4c:2b:4c:35:3a:3f:ef:ae: 55:fe:bd:4d:c8:e5:61:84:bf:0f:49:a1:4f:a4:c6: e0:27:0b:17:7e:23:c2:8f:c4:b4:cb:87:0c:fb:1f: 4f:a0:53:8a:37:33:7c:89:25:08:b6:97:f6:ea:6c: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:4E:D0:84:24:E9:AD:73:F4:24:A0:DE:98:F0:C6:45:C7:23:D9 X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8e:bb:40:ac:81:86:e7:20:57:18:cc:fb:e1:f2:aa:75:df: cd:78:bb:86:b0:a5:0d:2f:70:44:9a:21:e2:08:ea:82:19:e0: 96:e6:1e:9a:f4:99:76:78:44:ae:9c:d2:83:d5:5b:6d:e6:f3: 46:db:c3:62:34:ea:35:de:c0:a8:27:fc:e2:f2:ce:00:6b:10: 17:6f:3a:7c:04:05:b0:51:dc:e5:48:d0:73:7b:6c:be:e3:bb: 7b:b6:2b:b4:2f:bc:08:22:0e:9a:59:35:1e:c5:88:bb:8e:08: 69:b0:d0:07:be:d7:d9:71:97:a0:a2:84:67:6a:a6:3c:a7:a0: 36:39:b9:af:97:ab:0b:1c:2f:8a:84:e9:77:6b:04:ce:3b:58: 64:bf:a1:e3:6a:1b:03:41:8a:90:f0:e0:8e:a2:7c:08:b2:59: 9c:de:a2:03:79:74:bb:47:0b:ed:79:04:5c:be:66:11:b1:93: d0:60:d5:a8:90:0d:6b:55:9f:e9:41:86:1a:b3:b8:81:7e:d9: 1d:9c:5b:2f:e8:fe:fc:d0:22:0f:a7:09:cb:cd:63:a5:46:ca: 21:35:c7:d6:a5:20:c5:eb:8a:68:cf:32:e3:fe:dd:08:1c:22: 04:4c:40:19:1f:a7:ce:ad:7c:2f:44:85:77:4d:b6:ee:53:03: 00:25:e8:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUxMTA1MDQxMDU5WhcNMjUxMTEyMDQxMDU5WjAYMRYwFAYD VQQDEw02OTBhY2U1My0yYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFAgrZS6A7i5rGW1v//tOxYqc5wY/0LC8GSzXGZT3qTJBrDGuAvIkxCI/Opu 4pLkXgyAE4BRyWMbMNg1GncJBdfU1tPnGc4XjKfxq7FqOnMbLtQZsAwHF0PUdtpW R62Z5eJMz2OXTPS5+v2ywRwSbdn84HsTeMZYtBU1GtNt/a8cDTThtk/pmxdxyYNW A82bWIpjLt/KG4DzLQ6cDabiSFznrKrlz2lYHLFcJa0zbloMQYpa5KqLvIuS80y/ fGaNL/WHfKOUq9PRTCtMNTo/765V/r1NyOVhhL8PSaFPpMbgJwsXfiPCj8S0y4cM +x9PoFOKNzN8iSUItpf26myMVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmaTtCE JOmtc/QkoN6Y8MZFxyPZMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgjrtArIGG5yBXGMz74fKqdd/NeLuGsKUNL3BEmiHiCOqCGeCW5h6a 9Jl2eESunNKD1Vtt5vNG28NiNOo13sCoJ/zi8s4AaxAXbzp8BAWwUdzlSNBze2y+ 47t7tiu0L7wIIg6aWTUexYi7jghpsNAHvtfZcZegooRnaqY8p6A2Obmvl6sLHC+K hOl3awTOO1hkv6HjahsDQYqQ8OCOonwIslmc3qIDeXS7RwvteQRcvmYRsZPQYNWo kA1rVZ/pQYYas7iBftkdnFsv6P780CIPpwnLzWOlRsohNcfWpSDF64pozzLj/t0I HCIETEAZH6fOrXwvRIV3TbbuUwMAJeh/ -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:52 2025 by rpki-client