$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: qll3kZzjYxt694w/sbGH6iF+iD66DqkXIxchMULV5mQ= Subject key identifier: FD:F3:AA:41:A1:7E:35:AF:3E:DE:77:7E:22:23:33:F9:57:99:B7:15 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 05BC Signing time: Sun 02 Nov 2025 23:05:59 +0000 Manifest this update: Sun 02 Nov 2025 23:05:59 +0000 Manifest next update: Sun 09 Nov 2025 23:05:59 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: ubnj+0zPLEsYu3lvlhwBPJ+nAxXLV3MN/2gv2hpOD2w=) 2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: cwF8COUkuSrij9NX2KXpkgFn2IJIbJrzIKS8a9AaFJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Nov 2 23:05:59 2025 GMT Not After : Nov 9 23:05:59 2025 GMT Subject: CN=6907e3d7-d650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:08:40:8d:ad:5e:93:b1:0e:b8:4a:ea:d7: 05:70:12:8d:69:58:d5:37:da:5c:48:85:95:be:bf: 9a:ac:43:81:98:ce:1d:eb:cd:ea:46:4d:57:a8:31: 95:ce:4e:ec:7e:14:51:bb:43:29:28:25:cc:dc:60: 82:e4:7e:25:6b:8f:29:1a:22:d2:eb:29:33:56:e2: 7d:6b:eb:c8:4c:2d:73:a7:20:f5:be:d9:ed:df:ac: 7b:72:6d:97:79:34:f0:a0:85:0e:96:ef:75:6b:f9: 14:6d:2b:03:1e:95:89:f6:cc:92:06:db:3c:32:b6: 6a:98:21:ab:9a:eb:ed:be:1f:f9:01:85:5f:6a:87: b1:7c:e6:ca:d2:20:d3:f1:29:cd:65:37:3f:6f:b4: 4b:51:f2:7e:c8:75:5e:d5:f3:83:d1:ea:6c:4e:60: 0a:fe:4f:4f:0d:59:3d:e6:3b:b7:02:42:28:c5:c8: 77:e2:6a:fe:89:43:4c:f7:d2:7c:7c:c6:40:86:f6: 99:99:66:4e:93:91:2d:3e:56:a7:a5:9c:6d:56:fc: 15:25:b0:2b:2c:c7:d7:c7:54:44:39:05:51:62:53: 27:13:d8:bf:2a:4f:4a:35:5e:ab:74:08:01:72:8b: 76:45:fc:1d:c7:35:e6:dd:4d:75:14:07:0b:24:db: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F3:AA:41:A1:7E:35:AF:3E:DE:77:7E:22:23:33:F9:57:99:B7:15 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:31:f6:0e:b0:11:9b:71:9d:94:27:19:a4:45:46:4d:05:91: 52:02:e4:88:36:cb:af:14:3a:38:cf:42:9c:ca:18:14:7f:bd: d9:53:18:33:16:a8:85:25:d4:f9:7b:48:b0:24:f2:b5:c2:0d: 32:c1:39:01:58:ba:60:f9:20:2f:56:6e:da:26:4d:7b:f2:12: 4e:4f:47:0e:95:d2:79:79:4c:f8:81:4d:d1:69:b9:85:47:a7: b8:e0:65:77:0d:47:c6:e2:97:c8:92:58:ee:85:b5:35:8d:61: 43:3e:fe:9e:75:50:b0:29:cb:48:d7:4b:86:2c:43:d6:4e:f6: ad:c7:01:bf:a2:d2:9f:a5:e8:b7:dd:98:94:12:45:ce:53:47: af:e3:f8:a9:f4:51:0c:c3:58:18:5c:69:99:3e:f7:4c:d5:d3: e9:ab:bb:e4:6c:0f:d3:3a:15:89:38:1c:6e:8c:65:9f:a3:9c: 70:30:0f:a2:fd:cb:d1:f5:38:6e:9c:5f:28:b5:8f:bb:66:b5: e5:88:4f:15:4a:51:60:98:54:5f:14:63:04:62:93:bd:d8:01: af:90:87:74:44:1b:67:06:6f:17:05:5b:2e:34:c2:02:b2:cd: a2:4a:50:f1:5d:3c:b4:79:da:8f:01:94:db:77:9f:81:51:c3: c4:6e:b7:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUxMTAyMjMwNTU5WhcNMjUxMTA5MjMwNTU5WjAYMRYwFAYD VQQDEw02OTA3ZTNkNy1kNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLUIQI2tXpOxDrhK6tcFcBKNaVjVN9pcSIWVvr+arEOBmM4d683qRk1XqDGV zk7sfhRRu0MpKCXM3GCC5H4la48pGiLS6ykzVuJ9a+vITC1zpyD1vtnt36x7cm2X eTTwoIUOlu91a/kUbSsDHpWJ9sySBts8MrZqmCGrmuvtvh/5AYVfaoexfObK0iDT 8SnNZTc/b7RLUfJ+yHVe1fOD0epsTmAK/k9PDVk95ju3AkIoxch34mr+iUNM99J8 fMZAhvaZmWZOk5EtPlanpZxtVvwVJbArLMfXx1REOQVRYlMnE9i/Kk9KNV6rdAgB cot2RfwdxzXm3U11FAcLJNu5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3zqkGh fjWvPt53fiIjM/lXmbcVMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4MfYOsBGbcZ2UJxmkRUZNBZFSAuSINsuvFDo4z0KcyhgUf73ZUxgz FqiFJdT5e0iwJPK1wg0ywTkBWLpg+SAvVm7aJk178hJOT0cOldJ5eUz4gU3RabmF R6e44GV3DUfG4pfIkljuhbU1jWFDPv6edVCwKctI10uGLEPWTvatxwG/otKfpei3 3ZiUEkXOU0ev4/ip9FEMw1gYXGmZPvdM1dPpq7vkbA/TOhWJOBxujGWfo5xwMA+i /cvR9ThunF8otY+7ZrXliE8VSlFgmFRfFGMEYpO92AGvkId0RBtnBm8XBVsuNMIC ss2iSlDxXTy0edqPAZTbd5+BUcPEbrcV -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:35 2025 by rpki-client