$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: KmW5Qg/1lhq1sLKj1RP3fEwpNUYT1wFTgyMdykHEuv0= Subject key identifier: CC:2D:4E:2F:EC:D7:6E:17:ED:4E:6E:18:59:E0:48:B6:B2:B4:A0:A8 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 09F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 09D6 Signing time: Sun 02 Nov 2025 19:55:57 +0000 Manifest this update: Sun 02 Nov 2025 19:55:57 +0000 Manifest next update: Sun 09 Nov 2025 19:55:56 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: ldrKlVbGQogiqQnqH/DMCQ64gaURTMgqTdOW4r61dlI=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Nov 2 19:55:57 2025 GMT Not After : Nov 9 19:55:56 2025 GMT Subject: CN=6907b74d-52a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:c9:a4:86:4b:a0:37:54:7a:fa:32:c1:4b: c4:04:ce:36:71:1e:1d:2a:17:88:54:1d:25:8f:ed: ac:27:88:7d:c7:91:e9:11:b8:34:32:bc:1e:9e:78: 21:bc:f7:a1:5c:b2:7d:b8:42:c2:8d:56:22:e4:db: 63:45:b5:62:96:e1:4d:e0:a2:83:36:18:ca:5e:ba: c2:e1:02:06:a3:50:07:79:01:b9:e4:c4:62:18:68: 39:c9:1b:3a:9c:42:bc:de:27:1e:e5:ad:17:02:bd: 02:b1:22:4f:5e:a1:47:ac:fb:b4:44:21:c7:6a:bb: da:4f:fe:ab:09:7a:51:38:99:97:ff:73:ad:ea:ff: d5:9c:bc:bb:58:77:5d:de:cc:ce:c6:a6:4c:89:4b: b9:ff:0e:21:f6:40:27:a7:b2:85:c2:2f:a5:f4:73: e0:2a:09:f6:17:b5:2e:50:39:8d:55:c8:56:25:e1: 6e:d1:30:79:66:88:b7:b7:8f:2e:ab:b0:18:7a:1c: 62:06:e7:c0:d2:6d:54:84:14:65:62:c9:e5:a1:0d: 8b:51:44:c9:66:8e:04:cc:56:6a:b9:cb:34:2f:a3: 3b:65:13:22:27:84:95:43:a8:2c:b6:90:54:37:1b: ea:11:80:83:75:4e:5a:ce:1f:6a:f6:1d:7a:1b:db: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2D:4E:2F:EC:D7:6E:17:ED:4E:6E:18:59:E0:48:B6:B2:B4:A0:A8 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:97:e5:90:a5:9f:04:e6:ce:8a:9f:a6:c4:55:07:3a:d1:8f: 8f:1b:13:cb:48:a4:1e:9d:35:1f:10:d6:cc:3c:dc:40:56:c2: a1:5f:66:2d:8a:7e:1e:47:0e:eb:8e:f1:84:4e:17:4a:f8:c0: df:8b:73:f0:1f:fc:28:94:80:3a:30:0c:bf:97:df:41:be:7f: 34:87:96:50:46:41:96:2a:e2:fe:c1:53:95:97:ca:a9:eb:d2: ee:71:dc:26:71:24:42:21:9a:f6:43:04:d5:16:90:d6:c8:e0: 14:5e:f2:a3:2f:9a:71:2a:c0:52:71:6f:00:a7:4e:f6:7a:7f: 29:8c:97:63:cf:37:14:18:70:38:57:0b:04:07:a4:d0:87:3d: 1f:cb:39:0d:0e:d9:1a:c1:08:b9:f7:0e:77:f5:7a:1b:de:bf: a0:02:11:f8:6a:58:f4:72:38:d4:36:7a:e6:da:d5:44:ca:9c: 82:45:26:32:bb:c3:b3:78:05:cd:52:ee:8e:a0:17:fc:4a:29: 57:f7:e1:f4:86:8e:d0:5f:aa:c9:34:62:fe:5e:11:2f:56:13: 5e:9f:81:99:60:4c:e7:13:85:c6:4f:5c:80:6f:15:87:25:bc: c2:2d:32:59:0f:fc:af:92:59:84:21:9f:76:cc:0c:a3:00:bb: 1d:19:22:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUxMTAyMTk1NTU3WhcNMjUxMTA5MTk1NTU2WjAYMRYwFAYD VQQDEw02OTA3Yjc0ZC01MmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFTJpIZLoDdUevoywUvEBM42cR4dKheIVB0lj+2sJ4h9x5HpEbg0Mrwenngh vPehXLJ9uELCjVYi5NtjRbViluFN4KKDNhjKXrrC4QIGo1AHeQG55MRiGGg5yRs6 nEK83ice5a0XAr0CsSJPXqFHrPu0RCHHarvaT/6rCXpROJmX/3Ot6v/VnLy7WHdd 3szOxqZMiUu5/w4h9kAnp7KFwi+l9HPgKgn2F7UuUDmNVchWJeFu0TB5Zoi3t48u q7AYehxiBufA0m1UhBRlYsnloQ2LUUTJZo4EzFZqucs0L6M7ZRMiJ4SVQ6gstpBU NxvqEYCDdU5azh9q9h16G9ulMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwtTi/s 124X7U5uGFngSLaytKCoMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpl+WQpZ8E5s6Kn6bEVQc60Y+PGxPLSKQenTUfENbMPNxAVsKhX2Yt in4eRw7rjvGEThdK+MDfi3PwH/wolIA6MAy/l99Bvn80h5ZQRkGWKuL+wVOVl8qp 69LucdwmcSRCIZr2QwTVFpDWyOAUXvKjL5pxKsBScW8Ap072en8pjJdjzzcUGHA4 VwsEB6TQhz0fyzkNDtkawQi59w539Xob3r+gAhH4alj0cjjUNnrm2tVEypyCRSYy u8OzeAXNUu6OoBf8SilX9+H0ho7QX6rJNGL+XhEvVhNen4GZYEznE4XGT1yAbxWH JbzCLTJZD/yvklmEIZ92zAyjALsdGSKl -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:48 2025 by rpki-client