$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: RGKoitVNa7YGF6DH2Ch881G+cVJ3TFjYDIlLGyPPykw= Subject key identifier: F2:90:0E:33:03:30:84:16:7B:0A:6E:67:79:CF:73:6F:D3:16:FF:64 Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: 0214 Signing time: Wed 05 Nov 2025 02:24:49 +0000 Manifest this update: Wed 05 Nov 2025 02:24:48 +0000 Manifest next update: Wed 12 Nov 2025 02:24:48 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: ZXI5gJcEQ0mpK5VSfEqs3gPDkIa2TdOOTYjd5PKg5aI=) 2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: oOyEu7HdLHeRDgmI/hlcMUg6eiIlRVxLKBMf9ShkBXw=) 3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: gHzhXWPrMjpB1xHZWRltAYhKlgAf5L30L7o2Q9t3Hyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Nov 5 02:24:48 2025 GMT Not After : Nov 12 02:24:48 2025 GMT Subject: CN=690ab571-966d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e4:1d:a6:a5:fc:e5:f3:92:64:e0:65:bd:af: 67:1d:a1:1b:ba:88:77:bd:31:d6:eb:16:b8:50:88: a6:5c:63:6a:c6:67:db:c5:82:e9:b1:23:d9:cc:c2: 38:d3:55:36:22:4b:6c:80:7d:72:8f:73:91:e6:fd: e7:d7:3e:36:2b:7f:3f:5d:c3:b6:7c:ec:78:10:d1: b0:c7:22:a4:36:22:6d:2f:e3:fa:9d:26:56:36:33: b8:95:10:e6:e9:d7:0f:df:7b:6b:f6:f0:e5:29:92: 83:16:7e:82:41:c4:99:54:c9:a4:15:76:f4:c3:80: 95:41:3f:b8:32:0a:d0:ef:fa:15:c4:31:19:bc:0e: d8:58:eb:ab:f8:ce:6b:38:cc:03:6c:1d:1b:f9:7d: 6d:69:84:7e:aa:7e:40:cc:f8:06:0a:c3:a1:8d:19: 25:75:9f:f8:db:87:27:b9:eb:0b:3b:c6:cf:f6:eb: b5:11:d4:c3:78:e0:13:cf:01:8a:08:72:95:33:e7: fc:e3:b4:c4:fd:da:9d:b6:1e:84:ce:ec:08:59:c2: 85:a8:0f:49:d4:86:49:c7:8e:5f:3d:2c:21:d6:35: 6b:ee:62:35:d4:9d:f3:6a:1e:14:5f:ef:43:6d:3c: 72:ce:3b:1e:f1:44:76:33:e6:7b:c9:a5:2a:99:28: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:90:0E:33:03:30:84:16:7B:0A:6E:67:79:CF:73:6F:D3:16:FF:64 X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b7:33:9a:d0:07:dc:dd:bd:d1:e4:79:a3:81:fd:9a:3f:36: 5d:39:ce:8d:5b:9d:2e:b7:96:ec:5c:57:eb:79:8f:fb:4b:5e: a8:68:5e:66:b1:41:3c:74:1d:b9:f3:1f:8c:08:95:5e:57:4b: a3:f5:85:d2:10:09:68:9d:42:69:3e:de:50:ca:2e:4d:22:61: a8:72:ad:3f:4c:f0:d8:db:76:f1:3a:84:8f:2d:12:00:c8:a3: cc:16:33:a3:2b:fb:45:e5:1a:e4:cc:dd:2f:a0:ea:b0:87:ab: d8:1b:4c:74:8f:66:f9:a1:8c:06:bd:49:74:a6:40:06:b8:c1: 45:60:ed:97:a8:da:b1:81:6b:f0:35:87:99:d3:07:c5:cd:f3: 93:98:b3:99:e5:7d:71:07:b5:9c:e6:39:3f:11:f4:6a:41:ec: 38:76:79:d1:60:ef:a6:1e:6b:a2:bb:5a:ef:33:12:ed:c6:36: a0:6b:d1:77:55:39:69:0b:55:27:4b:69:40:cf:6a:47:0f:6c: 55:bc:68:01:c4:83:7e:dc:42:b0:11:2d:eb:5f:0f:b4:7b:29: ed:a4:14:27:42:89:b3:5d:d4:13:1c:1a:81:80:39:e4:31:e7: c8:24:04:5f:d4:0e:be:e6:ec:d1:84:56:1f:f3:c8:ed:6b:65: 66:83:13:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUxMTA1MDIyNDQ4WhcNMjUxMTEyMDIyNDQ4WjAYMRYwFAYD VQQDEw02OTBhYjU3MS05NjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eQdpqX85fOSZOBlva9nHaEbuoh3vTHW6xa4UIimXGNqxmfbxYLpsSPZzMI4 01U2IktsgH1yj3OR5v3n1z42K38/XcO2fOx4ENGwxyKkNiJtL+P6nSZWNjO4lRDm 6dcP33tr9vDlKZKDFn6CQcSZVMmkFXb0w4CVQT+4MgrQ7/oVxDEZvA7YWOur+M5r OMwDbB0b+X1taYR+qn5AzPgGCsOhjRkldZ/424cnuesLO8bP9uu1EdTDeOATzwGK CHKVM+f847TE/dqdth6EzuwIWcKFqA9J1IZJx45fPSwh1jVr7mI11J3zah4UX+9D bTxyzjse8UR2M+Z7yaUqmSjM/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKQDjMD MIQWewpuZ3nPc2/TFv9kMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBntzOa0Afc3b3R5Hmjgf2aPzZdOc6NW50ut5bsXFfreY/7S16oaF5m sUE8dB258x+MCJVeV0uj9YXSEAlonUJpPt5Qyi5NImGocq0/TPDY23bxOoSPLRIA yKPMFjOjK/tF5RrkzN0voOqwh6vYG0x0j2b5oYwGvUl0pkAGuMFFYO2XqNqxgWvw NYeZ0wfFzfOTmLOZ5X1xB7Wc5jk/EfRqQew4dnnRYO+mHmuiu1rvMxLtxjaga9F3 VTlpC1UnS2lAz2pHD2xVvGgBxIN+3EKwES3rXw+0eyntpBQnQomzXdQTHBqBgDnk MefIJARf1A6+5uzRhFYf88jta2VmgxNd -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:28 2025 by rpki-client