$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: bDaVtJHxa/x+wsHE9I3JMtF5CE/JoiKCCp1gNQQ7hco= Subject key identifier: FA:80:DE:F2:C0:84:74:EA:9E:43:A3:F2:F8:92:03:E2:84:81:6A:A6 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0FE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0FD2 Signing time: Sun 02 Nov 2025 17:31:26 +0000 Manifest this update: Sun 02 Nov 2025 17:31:25 +0000 Manifest next update: Sun 09 Nov 2025 17:31:25 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: AlGjxbsFKLn1yvhv3leT5HGVaYRTGuUB1JhTDKi8JlM=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4068 (0xfe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Nov 2 17:31:25 2025 GMT Not After : Nov 9 17:31:25 2025 GMT Subject: CN=6907956e-794a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:86:b2:d2:b6:b3:5a:aa:b9:13:be:3b:b6: 9f:85:87:05:b8:24:fa:40:69:42:a0:ab:84:fa:73: 38:40:bf:ea:84:94:ff:65:f5:2e:74:12:9b:7c:a6: b8:63:af:8a:0c:37:f6:86:38:b1:ae:8b:a9:94:c6: 2e:4c:be:4b:03:93:da:8d:f2:43:7a:de:f1:ae:b1: 14:3b:0e:59:0c:11:90:9d:5f:6d:7a:56:4d:f3:a4: ff:ab:ee:6f:0f:b0:24:b9:ff:b2:30:8c:dd:02:52: ca:1f:2f:83:bc:83:17:7c:3e:b1:92:8d:a1:90:55: e6:72:13:d4:12:1d:bb:15:4f:eb:5a:ce:b6:24:64: 45:60:9b:4d:56:4a:52:7b:9a:45:fb:f9:ad:fd:b5: c3:26:cb:c8:61:d9:99:96:cd:32:19:71:d6:46:e7: 4a:6f:d4:14:cc:b6:d3:f7:0f:72:14:ab:cd:9b:b5: d4:48:47:48:23:6e:16:29:d9:3d:a2:7a:49:99:33: 49:0d:1b:c0:31:1a:bc:90:23:ee:ed:00:49:a5:de: 8c:e0:04:61:0f:6a:23:34:9b:c2:68:0a:32:2f:ea: 1e:66:2f:c7:05:31:bd:7d:a9:da:46:33:03:d6:25: 6c:0b:a9:82:2e:da:18:8e:a7:07:36:b9:d3:17:b2: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:DE:F2:C0:84:74:EA:9E:43:A3:F2:F8:92:03:E2:84:81:6A:A6 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e9:ae:c6:a9:13:60:ac:26:bb:98:4f:89:87:75:7c:0d:42: 9a:58:ca:20:08:8b:19:b1:65:c2:44:07:bb:50:24:83:28:49: fa:d2:55:69:e1:b8:d1:3d:28:e3:3d:f3:fb:49:8a:42:ac:02: d6:b9:e0:f2:cd:3a:cd:57:1f:f8:1f:e3:68:73:7a:e4:0e:1d: 73:bc:69:83:d9:ac:c1:b1:3e:57:fc:82:57:da:51:ca:f3:e5: 36:0f:14:d6:b7:9e:4a:34:82:5b:e2:fe:81:34:00:a7:e9:14: d3:6d:a5:b9:bd:8c:b1:e5:8a:b2:f6:62:11:2b:7c:9c:92:11: f0:2f:4f:5b:27:5b:32:2a:5e:d0:24:c0:74:9b:fc:74:da:88: bb:3c:28:2a:2b:ca:0d:17:b4:5f:c6:2e:64:01:b9:26:04:a6: 38:31:09:74:71:30:cb:7f:8b:c0:f5:b9:bc:42:66:8f:df:ab: b0:56:11:00:cc:20:bb:15:82:6c:17:45:98:d5:7d:bc:13:bb: 81:76:07:3b:8f:19:0e:58:94:57:15:b4:4e:7b:40:32:53:a2: 8d:f7:fe:ee:22:04:3d:95:d5:0a:34:34:11:ef:6f:4b:00:49: 2b:79:d4:b5:87:c1:31:5d:08:06:eb:8b:ab:05:6e:e2:90:41: 45:7f:a2:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUxMTAyMTczMTI1WhcNMjUxMTA5MTczMTI1WjAYMRYwFAYD VQQDEw02OTA3OTU2ZS03OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwh6GstK2s1qquRO+O7afhYcFuCT6QGlCoKuE+nM4QL/qhJT/ZfUudBKbfKa4 Y6+KDDf2hjixrouplMYuTL5LA5PajfJDet7xrrEUOw5ZDBGQnV9telZN86T/q+5v D7Akuf+yMIzdAlLKHy+DvIMXfD6xko2hkFXmchPUEh27FU/rWs62JGRFYJtNVkpS e5pF+/mt/bXDJsvIYdmZls0yGXHWRudKb9QUzLbT9w9yFKvNm7XUSEdII24WKdk9 onpJmTNJDRvAMRq8kCPu7QBJpd6M4ARhD2ojNJvCaAoyL+oeZi/HBTG9fanaRjMD 1iVsC6mCLtoYjqcHNrnTF7KnewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqA3vLA hHTqnkOj8viSA+KEgWqmMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR6a7GqRNgrCa7mE+Jh3V8DUKaWMogCIsZsWXCRAe7UCSDKEn60lVp 4bjRPSjjPfP7SYpCrALWueDyzTrNVx/4H+Noc3rkDh1zvGmD2azBsT5X/IJX2lHK 8+U2DxTWt55KNIJb4v6BNACn6RTTbaW5vYyx5Yqy9mIRK3yckhHwL09bJ1syKl7Q JMB0m/x02oi7PCgqK8oNF7Rfxi5kAbkmBKY4MQl0cTDLf4vA9bm8QmaP36uwVhEA zCC7FYJsF0WY1X28E7uBdgc7jxkOWJRXFbROe0AyU6KN9/7uIgQ9ldUKNDQR729L AEkredS1h8ExXQgG64urBW7ikEFFf6JY -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:45 2025 by rpki-client