$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json) Hash identifier: tkg83SrspgGQyl530vNlZ6JqAAPJ8kDxPNUoOQyXLWs= Subject key identifier: 55:61:EB:BB:76:1D:3C:5D:ED:32:A7:47:C8:48:1B:60:4D:85:AD:B8 Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Certificate serial: 0C19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft Manifest number: 0BE2 Signing time: Mon 20 Oct 2025 19:37:59 +0000 Manifest this update: Mon 20 Oct 2025 19:37:58 +0000 Manifest next update: Mon 27 Oct 2025 19:37:58 +0000 Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: WZTYLhk5cJ5eHbBZSLTzowFAw8r34ISzajSBN9Q0+VE=) 2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=) 3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=) 4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=) 5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Validity Not Before: Oct 20 19:37:58 2025 GMT Not After : Oct 27 19:37:58 2025 GMT Subject: CN=68f68f97-7f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:29:fd:c7:72:e7:58:be:a8:74:5e:57:ee: b1:19:b9:5b:96:bd:5e:17:0c:f3:36:de:03:11:a9: 48:20:a2:b3:11:6d:74:72:4a:c3:e8:85:e2:cb:ea: 8a:ab:6c:a9:53:cf:30:80:63:64:90:77:d2:ec:3a: a8:31:d9:72:3d:6d:10:90:94:73:1d:f0:06:c1:3f: b2:b2:73:95:99:cc:da:62:5f:9a:77:fa:fa:03:c3: e1:b1:83:66:9b:8b:47:9a:66:a0:82:53:07:7b:3c: 90:41:45:fc:2e:2b:82:47:fc:2b:c9:36:c2:42:b1: 95:ab:4f:06:66:3e:4b:4d:98:38:a6:a3:e8:eb:12: 82:1d:b4:31:a8:c9:d9:05:d1:10:08:8e:26:0f:7b: e6:b5:6c:fe:e7:63:a2:9e:3e:74:6f:ef:79:af:35: 62:8e:aa:07:cb:4f:41:d4:36:92:36:99:fb:43:64: 3f:f5:25:44:9b:d3:0d:7d:20:18:50:e2:a0:35:d1: 0b:59:f9:b1:a8:b1:f3:33:40:c4:0c:3d:37:72:82: c0:20:d1:ec:ca:af:0e:4c:76:95:b0:91:dd:0d:4c: 74:d1:86:8c:b7:7c:87:5c:3b:49:a6:46:f6:01:95: fa:c1:17:ce:aa:8c:b3:6a:6d:af:52:ed:47:a5:b1: 1c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:61:EB:BB:76:1D:3C:5D:ED:32:A7:47:C8:48:1B:60:4D:85:AD:B8 X509v3 Authority Key Identifier: keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:33:77:c4:ba:c2:f5:72:bd:be:52:14:01:68:90:85:ff:f6: e5:d8:90:ef:11:50:30:28:29:39:ad:5d:93:b5:7f:3e:97:51: 99:e0:af:2e:bb:11:ff:69:0d:dc:7e:73:ce:1b:7e:fe:29:d0: 96:39:3d:ba:e6:01:f5:d7:7f:8e:18:59:4f:c8:25:6c:93:e4: 5a:72:a1:23:3b:75:64:16:e6:6b:23:a5:ef:84:de:7f:62:ae: d0:a0:0a:8f:fc:64:94:d7:1e:ac:64:88:e7:9b:b0:44:21:be: d8:40:da:3b:aa:01:2a:84:f1:66:c7:ba:5d:eb:0a:27:32:e3: cc:87:12:af:10:6d:ca:f5:60:7a:9c:db:73:77:8f:a5:5a:70: 26:63:f8:f9:e6:77:2e:b2:35:cc:77:fd:1c:dd:e5:32:c3:92: 76:6d:8f:b7:36:b1:b2:6c:7b:91:fc:10:ec:a8:9d:fe:d5:02: ba:b8:01:ee:12:34:58:52:74:e8:2c:70:2c:3c:45:29:0c:43: 5f:f9:4e:09:eb:f1:22:7e:a7:7a:6d:81:4c:c2:4e:ba:8c:36: 50:d3:d5:5b:bc:37:21:b4:30:6e:06:3d:ad:ba:d1:74:1b:80: ee:05:77:5b:a2:84:19:9d:a1:f3:3c:7b:9e:55:8b:a0:44:fe: 76:cf:ff:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy NDRFNjBDQTUwHhcNMjUxMDIwMTkzNzU4WhcNMjUxMDI3MTkzNzU4WjAYMRYwFAYD VQQDEw02OGY2OGY5Ny03Zjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwMp/cdy51i+qHReV+6xGblblr1eFwzzNt4DEalIIKKzEW10ckrD6IXiy+qK q2ypU88wgGNkkHfS7DqoMdlyPW0QkJRzHfAGwT+ysnOVmczaYl+ad/r6A8PhsYNm m4tHmmagglMHezyQQUX8LiuCR/wryTbCQrGVq08GZj5LTZg4pqPo6xKCHbQxqMnZ BdEQCI4mD3vmtWz+52Oinj50b+95rzVijqoHy09B1DaSNpn7Q2Q/9SVEm9MNfSAY UOKgNdELWfmxqLHzM0DEDD03coLAINHsyq8OTHaVsJHdDUx00YaMt3yHXDtJpkb2 AZX6wRfOqoyzam2vUu1HpbEcowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVh67t2 HTxd7TKnR8hIG2BNha24MB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVI YzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1M3fEusL1cr2+UhQBaJCF//bl2JDvEVAwKCk5rV2TtX8+l1GZ4K8u uxH/aQ3cfnPOG37+KdCWOT265gH113+OGFlPyCVsk+RacqEjO3VkFuZrI6XvhN5/ Yq7QoAqP/GSU1x6sZIjnm7BEIb7YQNo7qgEqhPFmx7pd6wonMuPMhxKvEG3K9WB6 nNtzd4+lWnAmY/j55ncusjXMd/0c3eUyw5J2bY+3NrGybHuR/BDsqJ3+1QK6uAHu EjRYUnToLHAsPEUpDENf+U4J6/Eifqd6bYFMwk66jDZQ09VbvDchtDBuBj2tutF0 G4DuBXdbooQZnaHzPHueVYugRP52z/9k -----END CERTIFICATE-----Generated at Wed Oct 22 17:14:03 2025 by rpki-client