$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: w5VRoqf1j/fFZna/QAYUACEttqGQVmm16Jb9yWvhWhg= Subject key identifier: 92:E8:63:3D:B3:AB:B5:DB:13:A0:82:20:59:46:55:16:0A:B6:06:F7 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 2682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 265B Signing time: Tue 04 Nov 2025 15:47:05 +0000 Manifest this update: Tue 04 Nov 2025 15:47:04 +0000 Manifest next update: Tue 11 Nov 2025 15:47:04 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: z4J1L3TWBtMMaX/Xb+6DtGm6DxNPj3Ji53qvuNh7sgQ=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: i5fhQnu6bmgNPwIHRR7tap/ay2sUVMlNWD5eOeQV4OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9858 (0x2682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: Nov 4 15:47:04 2025 GMT Not After : Nov 11 15:47:04 2025 GMT Subject: CN=690a1ff9-69f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:b8:98:ae:47:50:46:d3:78:24:03:fa:b9: bf:6b:07:96:54:a5:8e:36:a2:ab:33:03:12:98:41: 25:20:9c:72:7c:88:58:47:5d:2b:3a:ba:27:f0:e3: 68:11:fe:c4:60:08:59:99:20:82:89:39:46:11:5b: d9:e5:b1:69:cf:93:85:5f:8e:78:84:45:48:a6:5a: d4:59:56:c1:7c:e6:f5:1f:9a:7d:a2:60:77:63:29: ff:48:67:b3:cf:eb:ce:93:8d:60:10:6f:45:59:f0: 74:2f:2c:c2:92:b9:cb:06:d4:ae:98:69:b5:a7:6c: b1:65:8a:ab:bb:e6:19:9b:94:8f:82:c2:88:39:33: 77:1a:43:8a:43:98:2a:0b:f7:08:a6:3a:cd:9b:b8: d1:e6:0d:5a:4e:a1:d5:47:2b:05:62:9c:f2:6c:d8: f7:6e:01:63:27:b9:8e:77:8a:2b:0d:e1:6a:ad:e9: f0:23:0e:09:be:20:4e:8f:21:77:2e:54:21:78:8f: 1d:c0:f0:6d:82:63:ab:bd:4a:f2:c1:b3:dd:44:4d: da:ee:25:cb:05:57:1e:d5:6f:22:10:9e:05:ad:89: 56:f2:61:42:2e:3c:a9:33:f1:54:79:f1:8c:9b:77: f5:e7:9c:f8:e1:0d:a4:16:0c:35:aa:41:0c:ba:58: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E8:63:3D:B3:AB:B5:DB:13:A0:82:20:59:46:55:16:0A:B6:06:F7 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:fc:c8:a0:96:55:21:93:70:02:ba:a8:32:02:ff:5d:e9:16: 95:75:9c:1c:de:3b:6f:bb:4e:5b:d6:f5:8f:60:d4:22:eb:18: 3e:80:75:41:d3:2a:23:65:41:ea:a6:3b:f9:95:68:e8:b5:6e: 0f:a6:6f:65:18:a5:54:ab:8c:4d:a5:e3:fa:c2:5a:85:6c:e3: 6c:85:72:37:a6:93:2d:18:34:a2:06:bb:cd:fd:41:d0:cc:ef: 5f:f6:9a:8c:ec:82:46:b5:cb:d4:38:44:c5:f8:80:9a:a5:ad: 5a:ce:b6:c1:46:11:97:0e:e6:0d:98:61:77:51:73:de:66:a8: 0d:fb:cc:e7:13:3d:ee:d5:75:8a:72:f9:e3:58:87:be:2c:7e: 82:1c:d2:2a:aa:65:b8:4a:24:25:2f:98:77:dd:28:23:52:2a: 3f:da:0e:96:5f:b7:ff:66:f8:9b:85:96:87:57:67:fc:bb:c1: f8:95:a1:96:1a:4d:0e:cb:e4:ae:58:08:46:51:73:32:48:d3: 5f:34:21:42:bb:72:04:0c:7d:d1:9a:6a:81:9c:e2:fe:65:04: 45:85:33:f2:a7:ec:e3:3b:08:68:4d:a7:24:ca:04:e2:9f:7d: ae:ae:cc:b5:a6:74:11:83:d8:7f:4a:4d:e2:6a:0c:9c:7a:09: a3:38:8e:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUxMTA0MTU0NzA0WhcNMjUxMTExMTU0NzA0WjAYMRYwFAYD VQQDEw02OTBhMWZmOS02OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ+4mK5HUEbTeCQD+rm/aweWVKWONqKrMwMSmEElIJxyfIhYR10rOron8ONo Ef7EYAhZmSCCiTlGEVvZ5bFpz5OFX454hEVIplrUWVbBfOb1H5p9omB3Yyn/SGez z+vOk41gEG9FWfB0LyzCkrnLBtSumGm1p2yxZYqru+YZm5SPgsKIOTN3GkOKQ5gq C/cIpjrNm7jR5g1aTqHVRysFYpzybNj3bgFjJ7mOd4orDeFqrenwIw4JviBOjyF3 LlQheI8dwPBtgmOrvUrywbPdRE3a7iXLBVce1W8iEJ4FrYlW8mFCLjypM/FUefGM m3f155z44Q2kFgw1qkEMulj07QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLoYz2z q7XbE6CCIFlGVRYKtgb3MB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT/MigllUhk3ACuqgyAv9d6RaVdZwc3jtvu05b1vWPYNQi6xg+gHVB 0yojZUHqpjv5lWjotW4Ppm9lGKVUq4xNpeP6wlqFbONshXI3ppMtGDSiBrvN/UHQ zO9f9pqM7IJGtcvUOETF+ICapa1azrbBRhGXDuYNmGF3UXPeZqgN+8znEz3u1XWK cvnjWIe+LH6CHNIqqmW4SiQlL5h33SgjUio/2g6WX7f/ZvibhZaHV2f8u8H4laGW Gk0Oy+SuWAhGUXMySNNfNCFCu3IEDH3RmmqBnOL+ZQRFhTPyp+zjOwhoTackygTi n32ursy1pnQRg9h/Sk3iagycegmjOI5P -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:11 2025 by rpki-client