$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: yi8dJcEi11SSNRO6Dg/v86gGBH/D+WQUSdQv4VZDTbQ= Subject key identifier: 66:DE:A3:4D:CC:3E:78:3A:F5:C9:3A:09:1A:9E:DC:F0:4B:42:5C:A0 Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 018E Signing time: Wed 05 Nov 2025 03:44:02 +0000 Manifest this update: Wed 05 Nov 2025 03:44:02 +0000 Manifest next update: Wed 12 Nov 2025 03:44:02 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: H6Q/Pix4EJBRzinYcigLtMkAQPl7BN2fPYAE3gkZiSI=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 4: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Nov 5 03:44:02 2025 GMT Not After : Nov 12 03:44:02 2025 GMT Subject: CN=690ac802-adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:98:92:5a:90:db:eb:93:05:6d:52:cc:6c:07: c8:6a:54:c2:ee:ef:e1:76:52:bf:17:de:b2:6c:ef: 4a:a8:b2:01:84:0b:fd:19:85:cf:7b:af:50:18:02: ab:2c:d6:d9:1b:f0:77:ca:a3:ac:da:39:ec:52:f9: cc:93:e3:16:ef:0b:22:a8:47:a2:85:80:d2:be:b4: b0:a7:a6:86:ea:4c:33:0b:04:73:e8:ba:cd:a2:ff: be:ce:74:8c:a9:24:c8:8b:b7:64:39:c7:a8:58:ee: 38:7d:41:5d:67:f3:00:93:90:5c:09:76:56:36:b4: 48:3c:67:1b:56:e6:f9:b6:8b:0e:cb:08:d1:e7:00: a2:c0:16:d8:f4:9c:c2:56:6e:45:f8:a2:e0:52:3c: 22:e4:d7:db:d9:9b:c3:1d:d1:f4:bb:5f:db:9f:50: e9:26:e5:56:a0:91:fb:a2:f9:57:e4:d0:a4:43:fa: 58:28:39:ea:bf:91:19:bc:6e:b4:79:1b:b2:1d:40: ed:fd:21:df:02:78:a6:71:d2:a5:0e:34:32:67:84: b3:ac:cd:51:ea:37:34:5f:d5:d1:fe:f9:3d:2d:e4: 9c:da:69:e7:bd:35:c9:cd:de:ee:20:de:a1:87:fd: d5:e4:04:ab:e9:a9:51:ee:8b:22:13:fa:25:69:96: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DE:A3:4D:CC:3E:78:3A:F5:C9:3A:09:1A:9E:DC:F0:4B:42:5C:A0 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:fd:16:d8:23:00:84:0c:ab:62:a6:57:a3:59:bd:37:8b: cc:94:a5:0e:d1:95:84:d5:ae:b4:fb:c5:6b:a8:8b:0d:d8:cd: 81:6b:c7:fb:81:c4:be:be:c0:a8:b2:cb:95:dd:15:f4:e4:62: 9f:a3:c8:55:53:20:61:14:27:3f:08:a7:39:9f:86:49:e7:16: b0:c8:c4:41:76:0f:20:09:ae:48:94:1b:1e:19:6a:47:2f:91: d0:c0:6d:81:30:3b:cb:a3:ab:9f:03:69:7a:ab:9a:1d:de:8a: 54:82:91:d9:56:7f:21:eb:30:97:cd:82:8d:58:1a:d4:fc:ab: b8:ad:31:29:14:9d:87:97:c6:b4:a9:fc:e8:35:70:0a:3f:b3: 18:a2:10:44:31:a3:18:38:b7:e3:fb:01:91:55:47:85:30:e2: e2:b9:62:18:14:b1:fe:d5:f4:5a:44:76:94:c9:70:ce:21:2e: b1:01:d8:35:7a:24:96:3a:30:f8:81:4c:a9:76:5f:c5:0a:40: f9:49:53:2c:42:1b:6b:5b:55:60:48:38:9d:00:8b:fb:82:77: 22:cc:e8:1f:42:96:8e:9f:f1:20:d7:eb:00:79:7f:fd:37:f2: ab:7b:d0:23:ac:23:34:0b:2f:8b:b9:09:f6:24:17:18:ec:d7: bb:df:4a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUxMTA1MDM0NDAyWhcNMjUxMTEyMDM0NDAyWjAYMRYwFAYD VQQDEw02OTBhYzgwMi1hZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpiSWpDb65MFbVLMbAfIalTC7u/hdlK/F96ybO9KqLIBhAv9GYXPe69QGAKr LNbZG/B3yqOs2jnsUvnMk+MW7wsiqEeihYDSvrSwp6aG6kwzCwRz6LrNov++znSM qSTIi7dkOceoWO44fUFdZ/MAk5BcCXZWNrRIPGcbVub5tosOywjR5wCiwBbY9JzC Vm5F+KLgUjwi5Nfb2ZvDHdH0u1/bn1DpJuVWoJH7ovlX5NCkQ/pYKDnqv5EZvG60 eRuyHUDt/SHfAnimcdKlDjQyZ4SzrM1R6jc0X9XR/vk9LeSc2mnnvTXJzd7uIN6h h/3V5ASr6alR7osiE/olaZaUnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbeo03M Png69ck6CRqe3PBLQlygMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4HP0W2CMAhAyrYqZXo1m9N4vMlKUO0ZWE1a60+8VrqIsN2M2Ba8f7 gcS+vsCossuV3RX05GKfo8hVUyBhFCc/CKc5n4ZJ5xawyMRBdg8gCa5IlBseGWpH L5HQwG2BMDvLo6ufA2l6q5od3opUgpHZVn8h6zCXzYKNWBrU/Ku4rTEpFJ2Hl8a0 qfzoNXAKP7MYohBEMaMYOLfj+wGRVUeFMOLiuWIYFLH+1fRaRHaUyXDOIS6xAdg1 eiSWOjD4gUypdl/FCkD5SVMsQhtrW1VgSDidAIv7gncizOgfQpaOn/Eg1+sAeX/9 N/Kre9AjrCM0Cy+LuQn2JBcY7Ne730rt -----END CERTIFICATE-----Generated at Wed Nov 5 06:51:44 2025 by rpki-client