$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft File: WuYzaTnqj177KiHkMGc_gMzVBVo.mft (raw, json) Hash identifier: 487N5w52TYfna/zPvQ1OWuq0fPqkRzW17cqam0e21Ho= Subject key identifier: 1E:B4:BB:58:C6:BD:F9:82:3F:59:C3:A4:0D:DC:24:16:21:74:B1:EA Authority key identifier: 5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A Certificate issuer: /CN=A91BB6DE/serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft Manifest number: 0866 Signing time: Sun 02 Nov 2025 22:32:15 +0000 Manifest this update: Sun 02 Nov 2025 22:32:15 +0000 Manifest next update: Sun 09 Nov 2025 22:32:15 +0000 Files and hashes: 1: WuYzaTnqj177KiHkMGc_gMzVBVo.crl (hash: IdEnw5czQ56NT9aveQmx7yIlzQOja7GRWxpNt5spcas=) 2: FB47EC14C6B011EDAF5BEF4AC4F9AE02.roa (hash: Jae4zNS7emLW9efU6dooaK3X57ZozB+vUZsfQgGmkgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6DE, serialNumber=5AE6336939EA8F5EFB2A21E430673F80CCD5055A Validity Not Before: Nov 2 22:32:15 2025 GMT Not After : Nov 9 22:32:15 2025 GMT Subject: CN=6907dbef-3d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:93:5c:51:a3:77:68:b7:92:f9:f5:20:7f:88: 3d:84:ef:6b:49:0a:e0:b2:3f:a7:45:94:07:d6:da: f0:14:48:1a:dd:aa:48:0e:4d:bf:6a:89:2f:6a:9f: d0:24:1d:e7:29:20:ac:92:25:d6:37:c4:63:98:81: 16:ce:2c:d5:67:ba:32:e5:a4:d1:9d:d5:da:64:82: 7f:2a:5a:ab:4f:3f:26:ae:fe:01:cf:24:74:3e:0a: 07:ee:03:ad:74:7e:e4:09:c2:63:dd:24:d4:91:ff: 71:86:bd:e7:6b:67:7a:8e:fa:b6:55:b4:53:4c:99: 4f:eb:17:07:48:43:0e:c3:1f:b3:27:e0:6d:12:09: e0:e9:1d:f7:b8:f6:18:a1:99:bf:ae:a9:43:24:34: 35:df:6c:4a:25:c6:ad:aa:8f:c7:98:7c:28:a0:22: 83:87:c1:e1:7f:a5:1e:8b:af:9e:73:93:36:fe:28: bf:31:7a:34:5f:e8:96:f0:f2:97:23:ac:b3:9e:ff: c6:8d:85:99:64:f1:e1:04:c2:3f:80:30:ba:70:b3: 2c:8d:e4:7f:0d:76:4e:d8:d8:53:0d:ff:b4:f5:e2: 61:50:94:32:43:b7:1a:d4:eb:e6:eb:ff:e6:47:c9: 10:da:f7:4e:d6:7c:b6:7b:08:ff:a3:49:38:9d:a6: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B4:BB:58:C6:BD:F9:82:3F:59:C3:A4:0D:DC:24:16:21:74:B1:EA X509v3 Authority Key Identifier: keyid:5A:E6:33:69:39:EA:8F:5E:FB:2A:21:E4:30:67:3F:80:CC:D5:05:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuYzaTnqj177KiHkMGc_gMzVBVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/WuYzaTnqj177KiHkMGc_gMzVBVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:15:6b:14:29:53:93:b0:2b:fc:3e:e8:16:47:77:38:44:85: 67:6b:aa:b0:6f:cc:fd:19:19:46:ec:36:0a:9f:ff:97:d4:3f: 46:50:fc:72:cd:2e:92:7e:8c:96:3e:cd:a1:4f:8a:8a:62:bd: d8:72:c2:7d:30:2d:94:ef:d3:4a:d1:ce:bd:c5:e8:db:fd:e2: eb:9e:15:42:a2:85:c4:77:f6:e0:11:20:c3:55:42:47:57:45: c8:52:31:69:27:e1:8c:27:4f:1a:04:3b:8b:75:7e:86:11:32: 4d:10:a5:43:53:d3:72:13:d7:75:f8:d5:bb:70:24:6c:0f:37: 48:63:e7:bc:7b:d4:81:9d:37:c9:b2:eb:18:68:fa:b6:32:69: 59:9a:aa:62:cd:26:2c:8c:0e:ea:cf:7e:1f:4f:53:49:ac:9e: 92:f8:39:b3:ab:41:86:a5:70:3f:ca:9a:93:0c:81:ed:9f:43: ff:93:a3:d4:ad:80:ac:55:26:a6:29:4b:a9:e5:51:bd:4d:51: eb:c6:98:36:80:90:f4:ab:e6:d0:6a:63:1a:b7:85:70:5a:f4: 12:7a:15:e9:be:8c:1f:b0:93:47:12:cb:51:01:fa:2c:21:22: f1:82:65:09:e8:74:39:73:5a:6a:d6:c1:ca:ae:40:d0:43:32: 05:5e:f0:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2REUxMTAvBgNVBAUTKDVBRTYzMzY5MzlFQThGNUVGQjJBMjFFNDMwNjczRjgw Q0NENTA1NUEwHhcNMjUxMTAyMjIzMjE1WhcNMjUxMTA5MjIzMjE1WjAYMRYwFAYD VQQDEw02OTA3ZGJlZi0zZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55NcUaN3aLeS+fUgf4g9hO9rSQrgsj+nRZQH1trwFEga3apIDk2/aokvap/Q JB3nKSCskiXWN8RjmIEWzizVZ7oy5aTRndXaZIJ/KlqrTz8mrv4BzyR0PgoH7gOt dH7kCcJj3STUkf9xhr3na2d6jvq2VbRTTJlP6xcHSEMOwx+zJ+BtEgng6R33uPYY oZm/rqlDJDQ132xKJcatqo/HmHwooCKDh8Hhf6Uei6+ec5M2/ii/MXo0X+iW8PKX I6yznv/GjYWZZPHhBMI/gDC6cLMsjeR/DXZO2NhTDf+09eJhUJQyQ7ca1Ovm6//m R8kQ2vdO1ny2ewj/o0k4naY5kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB60u1jG vfmCP1nDpA3cJBYhdLHqMB8GA1UdIwQYMBaAFFrmM2k56o9e+yoh5DBnP4DM1QVa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZERS9BNTNBQjc0QzlD MzgxMUVCODFCRTE1NjBDNEY5QUUwMi9XdVl6YVRucWoxNzdLaUhrTUdjX2dNelZC Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1WXphVG5xajE3N0tpSGtNR2NfZ016VkJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZERS9BNTNBQjc0QzlDMzgxMUVCODFCRTE1NjBDNEY5QUUwMi9XdVl6YVRucWox NzdLaUhrTUdjX2dNelZCVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbFWsUKVOTsCv8PugWR3c4RIVna6qwb8z9GRlG7DYKn/+X1D9GUPxy zS6SfoyWPs2hT4qKYr3YcsJ9MC2U79NK0c69xejb/eLrnhVCooXEd/bgESDDVUJH V0XIUjFpJ+GMJ08aBDuLdX6GETJNEKVDU9NyE9d1+NW7cCRsDzdIY+e8e9SBnTfJ susYaPq2MmlZmqpizSYsjA7qz34fT1NJrJ6S+Dmzq0GGpXA/ypqTDIHtn0P/k6PU rYCsVSamKUup5VG9TVHrxpg2gJD0q+bQamMat4VwWvQSehXpvowfsJNHEstRAfos ISLxgmUJ6HQ5c1pq1sHKrkDQQzIFXvBu -----END CERTIFICATE-----Generated at Tue Nov 4 15:55:45 2025 by rpki-client