$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft File: atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json) Hash identifier: lgh9YtB4YEQkdLkJc00SXBe8xpkboup6PjJG2bLXS84= Subject key identifier: C2:C4:FD:94:54:8B:ED:5F:98:DE:2F:85:04:92:8D:E8:1C:1D:F8:7C Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98 Certificate issuer: /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698 Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft Manifest number: 066F Signing time: Tue 04 Nov 2025 22:36:34 +0000 Manifest this update: Tue 04 Nov 2025 22:36:34 +0000 Manifest next update: Tue 11 Nov 2025 22:36:34 +0000 Files and hashes: 1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: w4Ainnb4vXodrFTaYg8wiV1E0IsYczqA5lGVYwAKsVc=) 2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: YIXSyV44XhAG1Lj7gtWc38+2l5HR5ltRFiBGyckO8MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698 Validity Not Before: Nov 4 22:36:34 2025 GMT Not After : Nov 11 22:36:34 2025 GMT Subject: CN=690a7ff2-e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:3c:db:6b:0f:26:ed:75:f4:fc:c5:98:52: 8d:57:15:f3:05:78:21:04:cb:7d:d5:d0:07:60:07: bb:d2:ce:39:c2:f6:84:8d:6e:f6:d2:d4:6f:6b:65: 4b:86:b4:d6:d5:68:b5:26:74:b1:ae:f5:57:94:03: 28:bc:5b:14:ec:5a:ed:d7:d5:3b:72:ad:03:21:06: ed:a5:ad:94:8c:b6:77:23:3e:5c:e4:0c:6b:4d:b7: ec:5b:89:0e:43:6a:ba:ab:03:bd:24:0e:10:57:39: 85:cc:de:ef:c4:4e:d5:55:6c:ca:f3:60:35:e7:0a: 0a:df:ca:19:59:62:40:2f:45:0a:de:e3:1f:d4:c4: f6:77:cb:39:54:84:cb:08:cd:44:a3:53:67:87:cb: cb:60:0c:4b:3e:81:38:8e:c6:db:de:af:50:12:1d: bc:72:78:c4:5b:ad:ec:44:7b:8d:16:ac:1e:c8:c4: 2c:2f:f7:0c:bd:be:c2:dd:a9:0d:ec:38:41:eb:66: 6e:4d:d3:76:a6:4d:c1:66:6b:d7:0a:19:1e:fc:e3: fb:30:93:ec:a1:6a:99:bb:04:96:16:f3:ce:60:d9: 48:c2:93:cd:03:28:85:00:c6:d9:d1:1b:12:93:63: 44:04:dc:c9:7c:ea:04:aa:bf:1f:ea:4a:cd:ab:13: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:FD:94:54:8B:ED:5F:98:DE:2F:85:04:92:8D:E8:1C:1D:F8:7C X509v3 Authority Key Identifier: keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:47:c8:85:3f:67:ca:34:5c:b0:9c:b7:3a:96:fb:97:10:9c: f5:c2:96:d3:4b:76:05:2e:5c:2a:cc:ce:6f:03:31:50:24:dd: 73:65:d9:16:00:38:c4:61:37:f5:4b:62:ce:c5:36:84:12:23: de:fc:36:c6:3b:e4:3c:e9:90:1f:ef:3f:87:3a:1b:3a:f9:b7: 42:d4:3f:f8:28:4d:da:a6:0f:25:dc:55:b1:ae:f7:92:10:aa: 08:fd:84:10:34:a7:d0:64:c0:5c:42:ae:7c:87:50:18:f8:72: 4b:53:70:68:72:4b:9a:07:3e:a6:11:c8:87:2d:c9:8b:91:32: 53:f0:e2:cc:79:2e:85:7d:3c:25:3d:70:86:5e:bd:c6:94:54: 50:e8:0c:94:2c:60:c6:2a:bd:fa:ce:0f:b6:56:18:0a:67:98: da:33:a7:3f:4f:c9:a7:64:2d:60:7d:d4:13:1d:be:5b:22:65: b0:2f:9b:61:45:07:e6:3f:2c:6c:15:44:80:be:fa:c7:72:df: 42:f9:54:4b:a6:82:b2:42:8a:ee:1f:0f:b3:75:68:b6:0a:62: 8e:bc:c0:52:76:17:82:da:c2:cc:32:e3:d0:33:dc:e3:a9:05: 88:dd:48:33:c7:99:1a:32:b5:f2:30:13:f8:e9:b6:a5:7a:03: 39:a7:e3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2QjMxMTAvBgNVBAUTKDZBRDU4QjJDMzIzRUY0MEZDMDg5NDBCMTQ2MDdEMDg2 OTVDRTg2OTgwHhcNMjUxMTA0MjIzNjM0WhcNMjUxMTExMjIzNjM0WjAYMRYwFAYD VQQDEw02OTBhN2ZmMi1lODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB4822sPJu119PzFmFKNVxXzBXghBMt91dAHYAe70s45wvaEjW720tRva2VL hrTW1Wi1JnSxrvVXlAMovFsU7Frt19U7cq0DIQbtpa2UjLZ3Iz5c5AxrTbfsW4kO Q2q6qwO9JA4QVzmFzN7vxE7VVWzK82A15woK38oZWWJAL0UK3uMf1MT2d8s5VITL CM1Eo1Nnh8vLYAxLPoE4jsbb3q9QEh28cnjEW63sRHuNFqweyMQsL/cMvb7C3akN 7DhB62ZuTdN2pk3BZmvXChke/OP7MJPsoWqZuwSWFvPOYNlIwpPNAyiFAMbZ0RsS k2NEBNzJfOoEqr8f6krNqxMf7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLE/ZRU i+1fmN4vhQSSjegcHfh8MB8GA1UdIwQYMBaAFGrViywyPvQPwIlAsUYH0IaVzoaY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZCMy83MjQzRUI5RTlC NjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlBX0FpVUN4UmdmUWhwWE9o cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0V0xMREktOUFfQWlVQ3hSZ2ZRaHBYT2hwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZCMy83MjQzRUI5RTlCNjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlB X0FpVUN4UmdmUWhwWE9ocGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOR8iFP2fKNFywnLc6lvuXEJz1wpbTS3YFLlwqzM5vAzFQJN1zZdkW ADjEYTf1S2LOxTaEEiPe/DbGO+Q86ZAf7z+HOhs6+bdC1D/4KE3apg8l3FWxrveS EKoI/YQQNKfQZMBcQq58h1AY+HJLU3BockuaBz6mEciHLcmLkTJT8OLMeS6FfTwl PXCGXr3GlFRQ6AyULGDGKr36zg+2VhgKZ5jaM6c/T8mnZC1gfdQTHb5bImWwL5th RQfmPyxsFUSAvvrHct9C+VRLpoKyQoruHw+zdWi2CmKOvMBSdheC2sLMMuPQM9zj qQWI3Ugzx5kaMrXyMBP46balegM5p+Oz -----END CERTIFICATE-----Generated at Wed Nov 5 11:38:32 2025 by rpki-client