$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: JqxyAxyRi3ifVuJJL8JUxwDxsP/Y7AX+Z9mVYZUoC3Y= Subject key identifier: B5:49:F4:51:DA:56:9B:45:50:87:B5:30:D1:D6:83:08:59:7E:AA:B7 Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 037A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 0370 Signing time: Wed 05 Nov 2025 00:58:14 +0000 Manifest this update: Wed 05 Nov 2025 00:58:13 +0000 Manifest next update: Wed 12 Nov 2025 00:58:13 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: IZH7/az5SeEd4Jw+caHsGjZ5X2oBzB2zlShDBVmgCNQ=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: gHbb1DedGEVNYDe8gPkrOnV+opTyWHpDa3aEA0RGNJI=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: ERhWo0W4P0/i1i0Btr7k8IVeQA2SJMiw/31p7bzmBlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Nov 5 00:58:13 2025 GMT Not After : Nov 12 00:58:13 2025 GMT Subject: CN=690aa125-743d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:ee:96:55:d4:0f:36:02:7d:18:07:7a:28: 1f:6f:21:fb:da:42:2c:90:46:e8:60:c7:f9:91:d9: 02:e4:91:f3:10:ff:9d:ff:e1:4b:d9:7a:e5:f2:e2: d3:d0:42:58:70:c2:db:9c:53:2a:95:92:fd:ad:18: 10:dc:36:34:9b:45:49:8c:0f:1e:c2:1c:06:51:85: 2d:71:30:63:25:0d:cc:fd:6c:ca:5d:ef:be:d3:f5: 06:8b:d7:84:2a:5f:27:cd:63:8e:3c:c5:8d:4e:66: fa:e8:31:03:ea:25:a9:a0:92:af:cb:2c:8b:77:d0: d0:ed:34:84:7b:14:8a:a7:8d:da:f5:32:61:46:13: 67:3b:e3:2e:65:e8:25:89:b0:55:03:5e:13:48:f3: 83:e1:69:5a:19:39:5a:5b:1a:44:9b:56:0e:6d:83: eb:8a:80:ac:e3:3e:be:0e:f7:13:14:ef:9c:12:93: 72:39:05:5b:c5:5b:31:c0:2d:30:94:60:20:6c:c8: 0e:b5:cb:1c:1d:2d:71:69:59:e8:4d:5a:0b:e9:b9: 9c:8c:9f:ef:11:4e:ed:15:4d:db:2b:83:a9:38:a4: 19:05:86:f1:7c:ef:e0:bd:95:39:40:61:99:fe:c6: dc:af:ed:4f:d9:da:34:84:49:72:97:cc:28:20:88: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:49:F4:51:DA:56:9B:45:50:87:B5:30:D1:D6:83:08:59:7E:AA:B7 X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:51:37:cb:1b:f8:aa:2b:88:57:d6:39:81:ad:14:37:e4:7b: 30:c1:0d:c3:f8:da:bf:f0:71:92:56:51:3d:fd:41:d5:83:2b: 56:9c:e1:4f:fa:29:c0:23:a6:b4:3b:de:78:28:f8:86:02:b1: 35:65:e4:da:9d:5e:df:da:5a:80:c0:82:59:00:4e:96:ed:e5: a8:1c:d9:1e:4b:43:5f:fd:26:db:9e:e1:4c:d3:4e:29:fd:5f: 7b:77:02:d5:9f:76:9e:e1:51:b8:10:31:56:8b:61:15:e8:11: e5:13:a8:3d:0d:da:00:60:02:89:d0:fd:6c:34:bc:20:ae:1a: 18:58:60:37:69:51:8c:80:6e:30:04:bf:d9:1b:60:0b:99:a1: f1:ca:6a:bf:26:c1:2a:26:a4:46:c2:81:8c:f3:12:1c:e6:2a: 0a:06:6d:e6:7d:f4:5e:52:ae:68:2c:39:c0:e7:12:6e:bc:d1: 5b:74:d3:90:ee:90:fb:23:5a:84:4a:fe:51:2a:04:f7:38:b1: 98:51:65:c2:71:b7:a8:83:29:fc:af:91:19:5c:68:bb:ef:df: 0b:33:c6:e3:62:0c:a1:0c:2f:ab:a8:ef:24:31:5b:d3:f0:83: 5d:bf:7b:63:61:03:b3:00:ca:a8:f7:c9:f5:18:15:ec:81:ba: e1:1f:f9:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUxMTA1MDA1ODEzWhcNMjUxMTEyMDA1ODEzWjAYMRYwFAYD VQQDEw02OTBhYTEyNS03NDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx73ullXUDzYCfRgHeigfbyH72kIskEboYMf5kdkC5JHzEP+d/+FL2Xrl8uLT 0EJYcMLbnFMqlZL9rRgQ3DY0m0VJjA8ewhwGUYUtcTBjJQ3M/WzKXe++0/UGi9eE Kl8nzWOOPMWNTmb66DED6iWpoJKvyyyLd9DQ7TSEexSKp43a9TJhRhNnO+MuZegl ibBVA14TSPOD4WlaGTlaWxpEm1YObYPrioCs4z6+DvcTFO+cEpNyOQVbxVsxwC0w lGAgbMgOtcscHS1xaVnoTVoL6bmcjJ/vEU7tFU3bK4OpOKQZBYbxfO/gvZU5QGGZ /sbcr+1P2do0hElyl8woIIi40QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVJ9FHa VptFUIe1MNHWgwhZfqq3MB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMUTfLG/iqK4hX1jmBrRQ35HswwQ3D+Nq/8HGSVlE9/UHVgytWnOFP +inAI6a0O954KPiGArE1ZeTanV7f2lqAwIJZAE6W7eWoHNkeS0Nf/SbbnuFM004p /V97dwLVn3ae4VG4EDFWi2EV6BHlE6g9DdoAYAKJ0P1sNLwgrhoYWGA3aVGMgG4w BL/ZG2ALmaHxymq/JsEqJqRGwoGM8xIc5ioKBm3mffReUq5oLDnA5xJuvNFbdNOQ 7pD7I1qESv5RKgT3OLGYUWXCcbeogyn8r5EZXGi7798LM8bjYgyhDC+rqO8kMVvT 8INdv3tjYQOzAMqo98n1GBXsgbrhH/lf -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:40 2025 by rpki-client