$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: 8yZZlXwoIZnIW+BOKHm3ScpVUCo+iz09aD5VOwYyyHM= Subject key identifier: 7D:10:96:18:4D:8E:88:63:FA:ED:93:70:51:62:F0:0F:73:15:FD:BD Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 024A Signing time: Wed 05 Nov 2025 01:54:53 +0000 Manifest this update: Wed 05 Nov 2025 01:54:52 +0000 Manifest next update: Wed 12 Nov 2025 01:54:52 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: Mz/Z/PmGEosooQ2y1kiHCCiBHZXCezdIsL35fGPXARk=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Nov 5 01:54:52 2025 GMT Not After : Nov 12 01:54:52 2025 GMT Subject: CN=690aae6c-3c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:cf:a2:97:40:40:45:29:a5:bd:f6:77:e8: 81:e4:35:2d:71:de:1d:00:dc:c2:0a:1f:32:c0:f9: 3e:ac:ba:89:2f:7a:ad:d8:71:8d:7c:fb:5d:8c:cb: f5:d5:d0:5d:10:69:f0:82:3d:df:95:a1:ee:a5:31: bb:26:47:86:59:5f:b8:54:ef:22:c4:35:71:c9:21: 2c:5d:95:46:a6:d9:7a:99:22:95:04:f0:9d:ea:17: 07:1e:e7:df:f4:b8:e5:24:99:c8:09:9b:c8:9d:c6: e2:36:8c:a6:8f:81:b4:7c:ed:73:f3:53:fb:18:a2: c6:14:26:1f:2a:e0:29:4d:13:04:b3:4e:45:aa:ea: 99:67:c4:3c:36:97:45:64:56:a0:ea:a0:59:8a:86: e1:c5:6c:72:01:32:c7:c9:f4:e8:e4:75:fc:d7:0c: 53:53:d7:49:9d:5f:f7:f0:6d:b5:f0:7b:90:c5:a6: b4:1a:a7:6f:2c:93:87:a6:c4:f8:92:2b:a1:70:0a: 92:37:0f:40:87:26:2d:a3:72:1e:dd:38:99:e3:e3: dc:d8:f9:aa:0c:a6:fc:7b:f1:bd:d7:3c:67:60:dd: b5:23:18:ff:d0:07:f0:8c:f8:c4:85:74:d7:0b:0b: e4:62:39:c3:41:c8:21:89:04:0a:96:dc:40:db:e7: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:10:96:18:4D:8E:88:63:FA:ED:93:70:51:62:F0:0F:73:15:FD:BD X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b8:e9:94:18:d1:2f:1a:c6:d8:03:6a:23:70:cc:47:fa:19: 42:83:07:bf:bb:a5:c9:4e:27:18:23:9b:d7:91:1a:8f:98:25: 58:54:a1:9a:ec:32:77:35:73:46:b7:b9:16:e3:19:1f:c6:10: cf:37:b5:d3:01:f9:6b:9a:b3:71:61:47:1a:17:82:74:56:71: d0:8c:1c:42:1d:81:2f:4c:c3:d3:b5:92:42:ec:8f:65:43:e6: ca:fd:d8:39:46:33:83:28:df:98:9b:9c:f6:f2:c4:40:7f:49: b9:5d:27:7f:f5:9e:4a:9e:a6:3e:ce:aa:70:9e:eb:15:78:d6: 23:ee:38:5a:f7:17:0b:89:c1:a0:b6:74:63:97:94:b6:71:ab: ba:37:c9:1d:f7:de:ea:1c:f6:00:08:c7:41:42:43:60:6d:bb: f6:68:2c:91:bc:5d:a4:1f:45:bf:ba:83:6f:79:53:1b:2f:99: 72:29:c5:37:75:eb:6c:da:d2:0b:0f:90:9e:bf:09:96:73:48: 75:5d:06:0c:7a:02:ed:3c:6c:ba:f4:70:e2:32:76:aa:f9:53: 92:b9:2b:89:c7:3d:69:5d:c7:5b:65:61:5e:08:3f:38:77:e1: 4d:af:ab:dd:20:3a:88:47:c3:5e:e8:8c:56:23:52:09:51:0f: a9:86:a5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUxMTA1MDE1NDUyWhcNMjUxMTEyMDE1NDUyWjAYMRYwFAYD VQQDEw02OTBhYWU2Yy0zYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO3PopdAQEUppb32d+iB5DUtcd4dANzCCh8ywPk+rLqJL3qt2HGNfPtdjMv1 1dBdEGnwgj3flaHupTG7JkeGWV+4VO8ixDVxySEsXZVGptl6mSKVBPCd6hcHHuff 9LjlJJnICZvIncbiNoymj4G0fO1z81P7GKLGFCYfKuApTRMEs05FquqZZ8Q8NpdF ZFag6qBZiobhxWxyATLHyfTo5HX81wxTU9dJnV/38G218HuQxaa0GqdvLJOHpsT4 kiuhcAqSNw9AhyYto3Ie3TiZ4+Pc2PmqDKb8e/G91zxnYN21Ixj/0AfwjPjEhXTX CwvkYjnDQcghiQQKltxA2+fhTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0QlhhN johj+u2TcFFi8A9zFf29MB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfuOmUGNEvGsbYA2ojcMxH+hlCgwe/u6XJTicYI5vXkRqPmCVYVKGa 7DJ3NXNGt7kW4xkfxhDPN7XTAflrmrNxYUcaF4J0VnHQjBxCHYEvTMPTtZJC7I9l Q+bK/dg5RjODKN+Ym5z28sRAf0m5XSd/9Z5KnqY+zqpwnusVeNYj7jha9xcLicGg tnRjl5S2cau6N8kd997qHPYACMdBQkNgbbv2aCyRvF2kH0W/uoNveVMbL5lyKcU3 dets2tILD5CevwmWc0h1XQYMegLtPGy69HDiMnaq+VOSuSuJxz1pXcdbZWFeCD84 d+FNr6vdIDqIR8Ne6IxWI1IJUQ+phqUM -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:44 2025 by rpki-client