$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft File: wUJMTMxZyaAxvhrN95gth6tX0Gg.mft (raw, json) Hash identifier: RM5UU1UyQYqmX8GICz9qXcVP64N5GK121a5mx02sVDU= Subject key identifier: 09:2F:72:2C:A7:96:82:70:7A:B3:89:20:73:F8:9E:AB:3A:D8:C8:77 Authority key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 Certificate issuer: /CN=A91139AB/serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft Manifest number: 092D Signing time: Tue 04 Nov 2025 21:30:56 +0000 Manifest this update: Tue 04 Nov 2025 21:30:56 +0000 Manifest next update: Tue 11 Nov 2025 21:30:56 +0000 Files and hashes: 1: wUJMTMxZyaAxvhrN95gth6tX0Gg.crl (hash: tSSGuhwSMWgZ7RsLXJgOre4/Hc0Ik7vz9yIiL14yJtE=) 2: 96AD16C6B5FA11F0A1583C84C4F9AE02.roa (hash: X1CXYIMIZkpo0trxnTIO9Mj79rEmc2HBewb/GCod5Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Validity Not Before: Nov 4 21:30:56 2025 GMT Not After : Nov 11 21:30:56 2025 GMT Subject: CN=690a7090-9c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:a5:19:f9:75:cd:f2:05:24:5a:d7:5c:07: 50:69:86:f2:84:30:c0:aa:c9:4c:cd:66:85:59:26: 64:ca:80:a8:e9:8d:7f:e7:12:d2:39:99:ce:ce:7a: 39:f3:ca:ad:6b:db:29:b5:90:26:50:23:5e:29:51: 25:e4:4b:a0:fb:5b:bd:5d:09:91:97:08:7f:d4:f0: bf:0b:19:12:46:29:74:dd:ca:16:1c:1e:4d:a3:a8: e2:d6:a5:f0:9f:9f:44:7d:e5:f4:9e:86:53:1f:92: 9a:50:89:99:ec:d9:11:02:ca:b4:d5:a1:27:24:a2: c7:fd:dc:88:5e:2e:15:8e:b2:c0:3f:b5:3b:25:a9: e0:13:1b:bf:fa:ad:5c:b9:9f:5c:62:f4:a8:5e:ad: 6e:74:11:97:e4:4e:b3:51:ff:80:81:34:e6:74:8c: 87:7a:8a:7b:34:9c:cf:b8:23:d2:ae:0a:1e:1b:eb: 0f:c6:b1:23:b1:0f:b9:26:a8:59:2c:91:ca:29:4d: 36:13:d0:54:1a:70:34:fd:8f:36:9a:1c:8d:92:e4: 3f:9b:b4:fa:52:a0:0f:e8:6e:9a:4e:7c:b5:bc:95: da:5b:86:72:24:5e:f3:58:8c:cd:ba:49:04:e0:0c: fd:60:fd:89:55:22:cd:7a:1b:6b:5c:c3:ba:51:6f: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2F:72:2C:A7:96:82:70:7A:B3:89:20:73:F8:9E:AB:3A:D8:C8:77 X509v3 Authority Key Identifier: keyid:C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:86:68:ca:d1:70:19:16:24:54:97:d4:03:8b:d9:de:ff:41: 67:a1:2f:63:3f:31:85:79:f5:35:45:67:06:9c:81:d6:a8:c5: 3b:cc:c0:1c:79:8d:b3:50:d9:ef:b4:97:b4:fd:dc:18:4a:44: 47:49:fe:4b:93:5b:4d:67:24:3e:20:3f:17:c3:d1:7d:d0:84: d4:42:49:e4:62:8a:0c:88:ff:1d:f7:fd:41:08:b1:80:03:cc: 3c:fe:e3:92:2c:4b:bc:0a:fa:e5:28:15:c7:ad:49:76:33:85: 75:90:c3:32:b1:ba:aa:f2:22:87:56:59:35:08:e1:d1:24:8d: ec:94:a2:3a:f5:84:f6:f2:c4:23:85:4e:a3:76:76:2f:c6:46: 56:4f:dc:c9:45:2a:86:23:da:bf:75:cd:52:26:0f:3e:04:d7: 9b:ce:92:1f:c0:1e:aa:ed:f1:8d:6f:dc:56:46:51:aa:08:ad: 83:6f:b2:7e:95:de:2e:7e:44:4f:ca:8b:28:1a:02:0f:a6:f2: 88:54:5d:5e:cd:48:10:09:78:e9:cb:e6:69:04:61:f0:8e:2a: 3a:b8:74:86:ea:5c:fc:f7:61:2e:dd:b1:b3:a9:50:9a:c3:1f: de:d1:00:88:ac:bd:63:d8:cf:f8:9b:4b:bf:34:e7:83:6f:36: 06:8b:af:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzlBQjExMC8GA1UEBRMoQzE0MjRDNENDQzU5QzlBMDMxQkUxQUNERjc5ODJEODdB QjU3RDA2ODAeFw0yNTExMDQyMTMwNTZaFw0yNTExMTEyMTMwNTZaMBgxFjAUBgNV BAMTDTY5MGE3MDkwLTljMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOEqUZ+XXN8gUkWtdcB1BphvKEMMCqyUzNZoVZJmTKgKjpjX/nEtI5mc7Oejnz yq1r2ym1kCZQI14pUSXkS6D7W71dCZGXCH/U8L8LGRJGKXTdyhYcHk2jqOLWpfCf n0R95fSehlMfkppQiZns2RECyrTVoSckosf93IheLhWOssA/tTslqeATG7/6rVy5 n1xi9KherW50EZfkTrNR/4CBNOZ0jId6ins0nM+4I9KuCh4b6w/GsSOxD7kmqFks kcopTTYT0FQacDT9jzaaHI2S5D+btPpSoA/obppOfLW8ldpbhnIkXvNYjM26SQTg DP1g/YlVIs16G2tcw7pRb0yVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCS9yLKeW gnB6s4kgc/ieqzrYyHcwHwYDVR0jBBgwFoAUwUJMTMxZyaAxvhrN95gth6tX0Ggw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzOUFCLzE1OEQ0OTA2MjU1 QjExRUJBOUY1NjAxQUM0RjlBRTAyL3dVSk1UTXhaeWFBeHZock45NWd0aDZ0WDBH Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1VKTVRNeFp5YUF4dmhyTjk1Z3RoNnRYMEdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz OUFCLzE1OEQ0OTA2MjU1QjExRUJBOUY1NjAxQUM0RjlBRTAyL3dVSk1UTXhaeWFB eHZock45NWd0aDZ0WDBHZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSGaMrRcBkWJFSX1AOL2d7/QWehL2M/MYV59TVFZwacgdaoxTvMwBx5 jbNQ2e+0l7T93BhKREdJ/kuTW01nJD4gPxfD0X3QhNRCSeRiigyI/x33/UEIsYAD zDz+45IsS7wK+uUoFcetSXYzhXWQwzKxuqryIodWWTUI4dEkjeyUojr1hPbyxCOF TqN2di/GRlZP3MlFKoYj2r91zVImDz4E15vOkh/AHqrt8Y1v3FZGUaoIrYNvsn6V 3i5+RE/KiygaAg+m8ohUXV7NSBAJeOnL5mkEYfCOKjq4dIbqXPz3YS7dsbOpUJrD H97RAIisvWPYz/ibS78054NvNgaLr7U= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:11 2025 by rpki-client