$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: 73KRYNTnT436FIAmMhTCDhwh+0C1pCEBy131ZJME4vM= Subject key identifier: FF:FB:64:22:0C:B7:EA:69:93:98:36:4F:9F:2B:B7:22:D8:02:CF:B5 Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 03E0 Signing time: Mon 03 Nov 2025 00:30:29 +0000 Manifest this update: Mon 03 Nov 2025 00:30:29 +0000 Manifest next update: Mon 10 Nov 2025 00:30:29 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: 73/vuTzQdH55KNOW1R5o74lRBfPXcy9OZAF2CkkiKdk=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Nov 3 00:30:29 2025 GMT Not After : Nov 10 00:30:29 2025 GMT Subject: CN=6907f7a5-b5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:dd:b6:11:33:a4:63:d4:2e:1f:13:8f:f2: 1c:ec:0d:59:ca:7d:79:3c:7e:2e:60:bb:1e:5c:39: 98:26:56:35:ce:16:cd:2d:94:8f:bf:8d:54:09:14: 7d:cf:b2:cf:41:6f:e3:d6:3f:bf:ff:2d:02:d0:5e: ca:4e:74:98:6b:f7:79:1d:97:8a:c7:e7:26:7a:13: 5f:0c:d4:d9:90:5c:09:4b:09:a2:96:de:8c:cf:d6: 2f:71:74:d4:ac:85:bc:26:43:a9:aa:fb:cd:02:05: 79:7f:49:3f:be:e2:2f:a8:61:23:5a:e8:f2:04:12: c1:49:4c:93:5f:db:f2:22:4a:70:1e:81:e9:c5:fa: 94:c6:6c:fe:8a:bb:22:5d:b5:9b:a5:76:7b:c8:11: ab:27:d2:af:33:cc:97:d7:99:10:37:6c:75:e5:7d: 1f:97:6d:d3:aa:57:ee:24:b0:f9:1b:82:8e:2a:58: 1d:58:a0:a1:6f:eb:61:86:cc:74:47:12:3f:09:c5: f8:f6:67:45:87:48:e8:3a:eb:cc:de:85:71:09:a6: 4c:03:24:f1:6b:bc:fd:f3:a3:b9:62:a8:f9:06:07: 72:5c:37:f9:5f:c9:63:c6:db:56:ba:c5:21:5f:f2: 77:43:d8:7e:85:34:0f:32:20:19:d3:bb:81:f0:af: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FB:64:22:0C:B7:EA:69:93:98:36:4F:9F:2B:B7:22:D8:02:CF:B5 X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:d0:d9:35:ea:cc:37:1a:9e:a2:88:40:eb:43:d4:94:0c:a8: bd:8a:f1:a0:34:01:c7:c7:2a:e3:8a:35:ef:65:de:f4:5b:92: aa:97:c3:29:46:47:e6:47:2b:05:0c:e5:5e:15:84:27:80:49: f2:a1:6b:78:3c:4b:77:2b:52:79:b0:78:cb:0a:5e:f6:e2:63: b3:67:4e:bc:02:18:8b:67:03:2f:e3:ef:d7:a2:fd:32:82:e5: 31:5e:ba:78:d0:2f:fc:ba:4e:be:83:fe:62:50:e8:db:4b:99: 8c:59:e1:48:9b:2b:cc:a6:c4:fa:d2:e3:ff:a9:f9:ab:78:80: 7c:39:9d:52:8e:08:fe:fb:bc:1b:67:5a:66:1e:94:3f:84:84: 7e:3a:88:17:6c:4a:88:94:a1:2e:cd:aa:76:61:75:cd:e8:a6: a3:28:66:40:1a:84:42:84:37:c1:1b:30:30:b0:8b:fc:23:d6: b6:30:25:b8:a0:63:7e:eb:66:44:2b:d6:2d:b8:94:84:d9:01: 14:b9:56:65:c5:de:74:0d:ac:db:2f:8f:f6:3d:98:3b:e2:a8: ea:e5:df:16:1a:f6:ac:9d:a6:a5:67:e2:e3:92:7e:03:2d:b6: 47:b4:9b:c4:b5:08:8a:6f:6d:09:9c:e8:93:1f:0e:f4:01:72: cf:0b:30:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUxMTAzMDAzMDI5WhcNMjUxMTEwMDAzMDI5WjAYMRYwFAYD VQQDEw02OTA3ZjdhNS1iNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QfdthEzpGPULh8Tj/Ic7A1Zyn15PH4uYLseXDmYJlY1zhbNLZSPv41UCRR9 z7LPQW/j1j+//y0C0F7KTnSYa/d5HZeKx+cmehNfDNTZkFwJSwmilt6Mz9YvcXTU rIW8JkOpqvvNAgV5f0k/vuIvqGEjWujyBBLBSUyTX9vyIkpwHoHpxfqUxmz+irsi XbWbpXZ7yBGrJ9KvM8yX15kQN2x15X0fl23TqlfuJLD5G4KOKlgdWKChb+thhsx0 RxI/CcX49mdFh0joOuvM3oVxCaZMAyTxa7z986O5Yqj5BgdyXDf5X8ljxttWusUh X/J3Q9h+hTQPMiAZ07uB8K+3AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/7ZCIM t+ppk5g2T58rtyLYAs+1MB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd0Nk16sw3Gp6iiEDrQ9SUDKi9ivGgNAHHxyrjijXvZd70W5Kql8Mp RkfmRysFDOVeFYQngEnyoWt4PEt3K1J5sHjLCl724mOzZ068AhiLZwMv4+/Xov0y guUxXrp40C/8uk6+g/5iUOjbS5mMWeFImyvMpsT60uP/qfmreIB8OZ1Sjgj++7wb Z1pmHpQ/hIR+OogXbEqIlKEuzap2YXXN6KajKGZAGoRChDfBGzAwsIv8I9a2MCW4 oGN+62ZEK9YtuJSE2QEUuVZlxd50DazbL4/2PZg74qjq5d8WGvasnaalZ+Ljkn4D LbZHtJvEtQiKb20JnOiTHw70AXLPCzCh -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:47 2025 by rpki-client