$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: tujVtha0jOhnirGoFOoY/QWkI/PlS7q+6LWMuN09ywQ= Subject key identifier: 58:7D:CB:03:C9:F4:EF:D1:3F:EA:04:8D:49:54:7C:9C:F5:4B:A1:6D Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 01C2 Signing time: Mon 03 Nov 2025 03:06:56 +0000 Manifest this update: Mon 03 Nov 2025 03:06:56 +0000 Manifest next update: Mon 10 Nov 2025 03:06:56 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: qGCvWPCw1dlG0z2xB++/o1OtGIlZetveVJOSnhea7cE=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: muoRT5YVa+lZ9dmEo5amL/VfGYBrEqrfaPqq9DzwYGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Nov 3 03:06:56 2025 GMT Not After : Nov 10 03:06:56 2025 GMT Subject: CN=69081c50-7e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:88:51:dd:85:7e:78:18:a6:40:9f:3f:6e: eb:4e:49:b4:2b:9a:29:cb:b6:86:2f:68:15:f2:14: f7:44:38:42:94:f5:cb:15:a1:55:b9:1d:16:53:b8: 7f:a2:a4:a3:db:14:da:58:fb:6e:97:50:7e:74:55: c6:4e:57:5b:0b:b4:31:a4:0e:57:e8:e8:cd:f3:dc: 50:6a:04:04:82:e6:0a:77:dc:1d:80:fe:85:e4:e1: 5e:49:aa:3f:1c:54:7f:d5:a3:ea:3c:0f:02:fd:fa: 04:51:27:bf:a3:1e:d2:4d:b8:8e:df:1e:93:2f:45: 79:b3:3e:87:de:2a:35:c7:87:44:62:79:ae:60:1a: d5:a8:c9:07:35:3b:5a:8a:64:83:19:2d:f0:22:43: 97:f2:f1:49:0b:f3:74:aa:92:47:1d:ad:7c:bd:98: 03:1a:ec:d1:0d:05:6d:69:0a:62:3c:d2:0d:cc:cc: 4b:02:0f:7e:f8:ab:b5:77:70:29:fa:d2:a9:00:41: 66:00:98:ae:c6:76:a4:8b:d5:39:69:dc:56:10:34: 19:19:15:0c:51:14:86:8b:67:64:fa:77:1e:04:ad: bf:4e:93:ca:19:6b:81:59:75:02:b7:e6:50:90:dc: 79:9e:52:07:4c:02:51:32:0f:c1:63:eb:ce:25:fd: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7D:CB:03:C9:F4:EF:D1:3F:EA:04:8D:49:54:7C:9C:F5:4B:A1:6D X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f4:e5:d6:f1:31:78:58:86:4f:88:90:eb:1c:26:14:95:6f: 00:c6:07:bb:80:dd:25:bd:00:07:3b:89:01:e4:9c:bf:a4:a9: 1d:b4:e2:18:df:42:ff:13:70:72:95:26:04:5e:69:da:47:df: af:a9:88:82:5a:cd:3c:de:99:95:26:5a:4b:ba:e6:3f:d8:68: ac:54:b3:9e:ef:17:93:e1:88:81:b0:a4:55:aa:82:c5:62:91: 5f:66:ce:99:d9:a3:fe:d9:e1:a3:a7:e0:93:c1:e1:79:1a:bf: 45:b3:25:e0:53:ad:ed:fc:ad:19:2f:ee:5c:96:86:49:64:66: 77:20:72:40:1a:6d:1a:f7:f9:2b:c2:9c:b4:65:86:b6:c7:94: ff:cf:fa:ae:c5:eb:bc:91:e2:50:da:7e:44:8d:10:49:6d:58: cd:31:21:2b:85:55:67:04:e0:fd:a2:39:94:30:d3:03:1a:63: 56:bb:3f:09:ba:30:2b:30:65:f2:76:42:8a:ee:5a:fc:7f:a6: 72:ae:b9:f8:31:a5:68:98:4d:f8:be:72:9c:07:e8:9d:57:7f: 81:80:ff:c4:53:1c:90:f8:c2:62:50:8f:42:b9:e4:0e:55:76: 25:c5:ed:07:9a:72:77:35:5e:81:4d:a9:01:99:68:50:e8:37: 70:49:86:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUxMTAzMDMwNjU2WhcNMjUxMTEwMDMwNjU2WjAYMRYwFAYD VQQDEw02OTA4MWM1MC03ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MSIUd2FfngYpkCfP27rTkm0K5opy7aGL2gV8hT3RDhClPXLFaFVuR0WU7h/ oqSj2xTaWPtul1B+dFXGTldbC7QxpA5X6OjN89xQagQEguYKd9wdgP6F5OFeSao/ HFR/1aPqPA8C/foEUSe/ox7STbiO3x6TL0V5sz6H3io1x4dEYnmuYBrVqMkHNTta imSDGS3wIkOX8vFJC/N0qpJHHa18vZgDGuzRDQVtaQpiPNINzMxLAg9++Ku1d3Ap +tKpAEFmAJiuxnaki9U5adxWEDQZGRUMURSGi2dk+nceBK2/TpPKGWuBWXUCt+ZQ kNx5nlIHTAJRMg/BY+vOJf166wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh9ywPJ 9O/RP+oEjUlUfJz1S6FtMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf9OXW8TF4WIZPiJDrHCYUlW8Axge7gN0lvQAHO4kB5Jy/pKkdtOIY 30L/E3BylSYEXmnaR9+vqYiCWs083pmVJlpLuuY/2GisVLOe7xeT4YiBsKRVqoLF YpFfZs6Z2aP+2eGjp+CTweF5Gr9FsyXgU63t/K0ZL+5cloZJZGZ3IHJAGm0a9/kr wpy0ZYa2x5T/z/quxeu8keJQ2n5EjRBJbVjNMSErhVVnBOD9ojmUMNMDGmNWuz8J ujArMGXydkKK7lr8f6Zyrrn4MaVomE34vnKcB+idV3+BgP/EUxyQ+MJiUI9CueQO VXYlxe0HmnJ3NV6BTakBmWhQ6DdwSYZb -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:19 2025 by rpki-client