$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json) Hash identifier: 4AT3fagRc4aLFU+iIkq+BxPAGL0kqWPHpRpOzvjqK50= Subject key identifier: 9C:A7:57:ED:AC:A5:36:5F:45:C0:60:29:DD:72:97:F9:B1:9F:C8:EF Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 193C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft Manifest number: 1933 Signing time: Tue 04 Nov 2025 16:31:35 +0000 Manifest this update: Tue 04 Nov 2025 16:31:35 +0000 Manifest next update: Tue 11 Nov 2025 16:31:35 +0000 Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: JXqZw1GNBx67EoSxgtVOJwOoze2jsYE1MGqkHLdP/Fc=) 2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: yM+bb0tbw3lI4O8r0K9h632lO1j6QVkb8a+ZzJmYzqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6460 (0x193c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Nov 4 16:31:35 2025 GMT Not After : Nov 11 16:31:35 2025 GMT Subject: CN=690a2a67-f631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:46:a1:39:90:0c:51:4c:ae:21:42:51:f0: da:51:30:72:10:9c:b1:e2:4b:b7:01:55:db:af:6c: 02:61:65:48:35:2c:f7:cf:49:28:1d:f8:1e:ca:73: 58:30:f5:4c:f4:15:2f:30:ab:99:aa:80:40:12:87: aa:49:04:2f:ac:de:fd:36:41:b4:86:90:2b:05:33: a5:c0:60:13:89:fe:be:e5:85:bd:8e:00:db:fa:2b: da:6c:38:e5:e4:fd:33:eb:79:ef:bc:45:64:76:a2: 34:2d:30:d0:68:f1:8d:4d:d9:4d:fa:aa:ec:a2:7c: 75:e1:6e:42:36:36:b7:0e:7c:8e:a7:92:88:80:6f: 6a:fa:69:a3:60:cd:21:26:08:7d:c3:97:1f:36:fd: 65:d7:42:e4:63:a6:f9:36:59:92:99:2b:71:40:d4: 50:1a:8c:06:67:cd:0c:6a:b0:91:e7:6c:8f:92:86: 44:3e:27:14:81:92:43:6f:68:d3:72:49:fc:51:2d: 20:43:61:09:dc:94:f7:6f:d8:b2:41:0a:1a:26:a7: 4f:0e:98:24:ac:30:2b:72:43:1d:9c:63:48:21:10: f3:2c:b2:9c:cc:a5:eb:f4:77:f6:7a:94:c6:fd:fc: 1d:75:de:c1:74:61:89:67:e8:ff:65:04:c4:77:5c: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A7:57:ED:AC:A5:36:5F:45:C0:60:29:DD:72:97:F9:B1:9F:C8:EF X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:01:e1:04:7d:97:fa:60:07:9b:24:2d:53:b7:dd:84:23:1d: 9e:85:59:27:04:4a:be:ca:16:36:bc:8c:d3:4b:b8:3e:e9:9c: 48:9a:a9:52:c0:f8:60:58:58:d5:db:c8:c4:f0:1d:1b:0c:0d: f6:9c:b1:9e:93:f0:88:5f:52:fd:ad:27:ff:5c:48:f4:a8:76: 68:1d:f1:95:63:ce:51:de:1d:5b:67:2c:c4:4d:52:18:f6:5b: ab:7f:eb:ad:86:78:ae:fe:a6:f9:14:ee:98:2b:8a:02:55:24: 74:61:d7:89:e2:9c:6e:05:5b:0a:40:eb:c1:74:9a:30:82:2f: 57:83:41:44:c3:b8:6a:e7:35:03:12:9b:66:de:1d:c9:86:e0: ea:6d:63:11:6c:0b:ab:71:c6:6f:b7:24:f5:32:89:63:a6:8a: 4b:e4:94:07:ec:10:95:fd:f5:1c:0c:8a:db:41:93:5e:ec:db: ff:2b:d7:b9:52:11:6c:3e:26:be:67:47:35:1c:6b:b1:31:af: 5a:e0:b4:e9:7f:00:63:60:c9:da:66:ec:fd:09:c3:f4:22:bc: 51:f3:4f:ba:e5:76:da:08:18:47:b9:0a:bc:c5:e9:04:52:75: 5c:d9:42:5e:7f:97:f1:b1:55:89:0f:bf:b6:88:ed:49:f0:d6: bb:99:2b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjUxMTA0MTYzMTM1WhcNMjUxMTExMTYzMTM1WjAYMRYwFAYD VQQDEw02OTBhMmE2Ny1mNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVlGoTmQDFFMriFCUfDaUTByEJyx4ku3AVXbr2wCYWVINSz3z0koHfgeynNY MPVM9BUvMKuZqoBAEoeqSQQvrN79NkG0hpArBTOlwGATif6+5YW9jgDb+ivabDjl 5P0z63nvvEVkdqI0LTDQaPGNTdlN+qrsonx14W5CNja3DnyOp5KIgG9q+mmjYM0h Jgh9w5cfNv1l10LkY6b5NlmSmStxQNRQGowGZ80MarCR52yPkoZEPicUgZJDb2jT ckn8US0gQ2EJ3JT3b9iyQQoaJqdPDpgkrDArckMdnGNIIRDzLLKczKXr9Hf2epTG /fwddd7BdGGJZ+j/ZQTEd1wvdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJynV+2s pTZfRcBgKd1yl/mxn8jvMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t SU9zSnFyTGVyV0EwdUNqcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfAeEEfZf6YAebJC1Tt92EIx2ehVknBEq+yhY2vIzTS7g+6ZxImqlS wPhgWFjV28jE8B0bDA32nLGek/CIX1L9rSf/XEj0qHZoHfGVY85R3h1bZyzETVIY 9lurf+uthniu/qb5FO6YK4oCVSR0YdeJ4pxuBVsKQOvBdJowgi9Xg0FEw7hq5zUD Eptm3h3JhuDqbWMRbAurccZvtyT1MoljpopL5JQH7BCV/fUcDIrbQZNe7Nv/K9e5 UhFsPia+Z0c1HGuxMa9a4LTpfwBjYMnaZuz9CcP0IrxR80+65XbaCBhHuQq8xekE UnVc2UJef5fxsVWJD7+2iO1J8Na7mSul -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:21 2025 by rpki-client