$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: nspdeVmw/bYluDY6YcQ29xM2Xm0AwBTiaWl4wszZTUc= Subject key identifier: C0:A5:7D:45:D4:05:69:A4:25:FF:4F:C5:13:A6:E3:70:2C:B8:52:E5 Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 02B0 Signing time: Wed 05 Nov 2025 01:34:32 +0000 Manifest this update: Wed 05 Nov 2025 01:34:32 +0000 Manifest next update: Wed 12 Nov 2025 01:34:32 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: H0cToGDs9CDiU9dRQ/WY6MofTHh0hlLKtYYTV9Xvx84=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Nov 5 01:34:32 2025 GMT Not After : Nov 12 01:34:32 2025 GMT Subject: CN=690aa9a8-a708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:d3:da:6e:ca:bf:17:4b:50:be:cf:93:e8: 32:de:c4:41:82:38:f6:88:19:ee:be:f9:71:17:76: 8b:0f:f8:d1:d8:d6:8e:00:12:f7:d0:42:ef:2c:7f: 85:32:7d:8c:af:68:7d:15:44:73:d9:0d:34:df:b5: a8:ac:91:4c:ef:dc:b7:70:d2:80:3c:d4:6a:f4:4f: ee:cd:5b:ca:57:2a:22:14:ef:3a:ce:d9:50:ef:86: e2:f5:da:85:14:f9:9e:d4:79:fa:3b:50:b1:5c:67: 1f:b6:53:01:b5:96:8a:5f:02:0d:d0:e5:c4:b2:96: 55:31:fb:cc:b0:77:8c:c6:a4:a1:ba:09:69:5f:06: 1c:eb:a5:2d:a7:aa:42:be:b6:1f:1a:27:56:fd:45: 8a:6f:f5:f5:41:1a:95:8b:a9:ea:a6:b3:1b:9b:ef: 64:fd:0c:a1:97:4f:42:24:62:8f:25:c5:23:05:1b: 2c:12:5b:37:9a:e9:ca:6a:97:6c:85:b6:0e:94:5b: ee:95:b4:de:1b:a6:dd:fa:2d:b5:c2:16:d6:42:6d: 01:e6:58:d1:f6:2f:14:e2:15:34:93:01:c5:d8:76: 6d:8e:2a:d2:e4:a8:10:ac:ee:16:5d:c2:98:e5:40: 3e:9a:2a:2d:0a:6b:6f:d0:db:3e:0a:09:61:70:50: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A5:7D:45:D4:05:69:A4:25:FF:4F:C5:13:A6:E3:70:2C:B8:52:E5 X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:ad:ec:75:22:0b:f1:f6:52:dd:48:71:6d:31:07:28:4f: 05:ab:78:e9:b2:b9:e3:48:18:04:a8:7c:f0:6a:25:2b:c0:f6: a4:c9:b5:c3:ba:27:fd:4d:5f:2f:76:21:fe:29:a1:3b:18:52: 38:70:3d:15:db:87:45:3e:cf:c7:78:4f:01:44:43:63:5c:20: f5:b1:4f:08:a1:29:9c:f5:3f:dc:3d:fd:8a:a1:7f:44:82:d1: af:fa:0f:1a:69:98:28:44:3c:3d:da:6a:d1:66:e0:4c:09:ac: 09:48:af:24:1e:1f:70:92:d7:be:73:5f:37:50:51:cb:ac:2b: df:0e:09:4a:42:46:fb:44:26:63:5d:14:1c:29:d1:13:5a:b4: 34:0c:66:20:62:4a:8b:63:7e:6f:b6:93:a8:d3:7f:8a:b5:60: 6e:92:91:c5:67:a6:86:3c:7f:e6:fc:2c:40:05:ec:03:33:7e: a9:e9:b3:f7:fd:c3:9e:71:96:87:50:89:ae:8f:1e:28:5c:ae: b4:e5:e4:68:ff:f1:01:9a:52:0f:41:56:89:b7:b1:40:1d:15: 74:f2:be:e6:ea:f6:d3:e1:37:50:12:26:0c:28:ba:8c:f5:9f: db:ec:64:05:c3:29:5e:08:a5:73:77:6a:11:45:e6:dc:77:7c: e4:b4:08:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjUxMTA1MDEzNDMyWhcNMjUxMTEyMDEzNDMyWjAYMRYwFAYD VQQDEw02OTBhYTlhOC1hNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzvT2m7KvxdLUL7Pk+gy3sRBgjj2iBnuvvlxF3aLD/jR2NaOABL30ELvLH+F Mn2Mr2h9FURz2Q0037WorJFM79y3cNKAPNRq9E/uzVvKVyoiFO86ztlQ74bi9dqF FPme1Hn6O1CxXGcftlMBtZaKXwIN0OXEspZVMfvMsHeMxqShuglpXwYc66Utp6pC vrYfGidW/UWKb/X1QRqVi6nqprMbm+9k/Qyhl09CJGKPJcUjBRssEls3munKapds hbYOlFvulbTeG6bd+i21whbWQm0B5ljR9i8U4hU0kwHF2HZtjirS5KgQrO4WXcKY 5UA+miotCmtv0Ns+CglhcFAAYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMClfUXU BWmkJf9PxROm43AsuFLlMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASdq3sdSIL8fZS3UhxbTEHKE8Fq3jpsrnjSBgEqHzwaiUrwPakybXD uif9TV8vdiH+KaE7GFI4cD0V24dFPs/HeE8BRENjXCD1sU8IoSmc9T/cPf2KoX9E gtGv+g8aaZgoRDw92mrRZuBMCawJSK8kHh9wkte+c183UFHLrCvfDglKQkb7RCZj XRQcKdETWrQ0DGYgYkqLY35vtpOo03+KtWBukpHFZ6aGPH/m/CxABewDM36p6bP3 /cOecZaHUImujx4oXK605eRo//EBmlIPQVaJt7FAHRV08r7m6vbT4TdQEiYMKLqM 9Z/b7GQFwyleCKVzd2oRRebcd3zktAhk -----END CERTIFICATE-----Generated at Wed Nov 5 16:58:56 2025 by rpki-client