$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json) Hash identifier: Qzy4sqv07MxPP2L0H7W6V8D6LO+8Y6BTSIZjRzLtDQk= Subject key identifier: 79:5B:80:E7:46:11:8F:21:44:16:2E:FD:02:43:87:C1:1D:D5:86:87 Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Certificate serial: 3035 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft Manifest number: 302B Signing time: Sun 02 Nov 2025 15:27:33 +0000 Manifest this update: Sun 02 Nov 2025 15:27:33 +0000 Manifest next update: Sun 09 Nov 2025 15:27:33 +0000 Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: Y6+t11CqSfonNzvhoH7wgTpbCBTt7J4o18aVIcQEoXU=) 2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: LEtlM4YuHVZO4hp1ekYsLvEULMY1rw4omfHoEthYUqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12341 (0x3035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Validity Not Before: Nov 2 15:27:33 2025 GMT Not After : Nov 9 15:27:33 2025 GMT Subject: CN=69077865-0d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:82:09:b1:1f:19:88:09:fc:ef:1c:64:58: 0f:f6:a9:91:09:c7:4d:f1:fa:12:18:11:6d:bc:5b: 4f:75:2c:22:30:6c:39:95:75:88:b9:96:d2:6d:db: da:22:0c:84:06:f3:a1:b2:fc:2b:e4:3f:a2:52:d9: 60:db:9f:89:98:3a:e7:51:ac:24:80:e7:6b:6b:b9: de:36:48:6f:0b:9d:a3:df:74:ca:d8:e9:e3:fd:6b: d3:6d:28:39:21:f0:fb:fc:40:c4:d3:08:ff:d0:00: c0:3f:d3:90:c6:57:20:4b:aa:bb:41:d1:54:c0:70: 20:f7:52:e7:db:06:14:af:77:40:1a:db:3d:9f:9d: cf:98:e8:76:70:51:1f:60:3b:5c:d6:9d:7d:31:92: 30:32:9d:2a:0f:68:cb:8c:86:a3:cd:5e:c5:51:12: ee:1d:ea:e4:10:2d:95:cd:15:31:fc:2f:67:5a:2d: 1a:6b:ed:38:1c:f6:90:05:60:34:ab:90:18:ef:f4: d8:71:90:65:d3:ae:19:03:c1:75:61:5e:73:97:21: 43:57:be:be:ef:a5:7b:44:ae:bc:93:57:f9:82:46: b9:35:d6:eb:12:de:62:a6:8c:ec:b4:9e:8c:21:a1: 65:f1:57:3e:74:b3:da:d5:c8:08:08:45:f8:96:15: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5B:80:E7:46:11:8F:21:44:16:2E:FD:02:43:87:C1:1D:D5:86:87 X509v3 Authority Key Identifier: keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fa:62:9e:be:20:8b:a3:9e:42:77:2f:2e:62:b8:dc:d8:c8: 66:3f:67:4f:e8:30:5c:77:c4:07:8d:23:fd:05:bd:42:51:0a: 14:bb:89:cc:ef:39:9c:59:42:71:f5:4a:99:63:1c:d3:63:ec: d7:52:0a:b0:e1:69:c9:1f:9e:d1:9e:6d:2c:ff:a3:89:d3:ef: c1:e6:33:da:bb:c9:5d:01:8a:ec:0c:1d:60:d6:9b:13:25:fc: 40:51:93:48:88:9a:95:e8:4d:e5:30:ed:c5:a5:43:c0:f9:13: 51:34:dd:f2:1b:b6:61:18:dd:f4:37:0d:6a:1e:2e:e6:e8:67: 05:e2:4a:80:3a:8f:ae:31:16:fd:93:b6:b7:80:19:11:91:76: 0b:69:4f:d7:c6:e1:4c:fd:a1:d0:ec:b4:c2:b2:cb:d7:c3:93: 4a:8c:ff:88:7e:c7:94:13:5c:6b:f2:8f:b7:ef:e0:3e:f8:c0: 0e:8f:bb:ab:ba:bc:f3:2d:ca:81:6e:a5:be:54:ba:b9:ab:97: 04:d7:3f:00:32:42:ac:26:fc:3a:e8:cd:7e:b3:20:d0:83:b3: b8:78:37:c0:fe:ab:e7:4d:83:58:8f:1d:31:fb:38:b3:48:27: 88:dd:8a:40:fa:83:79:da:a3:eb:f6:0d:29:8f:13:cd:73:9c: 39:ae:0e:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG RTE1MDcyMTkwHhcNMjUxMTAyMTUyNzMzWhcNMjUxMTA5MTUyNzMzWjAYMRYwFAYD VQQDEw02OTA3Nzg2NS0wZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMGCCbEfGYgJ/O8cZFgP9qmRCcdN8foSGBFtvFtPdSwiMGw5lXWIuZbSbdva IgyEBvOhsvwr5D+iUtlg25+JmDrnUawkgOdra7neNkhvC52j33TK2Onj/WvTbSg5 IfD7/EDE0wj/0ADAP9OQxlcgS6q7QdFUwHAg91Ln2wYUr3dAGts9n53PmOh2cFEf YDtc1p19MZIwMp0qD2jLjIajzV7FURLuHerkEC2VzRUx/C9nWi0aa+04HPaQBWA0 q5AY7/TYcZBl064ZA8F1YV5zlyFDV76+76V7RK68k1f5gka5NdbrEt5ipozstJ6M IaFl8Vc+dLPa1cgICEX4lhX4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlbgOdG EY8hRBYu/QJDh8Ed1YaHMB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz WmY5dlBpLXpOX3otRlFjaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO+mKeviCLo55Cdy8uYrjc2MhmP2dP6DBcd8QHjSP9Bb1CUQoUu4nM 7zmcWUJx9UqZYxzTY+zXUgqw4WnJH57Rnm0s/6OJ0+/B5jPau8ldAYrsDB1g1psT JfxAUZNIiJqV6E3lMO3FpUPA+RNRNN3yG7ZhGN30Nw1qHi7m6GcF4kqAOo+uMRb9 k7a3gBkRkXYLaU/XxuFM/aHQ7LTCssvXw5NKjP+IfseUE1xr8o+37+A++MAOj7ur urzzLcqBbqW+VLq5q5cE1z8AMkKsJvw66M1+syDQg7O4eDfA/qvnTYNYjx0x+ziz SCeI3YpA+oN52qPr9g0pjxPNc5w5rg79 -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:49 2025 by rpki-client