$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft File: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft (raw, json) Hash identifier: 9SZmRHwi9MJ+QBH3S4rfDTa5ZNayQy7j2BBGtosToCY= Subject key identifier: B4:2A:28:3F:CD:3D:A3:51:1D:69:BC:2E:C7:E2:6C:31:5C:D9:F3:D9 Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF Certificate issuer: /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft Manifest number: 027E Signing time: Mon 03 Nov 2025 01:35:06 +0000 Manifest this update: Mon 03 Nov 2025 01:35:06 +0000 Manifest next update: Mon 10 Nov 2025 01:35:06 +0000 Files and hashes: 1: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl (hash: lyC1kCwSIbB2MXgpuqcXFaNGLbC5fj5MixWkZWgdKUY=) 2: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (hash: 3j5PRrDY98r3uDB/NRxNOqJcUUYPq2wYxKOeqHbmCZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91136B5, serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Validity Not Before: Nov 3 01:35:06 2025 GMT Not After : Nov 10 01:35:06 2025 GMT Subject: CN=690806ca-c7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:23:75:da:25:54:a6:1f:8b:50:1e:b4:90:04: 78:c2:3e:60:48:85:fc:b7:f2:84:3d:4b:fc:56:85: e0:05:60:08:5d:75:3c:f6:ba:e1:d2:59:d6:13:91: 82:17:9c:1c:1c:f2:0e:e0:31:82:ec:72:20:c4:dd: 93:36:86:d2:dc:7b:cd:45:6a:e0:20:18:2f:aa:70: 71:2f:97:3a:0f:58:f3:30:97:53:e4:45:b7:20:15: 7f:b3:68:97:23:62:39:49:a6:48:18:67:aa:af:94: 13:5e:86:40:76:fc:e9:08:19:aa:84:48:0f:dc:5c: df:79:bd:bd:9c:66:c5:a9:52:16:ed:1f:0e:9a:6f: 16:e7:df:2e:b4:86:df:10:e8:74:ac:83:a0:e6:8e: aa:ed:64:61:66:fd:d1:70:74:b7:fc:72:dd:6e:4f: 5d:d8:72:07:08:2a:15:f0:22:a5:69:40:a2:26:3a: 37:f2:56:d3:29:c1:ce:83:76:a9:3f:b2:19:ce:7b: 86:9b:bd:64:ff:bf:b0:f6:d9:8d:cb:eb:b7:8f:b6: 2e:3b:9b:3a:3f:67:11:4b:f0:48:8f:a2:6a:a5:9e: 06:fb:e6:01:18:ea:d9:3e:88:e1:b0:60:fa:3d:8c: bb:86:cc:84:84:80:37:53:b9:2f:8b:27:a5:d8:55: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2A:28:3F:CD:3D:A3:51:1D:69:BC:2E:C7:E2:6C:31:5C:D9:F3:D9 X509v3 Authority Key Identifier: keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:4e:3a:e2:44:13:dd:86:63:74:7d:48:f2:79:0d:17:50:3c: a3:bd:63:5e:1b:a4:3e:e3:8e:4c:a2:c8:1b:d8:1b:a1:f9:63: 53:c2:ca:b0:1c:ac:d3:7d:db:b4:7d:86:d7:0a:29:d2:dd:67: e1:d6:bd:69:3f:a5:0d:3e:0e:42:1e:86:cd:98:2b:0c:27:d5: bc:09:42:d0:e3:b6:4d:98:62:61:f7:c0:10:22:4b:22:df:fd: d5:94:72:8e:8a:59:f0:ee:2d:e2:7f:a8:7a:ee:33:6f:ac:be: ee:eb:fc:58:e8:6b:64:40:89:4c:6d:eb:69:f6:8b:a3:11:12: ff:b9:fe:66:6d:9e:18:84:e0:fe:cb:9a:c7:bf:52:f9:b9:32: e8:58:be:c4:ac:60:55:63:78:2d:ff:c3:d5:73:9d:9a:f5:2b: 92:21:66:1b:63:f5:a7:d4:c9:1d:39:bf:84:bb:37:5d:ca:65: fa:bf:ea:73:e9:d0:9f:d6:d4:5e:25:bb:bc:15:ef:3a:cf:7b: a6:1b:4c:dc:1d:ee:78:eb:bf:94:c8:a8:95:8f:1b:93:4f:7e: a1:12:f5:5c:f2:d7:22:0f:13:a0:ac:bc:93:b7:58:18:76:4e: ad:84:27:6c:e2:a4:b3:39:ee:e3:03:7c:a0:96:98:ef:80:46: 9a:e7:8e:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2QjUxMTAvBgNVBAUTKDVBRUNFQUQ1NENCMzZDQkYxQjRBMDBDNENENDEwODQ2 RDIzMTQxRUYwHhcNMjUxMTAzMDEzNTA2WhcNMjUxMTEwMDEzNTA2WjAYMRYwFAYD VQQDEw02OTA4MDZjYS1jN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SN12iVUph+LUB60kAR4wj5gSIX8t/KEPUv8VoXgBWAIXXU89rrh0lnWE5GC F5wcHPIO4DGC7HIgxN2TNobS3HvNRWrgIBgvqnBxL5c6D1jzMJdT5EW3IBV/s2iX I2I5SaZIGGeqr5QTXoZAdvzpCBmqhEgP3Fzfeb29nGbFqVIW7R8Omm8W598utIbf EOh0rIOg5o6q7WRhZv3RcHS3/HLdbk9d2HIHCCoV8CKlaUCiJjo38lbTKcHOg3ap P7IZznuGm71k/7+w9tmNy+u3j7YuO5s6P2cRS/BIj6JqpZ4G++YBGOrZPojhsGD6 PYy7hsyEhIA3U7kviyel2FVsUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQqKD/N PaNRHWm8LsfibDFc2fPZMB8GA1UdIwQYMBaAFFrs6tVMs2y/G0oAxM1BCEbSMUHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzZCNS9GNDExNURCQzJC QUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJMOGJTZ0RFelVFSVJ0SXhR ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1enExVXl6Ykw4YlNnREV6VUVJUnRJeFFlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzZCNS9GNDExNURCQzJCQUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJM OGJTZ0RFelVFSVJ0SXhRZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuTjriRBPdhmN0fUjyeQ0XUDyjvWNeG6Q+445Mosgb2Buh+WNTwsqw HKzTfdu0fYbXCinS3Wfh1r1pP6UNPg5CHobNmCsMJ9W8CULQ47ZNmGJh98AQIksi 3/3VlHKOilnw7i3if6h67jNvrL7u6/xY6GtkQIlMbetp9oujERL/uf5mbZ4YhOD+ y5rHv1L5uTLoWL7ErGBVY3gt/8PVc52a9SuSIWYbY/Wn1MkdOb+EuzddymX6v+pz 6dCf1tReJbu8Fe86z3umG0zcHe5467+UyKiVjxuTT36hEvVc8tciDxOgrLyTt1gY dk6thCds4qSzOe7jA3yglpjvgEaa547L -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:07 2025 by rpki-client