$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: DzWzAzFENoSpjkY4+rJgh9uqGkSCRb+omSbUDW7UH6c= Subject key identifier: 06:9F:ED:04:F7:44:41:FD:38:99:B2:34:02:EC:6C:C0:16:34:7B:1F Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1C12 Signing time: Tue 04 Nov 2025 16:39:33 +0000 Manifest this update: Tue 04 Nov 2025 16:39:32 +0000 Manifest next update: Tue 11 Nov 2025 16:39:32 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: 5UmvkWjdC2PT0uPnctEFjC0sjTTz/V1MU5+tw1vSzUw=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: +EpmAAjo6yFTAjun44cjj7Z2OPFIr6kC+2bjFTkfQ8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Nov 4 16:39:32 2025 GMT Not After : Nov 11 16:39:32 2025 GMT Subject: CN=690a2c44-82c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:ca:a8:4a:06:b9:a7:13:98:03:b0:0d:42: bd:3d:d9:5a:3c:2d:6f:36:5a:41:3a:2d:95:8a:9c: 40:15:a1:ed:42:51:e3:b4:d2:73:48:e8:76:3d:7a: 1e:f0:93:77:d1:d4:79:c8:ec:63:04:0f:5e:2d:09: e6:8a:45:bb:cd:9c:af:d5:42:5f:f1:20:63:40:ea: 89:06:e3:3f:52:1a:90:28:8c:1a:35:3e:23:3e:01: 5e:e1:6f:97:c2:7f:26:07:82:ee:9f:e3:89:9c:02: 3e:0f:51:aa:8f:11:2c:47:5e:25:e5:29:6c:de:a4: 24:91:fa:20:05:c5:7a:97:b4:a6:51:54:39:06:e8: b0:87:5b:cb:96:28:9f:24:4f:14:d6:e9:6c:38:d5: da:aa:f0:2e:9a:05:e8:c1:07:04:32:29:2a:0c:e1: ee:8b:51:06:5f:57:a9:04:2d:33:3f:90:4b:39:80: 9c:81:d7:96:c4:33:7e:c5:8a:d5:2e:ba:29:97:25: f2:26:09:ec:3e:78:fa:38:3f:80:5d:2c:93:4d:44: 12:4e:fa:36:4e:d7:dd:bb:46:d4:3c:a0:87:31:e9: 10:fc:cc:c8:f0:56:6f:c3:fa:3b:21:b4:43:71:d5: 49:a4:11:fd:ab:50:fe:8a:9e:a2:1b:7b:17:91:5e: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9F:ED:04:F7:44:41:FD:38:99:B2:34:02:EC:6C:C0:16:34:7B:1F X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7f:6c:e4:f2:86:82:bb:37:55:41:c7:4b:91:b4:a8:80:b9: 0a:bc:ae:cf:b9:9e:fe:67:39:1f:e6:26:cb:af:0c:5a:af:12: e7:af:47:94:8a:7c:e7:1e:3c:e0:ee:0a:7f:b4:c5:6e:97:ad: dc:e1:23:bb:7a:05:71:b9:c9:de:1c:78:70:e5:6d:e3:9e:cc: 08:e7:89:8f:24:97:a0:35:9f:0c:73:72:db:58:39:3d:e8:ff: 73:f5:91:87:63:b0:4d:d7:71:98:a0:36:ee:9a:6f:e0:36:70: 42:4b:40:87:5c:22:39:0e:f5:b0:b1:c5:14:8b:0f:2f:72:41: a4:8b:70:f3:fb:7a:5c:26:44:4d:0d:f0:75:39:9a:62:b5:3d: 3f:24:a0:8c:60:d1:03:f5:11:d1:8c:c1:e2:4e:5e:98:60:ba: e2:78:24:b7:e7:9f:22:11:29:00:ce:bd:32:c6:65:fe:ea:30: b1:7c:13:82:c8:65:49:8d:93:c6:ed:4d:b9:79:e5:ca:5a:b2: 0e:8e:6c:b9:96:56:b4:6d:43:56:f9:8e:24:84:53:6a:b0:9f: 27:f8:07:98:2b:01:31:d8:de:68:9f:e8:db:a4:53:a1:16:70: a7:13:f7:e4:d0:f3:0b:1a:d8:0f:6e:2c:80:88:a8:5d:91:84: cb:e8:f9:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUxMTA0MTYzOTMyWhcNMjUxMTExMTYzOTMyWjAYMRYwFAYD VQQDEw02OTBhMmM0NC04MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxPKqEoGuacTmAOwDUK9PdlaPC1vNlpBOi2VipxAFaHtQlHjtNJzSOh2PXoe 8JN30dR5yOxjBA9eLQnmikW7zZyv1UJf8SBjQOqJBuM/UhqQKIwaNT4jPgFe4W+X wn8mB4Lun+OJnAI+D1GqjxEsR14l5Sls3qQkkfogBcV6l7SmUVQ5Buiwh1vLliif JE8U1ulsONXaqvAumgXowQcEMikqDOHui1EGX1epBC0zP5BLOYCcgdeWxDN+xYrV LroplyXyJgnsPnj6OD+AXSyTTUQSTvo2Ttfdu0bUPKCHMekQ/MzI8FZvw/o7IbRD cdVJpBH9q1D+ip6iG3sXkV6FjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaf7QT3 REH9OJmyNALsbMAWNHsfMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvf2zk8oaCuzdVQcdLkbSogLkKvK7PuZ7+Zzkf5ibLrwxarxLnr0eU inznHjzg7gp/tMVul63c4SO7egVxucneHHhw5W3jnswI54mPJJegNZ8Mc3LbWDk9 6P9z9ZGHY7BN13GYoDbumm/gNnBCS0CHXCI5DvWwscUUiw8vckGki3Dz+3pcJkRN DfB1OZpitT0/JKCMYNED9RHRjMHiTl6YYLrieCS3558iESkAzr0yxmX+6jCxfBOC yGVJjZPG7U25eeXKWrIOjmy5lla0bUNW+Y4khFNqsJ8n+AeYKwEx2N5on+jbpFOh FnCnE/fk0PMLGtgPbiyAiKhdkYTL6PmK -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:12 2025 by rpki-client