$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: nIvVzeUxArjkXlH6YwtwbCvNJaAPQhYb5PE60a3ba64= Subject key identifier: 04:42:D9:BF:06:11:E6:C7:A3:90:91:1F:50:94:E0:B1:5A:E9:F1:CB Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 07:20:40 +0000 Manifest this update: Mon 03 Nov 2025 07:20:40 +0000 Manifest next update: Mon 10 Nov 2025 07:20:40 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: O2WOlUJW3Juuts85OcQlAHAzlrCSdwen6S9DnJwERB8=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Nov 3 07:20:40 2025 GMT Not After : Nov 10 07:20:40 2025 GMT Subject: CN=690857c8-6eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:0c:67:19:fa:71:6e:2f:5a:b8:1e:42:e5: 60:6f:b7:fb:1d:05:e1:03:b4:85:46:16:7f:09:5f: cf:24:16:c9:ad:28:1f:1a:c7:64:2b:fb:77:bd:75: 4d:ac:48:95:c1:72:69:2c:c2:ac:2b:87:f9:59:ee: a9:79:12:40:5c:21:ac:51:3b:c9:e0:4a:8b:9e:8f: 33:b8:9c:d5:1d:10:74:fd:64:92:ff:8f:0d:9f:d1: 2d:f8:c7:1a:86:70:80:c1:77:cc:19:87:57:bd:1d: 26:5c:5a:2d:45:37:6e:95:e7:bc:8c:17:78:40:c1: ad:30:f0:d4:86:d8:4f:41:57:03:93:f2:a0:57:71: 1f:74:68:66:74:0a:6c:06:cc:f3:9f:d0:8b:f6:e3: ce:ce:65:bd:f8:5a:49:ba:11:09:5a:c1:6c:9d:9e: a1:b1:ac:4e:3c:ab:ec:16:d5:40:c4:ce:87:e0:68: f7:2c:db:e6:9e:1b:eb:74:ff:ed:3a:b1:28:ef:b1: a1:9b:76:5a:b7:f5:a2:2b:f6:af:39:11:96:98:40: ea:38:b3:94:8a:13:6d:82:37:92:74:06:0a:da:a6: 34:a6:39:d7:42:c0:98:9e:77:00:b0:ce:e8:4e:5e: ea:9c:30:dc:38:66:7a:5f:ad:84:27:62:30:e7:48: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:D9:BF:06:11:E6:C7:A3:90:91:1F:50:94:E0:B1:5A:E9:F1:CB X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:17:d6:34:1e:c0:a3:fc:36:1b:c8:82:ab:f8:bb:5c:00:57: d3:f5:94:eb:91:d8:00:5e:c3:98:b1:57:49:fa:6d:ec:aa:6b: 5b:13:fc:79:02:4d:67:fc:24:ad:0b:fb:70:e2:31:98:98:15: 23:53:b1:f2:dc:6b:48:da:05:0f:30:aa:b3:c0:99:3e:33:21: 03:2a:c6:0a:f2:65:09:c8:66:3f:36:7f:a3:40:4b:94:97:48: 39:2e:44:b0:68:87:02:48:c0:cc:fd:c4:ff:aa:24:44:69:4d: 41:1c:53:a2:bc:24:ee:a1:46:e1:64:3a:cf:4d:0f:40:9c:0e: e9:fe:71:ad:a7:79:94:48:0b:00:bc:28:21:4f:97:a4:44:8a: 5f:c5:62:03:0e:54:e2:51:16:26:b5:3a:b6:2f:79:cc:73:6d: c2:6a:9b:64:01:8c:a1:60:df:ca:7a:1e:84:00:0c:4a:03:82: d1:fb:58:7c:82:6e:17:21:67:a7:b8:99:f1:c8:9a:1e:2f:bb: 4a:5b:ef:44:73:b7:e4:a4:0d:df:d2:bf:58:73:e8:f8:14:fe: fb:89:6e:ba:09:e0:39:d0:bb:be:53:9e:ba:06:c6:9e:36:19: 15:ab:17:74:74:8d:48:81:c6:2d:3a:22:9d:d0:dc:be:4a:dc: d5:98:53:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTExMDMwNzIwNDBaFw0yNTExMTAwNzIwNDBaMBgxFjAUBgNV BAMTDTY5MDg1N2M4LTZlYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDnAxnGfpxbi9auB5C5WBvt/sdBeEDtIVGFn8JX88kFsmtKB8ax2Qr+3e9dU2s SJXBcmkswqwrh/lZ7ql5EkBcIaxRO8ngSouejzO4nNUdEHT9ZJL/jw2f0S34xxqG cIDBd8wZh1e9HSZcWi1FN26V57yMF3hAwa0w8NSG2E9BVwOT8qBXcR90aGZ0CmwG zPOf0Iv2487OZb34Wkm6EQlawWydnqGxrE48q+wW1UDEzofgaPcs2+aeG+t0/+06 sSjvsaGbdlq39aIr9q85EZaYQOo4s5SKE22CN5J0BgrapjSmOddCwJiedwCwzuhO XuqcMNw4ZnpfrYQnYjDnSLrtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBELZvwYR 5sejkJEfUJTgsVrp8cswHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUX1jQewKP8NhvIgqv4u1wAV9P1lOuR2ABew5ixV0n6beyqa1sT/HkC TWf8JK0L+3DiMZiYFSNTsfLca0jaBQ8wqrPAmT4zIQMqxgryZQnIZj82f6NAS5SX SDkuRLBohwJIwMz9xP+qJERpTUEcU6K8JO6hRuFkOs9ND0CcDun+ca2neZRICwC8 KCFPl6REil/FYgMOVOJRFia1OrYvecxzbcJqm2QBjKFg38p6HoQADEoDgtH7WHyC bhchZ6e4mfHImh4vu0pb70Rzt+SkDd/Sv1hz6PgU/vuJbroJ4DnQu75TnroGxp42 GRWrF3R0jUiBxi06Ip3Q3L5K3NWYU3c= -----END CERTIFICATE-----Generated at Wed Nov 5 00:48:47 2025 by rpki-client