$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json) Hash identifier: nRGlLuriH37ZqXNrEb9F4nkrncvm9oHRUiblGscoKG8= Subject key identifier: 5F:83:A5:FF:A3:E8:D7:ED:8A:A9:43:93:45:A7:42:8F:6A:22:D2:B3 Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Certificate serial: 0FAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft Manifest number: 0FA4 Signing time: Sun 02 Nov 2025 17:31:58 +0000 Manifest this update: Sun 02 Nov 2025 17:31:57 +0000 Manifest next update: Sun 09 Nov 2025 17:31:57 +0000 Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: 2dXYDEjLmOBrFVeT5tAcgIDhu3q7bUhjEe/eb3Ggk+s=) 2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: JDJx+bW699vTjkG4SZTOilca+2ZG/Wo+x5hxTR1zUag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4013 (0xfad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Validity Not Before: Nov 2 17:31:57 2025 GMT Not After : Nov 9 17:31:57 2025 GMT Subject: CN=6907958e-3e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:ab:f8:6d:c1:d9:27:73:66:7e:c3:f6:eb: e0:28:c6:b3:42:47:96:4e:27:4f:88:d3:07:d5:8f: 8d:09:53:85:d6:c9:c8:94:03:27:62:7f:ed:a8:52: ea:b3:15:bc:fd:45:b9:eb:e5:5a:2d:48:03:67:a1: 38:ff:83:50:10:09:6c:c7:80:9d:81:0d:97:df:36: 13:b2:d5:d3:48:34:77:da:08:17:4d:36:70:63:a3: 59:d0:b4:2d:db:83:b5:57:c5:89:73:37:fb:fd:c6: 85:8d:79:44:6f:24:04:7f:da:c8:d9:4f:62:c7:57: 1c:9c:da:7d:b8:ca:d1:0d:b1:2b:47:2a:be:a3:44: 06:f9:d3:eb:c6:b3:3b:b8:fa:f5:78:df:84:4c:35: 96:de:59:fc:f3:cb:d4:32:ca:14:72:c8:19:db:77: ab:75:96:c2:a1:0d:58:6a:55:31:e8:3a:6c:68:44: 80:e5:22:e1:cd:c6:12:05:c6:f6:22:21:7d:df:d1: 33:1a:c8:50:11:e9:59:d9:ee:80:25:38:86:7a:ff: 1f:9f:3b:61:ee:ab:56:14:30:04:56:c1:4b:f1:58: fd:90:92:c8:38:13:d3:da:36:a0:38:da:53:73:1b: 39:29:1d:e1:53:23:9c:1b:3b:52:79:e7:1d:b3:12: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:A5:FF:A3:E8:D7:ED:8A:A9:43:93:45:A7:42:8F:6A:22:D2:B3 X509v3 Authority Key Identifier: keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2a:33:55:a8:bb:7e:07:1a:12:10:93:9e:44:65:e5:e3:cd: de:ff:fe:e8:e8:ea:2b:21:b1:1e:c8:f3:3e:07:6b:6e:89:ab: ec:71:f2:0f:98:62:85:70:8e:e9:68:b0:e0:02:c4:2b:8b:0c: df:c9:cd:6b:4c:c7:4b:60:7b:bf:dd:5a:02:d3:3f:04:17:d7: aa:8e:f5:52:c6:85:a4:fd:1c:c3:e1:4d:b5:df:88:56:0f:56: d6:bf:36:92:76:7d:f7:1d:b1:34:29:0a:5e:ec:18:ee:73:71: 7e:fc:19:56:a1:cc:b6:cb:b9:e3:be:5a:8c:c1:21:3c:cd:41: 64:b6:dd:89:9a:a0:1a:de:f2:ab:cc:81:f4:37:fd:d8:32:a9: 76:9a:b4:31:cf:69:b4:39:df:81:21:e9:ff:f7:65:96:36:90: e8:9e:ee:f6:04:71:37:7f:1c:7e:72:47:1e:8f:f0:61:e5:3b: dc:c2:bc:1c:62:d4:85:34:49:7b:ff:50:f8:04:f8:96:a2:6d: 52:81:3f:62:00:73:89:b2:9a:77:3b:8e:42:cb:d4:d9:69:65: 42:31:d9:c7:84:54:8d:3e:9a:b0:de:64:9f:b3:65:fe:eb:91: 03:b0:01:18:8e:22:fa:f4:4c:fb:d9:80:77:5d:bd:ae:21:46: d8:49:48:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVFMkRDOENBOUY1 QUZBRTFCNTMwHhcNMjUxMTAyMTczMTU3WhcNMjUxMTA5MTczMTU3WjAYMRYwFAYD VQQDEw02OTA3OTU4ZS0zZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArser+G3B2SdzZn7D9uvgKMazQkeWTidPiNMH1Y+NCVOF1snIlAMnYn/tqFLq sxW8/UW56+VaLUgDZ6E4/4NQEAlsx4CdgQ2X3zYTstXTSDR32ggXTTZwY6NZ0LQt 24O1V8WJczf7/caFjXlEbyQEf9rI2U9ix1ccnNp9uMrRDbErRyq+o0QG+dPrxrM7 uPr1eN+ETDWW3ln888vUMsoUcsgZ23erdZbCoQ1YalUx6DpsaESA5SLhzcYSBcb2 IiF939EzGshQEelZ2e6AJTiGev8fnzth7qtWFDAEVsFL8Vj9kJLIOBPT2jagONpT cxs5KR3hUyOcGztSeecdsxJBcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+Dpf+j 6NftiqlDk0WnQo9qItKzMB8GA1UdIwQYMBaAFFl2710L8WaI4l7F4tyMqfWvrhtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzJDNi8wQUE0RDY2NDZB NEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpvamlYc1hpM0l5cDlhLXVH MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dYYnZYUXZ4Wm9qaVhzWGkzSXlwOWEtdUcxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpv amlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhKjNVqLt+BxoSEJOeRGXl483e//7o6OorIbEeyPM+B2tuiavscfIP mGKFcI7paLDgAsQriwzfyc1rTMdLYHu/3VoC0z8EF9eqjvVSxoWk/RzD4U2134hW D1bWvzaSdn33HbE0KQpe7Bjuc3F+/BlWocy2y7njvlqMwSE8zUFktt2JmqAa3vKr zIH0N/3YMql2mrQxz2m0Od+BIen/92WWNpDonu72BHE3fxx+ckcej/Bh5Tvcwrwc YtSFNEl7/1D4BPiWom1SgT9iAHOJspp3O45Cy9TZaWVCMdnHhFSNPpqw3mSfs2X+ 65EDsAEYjiL69Ez72YB3Xb2uIUbYSUjw -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:41 2025 by rpki-client