$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: UVYzjMJYL9OGRYpeSKLNJzreyT/HbddYr4td1RBUyxw= Subject key identifier: 51:16:94:93:1F:68:26:DD:7D:6D:59:4C:82:B2:0E:F5:39:6A:B4:C4 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: DE Signing time: Wed 05 Nov 2025 05:41:41 +0000 Manifest this update: Wed 05 Nov 2025 05:41:40 +0000 Manifest next update: Wed 12 Nov 2025 05:41:40 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: Xu15N7YU8d1yp9GWr9zLU9/HTBH1THc7U0I7p3yUj8o=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: S//h0FvEyaMaAGxiOxnAlzaIIXmPhHgkfb3U/Ur0Y5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Nov 5 05:41:40 2025 GMT Not After : Nov 12 05:41:40 2025 GMT Subject: CN=690ae394-013f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:22:7b:d0:c7:4b:e1:04:7f:3c:4d:47:4e: 6c:1f:fd:f6:2a:1d:bf:35:cd:bd:c4:45:84:24:45: 1e:f0:e0:69:06:f7:ef:40:94:c4:65:9c:e8:55:2d: ee:74:ca:6c:97:ec:7f:74:3b:9e:ee:12:fd:fe:fd: 37:7e:46:51:9a:cb:c0:c6:aa:bc:ab:cf:45:e6:99: 52:57:3e:3c:e4:bd:da:6e:c6:6d:19:ad:50:6a:6e: f0:40:35:76:07:2e:ca:4f:f8:b1:06:82:ca:60:1d: ee:7d:38:eb:00:72:01:6f:6b:12:3f:64:a6:cd:1e: 2f:19:32:24:75:7b:5f:b1:0d:8a:da:4d:b2:19:3e: 0e:fb:fc:0e:18:4f:6b:7a:1e:16:b9:36:85:6f:50: 28:f8:ca:4d:34:18:63:dc:6e:53:6d:75:91:f4:36: 28:40:21:d4:28:69:ea:70:18:0f:64:17:05:55:7e: 9f:31:dd:b3:fe:3d:c8:39:3f:d0:8d:58:38:44:ee: ed:03:15:bb:9c:ae:15:b8:92:86:3d:2e:dc:ea:3f: 8e:4d:70:b6:d4:7b:ea:8e:83:25:be:fb:1b:76:f7: 74:57:0d:02:61:96:07:d8:74:ab:03:87:ac:a7:2d: 01:f3:48:13:ff:ea:4f:00:4f:cc:9c:6b:3c:0a:09: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:94:93:1F:68:26:DD:7D:6D:59:4C:82:B2:0E:F5:39:6A:B4:C4 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:69:4d:01:dd:a4:26:73:22:55:f2:7c:b2:4f:7e:61:d2:93: c5:c2:67:25:bd:46:06:9e:ba:05:7c:a4:0d:76:dc:55:ac:1b: cd:6c:98:20:ad:c7:66:c9:bc:55:48:f7:5c:0a:d5:9d:ce:ae: d8:18:66:a5:48:de:59:83:db:14:56:ee:8b:81:64:06:12:f3: b1:ec:cd:63:1e:40:33:12:06:d3:a1:66:58:c3:7b:21:75:01: 6d:50:56:56:88:d8:9e:3a:17:0b:8e:ae:7a:fe:db:0c:e3:e9: 8d:80:c0:64:4c:26:9e:20:9d:a2:4d:ea:84:c2:d1:23:61:7a: c9:c5:82:de:31:30:fb:26:d0:d6:d6:8d:3a:f3:80:b4:69:a2: 93:05:ce:90:43:46:35:00:d6:9f:a9:77:7d:88:40:63:42:94: 93:11:e0:9b:5f:5e:ad:62:0b:61:59:d0:c6:bb:25:2f:fc:98: c1:18:3d:57:bc:d9:53:a4:b3:66:00:b3:ee:8e:cb:77:18:24: 1e:3c:8d:88:5f:fe:ec:e9:c5:db:96:b3:3d:69:54:ed:52:eb: 60:bf:3a:27:a0:7b:c5:26:da:58:b9:aa:69:b0:07:fb:53:ce: c6:3e:e0:2f:5f:c0:d0:62:e3:f2:9e:bb:ca:f1:f3:d8:23:a7: a3:a5:69:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUxMTA1MDU0MTQwWhcNMjUxMTEyMDU0MTQwWjAYMRYwFAYD VQQDEw02OTBhZTM5NC0wMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Y0ie9DHS+EEfzxNR05sH/32Kh2/Nc29xEWEJEUe8OBpBvfvQJTEZZzoVS3u dMpsl+x/dDue7hL9/v03fkZRmsvAxqq8q89F5plSVz485L3absZtGa1Qam7wQDV2 By7KT/ixBoLKYB3ufTjrAHIBb2sSP2SmzR4vGTIkdXtfsQ2K2k2yGT4O+/wOGE9r eh4WuTaFb1Ao+MpNNBhj3G5TbXWR9DYoQCHUKGnqcBgPZBcFVX6fMd2z/j3IOT/Q jVg4RO7tAxW7nK4VuJKGPS7c6j+OTXC21HvqjoMlvvsbdvd0Vw0CYZYH2HSrA4es py0B80gT/+pPAE/MnGs8Cgn6eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEWlJMf aCbdfW1ZTIKyDvU5arTEMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlaU0B3aQmcyJV8nyyT35h0pPFwmclvUYGnroFfKQNdtxVrBvNbJgg rcdmybxVSPdcCtWdzq7YGGalSN5Zg9sUVu6LgWQGEvOx7M1jHkAzEgbToWZYw3sh dQFtUFZWiNieOhcLjq56/tsM4+mNgMBkTCaeIJ2iTeqEwtEjYXrJxYLeMTD7JtDW 1o0684C0aaKTBc6QQ0Y1ANafqXd9iEBjQpSTEeCbX16tYgthWdDGuyUv/JjBGD1X vNlTpLNmALPujst3GCQePI2IX/7s6cXblrM9aVTtUutgvzonoHvFJtpYuappsAf7 U87GPuAvX8DQYuPynrvK8fPYI6ejpWmE -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:06 2025 by rpki-client