$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft File: wUIqDEz_JI1Rc1jr33tOgCuswOc.mft (raw, json) Hash identifier: x1c2ZjEuam+g2y3pTP5G2rpJbhjkIB9zcZUbCsPiwhA= Subject key identifier: 75:E6:4A:45:66:90:75:0D:26:9C:5A:A5:39:79:E1:C6:2F:87:FF:F4 Authority key identifier: C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 Certificate issuer: /CN=A91EB45A/serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft Manifest number: 34E1 Signing time: Tue 04 Nov 2025 15:07:52 +0000 Manifest this update: Tue 04 Nov 2025 15:07:52 +0000 Manifest next update: Tue 11 Nov 2025 15:07:52 +0000 Files and hashes: 1: wUIqDEz_JI1Rc1jr33tOgCuswOc.crl (hash: E1XxJl/2Sgtozjp6PqMiACD7Wx24sOPbngoKgL5vkZE=) 2: 17BB4C20F17E11EAA3CC597BC4F9AE02.roa (hash: sb92Yiu1DkaA/Jlw4YPyCeHs7T2hutc7NkpwUwObZxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB45A, serialNumber=C1422A0C4CFF248D517358EBDF7B4E802BACC0E7 Validity Not Before: Nov 4 15:07:52 2025 GMT Not After : Nov 11 15:07:52 2025 GMT Subject: CN=690a16c8-dfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:70:78:e7:7b:bd:a7:58:8d:d7:a6:2e:9c: 91:ce:d6:bf:87:9d:d3:8c:5a:7b:b9:41:37:79:8d: 34:b8:b8:3b:e0:8e:82:2d:4d:b1:60:ce:f3:bb:48: b1:77:8f:47:23:78:53:72:de:7f:02:89:5e:68:e1: 51:2e:3c:0b:94:aa:4e:65:8e:42:a4:23:8a:30:0a: 19:55:95:ed:8e:57:7a:52:48:12:f3:0e:ee:73:dc: 65:a0:ce:00:71:e6:8b:bc:91:73:a5:1f:36:e5:68: 52:9e:18:7b:4e:63:01:f5:9a:96:22:81:4d:c8:49: ba:48:a0:3a:9e:9a:8e:c0:47:c0:29:a7:08:ec:bf: 73:9a:bc:b5:dd:c8:d4:5d:b0:2c:a6:dd:40:cd:df: dc:bc:6f:97:9c:1c:57:19:45:0f:e9:d3:be:f3:20: e0:8b:46:d9:02:f8:76:8a:dd:7b:4a:37:71:62:24: 21:7d:ab:0e:1b:d8:e3:78:4d:b1:5c:84:28:a8:6d: d6:76:c5:9e:1f:4d:f1:f6:b9:61:9e:cb:cc:2f:bb: 80:25:4e:69:a9:ad:f3:bc:d6:23:15:30:a9:fe:c0: f1:bd:a7:4b:c8:15:d1:2e:72:50:df:cc:a1:74:8e: 22:1f:05:56:06:eb:e9:21:87:d2:ec:68:d1:ea:0d: 8b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E6:4A:45:66:90:75:0D:26:9C:5A:A5:39:79:E1:C6:2F:87:FF:F4 X509v3 Authority Key Identifier: keyid:C1:42:2A:0C:4C:FF:24:8D:51:73:58:EB:DF:7B:4E:80:2B:AC:C0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUIqDEz_JI1Rc1jr33tOgCuswOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB45A/1E448A481DA111E29F56079308B02CD2/wUIqDEz_JI1Rc1jr33tOgCuswOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:60:f1:24:76:67:50:49:ac:2b:4b:1a:e4:2b:96:39:51:aa: da:e9:dd:06:b2:bf:01:39:a6:a1:a8:a0:7c:ae:87:e8:2b:1f: 02:14:aa:50:b1:2d:c7:9f:eb:84:ea:ee:26:b6:ad:15:59:d3: 28:1b:11:d1:02:69:39:83:bd:76:a2:89:d6:a7:73:90:e6:b4: 70:19:7c:af:04:52:30:56:93:2d:3b:6f:c5:9d:50:6c:87:89: f7:c7:05:59:4b:69:83:7c:4b:e2:e3:f0:29:a7:c6:8b:a8:b1: 91:55:0a:d6:53:a9:a5:8c:f0:97:9c:4d:00:61:e4:c5:72:a9: 48:ef:4b:3e:e6:a2:cb:f4:d9:c3:c1:b0:da:b6:23:b5:6c:d1: d7:11:c9:62:36:9c:ee:88:b7:5f:ad:96:df:66:ec:af:0d:c3: 5c:b2:ec:00:98:ce:89:a3:b5:0c:6e:69:d5:79:6a:03:2b:cd: 20:0f:6b:f4:94:e2:f4:28:2f:52:83:ec:be:28:b2:ec:44:6a: 09:05:ae:7f:41:03:73:e5:13:71:c6:e1:89:87:f2:59:8f:c3: d2:ba:0f:6f:e8:ca:f6:c5:54:f2:2b:09:95:48:b4:88:6e:f2: 00:b1:a1:d9:d3:83:41:3c:65:70:fc:68:bf:70:61:be:11:18: d2:d8:a7:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NUExMTAvBgNVBAUTKEMxNDIyQTBDNENGRjI0OEQ1MTczNThFQkRGN0I0RTgw MkJBQ0MwRTcwHhcNMjUxMTA0MTUwNzUyWhcNMjUxMTExMTUwNzUyWjAYMRYwFAYD VQQDEw02OTBhMTZjOC1kZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TJweOd7vadYjdemLpyRzta/h53TjFp7uUE3eY00uLg74I6CLU2xYM7zu0ix d49HI3hTct5/AoleaOFRLjwLlKpOZY5CpCOKMAoZVZXtjld6UkgS8w7uc9xloM4A ceaLvJFzpR825WhSnhh7TmMB9ZqWIoFNyEm6SKA6npqOwEfAKacI7L9zmry13cjU XbAspt1Azd/cvG+XnBxXGUUP6dO+8yDgi0bZAvh2it17SjdxYiQhfasOG9jjeE2x XIQoqG3WdsWeH03x9rlhnsvML7uAJU5pqa3zvNYjFTCp/sDxvadLyBXRLnJQ38yh dI4iHwVWBuvpIYfS7GjR6g2LOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXmSkVm kHUNJpxapTl54cYvh//0MB8GA1UdIwQYMBaAFMFCKgxM/ySNUXNY6997ToArrMDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ1QS8xRTQ0OEE0ODFE QTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJMVJjMWpyMzN0T2dDdXN3 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVSXFERXpfSkkxUmMxanIzM3RPZ0N1c3dPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ1QS8xRTQ0OEE0ODFEQTExMUUyOUY1NjA3OTMwOEIwMkNEMi93VUlxREV6X0pJ MVJjMWpyMzN0T2dDdXN3T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7YPEkdmdQSawrSxrkK5Y5Uara6d0Gsr8BOaahqKB8rofoKx8CFKpQ sS3Hn+uE6u4mtq0VWdMoGxHRAmk5g712oonWp3OQ5rRwGXyvBFIwVpMtO2/FnVBs h4n3xwVZS2mDfEvi4/App8aLqLGRVQrWU6mljPCXnE0AYeTFcqlI70s+5qLL9NnD wbDatiO1bNHXEcliNpzuiLdfrZbfZuyvDcNcsuwAmM6Jo7UMbmnVeWoDK80gD2v0 lOL0KC9Sg+y+KLLsRGoJBa5/QQNz5RNxxuGJh/JZj8PSug9v6Mr2xVTyKwmVSLSI bvIAsaHZ04NBPGVw/Gi/cGG+ERjS2Kfb -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:53 2025 by rpki-client