$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft File: W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft (raw, json) Hash identifier: R2SqJuDh+64Td73hOKix/GZPPco46gnCggQNr1+cspg= Subject key identifier: 3A:8C:AC:60:6A:67:CB:E2:B7:7C:CC:BF:3B:51:AB:68:05:50:C3:FA Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF Certificate issuer: /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft Manifest number: 058A Signing time: Sun 02 Nov 2025 23:12:56 +0000 Manifest this update: Sun 02 Nov 2025 23:12:56 +0000 Manifest next update: Sun 09 Nov 2025 23:12:56 +0000 Files and hashes: 1: W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl (hash: HxZNaRcSeqh4KGOPm5mk6keN/OQgp92SiwKcoQRfCoY=) 2: 4A4C8CD0F67311EBA0F18818C4F9AE02.roa (hash: 0rxVPA3QT2bWAi8jSb9208dOgsPXpTJit9Sh4K++O/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B714, serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF Validity Not Before: Nov 2 23:12:56 2025 GMT Not After : Nov 9 23:12:56 2025 GMT Subject: CN=6907e578-26c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:90:20:64:9e:ae:36:cc:3e:7f:48:39:ef: 9b:2b:57:74:19:8c:c7:e3:b8:dd:1d:a4:67:75:13: 1c:b6:15:70:d9:d1:b1:92:8d:b1:3b:50:04:3c:e2: b5:16:51:8a:cf:ee:2e:fc:4f:9d:49:99:79:59:e5: b7:f3:4b:63:33:72:6b:5c:23:8a:4d:3e:7d:10:66: 1f:93:02:92:c8:81:02:f0:7f:ca:19:74:6f:08:25: ab:fc:63:7b:02:2b:cd:f0:43:8d:0e:28:4b:84:ee: bb:1b:6d:49:a0:4b:b5:dc:4c:72:67:dc:00:f4:37: 2d:16:7d:a8:d3:6a:45:be:b6:7d:5e:30:18:23:63: 47:e7:4a:68:74:0e:d9:8b:e6:66:a6:1e:c5:71:01: 1c:4d:41:95:f5:9c:5d:f7:ef:23:77:05:c0:05:ff: 93:4f:c3:dc:44:8d:2f:5e:7e:d5:bb:5c:29:9a:24: 73:ca:b7:e4:1e:68:b6:8f:81:3b:0d:bb:45:9c:de: 92:04:c1:6b:0c:47:11:a2:b0:2f:9e:c8:6f:a7:3d: 70:98:7a:a7:e0:a0:4d:1e:ff:80:29:f9:2b:1c:db: 84:31:c5:e4:78:1e:ca:1d:4e:07:61:3f:c0:0c:46: 6e:17:67:8d:b9:fc:de:63:36:fa:df:39:17:c6:72: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8C:AC:60:6A:67:CB:E2:B7:7C:CC:BF:3B:51:AB:68:05:50:C3:FA X509v3 Authority Key Identifier: keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:af:a2:37:f5:3d:15:26:3e:dc:82:3e:c8:34:01:e0:a3:86: 76:5a:f6:b5:01:82:67:72:84:db:ec:40:64:18:b3:8e:ae:1b: a2:59:d5:ca:cd:5f:27:bc:45:3e:34:03:f2:0b:ea:18:b5:47: e6:f9:81:8e:2d:59:55:a5:d3:2c:73:a6:d2:60:ee:b3:60:9f: d9:95:83:7b:48:d9:39:b2:22:a3:32:3b:04:26:cb:05:66:e7: 7b:45:21:db:0f:b1:1e:ee:a1:e1:52:e5:35:b1:13:a0:cd:62: 24:82:49:39:eb:9d:f2:6a:a1:1e:0d:a7:aa:9f:ea:15:2c:8b: 52:1f:66:bd:f5:d9:6d:28:07:98:a8:52:4b:06:f1:f4:e2:31: df:a2:92:86:ba:00:71:4c:b6:ba:5d:ef:5d:90:5e:3e:fe:54: a3:9c:6c:8d:dc:3b:5d:03:00:31:e0:b4:96:99:e5:ac:75:4b: 16:b5:a9:bc:e7:d7:3c:4d:9d:9b:65:c8:5d:e8:6e:7f:ed:7c: 6b:a3:97:51:7f:8d:25:d7:26:a3:15:1e:37:e1:3c:3e:d2:c7: f3:35:95:dd:cc:19:dd:a0:c0:59:dd:9e:98:90:e6:db:59:08: 41:41:3d:4a:9d:e3:f8:5a:a0:e3:3e:3e:e5:75:85:04:f4:5f: 59:a7:9f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3MTQxMTAvBgNVBAUTKDVCRTk3RkE0RDM0QjNFRDMxREJENjQ4NjBFMTgwMDkz RkVBMTExREYwHhcNMjUxMTAyMjMxMjU2WhcNMjUxMTA5MjMxMjU2WjAYMRYwFAYD VQQDEw02OTA3ZTU3OC0yNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7yQIGSerjbMPn9IOe+bK1d0GYzH47jdHaRndRMcthVw2dGxko2xO1AEPOK1 FlGKz+4u/E+dSZl5WeW380tjM3JrXCOKTT59EGYfkwKSyIEC8H/KGXRvCCWr/GN7 AivN8EONDihLhO67G21JoEu13ExyZ9wA9DctFn2o02pFvrZ9XjAYI2NH50podA7Z i+Zmph7FcQEcTUGV9Zxd9+8jdwXABf+TT8PcRI0vXn7Vu1wpmiRzyrfkHmi2j4E7 DbtFnN6SBMFrDEcRorAvnshvpz1wmHqn4KBNHv+AKfkrHNuEMcXkeB7KHU4HYT/A DEZuF2eNufzeYzb63zkXxnKImwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqMrGBq Z8vit3zMvztRq2gFUMP6MB8GA1UdIwQYMBaAFFvpf6TTSz7THb1khg4YAJP+oRHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjcxNC82NDA0QzAxOEY2 NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0TWR2V1NHRGhnQWtfNmhF ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ctbF9wTk5MUHRNZHZXU0dEaGdBa182aEVkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjcxNC82NDA0QzAxOEY2NzExMUVCOEI2M0ExMTdDNEY5QUUwMi9XLWxfcE5OTFB0 TWR2V1NHRGhnQWtfNmhFZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVr6I39T0VJj7cgj7INAHgo4Z2Wva1AYJncoTb7EBkGLOOrhuiWdXK zV8nvEU+NAPyC+oYtUfm+YGOLVlVpdMsc6bSYO6zYJ/ZlYN7SNk5siKjMjsEJssF Zud7RSHbD7Ee7qHhUuU1sROgzWIkgkk5653yaqEeDaeqn+oVLItSH2a99dltKAeY qFJLBvH04jHfopKGugBxTLa6Xe9dkF4+/lSjnGyN3DtdAwAx4LSWmeWsdUsWtam8 59c8TZ2bZchd6G5/7Xxro5dRf40l1yajFR434Tw+0sfzNZXdzBndoMBZ3Z6YkObb WQhBQT1KneP4WqDjPj7ldYUE9F9Zp58x -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:57 2025 by rpki-client