$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: U5ZPu/bdUve0zNQvG8lOwYNTXxTRAHmcuAHH9/zC6UA= Subject key identifier: 94:03:92:1B:9B:C8:B1:BC:E7:27:AD:21:8B:F2:EA:F9:FA:58:26:DD Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0B4B Signing time: Tue 04 Nov 2025 19:19:10 +0000 Manifest this update: Tue 04 Nov 2025 19:19:09 +0000 Manifest next update: Tue 11 Nov 2025 19:19:09 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: GPzbB80O11lJnUtYhDmWv5zDhsG1XsDjgCjZOGhdbfM=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Nov 4 19:19:09 2025 GMT Not After : Nov 11 19:19:09 2025 GMT Subject: CN=690a51ae-76a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:cf:a1:64:1c:46:b0:c1:31:67:e9:a7:6c: 9f:a4:b1:b1:8f:eb:19:51:ec:06:43:b1:73:44:ad: 75:73:bf:64:9d:e0:f2:6f:eb:b9:e4:85:70:1a:e3: 80:85:15:92:fc:85:ae:28:93:1b:81:2a:0c:d7:ea: b3:89:60:cf:d0:91:d1:91:e9:01:df:cb:7c:77:e8: 55:c8:b8:a6:16:0b:17:67:db:5d:d9:8c:f1:42:71: 77:9d:9d:64:d1:8b:4e:77:c3:c8:37:51:a5:92:06: 32:96:24:d2:af:17:20:10:b4:a2:ba:ff:da:3e:b2: 2b:95:f8:8d:f7:23:7e:20:81:c3:a0:ad:20:e2:7d: 42:06:f1:33:6e:1a:80:68:b7:10:c1:44:52:5a:ac: 59:86:9c:2f:40:24:60:a3:33:50:de:3c:a5:e5:c5: 07:37:c7:8d:a2:35:9b:00:3d:e8:8c:13:35:65:d8: 0b:fd:68:53:73:30:bc:4e:53:3c:31:d2:7c:06:60: 08:9c:6c:f6:c1:74:90:60:2e:0c:37:4a:59:af:27: 37:72:54:00:d8:53:97:4f:c1:f0:61:00:99:ee:46: 2a:c2:ae:26:bc:bb:c0:e9:30:e0:6e:fd:16:ae:f2: 64:9e:84:9b:e5:d3:90:98:64:5f:2a:0a:30:4d:a8: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:92:1B:9B:C8:B1:BC:E7:27:AD:21:8B:F2:EA:F9:FA:58:26:DD X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b2:ce:bf:15:bd:c2:2c:fd:e2:3c:b0:9d:06:bd:7c:74:70: a9:5b:07:d3:41:8c:87:d2:7c:ea:67:2c:2b:e6:0c:07:7e:32: ab:01:d9:57:8c:77:d6:1c:91:01:ab:2b:fc:db:10:ea:2c:97: 27:e4:eb:a1:5d:5a:f8:ce:3f:b2:80:86:6c:62:92:d3:cf:c8: 7c:43:6c:5c:91:87:29:a1:88:ec:6b:1f:a3:69:98:31:af:59: 73:e6:1e:2f:fa:ba:00:38:68:a5:dd:5f:11:25:24:2b:ba:cc: 96:60:6a:5c:7a:a7:89:d4:db:a6:cc:40:f1:5d:7f:83:a8:6f: 05:09:14:d2:43:13:46:b0:e8:94:e2:2b:bf:8c:38:5a:85:a9: 28:80:68:8e:91:ae:17:e6:5a:75:8f:16:9f:9d:bb:d3:79:d9: 83:09:76:a7:38:6a:cb:e0:46:5c:09:ac:98:2d:a0:72:69:b3: c2:6a:b8:e8:f1:e9:a9:6e:a5:47:de:ce:2e:db:1d:84:2a:4d: a2:d2:c7:63:14:30:b1:2d:88:71:b9:7c:be:52:8e:fc:36:2f: 01:2b:27:78:9c:9a:03:ad:0a:f1:37:65:61:21:85:95:0f:a3: b4:11:9b:a4:89:6d:76:a0:e0:b3:ee:2c:d7:23:c6:3f:67:74: ae:75:64:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUxMTA0MTkxOTA5WhcNMjUxMTExMTkxOTA5WjAYMRYwFAYD VQQDEw02OTBhNTFhZS03NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL7PoWQcRrDBMWfpp2yfpLGxj+sZUewGQ7FzRK11c79kneDyb+u55IVwGuOA hRWS/IWuKJMbgSoM1+qziWDP0JHRkekB38t8d+hVyLimFgsXZ9td2YzxQnF3nZ1k 0YtOd8PIN1GlkgYyliTSrxcgELSiuv/aPrIrlfiN9yN+IIHDoK0g4n1CBvEzbhqA aLcQwURSWqxZhpwvQCRgozNQ3jyl5cUHN8eNojWbAD3ojBM1ZdgL/WhTczC8TlM8 MdJ8BmAInGz2wXSQYC4MN0pZryc3clQA2FOXT8HwYQCZ7kYqwq4mvLvA6TDgbv0W rvJknoSb5dOQmGRfKgowTajbywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQDkhub yLG85yetIYvy6vn6WCbdMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLss6/Fb3CLP3iPLCdBr18dHCpWwfTQYyH0nzqZywr5gwHfjKrAdlX jHfWHJEBqyv82xDqLJcn5OuhXVr4zj+ygIZsYpLTz8h8Q2xckYcpoYjsax+jaZgx r1lz5h4v+roAOGil3V8RJSQrusyWYGpceqeJ1NumzEDxXX+DqG8FCRTSQxNGsOiU 4iu/jDhahakogGiOka4X5lp1jxafnbvTedmDCXanOGrL4EZcCayYLaByabPCarjo 8empbqVH3s4u2x2EKk2i0sdjFDCxLYhxuXy+Uo78Ni8BKyd4nJoDrQrxN2VhIYWV D6O0EZukiW12oOCz7izXI8Y/Z3SudWTW -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:29 2025 by rpki-client