$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: UK1Z69beANi4uwUn/3YLz/3PJDSEZ0SoesGwbGsQc6Y= Subject key identifier: 46:44:7D:9A:F3:AF:FC:24:80:A9:A4:68:85:DE:96:43:82:CE:CB:68 Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 07DD Signing time: Sun 02 Nov 2025 21:07:38 +0000 Manifest this update: Sun 02 Nov 2025 21:07:37 +0000 Manifest next update: Sun 09 Nov 2025 21:07:37 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: JWDZH8U9wQYMydK9zJiXUeZ9WbNWrVdZLbpmlhJDyu4=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: FR2j5cdA1il7bWue4siZvyTa/nS4sn/xHWVg4a7OgZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: Nov 2 21:07:37 2025 GMT Not After : Nov 9 21:07:37 2025 GMT Subject: CN=6907c81a-03f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:62:d7:33:c8:78:24:d2:2f:15:82:6a:4b: 18:c4:f2:60:7a:3f:d0:43:01:ef:be:13:fe:4e:ae: d0:ce:da:81:66:a8:23:12:56:b3:d0:73:0c:82:05: a0:cc:0b:28:65:26:da:88:d3:f7:b5:0e:7c:41:75: e1:4a:43:85:d8:87:a3:29:d9:bc:32:de:2a:85:27: bb:f8:47:ee:35:c8:6d:c8:52:5f:21:2c:87:cc:a1: a8:f5:da:6e:d5:81:a7:70:db:93:ff:e4:57:81:73: 9b:a7:bc:14:bf:5a:45:bd:3a:7d:e3:df:15:2a:7f: c8:a6:c9:31:d2:e0:e5:5c:2e:f1:f8:5b:df:49:45: da:23:6d:30:42:47:01:d3:17:8b:98:26:33:62:03: fe:6d:69:22:2b:b8:f4:55:50:41:05:64:ee:a1:fc: 21:3e:d4:80:ad:33:c9:65:c5:26:19:8d:ab:74:f7: 2c:4a:b3:5a:35:3c:a2:c1:7d:db:f5:ac:5f:28:e7: de:fc:19:26:06:c3:c4:08:f1:9b:2f:a1:e7:01:bd: 53:d3:51:8e:a1:24:db:71:32:6a:d5:5d:bd:84:10: f2:31:f3:26:f6:2c:5a:08:40:61:8e:6f:d4:7e:b4: 96:d4:c3:37:de:a4:fd:1a:12:76:67:7f:60:31:7f: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:44:7D:9A:F3:AF:FC:24:80:A9:A4:68:85:DE:96:43:82:CE:CB:68 X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:cb:f6:a6:69:9a:88:c4:f0:4e:ca:96:39:c4:b1:dd:a2: 85:fd:b1:ea:bd:73:8c:b6:63:b0:7d:c8:08:d9:5e:4a:a5:78: d7:fe:2f:2c:f2:bf:99:4c:8c:02:38:cb:79:61:05:17:54:bc: 80:ef:09:47:1d:fa:c2:54:fb:74:34:3b:38:55:73:59:57:5f: 59:6f:41:6c:b2:4b:a1:a4:38:c6:17:31:32:cc:a4:f2:2d:42: 8f:95:73:cb:47:98:10:75:4a:6a:92:9d:85:b9:6c:f4:63:69: 5e:42:fd:b9:f3:19:df:9d:e8:e0:7d:b7:26:4c:02:a7:6b:14: bb:3a:40:ca:5c:74:07:7c:64:b7:66:45:3b:bb:3b:6a:5a:2b: 0e:cc:5a:24:49:b4:7c:92:39:77:6f:cd:c4:8c:29:f0:88:e1: eb:37:5c:89:9e:61:87:55:80:5e:62:d6:ff:f1:ca:12:8a:d2: db:51:52:86:2a:60:f9:b3:2d:08:78:1e:8e:26:94:2c:f1:c0: 89:09:c9:24:5c:ff:92:ae:c5:f1:b9:0c:06:45:00:f0:a5:b6: db:59:88:f4:ce:27:9f:f0:56:78:84:4c:e7:e8:31:e0:3d:94: 26:8f:2f:6e:51:28:7a:a5:72:9f:89:ba:f8:6a:7e:7e:df:bb: c8:01:6f:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUxMTAyMjEwNzM3WhcNMjUxMTA5MjEwNzM3WjAYMRYwFAYD VQQDEw02OTA3YzgxYS0wM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXBi1zPIeCTSLxWCaksYxPJgej/QQwHvvhP+Tq7QztqBZqgjElaz0HMMggWg zAsoZSbaiNP3tQ58QXXhSkOF2IejKdm8Mt4qhSe7+EfuNchtyFJfISyHzKGo9dpu 1YGncNuT/+RXgXObp7wUv1pFvTp9498VKn/Ipskx0uDlXC7x+FvfSUXaI20wQkcB 0xeLmCYzYgP+bWkiK7j0VVBBBWTuofwhPtSArTPJZcUmGY2rdPcsSrNaNTyiwX3b 9axfKOfe/BkmBsPECPGbL6HnAb1T01GOoSTbcTJq1V29hBDyMfMm9ixaCEBhjm/U frSW1MM33qT9GhJ2Z39gMX+qmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZEfZrz r/wkgKmkaIXelkOCzstoMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpEcv2pmmaiMTwTsqWOcSx3aKF/bHqvXOMtmOwfcgI2V5KpXjX/i8s 8r+ZTIwCOMt5YQUXVLyA7wlHHfrCVPt0NDs4VXNZV19Zb0FsskuhpDjGFzEyzKTy LUKPlXPLR5gQdUpqkp2FuWz0Y2leQv258xnfnejgfbcmTAKnaxS7OkDKXHQHfGS3 ZkU7uztqWisOzFokSbR8kjl3b83EjCnwiOHrN1yJnmGHVYBeYtb/8coSitLbUVKG KmD5sy0IeB6OJpQs8cCJCckkXP+SrsXxuQwGRQDwpbbbWYj0zief8FZ4hEzn6DHg PZQmjy9uUSh6pXKfibr4an5+37vIAW90 -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:15 2025 by rpki-client