$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: x2YjjFUncGOjDzbFWSFWW4igkJOXRHJqFJMvXqBDuD4= Subject key identifier: 19:0F:85:10:9A:10:9E:AE:AE:48:31:D9:18:15:82:BA:8E:99:BF:A1 Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2CEE Signing time: Tue 04 Nov 2025 15:46:42 +0000 Manifest this update: Tue 04 Nov 2025 15:46:41 +0000 Manifest next update: Tue 11 Nov 2025 15:46:41 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: +8aLU97ZkhqxcBmj3LZBqULoqn6DNU29jGMaeoQt5oU=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: Nov 4 15:46:41 2025 GMT Not After : Nov 11 15:46:41 2025 GMT Subject: CN=690a1fe2-808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:26:3c:48:5e:e3:ba:6f:7f:cd:c9:24:c6: 03:86:ef:ab:63:87:be:47:b0:b2:fa:26:89:51:25: 83:d3:a6:cd:78:5b:09:72:6b:b8:c7:89:97:47:c8: 2c:fa:1b:80:4f:c8:1d:4c:9d:c3:38:a7:6d:ec:08: 73:2b:0f:5d:12:b0:6c:ab:88:6b:60:a3:4c:3a:86: 74:95:99:6b:35:43:e3:29:42:88:80:2b:10:5c:51: bc:f8:2f:08:ff:f8:3e:98:d2:95:02:f7:2f:7e:30: 70:e6:aa:da:a3:5e:92:fc:32:d2:48:84:ed:53:9d: 6c:9d:51:ea:d4:01:22:95:84:17:1b:75:54:0f:1b: 93:7a:25:c6:58:e8:d3:2b:e9:20:b4:11:d5:f9:03: 96:f2:16:fa:2e:3d:7b:23:94:ed:5b:d2:5d:58:4a: 86:32:45:3e:99:5f:88:49:77:ce:21:80:d5:35:0a: 56:07:bc:3f:f5:60:3c:9e:78:ff:94:fb:c8:6a:b5: b3:4e:04:a2:21:a8:bc:e2:38:96:87:f2:57:06:7c: 1e:43:76:fd:06:35:b2:96:05:6a:54:a9:fb:55:90: dc:6b:99:ab:86:9c:62:7f:ce:0e:c3:f7:57:a1:68: ff:b3:65:2e:8f:37:f0:75:84:2b:81:42:70:00:a3: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:85:10:9A:10:9E:AE:AE:48:31:D9:18:15:82:BA:8E:99:BF:A1 X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:58:94:c7:f8:bf:26:bc:f2:34:11:c7:a5:64:58:6c:fa:50: 4b:5a:74:98:2a:ff:8f:9f:fd:e5:a5:01:c9:0e:06:a5:87:f2: 91:9d:62:e3:3b:50:c8:a6:cc:36:02:0a:74:80:1f:5f:b0:74: fb:bf:ee:c2:95:b7:ec:9d:90:6c:75:98:55:42:47:d9:17:de: c1:74:09:40:96:af:fa:e0:8d:62:27:8e:0e:4e:59:16:36:da: d3:02:1d:98:4e:e5:51:f3:77:d3:2d:cd:25:f1:91:6f:b6:34: eb:e0:e9:3c:40:cb:72:b9:04:bf:06:a1:2b:9e:c2:2b:e0:b9: ce:0c:bc:90:f2:3c:31:11:ae:de:db:84:c6:09:95:bf:47:3f: a0:40:5f:61:50:2b:a5:a6:b8:f1:66:fa:fa:85:1a:f4:2b:25: 08:5a:be:37:37:65:88:bb:4a:a0:5a:d4:02:35:5c:ae:81:2d: 2b:d9:77:d8:6e:cb:d3:fb:6f:47:40:f7:28:08:58:56:59:3a: e5:ed:fd:c5:db:1e:08:1b:da:cc:38:8d:ab:f0:94:19:76:b7: 45:b8:02:26:b8:85:84:82:da:95:06:8e:8c:fe:3d:ba:3a:c6: 26:00:67:6f:1c:00:d0:79:d1:78:67:c7:ef:8f:d1:ab:ae:bd: 96:bc:a6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjUxMTA0MTU0NjQxWhcNMjUxMTExMTU0NjQxWjAYMRYwFAYD VQQDEw02OTBhMWZlMi04MDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxwmPEhe47pvf83JJMYDhu+rY4e+R7Cy+iaJUSWD06bNeFsJcmu4x4mXR8gs +huAT8gdTJ3DOKdt7AhzKw9dErBsq4hrYKNMOoZ0lZlrNUPjKUKIgCsQXFG8+C8I //g+mNKVAvcvfjBw5qrao16S/DLSSITtU51snVHq1AEilYQXG3VUDxuTeiXGWOjT K+kgtBHV+QOW8hb6Lj17I5TtW9JdWEqGMkU+mV+ISXfOIYDVNQpWB7w/9WA8nnj/ lPvIarWzTgSiIai84jiWh/JXBnweQ3b9BjWylgVqVKn7VZDca5mrhpxif84Ow/dX oWj/s2UujzfwdYQrgUJwAKMKwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkPhRCa EJ6urkgx2RgVgrqOmb+hMB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXWJTH+L8mvPI0EcelZFhs+lBLWnSYKv+Pn/3lpQHJDgalh/KRnWLj O1DIpsw2Agp0gB9fsHT7v+7ClbfsnZBsdZhVQkfZF97BdAlAlq/64I1iJ44OTlkW NtrTAh2YTuVR83fTLc0l8ZFvtjTr4Ok8QMtyuQS/BqErnsIr4LnODLyQ8jwxEa7e 24TGCZW/Rz+gQF9hUCulprjxZvr6hRr0KyUIWr43N2WIu0qgWtQCNVyugS0r2XfY bsvT+29HQPcoCFhWWTrl7f3F2x4IG9rMOI2r8JQZdrdFuAImuIWEgtqVBo6M/j26 OsYmAGdvHADQedF4Z8fvj9Grrr2WvKb2 -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:41 2025 by rpki-client