$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json) Hash identifier: Dhf1rshD+Fdg0xDlRyhm7SVRpr/TugxmOVfXpmKZ0xo= Subject key identifier: D1:6D:9C:11:FE:F9:A2:DF:9E:54:79:C3:97:55:1C:BA:18:76:6F:07 Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft Manifest number: 023B Signing time: Wed 05 Nov 2025 01:59:00 +0000 Manifest this update: Wed 05 Nov 2025 01:58:59 +0000 Manifest next update: Wed 12 Nov 2025 01:58:59 +0000 Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: sMQmwkvSs4FvZM2Xu0J5bkPtuFUbLALdlb8QEvHPX/c=) 2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Validity Not Before: Nov 5 01:58:59 2025 GMT Not After : Nov 12 01:58:59 2025 GMT Subject: CN=690aaf63-d32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:12:c5:a4:df:7e:25:46:9a:86:36:bb:b4: 1d:75:f8:c9:da:63:c7:a1:ff:85:d3:ea:90:7b:2e: e7:01:63:e0:51:e2:eb:86:75:04:74:9d:c4:b8:f5: 1d:ee:88:a4:ba:13:57:0d:61:e1:40:17:85:a5:ef: 33:54:c8:ff:81:8e:a2:d5:72:0c:42:6c:e1:8f:6b: 05:16:3b:40:d4:b3:69:63:bd:7a:78:bd:aa:b6:d9: 52:49:eb:85:8c:4b:49:95:04:33:1c:be:93:39:4a: ab:e4:54:1f:c5:b5:17:22:33:91:b7:10:0e:ba:01: f9:4d:c3:f6:6a:c3:73:46:54:e4:c4:8a:8f:8c:5e: dc:37:bc:d3:19:f9:eb:bf:6d:8a:de:a9:7a:2b:b2: aa:de:2f:6c:58:01:4b:3f:9f:b2:d4:ab:5c:f2:37: d5:94:1c:c9:fd:86:41:d8:f1:15:cd:a7:00:d5:2b: 62:a8:5e:ef:57:4b:6b:dc:97:3c:9b:11:67:b3:05: fd:d9:78:20:64:f8:ef:56:50:b7:b6:4c:b6:ac:08: dc:ab:cd:13:21:5b:ff:80:4a:b9:0e:4d:90:fa:76: 66:2a:32:84:0f:35:85:4b:d9:0c:8d:41:f6:36:d0: 9b:10:0b:fc:e0:49:1d:da:c0:c9:52:08:f4:ed:c1: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6D:9C:11:FE:F9:A2:DF:9E:54:79:C3:97:55:1C:BA:18:76:6F:07 X509v3 Authority Key Identifier: keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c2:4a:59:91:68:d6:ef:30:c6:4e:46:17:a6:85:b5:2d:06: 0f:32:20:18:42:10:24:2a:08:c6:3e:37:fe:11:e0:4a:95:6b: fe:4b:f8:cc:16:a0:80:34:6f:76:29:b3:bb:f2:0d:6a:df:45: 58:40:55:4b:49:7b:5a:58:cb:3f:c3:15:87:f0:b4:37:bf:fe: 4c:c8:a6:fe:93:c4:59:3a:79:a0:48:c8:c1:e7:7f:c2:d8:0a: 97:d9:b1:de:4f:a4:13:99:b3:f0:5f:b3:69:05:b9:f5:02:77: e9:03:53:43:d0:90:6b:fd:7d:c4:b2:8c:18:4a:97:f5:2f:46: 59:7c:db:82:12:0a:c2:63:ab:1c:ca:d1:17:17:e8:19:e2:8f: 10:7c:dc:d9:90:46:89:24:8e:e7:f6:b0:74:b7:16:98:7e:27: 78:e5:42:e4:74:23:7a:4b:c5:b3:ff:58:7a:30:3c:d8:b8:91: 05:1f:a2:fe:c0:3a:4d:e4:58:2a:fe:45:b3:f2:3f:cc:31:cb: 62:2c:83:3b:6a:27:0f:a2:ac:9e:df:75:58:2a:dd:6b:06:e3: 84:54:5c:5a:05:09:8f:cc:6d:ab:0e:3b:9b:f7:27:7a:e3:dd: c7:f8:a0:1e:8a:fd:d8:52:ed:22:61:1a:bd:89:b1:29:03:be: ef:1a:87:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF NEU3MTYzNkMwHhcNMjUxMTA1MDE1ODU5WhcNMjUxMTEyMDE1ODU5WjAYMRYwFAYD VQQDEw02OTBhYWY2My1kMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArloSxaTffiVGmoY2u7QddfjJ2mPHof+F0+qQey7nAWPgUeLrhnUEdJ3EuPUd 7oikuhNXDWHhQBeFpe8zVMj/gY6i1XIMQmzhj2sFFjtA1LNpY716eL2qttlSSeuF jEtJlQQzHL6TOUqr5FQfxbUXIjORtxAOugH5TcP2asNzRlTkxIqPjF7cN7zTGfnr v22K3ql6K7Kq3i9sWAFLP5+y1Ktc8jfVlBzJ/YZB2PEVzacA1StiqF7vV0tr3Jc8 mxFnswX92XggZPjvVlC3tky2rAjcq80TIVv/gEq5Dk2Q+nZmKjKEDzWFS9kMjUH2 NtCbEAv84Ekd2sDJUgj07cErbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFtnBH+ +aLfnlR5w5dVHLoYdm8HMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC T0doSHpvbGpsal9rNXhZMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQwkpZkWjW7zDGTkYXpoW1LQYPMiAYQhAkKgjGPjf+EeBKlWv+S/jM FqCANG92KbO78g1q30VYQFVLSXtaWMs/wxWH8LQ3v/5MyKb+k8RZOnmgSMjB53/C 2AqX2bHeT6QTmbPwX7NpBbn1AnfpA1ND0JBr/X3EsowYSpf1L0ZZfNuCEgrCY6sc ytEXF+gZ4o8QfNzZkEaJJI7n9rB0txaYfid45ULkdCN6S8Wz/1h6MDzYuJEFH6L+ wDpN5Fgq/kWz8j/MMctiLIM7aicPoqye33VYKt1rBuOEVFxaBQmPzG2rDjub9yd6 493H+KAeiv3YUu0iYRq9ibEpA77vGocK -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:38 2025 by rpki-client