$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: 4My14NgIU/ucEJ7uhLC+CTBhMTE3jeJ8LutDKmMHI0Q= Subject key identifier: B3:07:87:6C:12:B2:AD:F1:E9:D2:2D:F0:72:F9:60:5D:3D:97:0D:07 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05E7 Signing time: Tue 04 Nov 2025 23:03:37 +0000 Manifest this update: Tue 04 Nov 2025 23:03:37 +0000 Manifest next update: Tue 11 Nov 2025 23:03:37 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: gHKzDnqtEU9HBKBs33pFZ70V29Bpw3+0/Xif5XRc5Qo=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1525 (0x5f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Nov 4 23:03:37 2025 GMT Not After : Nov 11 23:03:37 2025 GMT Subject: CN=690a8649-8a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:02:f0:fe:24:e9:ff:ac:3e:85:7c:d1:61: 79:f6:42:8a:78:4c:03:ef:ed:24:09:79:0c:b7:67: 65:48:5d:46:92:d7:4b:a0:e3:c6:b1:67:d2:cd:ac: e5:99:c3:80:61:bc:87:b8:d5:27:c7:63:ec:8f:6a: 58:fe:c4:d8:b9:b0:00:67:c1:26:d8:4c:89:fa:08: 0b:69:d5:e6:62:3d:99:c9:01:80:57:ba:92:50:df: c5:68:4c:db:42:6e:99:cc:d4:24:b2:c8:d2:a7:43: 32:b5:9f:ba:1e:16:01:e7:6c:b1:42:95:61:f0:b2: 6c:9e:b7:0e:0f:6b:3a:3c:da:1a:8b:c9:ef:b2:08: 1e:63:24:f0:be:f4:fd:14:0d:a9:1a:03:8c:22:83: b1:67:09:4e:43:cd:f0:f6:31:9a:81:51:7d:92:f3: 5a:09:45:6a:7f:01:c8:cc:01:35:ba:01:17:dd:89: 60:6f:f3:33:37:3a:82:13:3b:01:e6:c9:65:fa:4c: 1e:9a:36:39:d1:5c:55:41:b8:7b:f5:5e:92:57:4b: 98:d0:e5:07:8b:78:4d:3b:1a:d8:c0:35:df:48:bd: c0:e8:c2:80:50:df:91:00:60:0d:a4:55:98:40:63: 11:6d:07:9f:8e:a8:4c:fb:ab:76:cd:5b:cb:31:eb: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:87:6C:12:B2:AD:F1:E9:D2:2D:F0:72:F9:60:5D:3D:97:0D:07 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ce:23:30:27:c9:aa:96:93:92:31:3b:06:27:a8:db:e7:88: 7e:b1:a8:65:40:12:29:86:1a:8c:c0:4c:be:f5:f6:aa:b4:60: 18:8d:76:74:31:bf:0f:67:d6:04:b5:fe:6f:45:f0:f2:2d:f4: 93:8b:f1:47:a0:8f:2e:d8:62:d6:09:ea:38:ac:53:0a:45:fb: 1e:22:36:e6:7f:21:73:f0:b6:1a:cf:26:a0:ed:46:79:a2:4d: 32:4a:3a:bd:7e:30:49:49:9c:44:71:57:bc:7d:7c:fd:fe:7b: 47:37:ba:d1:14:bf:3a:ef:48:b8:e9:71:2d:03:ea:f0:68:6d: 5d:e1:8f:db:f1:42:da:19:fa:a5:fc:64:b3:ec:b0:c6:a1:75: fa:78:71:4d:cc:8d:4a:2e:aa:fa:62:a3:f2:a5:3c:01:84:2b: ef:ae:8c:64:73:03:5c:8d:1a:50:8e:b6:54:51:46:ba:1e:5e: f3:08:0d:2b:76:ea:09:ff:4f:de:94:76:80:94:12:b9:e2:81: 6d:b4:7a:df:48:16:63:56:91:73:94:60:df:2c:2e:37:e7:94: d2:69:bd:77:4e:84:c0:1d:2e:15:3e:5a:0f:d8:bf:fd:cd:25: d2:a8:3f:81:5a:b2:94:a0:d3:4e:86:55:ee:48:eb:98:aa:26: 64:57:8d:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUxMTA0MjMwMzM3WhcNMjUxMTExMjMwMzM3WjAYMRYwFAYD VQQDEw02OTBhODY0OS04YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCMC8P4k6f+sPoV80WF59kKKeEwD7+0kCXkMt2dlSF1GktdLoOPGsWfSzazl mcOAYbyHuNUnx2Psj2pY/sTYubAAZ8Em2EyJ+ggLadXmYj2ZyQGAV7qSUN/FaEzb Qm6ZzNQkssjSp0MytZ+6HhYB52yxQpVh8LJsnrcOD2s6PNoai8nvsggeYyTwvvT9 FA2pGgOMIoOxZwlOQ83w9jGagVF9kvNaCUVqfwHIzAE1ugEX3Ylgb/MzNzqCEzsB 5sll+kwemjY50VxVQbh79V6SV0uY0OUHi3hNOxrYwDXfSL3A6MKAUN+RAGANpFWY QGMRbQefjqhM+6t2zVvLMesytQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMHh2wS sq3x6dIt8HL5YF09lw0HMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaziMwJ8mqlpOSMTsGJ6jb54h+sahlQBIphhqMwEy+9faqtGAYjXZ0 Mb8PZ9YEtf5vRfDyLfSTi/FHoI8u2GLWCeo4rFMKRfseIjbmfyFz8LYazyag7UZ5 ok0ySjq9fjBJSZxEcVe8fXz9/ntHN7rRFL8670i46XEtA+rwaG1d4Y/b8ULaGfql /GSz7LDGoXX6eHFNzI1KLqr6YqPypTwBhCvvroxkcwNcjRpQjrZUUUa6Hl7zCA0r duoJ/0/elHaAlBK54oFttHrfSBZjVpFzlGDfLC4355TSab13ToTAHS4VPloP2L/9 zSXSqD+BWrKUoNNOhlXuSOuYqiZkV43y -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:44 2025 by rpki-client