$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: lpL9BNIxDe75ViTNLSb/+TUQHqK96nmDFW2hjRRYn6E= Subject key identifier: 94:3D:67:6E:09:14:EF:A0:2E:AE:AC:57:2C:88:1F:1D:F0:6B:BD:97 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05E6 Signing time: Sun 02 Nov 2025 22:58:21 +0000 Manifest this update: Sun 02 Nov 2025 22:58:20 +0000 Manifest next update: Sun 09 Nov 2025 22:58:20 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: W5xJ/fN326+30iey7HWck0AqfZYNsZgtX1LecP07Ibk=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1524 (0x5f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Nov 2 22:58:20 2025 GMT Not After : Nov 9 22:58:20 2025 GMT Subject: CN=6907e20c-d699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:c0:e4:45:cc:be:5e:34:54:47:43:cc:e4: 87:c6:8d:01:62:ce:8b:44:f4:2d:23:d2:e2:b7:82: 3f:43:79:6d:a8:f4:d7:fa:2c:1d:39:8e:5f:03:bb: 15:0e:8e:aa:f1:3e:93:9b:9a:d8:78:66:26:2a:b8: 17:14:e3:71:35:fa:b3:43:0e:78:f3:b8:49:25:56: ee:6b:85:b2:1a:f5:92:84:c4:e4:7c:41:86:f9:29: 3f:d9:0c:04:b3:60:97:c0:77:a6:e9:7a:f4:d3:f9: 03:09:ab:1c:af:4d:ea:3a:ef:05:c5:a1:62:5c:97: 42:f3:40:a2:b4:62:ff:12:55:2a:1a:cd:d0:ac:6d: 2c:75:35:62:71:51:e9:55:f7:62:c1:0c:0e:18:15: 0f:16:5f:a9:25:b9:f7:bf:69:a0:28:13:0c:22:7f: 87:e9:ec:7c:70:45:6e:a2:f8:a6:d7:62:a7:af:08: 0d:cf:61:d4:e6:10:af:1e:2d:14:98:32:fe:25:e5: 39:fc:c8:7a:49:8b:d4:a5:bc:59:4b:80:52:05:1c: cc:65:cb:a8:17:b2:c8:ee:56:31:51:af:32:ab:9a: 9c:e7:f3:5b:d4:12:3c:70:6b:38:4e:ec:f4:9e:e3: 83:b7:49:02:34:38:a7:02:66:51:af:25:71:60:fd: 95:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3D:67:6E:09:14:EF:A0:2E:AE:AC:57:2C:88:1F:1D:F0:6B:BD:97 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:77:1d:c7:10:7c:40:04:dd:01:b9:1c:06:1c:26:b0:3a:46: 61:41:76:71:63:ca:1d:6f:fe:7b:c5:f3:da:6f:50:86:ba:38: fa:4b:f3:29:e5:96:a4:bd:ef:cf:06:58:2f:e7:2f:07:53:34: db:27:11:32:59:88:bb:6f:66:cd:0c:ed:db:ca:d8:fc:a9:d2: 32:67:79:f3:c8:c4:7e:41:ce:98:23:a8:ec:a8:99:c6:fc:e3: 49:03:70:1a:f9:22:7d:5b:fd:11:87:f4:ce:ef:cd:ab:fd:8b: a1:fd:b8:61:24:54:1b:1d:00:46:9b:5e:04:7e:f2:d1:34:0d: c0:4a:8f:e0:1f:f0:7e:e0:35:72:3f:12:b5:51:ea:0d:f3:bf: 65:f5:1f:69:ac:a8:cc:87:6f:6c:fd:06:5c:f6:fc:9c:a4:62: 4d:dc:2f:9d:0a:b5:d1:80:0e:46:0e:49:30:a4:b0:8a:7a:b1: b8:45:f1:d0:82:46:3b:26:f9:d2:3d:0c:d9:af:c2:af:2a:10: 08:8d:66:01:c4:2d:92:a0:cd:79:30:29:89:7b:34:1a:a7:9e: f3:ba:ce:4b:72:93:d6:10:7e:b6:93:23:1f:77:26:69:f2:b2: de:71:67:b9:7b:d3:c6:71:b8:e6:57:a4:23:e8:2c:61:64:d9: 59:9c:a6:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUxMTAyMjI1ODIwWhcNMjUxMTA5MjI1ODIwWjAYMRYwFAYD VQQDEw02OTA3ZTIwYy1kNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1zA5EXMvl40VEdDzOSHxo0BYs6LRPQtI9Lit4I/Q3ltqPTX+iwdOY5fA7sV Do6q8T6Tm5rYeGYmKrgXFONxNfqzQw5487hJJVbua4WyGvWShMTkfEGG+Sk/2QwE s2CXwHem6Xr00/kDCascr03qOu8FxaFiXJdC80CitGL/ElUqGs3QrG0sdTVicVHp VfdiwQwOGBUPFl+pJbn3v2mgKBMMIn+H6ex8cEVuovim12KnrwgNz2HU5hCvHi0U mDL+JeU5/Mh6SYvUpbxZS4BSBRzMZcuoF7LI7lYxUa8yq5qc5/Nb1BI8cGs4Tuz0 nuODt0kCNDinAmZRryVxYP2V7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQ9Z24J FO+gLq6sVyyIHx3wa72XMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbdx3HEHxABN0BuRwGHCawOkZhQXZxY8odb/57xfPab1CGujj6S/Mp 5Zakve/PBlgv5y8HUzTbJxEyWYi7b2bNDO3bytj8qdIyZ3nzyMR+Qc6YI6jsqJnG /ONJA3Aa+SJ9W/0Rh/TO782r/Yuh/bhhJFQbHQBGm14EfvLRNA3ASo/gH/B+4DVy PxK1UeoN879l9R9prKjMh29s/QZc9vycpGJN3C+dCrXRgA5GDkkwpLCKerG4RfHQ gkY7JvnSPQzZr8KvKhAIjWYBxC2SoM15MCmJezQap57zus5LcpPWEH62kyMfdyZp 8rLecWe5e9PGcbjmV6Qj6CxhZNlZnKZT -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:24 2025 by rpki-client