$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: 7BPAsmA9udrptrT3inMdUDEtA37mSQapRllCB6GuQ2U= Subject key identifier: C6:F0:A7:E7:D7:CC:8D:B1:67:C2:FB:1C:6C:10:0E:8B:77:7A:50:15 Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 0802 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 07FC Signing time: Tue 04 Nov 2025 21:05:54 +0000 Manifest this update: Tue 04 Nov 2025 21:05:54 +0000 Manifest next update: Tue 11 Nov 2025 21:05:54 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: /rBJWnwkbJDhI/WPlIq4ZAFwMJfNoZln1q7ehYQLjWo=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: j533qWfQDQ1HymyH0hgMDgvytaiHKZxrVSfT2G+RT2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Nov 4 21:05:54 2025 GMT Not After : Nov 11 21:05:54 2025 GMT Subject: CN=690a6ab2-e061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e2:e3:fa:9b:69:d1:89:47:d5:2e:8d:90:df: 21:03:5f:14:d5:64:cf:d4:a8:15:03:9a:a2:e2:86: 84:ad:9b:78:5f:a3:03:a1:61:66:3b:59:92:e7:12: 43:22:46:e6:43:c7:df:0d:51:ee:f9:23:96:20:fd: d6:62:52:63:7c:6d:17:10:28:e1:9a:ae:77:52:a6: f6:da:cc:83:e6:17:5d:8f:74:82:a6:df:ab:b2:19: 4b:fc:8a:4c:e2:a7:a3:27:39:3c:82:df:0f:9b:bf: f6:89:e7:e2:c1:fb:c8:53:a5:26:f8:a9:7f:e9:73: e8:b1:7d:46:96:24:c4:9d:23:1f:83:52:fe:9e:a0: 0e:ed:1c:dc:7e:9b:4e:f0:24:b0:49:0c:88:ad:f2: 4c:02:d6:4c:8b:71:3e:49:bf:ae:b8:a9:61:eb:09: 41:ca:b3:b0:da:2b:f4:d8:0c:2e:12:9c:16:ca:df: 20:74:f6:37:d6:13:2b:49:1c:ca:22:ff:85:f5:d1: a6:23:8f:48:56:3d:92:14:14:af:e8:21:ac:5d:8f: a9:81:3d:54:00:45:1a:51:15:83:fe:1d:ad:95:d6: 54:6a:55:e1:46:42:7a:aa:b9:09:d9:b6:5b:1f:89: d2:48:a3:42:9a:cb:f8:b6:1f:f6:96:e1:98:65:b6: 8a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F0:A7:E7:D7:CC:8D:B1:67:C2:FB:1C:6C:10:0E:8B:77:7A:50:15 X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:18:63:e4:bf:cb:e5:cd:fd:f1:82:fe:3d:c8:3a:c8:42:43: a3:23:25:13:87:04:f5:da:c7:9a:54:22:c5:56:b8:b6:26:d3: e9:6b:f9:d7:59:e9:9a:09:de:c3:24:ca:b4:35:3b:07:8e:01: 06:8f:06:75:5f:6c:a0:69:db:78:3d:32:a2:f7:fe:03:36:f8: a4:ec:d8:78:b9:f0:cf:42:8e:2b:07:0a:4c:b1:78:78:1c:b7: 0d:50:84:d3:b3:3c:3b:c3:54:62:75:b0:c9:9e:e5:72:3b:19: 7f:e4:0e:0d:e7:3e:1b:68:60:8a:c1:ee:cf:27:2c:bd:94:cd: 80:68:78:48:52:d7:9d:08:9c:66:c7:54:c6:50:7f:60:01:e0: 3e:d6:6d:c0:01:4c:f9:13:f1:7c:4c:fc:59:0c:f2:9e:71:de: 94:94:e4:59:dc:f7:f3:7f:0c:2a:cd:82:8b:6b:7e:2a:fd:6e: 35:5e:eb:2b:3f:1b:70:3e:16:eb:38:01:aa:4f:a4:32:24:8a: 3b:e5:c2:8e:ca:aa:3c:c7:79:72:57:28:b0:93:9b:94:15:79: 26:26:0f:1a:6e:95:7c:2a:65:f5:b4:ae:e6:17:99:85:11:07: 35:a7:f3:6e:a8:b6:35:57:09:df:9e:e1:07:17:5f:ea:c2:4c: 62:58:0e:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUxMTA0MjEwNTU0WhcNMjUxMTExMjEwNTU0WjAYMRYwFAYD VQQDEw02OTBhNmFiMi1lMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOLj+ptp0YlH1S6NkN8hA18U1WTP1KgVA5qi4oaErZt4X6MDoWFmO1mS5xJD IkbmQ8ffDVHu+SOWIP3WYlJjfG0XECjhmq53Uqb22syD5hddj3SCpt+rshlL/IpM 4qejJzk8gt8Pm7/2iefiwfvIU6Um+Kl/6XPosX1GliTEnSMfg1L+nqAO7RzcfptO 8CSwSQyIrfJMAtZMi3E+Sb+uuKlh6wlByrOw2iv02AwuEpwWyt8gdPY31hMrSRzK Iv+F9dGmI49IVj2SFBSv6CGsXY+pgT1UAEUaURWD/h2tldZUalXhRkJ6qrkJ2bZb H4nSSKNCmsv4th/2luGYZbaKywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbwp+fX zI2xZ8L7HGwQDot3elAVMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8GGPkv8vlzf3xgv49yDrIQkOjIyUThwT12seaVCLFVri2JtPpa/nX WemaCd7DJMq0NTsHjgEGjwZ1X2ygadt4PTKi9/4DNvik7Nh4ufDPQo4rBwpMsXh4 HLcNUITTszw7w1RidbDJnuVyOxl/5A4N5z4baGCKwe7PJyy9lM2AaHhIUtedCJxm x1TGUH9gAeA+1m3AAUz5E/F8TPxZDPKecd6UlORZ3PfzfwwqzYKLa34q/W41Xusr PxtwPhbrOAGqT6QyJIo75cKOyqo8x3lyVyiwk5uUFXkmJg8abpV8KmX1tK7mF5mF EQc1p/NuqLY1VwnfnuEHF1/qwkxiWA6U -----END CERTIFICATE-----Generated at Wed Nov 5 16:26:36 2025 by rpki-client