$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: fOK6r07Ik4a/D1K/I9eNHBOK0TkcTXIpC5M8Ou20cEg= Subject key identifier: 70:50:97:99:5E:55:46:1E:11:AB:A5:C4:91:BA:CB:03:6B:97:F1:85 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0FE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0FD3 Signing time: Tue 04 Nov 2025 17:35:44 +0000 Manifest this update: Tue 04 Nov 2025 17:35:44 +0000 Manifest next update: Tue 11 Nov 2025 17:35:44 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: eX1lDRE8OfWhBg26Poh0ip5eKE2PD3mU3buEZTwlW5s=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4069 (0xfe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Nov 4 17:35:44 2025 GMT Not After : Nov 11 17:35:44 2025 GMT Subject: CN=690a3970-1b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:35:5f:04:67:c5:1a:a0:56:a2:43:ee:a4: 86:a9:17:9f:2d:8f:64:4c:20:20:a2:08:4e:35:e5: 34:db:03:81:5b:53:55:31:5b:52:76:d0:be:26:04: 93:44:32:b6:52:b8:80:c1:e6:ab:bb:c8:92:79:ee: 5b:86:ee:59:fd:1b:b6:a1:8b:40:41:e9:bf:40:1a: 75:b3:90:11:54:fe:30:4c:37:d5:c2:fb:18:a6:05: f1:89:25:48:42:f4:3a:60:50:e5:7e:e4:82:fd:ec: 3b:6e:99:c0:af:aa:bc:6c:ac:e5:9c:db:1a:e7:28: d0:31:9f:65:a2:b4:c9:e0:e4:5c:1c:b9:d3:f2:1f: 52:3e:a8:e6:87:0c:ff:0e:4d:03:3b:b8:6e:26:30: 29:02:cc:f2:e5:1b:08:49:31:5f:e5:43:86:cb:6f: 86:0b:6d:1f:68:3b:12:67:c5:21:10:80:6d:69:c2: a4:2c:76:69:29:1b:65:db:b5:07:6b:e0:d0:af:79: 69:4f:87:10:dd:4d:38:98:b1:15:97:0a:02:6e:c2: 00:21:d2:8b:3a:c9:c0:f4:19:4b:63:ce:5c:e0:51: ef:97:de:cf:36:a2:bd:70:ea:fd:d9:74:06:29:d7: 76:5d:ee:a8:96:0c:87:b8:64:4f:69:e4:50:5f:f2: 79:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:97:99:5E:55:46:1E:11:AB:A5:C4:91:BA:CB:03:6B:97:F1:85 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f8:84:cd:84:4c:a2:da:c7:a8:b3:9f:0e:e5:1a:5c:65:18: b7:d8:4f:be:a7:c4:24:bd:f7:77:88:b9:14:f2:01:6a:cf:ee: 60:cf:34:4a:ab:5c:5c:af:d9:c5:3d:27:eb:cf:80:7b:fd:4f: d8:d1:16:5f:6e:02:75:bb:16:1f:1f:23:87:8c:0b:e9:1c:e8: ff:aa:7c:66:2f:e5:82:e8:74:53:86:23:bf:39:6b:57:0b:de: 29:b9:0c:f9:be:71:3f:7f:88:e6:a0:dc:a0:b9:17:36:2c:35: 46:fa:b8:d3:57:46:f8:c6:a7:af:be:50:0d:7a:1e:ef:1b:b7: 0c:c4:93:21:b6:d3:2c:cd:27:24:7d:a7:76:b9:0d:f3:e9:01: 04:69:25:df:87:0a:75:02:58:7b:dc:ad:ed:76:83:bd:2a:30: 4e:b3:50:38:0c:35:a2:dc:76:7a:8c:08:ac:0e:1c:d7:17:66: a4:ce:01:59:71:f9:b0:3f:b0:88:25:2b:7f:ef:dc:7d:9c:8c: f5:14:45:e8:4d:f2:8a:d4:93:7c:e8:c0:36:94:7d:53:96:36: d0:80:44:de:52:04:fd:b9:3a:b8:1f:be:06:8d:ba:a8:0d:65: 48:1b:69:82:92:8f:a4:65:01:f2:e0:02:c5:ce:76:af:f8:36: 46:a7:b5:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUxMTA0MTczNTQ0WhcNMjUxMTExMTczNTQ0WjAYMRYwFAYD VQQDEw02OTBhMzk3MC0xYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCA1XwRnxRqgVqJD7qSGqRefLY9kTCAgoghONeU02wOBW1NVMVtSdtC+JgST RDK2UriAwearu8iSee5bhu5Z/Ru2oYtAQem/QBp1s5ARVP4wTDfVwvsYpgXxiSVI QvQ6YFDlfuSC/ew7bpnAr6q8bKzlnNsa5yjQMZ9lorTJ4ORcHLnT8h9SPqjmhwz/ Dk0DO7huJjApAszy5RsISTFf5UOGy2+GC20faDsSZ8UhEIBtacKkLHZpKRtl27UH a+DQr3lpT4cQ3U04mLEVlwoCbsIAIdKLOsnA9BlLY85c4FHvl97PNqK9cOr92XQG Kdd2Xe6olgyHuGRPaeRQX/J5ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBQl5le VUYeEaulxJG6ywNrl/GFMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/+ITNhEyi2seos58O5RpcZRi32E++p8Qkvfd3iLkU8gFqz+5gzzRK q1xcr9nFPSfrz4B7/U/Y0RZfbgJ1uxYfHyOHjAvpHOj/qnxmL+WC6HRThiO/OWtX C94puQz5vnE/f4jmoNyguRc2LDVG+rjTV0b4xqevvlANeh7vG7cMxJMhttMszSck fad2uQ3z6QEEaSXfhwp1Alh73K3tdoO9KjBOs1A4DDWi3HZ6jAisDhzXF2akzgFZ cfmwP7CIJSt/79x9nIz1FEXoTfKK1JN86MA2lH1TljbQgETeUgT9uTq4H74Gjbqo DWVIG2mCko+kZQHy4ALFznav+DZGp7WH -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:00 2025 by rpki-client