$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft File: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json) Hash identifier: y0X9Wqhtk9506KS3GJTv66j2ezGqBbUxITvoTG4kxiA= Subject key identifier: 8A:07:4B:54:8C:FB:06:CC:DD:4E:31:F5:D8:32:D6:96:10:8C:93:E0 Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 Certificate issuer: /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Certificate serial: 073D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft Manifest number: 0735 Signing time: Tue 04 Nov 2025 21:50:04 +0000 Manifest this update: Tue 04 Nov 2025 21:50:04 +0000 Manifest next update: Tue 11 Nov 2025 21:50:04 +0000 Files and hashes: 1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: nybc8xRJVgtyDwjmi3Iwg+eAAOGs33N64fCPLMn+RbQ=) 2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: 4SDVk60SWQl2vTJ1K6rzs+mQCqAItGWRRGu4kfUeRwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1853 (0x73d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Validity Not Before: Nov 4 21:50:04 2025 GMT Not After : Nov 11 21:50:04 2025 GMT Subject: CN=690a750c-e23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:da:8a:61:c3:b9:38:42:16:6d:f8:87:f8: fa:42:1e:22:98:5e:47:99:52:6f:55:d7:af:b9:43: c1:eb:3d:43:fe:d8:2c:b5:f3:30:c6:1c:50:bf:88: 16:5f:a5:fe:7c:43:ac:3c:f1:20:9a:24:fd:57:bd: dd:b3:37:aa:af:a6:01:b0:72:d4:b9:18:08:b7:bf: 4a:5a:30:1e:ac:f4:6d:02:f8:dd:43:9c:b0:e7:72: 80:bb:6c:93:34:ee:17:08:eb:a9:cc:6b:aa:ee:07: 99:09:24:62:a6:70:45:a4:08:00:05:12:55:3d:61: 2c:0c:d2:66:c8:90:39:80:c0:eb:55:01:cc:4c:9a: 47:7c:01:af:5d:c7:49:c7:98:0e:1d:68:7e:c3:db: 11:02:bf:6d:29:25:bb:81:cb:df:a0:0e:31:5d:42: 81:52:cd:82:e5:92:2c:5f:29:b4:e7:29:d6:9c:94: 66:ee:8c:05:c3:3b:14:5d:04:0a:10:9c:af:9e:39: 54:26:d6:84:d7:56:a1:4d:ed:f8:b2:49:88:9e:0a: 42:98:86:32:fb:a5:a3:d0:ef:4e:57:52:45:dc:fe: 13:58:4c:1f:22:58:1f:f6:9d:ab:1a:76:2e:46:e6: 62:93:82:19:33:fe:49:56:ab:d9:b7:f3:13:f2:7f: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:07:4B:54:8C:FB:06:CC:DD:4E:31:F5:D8:32:D6:96:10:8C:93:E0 X509v3 Authority Key Identifier: keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:33:45:e1:78:28:c0:48:8f:4d:66:22:cd:99:78:c8:7d:b4: e0:92:a5:ee:7c:24:e8:bc:50:6d:7b:d3:81:1e:e8:41:14:62: ed:29:00:ce:04:86:00:5b:d5:d8:72:33:8b:aa:16:b3:45:ed: bd:23:84:a5:e0:b3:22:b8:5d:7b:7f:4b:ab:63:bd:7b:29:63: 8a:94:cd:1a:50:df:9e:99:33:76:0a:06:7c:87:61:82:0e:ee: 6c:60:2c:08:04:14:b6:18:8a:e8:6f:77:d2:36:83:f6:48:fb: 90:4e:92:52:79:bf:67:9e:25:e0:e7:e7:98:b0:73:0b:de:6f: c4:69:f8:22:b3:20:fd:cb:19:63:4b:4a:45:6e:6a:3e:32:1e: 53:00:93:e4:9f:f7:04:c1:0a:14:35:95:67:4d:ab:69:44:8c: 58:ad:a8:91:23:3e:9f:81:65:c1:06:50:40:60:11:63:47:27: 6b:e1:40:5a:54:d3:5d:f1:12:4c:1a:c6:c7:51:6a:fc:fb:86: 3f:cb:24:10:0f:41:72:ff:10:b0:f5:a3:37:6f:83:b4:ac:c6: ed:59:c3:39:03:77:cb:83:e1:b4:06:6e:0f:f9:ab:e5:bb:73: 5c:f0:c5:bf:38:97:9a:a4:e7:19:dd:c7:29:66:32:c5:2a:10: 29:f1:03:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RDQxMTAvBgNVBAUTKDU5MEQyNzg1RjMwNkU4OTE0QTFERkU5QjI3RDU3QzZC ODlGQ0RBOTMwHhcNMjUxMTA0MjE1MDA0WhcNMjUxMTExMjE1MDA0WjAYMRYwFAYD VQQDEw02OTBhNzUwYy1lMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosLaimHDuThCFm34h/j6Qh4imF5HmVJvVdevuUPB6z1D/tgstfMwxhxQv4gW X6X+fEOsPPEgmiT9V73dszeqr6YBsHLUuRgIt79KWjAerPRtAvjdQ5yw53KAu2yT NO4XCOupzGuq7geZCSRipnBFpAgABRJVPWEsDNJmyJA5gMDrVQHMTJpHfAGvXcdJ x5gOHWh+w9sRAr9tKSW7gcvfoA4xXUKBUs2C5ZIsXym05ynWnJRm7owFwzsUXQQK EJyvnjlUJtaE11ahTe34skmIngpCmIYy+6Wj0O9OV1JF3P4TWEwfIlgf9p2rGnYu RuZik4IZM/5JVqvZt/MT8n8AIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoHS1SM +wbM3U4x9dgy1pYQjJPgMB8GA1UdIwQYMBaAFFkNJ4XzBuiRSh3+myfVfGuJ/NqT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZENC84RTMyNjgzQTRG MzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZKRktIZjZiSjlWOGE0bjgy cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRMG5oZk1HNkpGS0hmNmJKOVY4YTRuODJwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZENC84RTMyNjgzQTRGMzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZK RktIZjZiSjlWOGE0bjgycE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXM0XheCjASI9NZiLNmXjIfbTgkqXufCTovFBte9OBHuhBFGLtKQDO BIYAW9XYcjOLqhazRe29I4Sl4LMiuF17f0urY717KWOKlM0aUN+emTN2CgZ8h2GC Du5sYCwIBBS2GIrob3fSNoP2SPuQTpJSeb9nniXg5+eYsHML3m/EafgisyD9yxlj S0pFbmo+Mh5TAJPkn/cEwQoUNZVnTatpRIxYraiRIz6fgWXBBlBAYBFjRydr4UBa VNNd8RJMGsbHUWr8+4Y/yyQQD0Fy/xCw9aM3b4O0rMbtWcM5A3fLg+G0Bm4P+avl u3Nc8MW/OJeapOcZ3ccpZjLFKhAp8QPa -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:08 2025 by rpki-client