$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: uQhmvU58/cgv2stm+4La/Xqz06gvSTm7iE4gI8/Pk88= Subject key identifier: 99:42:AB:C9:57:EF:80:56:86:74:22:F9:3D:D3:1F:8A:2F:A3:46:1B Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: 0209 Signing time: Wed 05 Nov 2025 02:26:48 +0000 Manifest this update: Wed 05 Nov 2025 02:26:48 +0000 Manifest next update: Wed 12 Nov 2025 02:26:48 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: 4Ykpd7Z6YU5xmQd+bAkfUT94rOMn7SFBcQZIuDl3TLU=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: Nov 5 02:26:48 2025 GMT Not After : Nov 12 02:26:48 2025 GMT Subject: CN=690ab5e8-a2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:76:08:a0:24:11:03:9d:d8:ad:e5:71:5b: 37:76:51:f2:d2:e4:9f:b6:4c:6a:0b:ad:1a:6b:4a: c0:60:80:88:15:9b:92:e4:f5:ee:14:8a:7c:2d:8d: 9f:3e:4c:ba:4c:86:1a:7a:1d:b8:6d:06:20:6f:ec: f5:45:fa:55:89:e7:5f:73:eb:14:89:da:9d:71:57: 9a:69:8d:e0:66:6f:25:4b:d0:75:a6:f0:c3:bf:5a: 49:3f:5e:4b:bb:1e:78:af:d6:81:f9:c8:ae:2d:10: b8:1b:d4:f8:3c:cf:eb:a5:41:83:c2:18:e2:e4:5a: 3c:d8:03:93:0c:42:05:5e:e7:64:87:85:d1:96:15: 8b:de:f8:a2:32:05:3d:bc:b0:53:06:b6:48:5e:85: e7:e3:f5:19:a2:e9:79:90:cd:7b:9a:de:81:cf:48: aa:db:3b:eb:ad:04:db:43:24:23:ad:a7:39:40:63: 86:43:53:3c:e3:25:b4:de:9b:27:fd:6f:50:d3:3b: 06:c1:91:4e:5c:d2:48:3f:51:14:c5:b9:66:3b:8e: 81:a9:99:c9:36:eb:3f:7c:41:ae:88:f1:9e:ed:25: 62:a5:61:2c:be:6f:d7:76:ca:ef:6f:0d:68:be:6a: 09:3e:a6:27:70:dc:ba:1c:bd:a7:e0:a6:fb:a2:5f: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:42:AB:C9:57:EF:80:56:86:74:22:F9:3D:D3:1F:8A:2F:A3:46:1B X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3f:77:40:0b:11:d8:57:2c:a3:aa:30:7b:7b:8c:fe:f4:0b: b3:54:8e:90:57:23:5d:40:9d:6e:ab:78:21:85:f5:5c:5f:0a: 2b:36:6c:1c:c8:79:af:0f:97:22:56:e6:ee:ec:7d:50:e6:9a: 46:4f:74:04:95:f0:81:61:ad:30:e5:76:48:cd:e8:88:88:13: 72:79:34:74:02:66:9c:4d:68:cd:28:57:35:52:f9:6b:75:9d: 9f:24:29:ab:bb:6b:23:5f:01:81:9a:c7:f9:dd:cf:87:8d:a5: 00:c4:27:12:cc:56:2c:64:c7:c0:7f:a9:66:64:22:34:57:7d: db:c1:2e:6c:c5:7f:b4:6d:68:b8:3f:e6:16:1e:e4:1f:95:40: ed:46:32:23:f3:aa:d6:ea:85:17:96:5f:0c:c6:87:ff:e4:02: 98:6e:6b:0f:3d:05:6d:10:d9:40:57:23:98:f4:60:06:a5:7b: eb:0c:04:e0:b7:2b:6f:e4:b8:eb:d4:5b:31:7b:f4:82:17:a1: b4:bb:d9:e8:bc:22:5b:40:e3:22:5a:f4:ea:2f:f3:15:67:d7: 01:41:ac:81:da:ec:f4:52:76:3d:19:14:8f:55:21:f8:e5:75: d6:45:c3:0a:a0:37:cb:21:32:29:40:68:19:0f:23:c8:9f:43: 8c:fa:b5:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjUxMTA1MDIyNjQ4WhcNMjUxMTEyMDIyNjQ4WjAYMRYwFAYD VQQDEw02OTBhYjVlOC1hMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrZ2CKAkEQOd2K3lcVs3dlHy0uSftkxqC60aa0rAYICIFZuS5PXuFIp8LY2f Pky6TIYaeh24bQYgb+z1RfpViedfc+sUidqdcVeaaY3gZm8lS9B1pvDDv1pJP15L ux54r9aB+ciuLRC4G9T4PM/rpUGDwhji5Fo82AOTDEIFXudkh4XRlhWL3viiMgU9 vLBTBrZIXoXn4/UZoul5kM17mt6Bz0iq2zvrrQTbQyQjrac5QGOGQ1M84yW03psn /W9Q0zsGwZFOXNJIP1EUxblmO46BqZnJNus/fEGuiPGe7SVipWEsvm/Xdsrvbw1o vmoJPqYncNy6HL2n4Kb7ol+TVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlCq8lX 74BWhnQi+T3TH4ovo0YbMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGP3dACxHYVyyjqjB7e4z+9AuzVI6QVyNdQJ1uq3ghhfVcXworNmwc yHmvD5ciVubu7H1Q5ppGT3QElfCBYa0w5XZIzeiIiBNyeTR0AmacTWjNKFc1Uvlr dZ2fJCmru2sjXwGBmsf53c+HjaUAxCcSzFYsZMfAf6lmZCI0V33bwS5sxX+0bWi4 P+YWHuQflUDtRjIj86rW6oUXll8Mxof/5AKYbmsPPQVtENlAVyOY9GAGpXvrDATg tytv5Ljr1Fsxe/SCF6G0u9novCJbQOMiWvTqL/MVZ9cBQayB2uz0UnY9GRSPVSH4 5XXWRcMKoDfLITIpQGgZDyPIn0OM+rXM -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:31 2025 by rpki-client