$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft File: w5eLa2eb-tci9fh5zBRsC636yzc.mft (raw, json) Hash identifier: 0Y1qolcx1eu5hp3/pgkxxHc0LuGoA0pw0wIBmDLg4eE= Subject key identifier: 31:5D:69:1E:5F:DD:7D:F5:96:45:3E:0F:8D:F9:21:80:4C:8E:14:3A Authority key identifier: C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37 Certificate issuer: /CN=A917877E/serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft Manifest number: 3F Signing time: Wed 05 Nov 2025 07:39:24 +0000 Manifest this update: Wed 05 Nov 2025 07:39:24 +0000 Manifest next update: Wed 12 Nov 2025 07:39:24 +0000 Files and hashes: 1: w5eLa2eb-tci9fh5zBRsC636yzc.crl (hash: Xn5QBMoblIiOQSi6cY87x9sim4zxNtkAcsmRaDy++1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37 Validity Not Before: Nov 5 07:39:24 2025 GMT Not After : Nov 12 07:39:24 2025 GMT Subject: CN=690aff2c-ca0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:1d:c6:6b:40:e3:73:fb:ee:48:45:8b:1e: 80:09:4f:4a:b4:79:9a:0a:0e:d1:a6:e5:19:d6:81: 66:3f:29:6d:d8:16:b5:2e:97:82:d8:6e:2f:56:28: 6d:de:23:60:9d:72:45:50:1a:f8:93:78:b5:d3:ee: bf:39:d7:df:74:91:7d:27:5f:0b:74:d7:8b:51:6f: f1:b1:9f:a3:40:4d:a9:fd:da:d3:1f:e7:7b:b7:33: cc:ae:f5:33:d6:d1:b2:dc:37:b2:7f:21:a3:c5:fb: 49:50:cd:75:c8:cd:44:f0:d5:9b:e3:eb:da:6f:9f: 56:d6:fb:d0:42:03:2f:fc:43:a2:ca:53:bc:c5:7b: c4:fe:a1:1d:6b:40:9e:62:33:b1:d9:89:d2:af:82: ab:35:ed:e8:b2:ab:d3:23:3a:7c:d2:5f:5e:d5:3b: 59:bd:53:7f:a6:b0:d0:35:2c:be:28:ff:3d:cc:93: 42:41:d4:b9:08:35:25:98:62:e3:61:48:d3:6b:16: c2:ca:59:45:65:b4:c5:8b:34:4f:6b:88:66:13:9c: 2c:01:aa:5b:39:f9:d4:fd:49:8f:11:7f:cd:73:39: 33:2b:ad:06:d4:07:f3:c5:b8:5f:d0:f7:44:34:9c: f8:65:24:11:5e:53:76:20:f8:89:10:d1:8e:5a:cf: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:69:1E:5F:DD:7D:F5:96:45:3E:0F:8D:F9:21:80:4C:8E:14:3A X509v3 Authority Key Identifier: keyid:C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f7:8a:1e:42:9f:80:d6:3a:0e:9f:bb:1c:78:2c:74:bf:94: 29:bd:e9:87:1b:3e:4e:9b:88:8c:4d:9e:38:88:ad:f1:41:43: bd:58:3d:43:0e:2a:c8:3b:96:30:08:45:76:55:93:2b:82:90: b2:ac:7b:d3:58:c6:27:da:6a:cb:55:9e:1c:30:6b:2e:ec:a7: 1e:36:4c:de:e1:2f:3b:3d:5e:e7:f7:be:db:1d:53:3d:ba:07: 9c:62:f0:7d:fb:71:f5:5a:02:5b:62:1d:ca:81:45:b4:5a:b6: ee:2d:17:9b:6d:19:08:60:a9:9d:2a:2f:e2:64:cf:0f:37:6f: 12:5c:fe:15:fb:07:5b:9c:43:37:4a:3e:12:10:e0:04:77:b1: 12:11:f4:7d:33:0b:9d:75:00:d7:fd:46:6f:d7:9e:26:37:8f: 15:9b:13:ea:f1:d1:00:59:bd:c3:3b:88:85:08:20:5b:16:25: b5:99:3a:81:21:0b:9e:77:80:eb:8a:ca:78:7e:5a:50:b1:66: 0e:be:85:30:93:8b:4b:81:31:9c:19:9e:40:8a:62:ed:a8:11: 85:14:00:62:78:7f:43:da:a5:4b:68:3a:11:c3:c0:34:65:82: 9d:1a:67:02:79:f1:fc:59:4f:e1:b6:44:dc:ce:c7:d1:98:a6: c4:15:ed:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoQzM5NzhCNkI2NzlCRkFENzIyRjVGODc5Q0MxNDZDMEJB REZBQ0IzNzAeFw0yNTExMDUwNzM5MjRaFw0yNTExMTIwNzM5MjRaMBgxFjAUBgNV BAMTDTY5MGFmZjJjLWNhMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1gB3Ga0Djc/vuSEWLHoAJT0q0eZoKDtGm5RnWgWY/KW3YFrUul4LYbi9WKG3e I2CdckVQGviTeLXT7r851990kX0nXwt014tRb/Gxn6NATan92tMf53u3M8yu9TPW 0bLcN7J/IaPF+0lQzXXIzUTw1Zvj69pvn1bW+9BCAy/8Q6LKU7zFe8T+oR1rQJ5i M7HZidKvgqs17eiyq9MjOnzSX17VO1m9U3+msNA1LL4o/z3Mk0JB1LkINSWYYuNh SNNrFsLKWUVltMWLNE9riGYTnCwBqls5+dT9SY8Rf81zOTMrrQbUB/PFuF/Q90Q0 nPhlJBFeU3Yg+IkQ0Y5az0DPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMV1pHl/d ffWWRT4PjfkhgEyOFDowHwYDVR0jBBgwFoAUw5eLa2eb+tci9fh5zBRsC636yzcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzQxRDUzRUVFNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL3c1ZUxhMmViLXRjaTlmaDV6QlJzQzYzNnl6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzVlTGEyZWItdGNpOWZoNXpCUnNDNjM2eXpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzQxRDUzRUVFNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL3c1ZUxhMmViLXRj aTlmaDV6QlJzQzYzNnl6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACf3ih5Cn4DWOg6fuxx4LHS/lCm96YcbPk6biIxNnjiIrfFBQ71YPUMO Ksg7ljAIRXZVkyuCkLKse9NYxifaastVnhwway7spx42TN7hLzs9Xuf3vtsdUz26 B5xi8H37cfVaAltiHcqBRbRatu4tF5ttGQhgqZ0qL+Jkzw83bxJc/hX7B1ucQzdK PhIQ4AR3sRIR9H0zC511ANf9Rm/XniY3jxWbE+rx0QBZvcM7iIUIIFsWJbWZOoEh C553gOuKynh+WlCxZg6+hTCTi0uBMZwZnkCKYu2oEYUUAGJ4f0PapUtoOhHDwDRl gp0aZwJ58fxZT+G2RNzOx9GYpsQV7bg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:36 2025 by rpki-client