$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: bUDKPQ5aP+MrdS0jDKZCaYipgMZ+s+z9oyxHErmksxU= Subject key identifier: F6:E5:12:A2:A9:69:1C:E9:0D:32:7A:C5:AA:D4:BA:09:80:56:4E:81 Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: AC Signing time: Wed 05 Nov 2025 05:20:05 +0000 Manifest this update: Wed 05 Nov 2025 05:20:05 +0000 Manifest next update: Wed 12 Nov 2025 05:20:05 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: gQdcg8ML7DNtaw0Mo38a63lUztGkOqVknW5+qgrd+bQ=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: aY02E3irzGto2CDBM82Hws7+3Xp8gIBSyGbYsCwSjsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Nov 5 05:20:05 2025 GMT Not After : Nov 12 05:20:05 2025 GMT Subject: CN=690ade85-53a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:2d:3e:fa:c6:00:2a:c1:b3:41:9a:8f:13: 69:3d:c2:ba:3a:23:e0:e6:f8:a0:c9:3f:df:3e:86: d4:59:58:1e:21:b2:f1:3b:e9:c7:26:00:78:54:1f: b5:a3:dd:2e:d4:98:47:2a:39:8a:16:41:80:f9:42: bc:77:17:05:fb:b1:cd:f4:7f:7b:f3:8f:9d:fa:26: 32:08:08:1d:c4:2b:ff:37:b2:88:57:f1:a5:75:84: c6:a6:45:70:98:97:c3:f9:fa:20:ac:24:dc:dc:e7: 3d:cb:1e:40:dd:3a:ff:7c:d8:0f:0e:0c:e1:b6:e1: 0c:c7:4a:90:3b:8e:85:8c:ef:1f:ab:a1:a6:38:e9: a5:9f:07:01:92:ae:aa:42:22:50:29:f9:f1:88:a3: 31:05:18:63:e5:0a:c5:00:fe:b7:55:53:90:8f:d2: 25:ac:ca:85:fe:1d:e1:23:23:72:5a:0d:25:ad:94: 8c:48:7d:88:d9:09:b5:92:95:47:7c:0c:a2:d8:ae: 47:49:ec:76:68:ee:e6:56:77:f7:48:85:19:99:5d: 99:3d:fb:af:0e:63:05:dd:4a:5f:e2:54:2e:8f:be: 75:6e:15:0a:18:05:21:28:02:a9:7e:a3:5b:f9:03: 13:ad:0f:89:b8:12:da:7f:00:e6:16:fc:9c:b2:a0: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E5:12:A2:A9:69:1C:E9:0D:32:7A:C5:AA:D4:BA:09:80:56:4E:81 X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:31:8a:d8:e0:84:a7:f5:b4:09:7b:ab:03:a6:0d:3b:06:ab: f9:ba:de:59:e1:f3:7a:21:26:7b:ec:36:16:4a:59:76:33:04: 4f:ea:fc:a7:59:14:48:b3:53:6d:78:f6:30:80:a5:99:be:c8: d7:d0:1a:a1:6c:4b:90:02:30:cd:b4:0f:ae:cc:d7:84:b5:5a: 90:a9:7e:8e:a0:d2:3b:8e:bd:54:0b:34:a2:2a:6a:b6:b4:67: 48:4e:30:ba:16:24:3b:c7:55:62:02:6c:94:49:2c:d4:fc:f2: 32:1e:54:0e:26:41:d6:36:6a:9f:48:b4:99:6c:18:bf:b2:fa: 81:11:33:ad:76:d3:20:0c:93:a5:41:dc:6f:e8:b0:e9:51:80: da:7c:da:1d:85:05:68:48:c2:1d:05:c7:77:3e:62:7c:4c:86: 4b:b2:22:87:be:98:5b:c0:e3:29:09:75:b7:f4:8d:78:60:c2: a5:76:99:8b:dc:dd:0d:f7:9c:1f:37:c8:08:f8:43:de:41:bc: 2c:d5:50:f4:3a:3a:42:23:b8:88:45:9d:e8:db:f7:86:b4:c9: 81:60:74:b1:2c:20:cd:16:9b:a5:bb:88:4e:18:f8:81:33:54: 23:d1:bb:be:f9:a9:e0:97:98:90:26:34:55:c4:07:e2:ea:b6: ba:c5:59:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEMxM0E4QUJENTcwNDNBQUZBNThGNTg1M0JFMkZBQkNB OUYyNkYwRUQwHhcNMjUxMTA1MDUyMDA1WhcNMjUxMTEyMDUyMDA1WjAYMRYwFAYD VQQDEw02OTBhZGU4NS01M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6AtPvrGACrBs0GajxNpPcK6OiPg5vigyT/fPobUWVgeIbLxO+nHJgB4VB+1 o90u1JhHKjmKFkGA+UK8dxcF+7HN9H9784+d+iYyCAgdxCv/N7KIV/GldYTGpkVw mJfD+fogrCTc3Oc9yx5A3Tr/fNgPDgzhtuEMx0qQO46FjO8fq6GmOOmlnwcBkq6q QiJQKfnxiKMxBRhj5QrFAP63VVOQj9IlrMqF/h3hIyNyWg0lrZSMSH2I2Qm1kpVH fAyi2K5HSex2aO7mVnf3SIUZmV2ZPfuvDmMF3Upf4lQuj751bhUKGAUhKAKpfqNb +QMTrQ+JuBLafwDmFvycsqB2HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPblEqKp aRzpDTJ6xarUugmAVk6BMB8GA1UdIwQYMBaAFME6ir1XBDqvpY9YU74vq8qfJvDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC9FNkY2NkREMkJF QzMxMUVGQUZEQzFEMjlDNEY5QUUwMi93VHFLdlZjRU9xLWxqMWhUdmktcnlwOG04 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC9FNkY2NkREMkJFQzMxMUVGQUZEQzFEMjlDNEY5QUUwMi93VHFLdlZjRU9x LWxqMWhUdmktcnlwOG04TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNMYrY4ISn9bQJe6sDpg07Bqv5ut5Z4fN6ISZ77DYWSll2MwRP6vyn WRRIs1NtePYwgKWZvsjX0BqhbEuQAjDNtA+uzNeEtVqQqX6OoNI7jr1UCzSiKmq2 tGdITjC6FiQ7x1ViAmyUSSzU/PIyHlQOJkHWNmqfSLSZbBi/svqBETOtdtMgDJOl Qdxv6LDpUYDafNodhQVoSMIdBcd3PmJ8TIZLsiKHvphbwOMpCXW39I14YMKldpmL 3N0N95wfN8gI+EPeQbws1VD0OjpCI7iIRZ3o2/eGtMmBYHSxLCDNFpulu4hOGPiB M1Qj0bu++angl5iQJjRVxAfi6ra6xVnv -----END CERTIFICATE-----Generated at Thu Nov 6 05:53:42 2025 by rpki-client