$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft File: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft (raw, json) Hash identifier: 81vNPh/V1rtahqZqIUnxGj8DJm56fxJGXprlqhUZo5c= Subject key identifier: 2D:B2:DB:DC:60:0E:CD:D8:2B:55:16:C4:52:4E:6A:0F:FA:74:F6:1A Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 Certificate issuer: /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft Manifest number: 38 Signing time: Wed 05 Nov 2025 07:45:20 +0000 Manifest this update: Wed 05 Nov 2025 07:45:19 +0000 Manifest next update: Wed 12 Nov 2025 07:45:19 +0000 Files and hashes: 1: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl (hash: z53E9u/cEs3I7qZpC7Glxu38M8Vn3nPTJKtsPLBUnPw=) 2: 44E524C6660611F0AC01FC4FC4F9AE02.roa (hash: bHIMWlurNqBIRWjjG4aQFJYKcLjVhjX4C0j7SqX+rCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Validity Not Before: Nov 5 07:45:19 2025 GMT Not After : Nov 12 07:45:19 2025 GMT Subject: CN=690b0090-78ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:cc:aa:a8:6f:55:48:af:5d:9f:f7:63:03: 9e:19:1c:b2:8e:de:be:32:87:9a:5b:0d:ca:ca:35: 64:8c:c2:76:09:f9:81:07:4a:81:b4:80:8c:51:bb: 17:0f:f0:79:19:9d:f4:ee:51:c5:41:c5:82:e7:23: e1:9b:19:ff:c9:83:78:9c:76:87:6f:7f:48:e6:4c: b9:bb:70:d4:25:f1:f2:76:22:fb:65:f8:41:3a:12: 60:12:54:67:98:20:bf:ba:34:b4:5e:84:6a:f7:eb: f7:0f:94:ba:33:a0:ea:d4:72:10:90:ec:82:ac:d8: 1d:83:d5:ac:45:fb:34:e5:fe:03:b1:2c:67:27:09: 41:37:37:d1:d0:f9:13:2e:18:04:f2:e5:24:70:40: c5:3c:42:6b:6e:09:4d:fe:61:87:b7:a8:cb:f6:85: 05:be:a6:77:e3:59:96:43:58:b9:23:58:5c:72:4f: bc:e4:94:ef:c5:74:7a:ed:32:1d:63:2c:53:f9:a4: c8:4a:72:84:50:41:bc:84:80:0f:c9:97:1c:ce:6e: 3e:52:c5:d9:bd:f2:f0:0b:33:a8:bb:5d:71:52:f4: 5b:18:d4:b7:b8:0b:bc:ae:40:b0:bf:67:28:4c:1f: 4d:bd:5d:c2:9f:d0:a8:e7:79:22:3a:e4:85:8e:8d: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:DB:DC:60:0E:CD:D8:2B:55:16:C4:52:4E:6A:0F:FA:74:F6:1A X509v3 Authority Key Identifier: keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:87:9f:4a:9b:b6:7e:54:87:b8:66:00:30:86:bd:ef:9f:9a: 1c:e6:0b:a1:3c:57:1f:6f:04:4a:4f:be:d5:6c:48:71:34:a8: d1:56:b2:fe:2d:b3:ff:80:73:cf:7d:7d:63:a1:b7:b9:66:7f: b1:87:ab:18:40:80:a6:f7:66:59:52:24:3b:d3:c8:20:9d:89: ac:8a:22:95:49:5a:3c:a0:15:d0:08:1a:51:98:57:3f:46:47: 49:8e:1e:82:23:9e:19:1c:53:a5:2a:ce:24:d1:7d:78:b8:76: e3:3f:a6:bd:e7:f1:18:06:4c:bf:f6:8e:9e:3f:f0:cc:3f:c7: 99:2e:a6:48:ed:0f:fb:2d:39:74:0d:c9:a3:eb:ea:80:fc:ef: a9:82:85:6b:a7:cb:b8:d3:73:7e:f7:18:47:99:f4:08:aa:8e: 08:a2:0f:f5:23:aa:a6:9c:98:48:c1:ae:a0:60:dd:fd:94:e7: 2d:9c:7b:28:8b:3d:3d:c7:f8:e4:d9:cc:b3:58:39:64:4c:9b: 9c:22:12:66:32:1d:b8:bf:0b:4e:da:a8:67:5a:7c:35:72:e7: 6c:bc:dd:01:8b:69:e8:9a:9d:26:26:58:5b:bc:5b:55:68:49: e9:d5:d7:dd:de:08:16:c1:4f:e3:be:63:6a:b7:0c:60:b0:43: cb:eb:3e:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoNUFGQkI5Q0JCQzY1NDZCRDU1MUQxNzI2MzAxOTBBRTgx QTlBRjEyNzAeFw0yNTExMDUwNzQ1MTlaFw0yNTExMTIwNzQ1MTlaMBgxFjAUBgNV BAMTDTY5MGIwMDkwLTc4YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBpsyqqG9VSK9dn/djA54ZHLKO3r4yh5pbDcrKNWSMwnYJ+YEHSoG0gIxRuxcP 8HkZnfTuUcVBxYLnI+GbGf/Jg3icdodvf0jmTLm7cNQl8fJ2Ivtl+EE6EmASVGeY IL+6NLRehGr36/cPlLozoOrUchCQ7IKs2B2D1axF+zTl/gOxLGcnCUE3N9HQ+RMu GATy5SRwQMU8QmtuCU3+YYe3qMv2hQW+pnfjWZZDWLkjWFxyT7zklO/FdHrtMh1j LFP5pMhKcoRQQbyEgA/JlxzObj5Sxdm98vALM6i7XXFS9FsY1Le4C7yuQLC/ZyhM H029XcKf0KjneSI65IWOjcLrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULbLb3GAO zdgrVRbEUk5qD/p09howHwYDVR0jBBgwFoAUWvu5y7xlRr1VHRcmMBkK6Bqa8Scw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzJDOTcxNEVFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIxVkhSY21NQmtLNkJxYThT Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3Z1NXk3eGxScjFWSFJjbU1Ca0s2QnFhOFNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NUMzLzJDOTcxNEVFNjYwNDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIx VkhSY21NQmtLNkJxYThTYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE2Hn0qbtn5Uh7hmADCGve+fmhzmC6E8Vx9vBEpPvtVsSHE0qNFWsv4t s/+Ac899fWOht7lmf7GHqxhAgKb3ZllSJDvTyCCdiayKIpVJWjygFdAIGlGYVz9G R0mOHoIjnhkcU6UqziTRfXi4duM/pr3n8RgGTL/2jp4/8Mw/x5kupkjtD/stOXQN yaPr6oD876mChWuny7jTc373GEeZ9AiqjgiiD/UjqqacmEjBrqBg3f2U5y2ceyiL PT3H+OTZzLNYOWRMm5wiEmYyHbi/C07aqGdafDVy52y83QGLaeianSYmWFu8W1Vo SenV193eCBbBT+O+Y2q3DGCwQ8vrPqg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:17 2025 by rpki-client