$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: /SDLMgLUwUsnMJzScg2B5RFSmemqBZ6UnHkaj9RQfOI= Subject key identifier: 6C:CC:A7:DB:D6:D4:74:BF:1E:21:8C:30:13:70:9F:44:E8:F5:36:B7 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 0963 Signing time: Sun 02 Nov 2025 20:04:48 +0000 Manifest this update: Sun 02 Nov 2025 20:04:48 +0000 Manifest next update: Sun 09 Nov 2025 20:04:48 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: kNmMyU0xtbNSJJbfKif46vlSp1c8bje+YmTgISqGLss=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Nov 2 20:04:48 2025 GMT Not After : Nov 9 20:04:48 2025 GMT Subject: CN=6907b960-a4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:a5:ae:e3:d4:60:8b:9e:3a:02:6f:85:cd: 77:e2:6d:5c:23:7d:53:b8:fa:e4:57:de:27:d0:4c: 39:5b:c8:8b:ad:05:40:8d:18:76:04:c1:a5:e0:69: 70:d3:15:bf:45:91:49:ba:36:66:8a:67:e7:7b:e9: aa:5b:cb:36:e0:e7:f6:a0:48:2c:73:63:fc:29:fc: 37:22:6b:91:a4:80:0f:12:14:a9:cb:18:9d:2b:96: 6b:68:20:02:95:55:4b:89:83:b1:1c:37:8e:8e:07: 74:0a:0c:75:16:09:6d:4a:97:f8:0c:a8:fe:4b:cf: fa:ff:4c:ab:d1:5b:08:c7:aa:5e:f4:65:df:c5:f4: 7b:12:94:f7:5b:07:41:63:79:e8:bb:8a:2b:42:34: dc:72:fd:d7:b2:4b:d4:cb:41:b7:a4:67:e9:97:2e: f9:21:f3:8a:9e:a3:e2:24:3f:32:34:45:81:e0:b4: 29:6c:89:69:37:4b:54:8c:ce:26:29:17:87:9e:e4: 24:40:9e:17:60:1c:38:79:b2:35:e0:90:fa:cb:a1: e1:8b:3f:7e:c7:c9:03:73:23:ac:72:d2:49:1c:41: ee:57:ee:86:76:de:3b:c3:29:94:91:64:48:8e:9e: 0d:e7:b6:75:0e:90:3c:a5:bf:60:71:e4:c4:78:01: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:A7:DB:D6:D4:74:BF:1E:21:8C:30:13:70:9F:44:E8:F5:36:B7 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:81:3f:22:b3:15:26:d9:a0:c8:88:d9:7e:2b:ac:8f:8a:24: b6:20:9a:b8:a1:9d:3d:42:f6:79:2d:6d:f4:f8:9b:d8:47:36: cc:1a:3b:84:69:94:0f:bc:53:1e:81:e1:41:68:0a:13:b7:43: a6:0e:9e:29:00:7b:40:9a:97:ee:79:ff:9d:e3:72:b3:ed:40: 0f:53:57:22:b3:ae:c5:61:66:2a:97:8b:f2:db:fa:26:e5:a8: 70:26:82:f3:04:d4:69:a6:7f:29:7c:fc:62:5d:f1:2d:8d:e0: 09:50:8a:05:2e:4a:c7:62:af:22:4b:cf:42:c6:10:1c:07:a8: 61:43:09:f2:f2:ba:39:f5:d7:28:b8:0c:76:3a:07:2f:b3:83: 25:ac:2b:ee:f4:bc:b5:22:1b:75:0f:a8:b5:38:ae:48:56:87: ab:d3:07:cb:9d:03:1d:1e:2a:10:51:50:d7:3a:45:28:ca:f8: e7:25:7a:48:4f:82:ca:48:21:ca:fb:78:03:a7:65:db:70:11: 2b:34:f9:90:90:21:17:27:d4:15:86:d6:8a:e4:9a:f6:2b:f7: 99:71:1d:2c:ce:a2:b2:66:c4:1a:fb:35:c8:a4:3d:97:5d:b7: 65:dd:fb:c5:4d:c8:4f:12:54:ff:8a:3f:21:4d:83:bf:b3:e2: e9:65:e6:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUxMTAyMjAwNDQ4WhcNMjUxMTA5MjAwNDQ4WjAYMRYwFAYD VQQDEw02OTA3Yjk2MC1hNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Q2lruPUYIueOgJvhc134m1cI31TuPrkV94n0Ew5W8iLrQVAjRh2BMGl4Glw 0xW/RZFJujZmimfne+mqW8s24Of2oEgsc2P8Kfw3ImuRpIAPEhSpyxidK5ZraCAC lVVLiYOxHDeOjgd0Cgx1FgltSpf4DKj+S8/6/0yr0VsIx6pe9GXfxfR7EpT3WwdB Y3nou4orQjTccv3XskvUy0G3pGfply75IfOKnqPiJD8yNEWB4LQpbIlpN0tUjM4m KReHnuQkQJ4XYBw4ebI14JD6y6Hhiz9+x8kDcyOsctJJHEHuV+6Gdt47wymUkWRI jp4N57Z1DpA8pb9gceTEeAEanQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzMp9vW 1HS/HiGMMBNwn0To9Ta3MB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApgT8isxUm2aDIiNl+K6yPiiS2IJq4oZ09QvZ5LW30+JvYRzbMGjuE aZQPvFMegeFBaAoTt0OmDp4pAHtAmpfuef+d43Kz7UAPU1cis67FYWYql4vy2/om 5ahwJoLzBNRppn8pfPxiXfEtjeAJUIoFLkrHYq8iS89CxhAcB6hhQwny8ro59dco uAx2Ogcvs4MlrCvu9Ly1Iht1D6i1OK5IVoer0wfLnQMdHioQUVDXOkUoyvjnJXpI T4LKSCHK+3gDp2XbcBErNPmQkCEXJ9QVhtaK5Jr2K/eZcR0szqKyZsQa+zXIpD2X Xbdl3fvFTchPElT/ij8hTYO/s+LpZebK -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:47 2025 by rpki-client