$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: SvJ6gR9TSQtOKmHsJEEG17y3KYuk4edPUlTrXgLt5MY= Subject key identifier: 61:3A:77:6C:60:04:99:AF:91:67:BA:02:53:A9:1A:0B:7A:01:8A:24 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 089E Signing time: Tue 04 Nov 2025 20:38:07 +0000 Manifest this update: Tue 04 Nov 2025 20:38:07 +0000 Manifest next update: Tue 11 Nov 2025 20:38:07 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: 2ZJCOONNkOWKsRYZnTM2eaWacFi69+uj/lTFaJqgOuw=) 2: 097FE948B5D411F0B0C6A940C4F9AE02.roa (hash: KP2R1m2iHAsNa4Z3YCVwK/8wK6Mg0zZi0OmDMYURiVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Nov 4 20:38:07 2025 GMT Not After : Nov 11 20:38:07 2025 GMT Subject: CN=690a642f-dd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bb:e0:d2:e4:a2:d2:44:a2:65:7e:db:30:ce: ad:ef:2c:32:8c:53:cb:4b:9d:98:22:ca:77:13:f5: e3:1e:90:7b:31:3c:80:fa:b2:f4:a3:32:cb:a1:e6: 94:c4:64:de:50:f7:4f:c5:62:51:5f:eb:3a:fd:d8: d8:5f:5e:37:51:2f:b9:c0:07:bd:d0:ac:fe:7e:a5: e3:85:d6:f7:e8:20:10:97:1c:ce:7b:d7:7f:36:78: 17:4f:6c:7f:ef:0a:1a:7a:01:c6:1c:a7:ca:45:92: ec:89:ed:79:df:0c:07:a3:39:81:e3:a8:63:76:bb: 0c:09:b3:3b:f5:ba:b4:7e:8d:ab:af:d5:31:3d:2d: e2:81:a7:df:4d:c3:1c:8f:ce:27:2e:09:c4:61:ec: c5:b0:8b:7a:00:df:76:8b:c6:04:22:61:49:48:0b: 82:a2:7d:cc:59:5e:83:ec:9f:62:26:a9:dc:e3:73: b8:8e:e2:1d:3b:68:8b:ef:df:59:87:73:fd:5c:cf: b2:99:15:ff:cd:12:49:9e:67:d7:41:c8:09:83:32: e1:bc:68:7d:bb:a4:e1:ef:24:e4:1e:e0:17:22:20: d5:04:8d:d4:bb:be:01:8f:57:9f:dc:99:ef:b7:11: a2:d5:f6:a9:0c:ee:b3:11:64:25:2c:21:96:94:4b: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3A:77:6C:60:04:99:AF:91:67:BA:02:53:A9:1A:0B:7A:01:8A:24 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f7:37:9f:8e:d6:8e:8a:fa:42:39:47:f2:73:27:3b:e6:0e: 3a:57:bd:87:75:26:fe:80:a9:fc:12:e4:35:83:7e:35:f2:e8: 30:0e:a8:bb:8d:47:11:79:45:3a:65:39:ef:97:eb:eb:85:91: 8a:e5:35:a6:f5:a2:5a:04:f6:aa:34:d9:d7:8f:7f:cd:81:16: 3a:fd:9a:fe:03:84:34:b9:93:71:66:ac:87:33:47:8c:b0:26: ca:ac:f7:59:15:07:88:f8:10:9d:b9:e9:9d:f9:64:8f:16:21: f1:98:14:a8:db:dd:c9:a1:84:ac:68:92:1f:a7:7d:32:64:ce: 9f:a6:89:56:21:ff:8c:7c:f2:c0:5b:c6:a0:f5:1d:15:27:11: db:16:5a:48:fa:2f:5b:f1:00:e5:dc:f7:4d:c5:8d:2c:f6:aa: 85:5c:38:78:8d:18:a9:9f:ea:b4:f1:4d:ca:4c:ce:14:f9:2c: 67:8d:1a:c1:ee:b0:37:d5:e9:ab:50:65:57:b9:d7:6e:4d:c9: 31:28:d4:53:3d:d8:af:ca:bc:45:72:da:88:f5:32:b5:ca:70: c1:18:9a:84:9a:81:b4:72:af:89:b2:c6:cd:6e:3e:55:a1:f9: 7a:57:a5:56:38:bd:e0:0b:9f:7c:e1:16:85:88:cc:6e:bd:66: 69:80:9f:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUxMTA0MjAzODA3WhcNMjUxMTExMjAzODA3WjAYMRYwFAYD VQQDEw02OTBhNjQyZi1kZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrvg0uSi0kSiZX7bMM6t7ywyjFPLS52YIsp3E/XjHpB7MTyA+rL0ozLLoeaU xGTeUPdPxWJRX+s6/djYX143US+5wAe90Kz+fqXjhdb36CAQlxzOe9d/NngXT2x/ 7woaegHGHKfKRZLsie153wwHozmB46hjdrsMCbM79bq0fo2rr9UxPS3igaffTcMc j84nLgnEYezFsIt6AN92i8YEImFJSAuCon3MWV6D7J9iJqnc43O4juIdO2iL799Z h3P9XM+ymRX/zRJJnmfXQcgJgzLhvGh9u6Th7yTkHuAXIiDVBI3Uu74Bj1ef3Jnv txGi1fapDO6zEWQlLCGWlEsQGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGE6d2xg BJmvkWe6AlOpGgt6AYokMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS9zefjtaOivpCOUfycyc75g46V72HdSb+gKn8EuQ1g3418ugwDqi7 jUcReUU6ZTnvl+vrhZGK5TWm9aJaBPaqNNnXj3/NgRY6/Zr+A4Q0uZNxZqyHM0eM sCbKrPdZFQeI+BCduemd+WSPFiHxmBSo293JoYSsaJIfp30yZM6fpolWIf+MfPLA W8ag9R0VJxHbFlpI+i9b8QDl3PdNxY0s9qqFXDh4jRipn+q08U3KTM4U+SxnjRrB 7rA31emrUGVXudduTckxKNRTPdivyrxFctqI9TK1ynDBGJqEmoG0cq+JssbNbj5V ofl6V6VWOL3gC5984RaFiMxuvWZpgJ8r -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:19 2025 by rpki-client