$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json) Hash identifier: SqvgF1yNJVqVJlkB6e36wcOD0yH/koYXLMm5btx44vo= Subject key identifier: 53:5B:C1:6F:D0:25:FC:73:BB:C4:F2:88:21:C5:EA:CE:98:76:10:3D Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Certificate serial: 0F1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft Manifest number: 0F14 Signing time: Tue 04 Nov 2025 17:42:00 +0000 Manifest this update: Tue 04 Nov 2025 17:41:59 +0000 Manifest next update: Tue 11 Nov 2025 17:41:59 +0000 Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: Rt4CPrUA0UPuUGpyzm04vA8LEq7kwNULjwtL5f/3Eos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3868 (0xf1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Validity Not Before: Nov 4 17:41:59 2025 GMT Not After : Nov 11 17:41:59 2025 GMT Subject: CN=690a3ae8-d1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d8:ea:39:e0:c9:dd:e4:49:eb:93:c1:a8:a2: bd:6e:65:f8:1f:9e:0f:a5:b2:05:35:58:11:63:27: da:3b:8a:a4:47:03:3a:ee:20:e0:9c:70:ba:90:fc: eb:f5:1a:95:66:86:f0:35:95:21:ad:23:c6:d8:35: 90:9c:67:c8:62:a0:fc:5d:32:c4:06:a4:21:3a:09: ca:71:39:26:80:cd:76:58:ca:85:2c:96:a6:6b:b7: 78:5e:ef:6f:50:54:2a:e0:fe:4c:b1:51:7b:c8:db: 47:65:90:7e:64:b7:83:69:9e:12:a9:73:5e:0b:cb: a9:c4:28:96:20:ad:5c:e6:2a:44:94:89:64:5a:af: c6:17:97:11:45:d2:27:78:1d:53:f2:93:12:76:d7: f5:7f:76:12:52:cb:a1:b6:59:c3:cb:af:a4:e4:56: 75:0f:4e:34:ee:47:07:f4:36:8f:4e:f6:dd:be:ab: 09:fb:b2:38:d1:15:99:21:00:8b:46:89:fd:20:fd: 47:95:c1:70:5e:6a:a5:fb:93:f3:cc:24:38:09:4c: df:ac:2c:88:c0:cd:84:57:8c:c8:b4:2e:e0:af:d5: 2a:aa:68:b7:20:d8:ce:06:1f:64:71:f7:de:68:15: fa:f0:21:32:6d:c0:66:e2:13:df:1e:a0:61:3b:89: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:C1:6F:D0:25:FC:73:BB:C4:F2:88:21:C5:EA:CE:98:76:10:3D X509v3 Authority Key Identifier: keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:16:e3:14:3e:1e:ea:28:bd:57:2e:3d:99:ee:06:97:32:1f: ad:89:7f:81:15:f4:9d:d9:3d:14:6d:ab:b6:5f:d8:88:04:5b: 5e:f5:25:be:25:9c:80:ad:dd:5f:df:62:32:45:13:b5:e6:24: 03:d8:01:5a:e8:9b:10:6b:48:bf:41:47:d7:e2:d0:24:9f:ad: c2:f3:26:62:50:1c:63:4b:42:95:3d:00:e1:be:35:83:b2:93: 94:c3:7d:82:11:b8:0e:1b:e9:c7:e9:92:f8:7b:bd:d1:9e:16: 55:60:e2:cb:fc:da:b4:4e:ed:b5:60:51:35:22:13:e5:71:3a: 39:f4:d5:ad:e4:42:f0:a2:0b:cc:68:7c:f1:55:64:c9:38:47: 0a:e4:a3:2f:37:27:97:e1:cf:80:c6:36:0e:5c:ec:2b:e9:d9: 1c:70:32:64:df:41:10:0d:01:b3:82:f6:1f:da:c4:12:40:27: 42:8a:5e:df:69:5e:68:2d:96:84:57:74:c1:84:2e:70:76:2d: c6:cf:5d:ce:8a:f3:25:af:22:26:3e:25:31:1c:cb:78:52:25: b1:25:16:af:f4:d6:ef:9d:62:4c:e9:e0:59:33:23:fe:4f:50: 06:b8:88:70:16:fd:2e:4b:67:30:98:33:b0:24:28:3f:f3:e5: bd:e3:71:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC MEQxNjhCQ0MwHhcNMjUxMTA0MTc0MTU5WhcNMjUxMTExMTc0MTU5WjAYMRYwFAYD VQQDEw02OTBhM2FlOC1kMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09jqOeDJ3eRJ65PBqKK9bmX4H54PpbIFNVgRYyfaO4qkRwM67iDgnHC6kPzr 9RqVZobwNZUhrSPG2DWQnGfIYqD8XTLEBqQhOgnKcTkmgM12WMqFLJama7d4Xu9v UFQq4P5MsVF7yNtHZZB+ZLeDaZ4SqXNeC8upxCiWIK1c5ipElIlkWq/GF5cRRdIn eB1T8pMSdtf1f3YSUsuhtlnDy6+k5FZ1D0407kcH9DaPTvbdvqsJ+7I40RWZIQCL Ron9IP1HlcFwXmql+5PzzCQ4CUzfrCyIwM2EV4zItC7gr9Uqqmi3INjOBh9kcffe aBX68CEybcBm4hPfHqBhO4l4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFNbwW/Q Jfxzu8TyiCHF6s6YdhA9MB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4 MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkFuMUPh7qKL1XLj2Z7gaXMh+tiX+BFfSd2T0Ubau2X9iIBFte9SW+ JZyArd1f32IyRRO15iQD2AFa6JsQa0i/QUfX4tAkn63C8yZiUBxjS0KVPQDhvjWD spOUw32CEbgOG+nH6ZL4e73RnhZVYOLL/Nq0Tu21YFE1IhPlcTo59NWt5ELwogvM aHzxVWTJOEcK5KMvNyeX4c+AxjYOXOwr6dkccDJk30EQDQGzgvYf2sQSQCdCil7f aV5oLZaEV3TBhC5wdi3Gz13OivMlryImPiUxHMt4UiWxJRav9NbvnWJM6eBZMyP+ T1AGuIhwFv0uS2cwmDOwJCg/8+W943EK -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:42 2025 by rpki-client