$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: 7WMPZwZKVBqbi6oszrxin/1ui3gqXPhSmr0A2UG0F3I= Subject key identifier: 76:BC:D6:A5:AD:76:59:5C:E3:C5:3A:8E:85:28:95:6F:90:A4:73:0E Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 01B7 Signing time: Mon 03 Nov 2025 03:03:53 +0000 Manifest this update: Mon 03 Nov 2025 03:03:53 +0000 Manifest next update: Mon 10 Nov 2025 03:03:53 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: u1kr0lQsVF5F9BcZRpRcDdaXJchA2G+4dnuA2oOkk0g=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1, serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: Nov 3 03:03:53 2025 GMT Not After : Nov 10 03:03:53 2025 GMT Subject: CN=69081b99-2dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:37:ac:ca:7c:ad:63:0e:12:fb:4c:fe:50: 56:46:5f:b8:a9:2f:41:a6:e7:e8:7a:20:9b:42:8d: 56:30:7a:97:6b:75:47:96:85:6f:4a:98:43:24:60: f1:68:1a:4d:b8:9d:21:df:85:13:d2:96:c2:69:22: 10:32:de:4f:5c:f3:16:26:c1:bf:fc:32:3a:6b:24: 87:39:a5:61:0d:25:b7:d4:52:54:b1:56:ad:b7:e2: e1:a4:f4:49:c9:9c:e1:92:34:01:28:d6:31:90:1a: 16:84:17:63:44:22:95:32:bf:20:c8:e8:da:9c:41: 05:7e:ef:1d:17:ea:4a:5f:e3:45:e2:df:41:e0:98: 7d:78:91:96:17:26:ac:a7:a2:b8:9e:6d:4d:cc:64: 38:c0:39:5a:fe:5a:40:59:ba:33:31:2d:f9:c9:87: b7:d7:f4:06:50:8a:f9:51:4b:e1:fd:72:a7:ee:e2: b9:c1:86:7b:6a:ac:9a:d9:9f:7f:33:43:17:80:64: b3:f0:26:3b:69:07:83:76:fb:5e:45:84:ed:b8:03: 06:53:fe:48:79:05:c6:bf:65:e6:00:20:20:f1:9c: 3e:c8:f8:a2:06:d4:2c:90:5c:87:96:65:4f:0b:75: 1c:14:49:2f:1c:5c:db:da:69:e3:13:ab:2b:44:3d: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BC:D6:A5:AD:76:59:5C:E3:C5:3A:8E:85:28:95:6F:90:A4:73:0E X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:95:e9:65:33:e7:36:9c:89:87:2b:ec:34:9e:76:cc:a2:c6: bb:f0:33:43:3c:c1:64:e3:a9:50:1c:be:49:c8:ff:05:ca:15: f1:92:e3:0f:e8:dc:c7:ba:56:4a:17:12:0c:48:63:dd:e9:14: a3:c2:2f:1a:22:fb:59:68:b3:ce:eb:cb:e2:b2:56:ba:0d:78: 71:57:74:c8:fd:6e:55:e8:49:0e:50:56:21:b7:7c:b0:5d:df: 36:c6:ed:d1:d6:c9:ec:a5:55:d1:4f:71:69:39:c9:e6:e4:e0: ef:2c:50:81:f9:7b:88:83:51:c1:1e:8d:50:e2:5e:70:a9:a1: 6e:ea:0c:4b:b8:a9:f1:8b:ab:2b:6a:54:62:4a:b8:46:bb:ec: 2f:34:bc:c7:51:58:b8:36:16:c5:08:d0:f5:f7:a9:15:2c:89: 9e:ee:0a:8d:57:2d:b4:2e:33:b3:aa:87:b0:f6:b4:b5:e8:60: 3d:12:03:42:c9:1a:50:df:da:ab:c6:5e:74:a5:48:b6:b3:c3: 79:5b:15:69:82:76:5d:28:6e:1d:0b:00:1a:82:1b:12:32:6e: 08:b9:1a:f1:ad:e2:16:49:c7:f5:b6:36:04:10:d6:0c:d4:7e: 4a:10:ba:e1:fc:8b:21:7a:cf:69:e8:ac:d8:dd:a2:72:4a:61: 37:16:31:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUxMTAzMDMwMzUzWhcNMjUxMTEwMDMwMzUzWjAYMRYwFAYD VQQDEw02OTA4MWI5OS0yZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlE3rMp8rWMOEvtM/lBWRl+4qS9BpufoeiCbQo1WMHqXa3VHloVvSphDJGDx aBpNuJ0h34UT0pbCaSIQMt5PXPMWJsG//DI6aySHOaVhDSW31FJUsVatt+LhpPRJ yZzhkjQBKNYxkBoWhBdjRCKVMr8gyOjanEEFfu8dF+pKX+NF4t9B4Jh9eJGWFyas p6K4nm1NzGQ4wDla/lpAWbozMS35yYe31/QGUIr5UUvh/XKn7uK5wYZ7aqya2Z9/ M0MXgGSz8CY7aQeDdvteRYTtuAMGU/5IeQXGv2XmACAg8Zw+yPiiBtQskFyHlmVP C3UcFEkvHFzb2mnjE6srRD2xMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa81qWt dllc48U6joUolW+QpHMOMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblellM+c2nImHK+w0nnbMosa78DNDPMFk46lQHL5JyP8FyhXxkuMP 6NzHulZKFxIMSGPd6RSjwi8aIvtZaLPO68visla6DXhxV3TI/W5V6EkOUFYht3yw Xd82xu3R1snspVXRT3FpOcnm5ODvLFCB+XuIg1HBHo1Q4l5wqaFu6gxLuKnxi6sr alRiSrhGu+wvNLzHUVi4NhbFCND196kVLIme7gqNVy20LjOzqoew9rS16GA9EgNC yRpQ39qrxl50pUi2s8N5WxVpgnZdKG4dCwAaghsSMm4IuRrxreIWScf1tjYEENYM 1H5KELrh/Ishes9p6KzY3aJySmE3FjFv -----END CERTIFICATE-----Generated at Mon Nov 3 18:12:45 2025 by rpki-client