$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: 3GewWS7UHYFCnQYznPdErN0td06yIifF+1/xy8Gu+Oc= Subject key identifier: 3E:3B:A6:CE:23:41:01:90:CC:A6:58:A7:97:7B:20:21:BE:38:87:6D Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: DD Signing time: Mon 03 Nov 2025 05:31:40 +0000 Manifest this update: Mon 03 Nov 2025 05:31:39 +0000 Manifest next update: Mon 10 Nov 2025 05:31:39 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: j3MBRhBIKZwx8+8qmzO0x6YKrzhh/5du2U1g+jiahGU=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: S//h0FvEyaMaAGxiOxnAlzaIIXmPhHgkfb3U/Ur0Y5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Nov 3 05:31:39 2025 GMT Not After : Nov 10 05:31:39 2025 GMT Subject: CN=69083e3b-cd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:65:13:b4:28:70:f1:9b:4e:4d:d2:6d:77: 5e:3d:7b:4f:46:a7:88:1b:1a:08:62:ab:d8:90:3c: ab:d9:7d:71:3d:86:9c:72:32:dc:a9:5f:16:f9:7a: a7:e3:85:be:a7:74:13:27:67:6b:9d:8a:b3:f3:9d: 2f:ab:25:8f:ad:e9:f5:34:e1:1b:27:3a:b2:10:dd: 11:12:92:4b:50:89:9a:4e:bf:6f:b0:b1:a5:40:83: a2:11:c1:f6:6f:2b:2e:8a:d6:4c:c2:c7:73:03:b5: 33:91:ba:4c:88:32:d8:d3:d1:48:6b:a3:dc:23:ea: dd:9d:19:ff:58:f9:e6:2b:d9:95:b3:1c:e8:7b:79: 0a:9c:25:56:05:91:bd:f3:e9:60:50:41:b6:cd:76: 74:40:f0:6f:70:31:5d:00:8e:00:e9:9e:c5:be:bd: 64:54:cd:88:c6:50:49:ff:d8:ee:74:a1:ee:7e:f8: 41:60:c0:3b:e4:eb:c6:bb:63:f4:9b:67:21:dd:b2: 54:26:44:7e:69:ee:8c:a0:a1:e2:18:62:5f:54:58: 29:e2:e1:81:dd:99:de:32:75:dc:9e:59:65:b7:f3: eb:4e:8c:a1:44:03:4f:04:39:b0:d3:fc:ac:d3:fd: c9:a5:a2:63:32:b9:30:2f:6f:fe:01:fd:cd:40:5c: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:A6:CE:23:41:01:90:CC:A6:58:A7:97:7B:20:21:BE:38:87:6D X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:0f:ef:bc:b6:9f:0e:04:d7:78:3e:8e:d7:6c:5c:72:1c:36: c5:7a:0b:ed:aa:60:0d:e7:88:11:cf:b4:0d:39:6a:0a:77:59: b3:a3:ee:22:13:a3:a6:1c:09:e5:c4:b7:e6:f7:0d:3e:45:5c: ba:fd:34:e5:62:31:87:c5:59:15:59:af:84:2c:e2:fc:e8:00: 00:d3:d2:eb:a7:ef:09:f4:85:b1:6f:f0:65:d8:22:73:e7:8a: da:df:5b:8b:27:0a:34:da:33:56:42:43:c5:22:07:91:80:85: a9:36:d2:00:04:67:24:7b:80:85:4e:e1:b6:9e:1c:87:77:e1: 21:9a:63:ea:e4:f1:23:d7:d6:ec:57:1e:56:e3:d3:89:bf:d0: 09:bb:34:ea:b3:72:4a:3d:a6:f7:85:55:3a:bf:bd:7b:a8:c8: 3a:34:cb:f7:0f:70:1e:2f:21:82:20:62:df:28:82:7e:1b:8e: c4:fb:83:8b:94:b5:f0:2b:27:87:38:d8:b5:f4:e4:42:4f:b9: e2:e9:75:2c:56:34:2e:7c:fd:9a:a9:f8:36:7b:af:78:7f:f3: 67:fa:6f:60:54:bc:01:57:05:07:9f:48:10:ee:ac:0c:d2:76: 4f:60:e3:b9:56:21:43:6d:76:a4:04:3e:18:3c:0f:49:2d:f3: cb:72:f2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUxMTAzMDUzMTM5WhcNMjUxMTEwMDUzMTM5WjAYMRYwFAYD VQQDEw02OTA4M2UzYi1jZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ENlE7QocPGbTk3SbXdePXtPRqeIGxoIYqvYkDyr2X1xPYaccjLcqV8W+Xqn 44W+p3QTJ2drnYqz850vqyWPren1NOEbJzqyEN0REpJLUImaTr9vsLGlQIOiEcH2 bysuitZMwsdzA7UzkbpMiDLY09FIa6PcI+rdnRn/WPnmK9mVsxzoe3kKnCVWBZG9 8+lgUEG2zXZ0QPBvcDFdAI4A6Z7Fvr1kVM2IxlBJ/9judKHufvhBYMA75OvGu2P0 m2ch3bJUJkR+ae6MoKHiGGJfVFgp4uGB3ZneMnXcnlllt/PrToyhRANPBDmw0/ys 0/3JpaJjMrkwL2/+Af3NQFxjKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD47ps4j QQGQzKZYp5d7ICG+OIdtMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGD++8tp8OBNd4Po7XbFxyHDbFegvtqmAN54gRz7QNOWoKd1mzo+4i E6OmHAnlxLfm9w0+RVy6/TTlYjGHxVkVWa+ELOL86AAA09Lrp+8J9IWxb/Bl2CJz 54ra31uLJwo02jNWQkPFIgeRgIWpNtIABGcke4CFTuG2nhyHd+EhmmPq5PEj19bs Vx5W49OJv9AJuzTqs3JKPab3hVU6v717qMg6NMv3D3AeLyGCIGLfKIJ+G47E+4OL lLXwKyeHONi19ORCT7ni6XUsVjQufP2aqfg2e694f/Nn+m9gVLwBVwUHn0gQ7qwM 0nZPYOO5ViFDbXakBD4YPA9JLfPLcvI8 -----END CERTIFICATE-----Generated at Tue Nov 4 23:47:30 2025 by rpki-client