$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: 7znH6Xv43uPmEMQGSsJnl3/iIBxO9+BfNj5a1iQrYPM= Subject key identifier: 84:4D:80:FE:2F:18:7F:7B:46:F5:1B:82:83:98:94:EE:5A:49:39:3C Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 0A09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 09EF Signing time: Tue 04 Nov 2025 20:00:57 +0000 Manifest this update: Tue 04 Nov 2025 20:00:56 +0000 Manifest next update: Tue 11 Nov 2025 20:00:56 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: 7uYIYq9RtlH7dWkUsNd2VxvXVM/o+D2FtCN/GDiMvSA=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: OxqkPAcwe8U/URYzB78s+OkY3R6dzxppCgDSq39fiQ0=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: EhKz+qpZCdGGz4K9XW4D89cMEqKMRNKMYWUEYrhee9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2569 (0xa09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Nov 4 20:00:56 2025 GMT Not After : Nov 11 20:00:56 2025 GMT Subject: CN=690a5b78-1684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:6c:6e:a4:48:c0:f6:88:17:9c:c7:7d:49: 62:89:7f:22:b0:5d:33:bb:4c:95:0c:b7:f3:29:4e: b7:ea:fe:f4:73:7f:5f:57:c6:e4:79:33:93:b1:26: 70:cd:ba:90:9d:aa:30:64:2a:be:03:dc:d5:0d:8e: d2:aa:43:02:fe:b4:b9:fa:8b:77:30:b6:73:a6:6d: ec:d8:52:5f:36:6d:56:a0:50:d7:14:c4:b0:ae:c0: 5e:a6:af:f0:be:1c:70:93:db:83:49:d8:c4:fd:c1: e9:3c:ff:4e:b6:8d:e7:44:ec:b4:c4:cf:85:29:58: c1:94:02:50:97:0c:47:32:18:5d:fb:f4:ba:6d:c7: 30:43:25:13:ad:ca:99:93:a9:75:45:3d:f2:1c:0c: 0a:15:bd:42:72:c2:80:e2:dc:e8:ae:1d:2d:3f:e8: fe:46:00:8d:95:a7:aa:00:d9:ad:43:2c:91:cf:b9: 35:c5:af:37:8a:9a:86:72:f2:8c:3c:de:4b:49:f2: 92:e9:e5:32:a8:71:ea:de:5d:02:60:d1:ea:42:1b: 9c:40:38:ec:9c:23:d5:fc:3a:2b:c2:c4:ba:61:6e: 94:3b:fe:58:65:50:e0:32:3b:33:bc:47:b3:0b:cf: 7a:2d:cf:2a:00:df:64:db:63:f7:46:88:1b:81:6f: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4D:80:FE:2F:18:7F:7B:46:F5:1B:82:83:98:94:EE:5A:49:39:3C X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:0a:bd:47:7e:4e:09:d7:99:e9:df:15:8a:ca:32:f8:08:f1: e1:3b:90:a8:48:67:d1:0c:e5:5e:68:0d:c9:45:db:61:fb:d5: 26:e6:ac:2a:35:47:f2:40:35:eb:fe:7e:30:ac:0b:81:44:54: 00:83:59:4c:3c:a6:29:e7:93:cd:0a:28:89:bb:32:ea:7e:84: 5d:e4:52:51:2d:d9:90:3c:fe:58:e6:cd:55:ca:7b:f2:62:f9: 9c:1b:97:f1:2d:5e:55:05:5a:94:f8:17:37:40:a6:a8:2d:3f: ca:d5:fa:06:55:14:9e:bd:c6:d4:e6:ab:52:09:3b:fd:d1:4d: 29:91:d7:9c:08:e5:62:93:18:18:65:4e:f1:65:ba:5a:d3:87: b3:fc:9a:57:3f:77:51:c6:25:bc:dd:35:5f:eb:91:cd:6c:df: 99:44:36:0b:b9:cf:87:b6:96:21:e2:93:16:d9:3e:55:8a:99: b2:46:4e:82:d8:f0:35:63:74:7b:fa:1d:7d:c5:cb:0a:63:39: 4b:ff:34:f4:10:4d:66:79:ac:19:a8:b6:61:2d:74:10:23:ee: 85:88:3c:7e:a9:91:d3:06:6f:43:85:cf:ce:d9:50:10:c4:0a: a0:40:ff:6a:13:45:60:fd:f7:cb:91:6e:dc:b3:13:60:63:2a: 0b:90:50:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUxMTA0MjAwMDU2WhcNMjUxMTExMjAwMDU2WjAYMRYwFAYD VQQDEw02OTBhNWI3OC0xNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRlsbqRIwPaIF5zHfUliiX8isF0zu0yVDLfzKU636v70c39fV8bkeTOTsSZw zbqQnaowZCq+A9zVDY7SqkMC/rS5+ot3MLZzpm3s2FJfNm1WoFDXFMSwrsBepq/w vhxwk9uDSdjE/cHpPP9Oto3nROy0xM+FKVjBlAJQlwxHMhhd+/S6bccwQyUTrcqZ k6l1RT3yHAwKFb1CcsKA4tzorh0tP+j+RgCNlaeqANmtQyyRz7k1xa83ipqGcvKM PN5LSfKS6eUyqHHq3l0CYNHqQhucQDjsnCPV/DorwsS6YW6UO/5YZVDgMjszvEez C896Lc8qAN9k22P3RogbgW8V2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRNgP4v GH97RvUbgoOYlO5aSTk8MB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApCr1Hfk4J15np3xWKyjL4CPHhO5CoSGfRDOVeaA3JRdth+9Um5qwq NUfyQDXr/n4wrAuBRFQAg1lMPKYp55PNCiiJuzLqfoRd5FJRLdmQPP5Y5s1Vynvy YvmcG5fxLV5VBVqU+Bc3QKaoLT/K1foGVRSevcbU5qtSCTv90U0pkdecCOVikxgY ZU7xZbpa04ez/JpXP3dRxiW83TVf65HNbN+ZRDYLuc+HtpYh4pMW2T5VipmyRk6C 2PA1Y3R7+h19xcsKYzlL/zT0EE1meawZqLZhLXQQI+6FiDx+qZHTBm9Dhc/O2VAQ xAqgQP9qE0Vg/ffLkW7csxNgYyoLkFCD -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:15 2025 by rpki-client