$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: ejKxFDX7aqLvixIl2pL/gy6D/Jced/6m4oLmMcebZpI= Subject key identifier: B0:3D:2C:CA:6D:B5:77:F0:3A:67:EE:F5:25:E8:BB:38:95:41:E9:84 Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 1515 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 19BA Signing time: Tue 04 Nov 2025 16:55:50 +0000 Manifest this update: Tue 04 Nov 2025 16:55:49 +0000 Manifest next update: Tue 11 Nov 2025 16:55:49 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: gNBoB4NriPRkM7C6BzMEMttYxvzFciI1obLYRw6VLs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5397 (0x1515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Nov 4 16:55:49 2025 GMT Not After : Nov 11 16:55:49 2025 GMT Subject: CN=690a3015-96b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:82:67:db:c6:f5:d5:7d:f8:07:e9:76:c3: 5f:1d:b4:ed:94:5a:62:33:6b:65:65:26:62:30:28: 96:cc:6b:38:d2:33:9b:38:68:e6:7d:6f:0a:fb:0d: 66:e6:de:54:dc:d3:91:f3:e4:ca:72:8a:08:c3:25: 43:b1:ac:7d:b0:e9:3e:fd:92:e8:76:e6:91:50:e9: a8:1f:93:54:7d:f4:d9:76:2c:fa:29:a0:99:9b:b1: 18:c6:e2:36:30:78:7f:c9:9f:bf:4e:aa:dd:c3:c0: 8a:10:e7:43:07:52:36:09:e1:2e:28:b1:d4:18:ff: 08:43:34:7b:22:71:70:c7:1e:fc:e5:f4:f3:fe:c7: 00:5d:48:20:0d:22:ca:f0:9d:fc:26:34:48:8f:3c: 1a:82:b2:a0:12:df:60:df:72:ef:ba:42:96:7d:02: 2d:83:36:43:d3:a7:7a:66:e9:02:74:ad:9a:8c:6c: 97:e9:a6:42:f7:3d:ff:6f:b9:a2:50:5b:f9:26:18: 8b:c0:f8:7c:2e:01:86:3e:c9:de:00:7c:85:3f:38: 60:c6:91:d2:82:43:bb:08:c7:42:4a:3f:b1:bd:f2: 1d:c9:5a:17:2a:76:5c:6a:b3:df:7d:32:26:32:cc: ff:64:d6:24:e2:94:0b:db:f5:98:fa:24:7f:2b:b9: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3D:2C:CA:6D:B5:77:F0:3A:67:EE:F5:25:E8:BB:38:95:41:E9:84 X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:48:de:08:cd:52:d9:50:97:d4:ed:a9:bd:4d:b8:e5:55:2f: 80:f1:d0:15:1f:b8:60:9b:03:00:61:08:8f:7e:cb:dd:01:f0: de:67:0e:66:01:85:6e:58:9a:af:1e:fd:f9:a5:08:96:20:62: e2:64:cf:5f:8a:a8:bf:ce:33:21:63:5a:34:69:81:06:33:df: 66:36:8e:13:06:f4:24:cf:97:44:39:6d:10:61:db:bf:dc:4d: dc:e6:ee:4a:75:bd:2f:45:0b:4a:c8:6f:dd:cb:5c:85:69:b7: e3:83:69:ca:ec:be:a8:70:df:2f:ad:3f:06:08:bc:3d:6a:09: 7a:1b:aa:7b:bc:96:5e:13:b4:ae:fe:00:6e:67:7f:1b:f1:05: c1:01:ff:99:d7:ad:8d:14:90:bd:80:81:7b:05:a5:8c:7d:4b: f1:31:63:4c:e8:59:a0:c1:5e:8f:62:99:15:7d:dc:76:08:8a: a6:13:03:58:bb:54:a2:fe:33:dc:c5:65:b7:42:fe:14:bf:25: 34:19:8e:05:71:02:e5:27:20:66:2c:ec:81:a7:4f:67:b1:5b: bb:27:d9:b2:e9:8d:96:1d:ee:c0:f6:c2:e2:28:57:bc:32:58: 4f:41:ce:da:04:9d:7a:99:fa:26:5b:1e:85:68:9a:6a:b3:7a: 0d:51:96:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUxMTA0MTY1NTQ5WhcNMjUxMTExMTY1NTQ5WjAYMRYwFAYD VQQDEw02OTBhMzAxNS05NmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEiCZ9vG9dV9+AfpdsNfHbTtlFpiM2tlZSZiMCiWzGs40jObOGjmfW8K+w1m 5t5U3NOR8+TKcooIwyVDsax9sOk+/ZLoduaRUOmoH5NUffTZdiz6KaCZm7EYxuI2 MHh/yZ+/Tqrdw8CKEOdDB1I2CeEuKLHUGP8IQzR7InFwxx785fTz/scAXUggDSLK 8J38JjRIjzwagrKgEt9g33LvukKWfQItgzZD06d6ZukCdK2ajGyX6aZC9z3/b7mi UFv5JhiLwPh8LgGGPsneAHyFPzhgxpHSgkO7CMdCSj+xvfIdyVoXKnZcarPffTIm Msz/ZNYk4pQL2/WY+iR/K7kENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA9LMpt tXfwOmfu9SXouziVQemEMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOSN4IzVLZUJfU7am9TbjlVS+A8dAVH7hgmwMAYQiPfsvdAfDeZw5m AYVuWJqvHv35pQiWIGLiZM9fiqi/zjMhY1o0aYEGM99mNo4TBvQkz5dEOW0QYdu/ 3E3c5u5Kdb0vRQtKyG/dy1yFabfjg2nK7L6ocN8vrT8GCLw9agl6G6p7vJZeE7Su /gBuZ38b8QXBAf+Z162NFJC9gIF7BaWMfUvxMWNM6FmgwV6PYpkVfdx2CIqmEwNY u1Si/jPcxWW3Qv4UvyU0GY4FcQLlJyBmLOyBp09nsVu7J9my6Y2WHe7A9sLiKFe8 MlhPQc7aBJ16mfomWx6FaJpqs3oNUZYj -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:23 2025 by rpki-client