$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json) Hash identifier: lfWfOyT9T+SGA/6rEWpC2WIJoOWh8rG5RBU7uuuNxZs= Subject key identifier: 51:D2:BC:B7:9E:BA:40:86:E0:AF:6F:6C:A6:0A:F7:90:72:9F:BA:BB Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft Manifest number: 031D Signing time: Thu 23 Oct 2025 02:29:34 +0000 Manifest this update: Thu 23 Oct 2025 02:29:34 +0000 Manifest next update: Thu 30 Oct 2025 02:29:34 +0000 Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: j3xaSG53GzTL65LtNQZrF8Q3Fd3/P+oJL5NmGyEBEVY=) 2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: 7fAydexKXPdZvEhVXyfnP9N5MybcBu9GtBprbPNnugw=) 3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: dvzhA8SmNiPJaXBGb4hu0iK1TSWFRqrP4dxIxnPOkaQ=) 4: 8409527078B011EE8D737723C4F9AE02.roa (hash: Smslgu7rJqUTUi4Mp8vBgW1QUKGuNL2tLBKb/4Rsvdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Oct 23 02:29:34 2025 GMT Not After : Oct 30 02:29:34 2025 GMT Subject: CN=68f9930e-d4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:0b:89:39:06:a7:e5:d9:bc:1d:f1:ee:f2: 69:b0:c6:53:72:8a:1b:ba:11:56:35:ec:8f:dc:26: 9b:5f:e3:c7:35:fc:d6:f2:c6:8c:9f:85:03:ef:84: f5:fb:3b:55:89:e3:6f:d3:a2:29:4e:8f:5e:71:26: 38:35:fd:02:0c:b4:fa:c4:a5:3c:65:ef:19:d3:eb: 8d:0a:bb:0d:e7:22:c3:d2:1c:42:d0:49:67:b6:b9: b7:05:ba:08:c5:0c:4a:47:cf:df:3f:bb:d7:82:13: 46:29:5f:3e:e7:6e:23:4d:0e:bf:5f:f3:f8:d6:96: 3b:2c:28:9b:9f:f8:92:34:5a:86:b8:0e:05:9a:eb: 6c:79:41:f1:03:56:50:99:88:cd:38:57:47:ef:16: e0:87:62:4b:84:18:12:07:df:89:d1:aa:84:1d:63: c6:6d:36:27:00:f7:6a:4f:e0:ec:ba:b2:35:1f:54: f0:1d:6b:cd:e9:f0:19:5a:48:9c:e3:e0:b7:e5:0b: fe:34:dc:4d:b9:46:4b:4b:1a:80:50:3c:82:d2:55: c1:21:fe:0d:bf:eb:34:5b:b6:51:de:a7:93:1a:6a: 44:4a:68:74:68:e9:81:44:19:0a:4d:75:87:52:fc: 27:45:77:fc:cb:71:55:c3:c5:db:b9:a3:f2:de:f6: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D2:BC:B7:9E:BA:40:86:E0:AF:6F:6C:A6:0A:F7:90:72:9F:BA:BB X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b0:2c:ff:6e:30:17:30:35:92:85:2d:22:34:0d:58:a0:64: ca:90:1d:8a:f2:39:3f:b7:b7:7c:c1:e9:2d:27:0f:89:9a:5e: 0e:3e:12:82:64:a5:cf:4b:8d:f7:04:ff:29:8b:99:63:d0:02: d9:29:02:9f:ef:43:96:30:f8:34:59:d6:b8:8f:6f:5c:0a:86: 35:aa:ce:ba:3b:87:83:61:c3:34:4a:56:27:20:5e:b9:51:5e: 3f:32:63:8e:c5:4e:04:fa:38:21:b2:10:63:d1:9b:5f:a2:9f: fb:4a:88:20:12:00:04:67:24:07:22:d4:70:c1:05:c6:cf:4f: ef:13:b4:a0:71:ee:d6:c9:b7:d9:e4:4a:a3:f3:14:49:da:c3: 0d:cc:9d:d5:7d:b5:00:7c:1e:92:c1:65:2c:df:7f:7a:f8:dc: 4e:b0:f2:15:07:8f:23:01:20:04:08:c4:f1:9a:5b:53:72:fd: 15:c2:16:ed:c4:e7:f7:89:ef:d5:8f:89:56:3b:5a:b7:50:cb: 5e:13:a9:ec:58:59:33:97:82:84:ef:89:94:98:71:99:ae:53: b0:17:88:66:a9:2e:db:7c:4a:31:70:56:73:2d:90:91:ae:0a: a8:bc:e1:46:14:d4:20:88:ab:95:23:6f:9e:ac:ee:d1:d6:39: fb:a8:12:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjUxMDIzMDIyOTM0WhcNMjUxMDMwMDIyOTM0WjAYMRYwFAYD VQQDEw02OGY5OTMwZS1kNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ikLiTkGp+XZvB3x7vJpsMZTcoobuhFWNeyP3CabX+PHNfzW8saMn4UD74T1 +ztVieNv06IpTo9ecSY4Nf0CDLT6xKU8Ze8Z0+uNCrsN5yLD0hxC0Elntrm3BboI xQxKR8/fP7vXghNGKV8+524jTQ6/X/P41pY7LCibn/iSNFqGuA4FmutseUHxA1ZQ mYjNOFdH7xbgh2JLhBgSB9+J0aqEHWPGbTYnAPdqT+DsurI1H1TwHWvN6fAZWkic 4+C35Qv+NNxNuUZLSxqAUDyC0lXBIf4Nv+s0W7ZR3qeTGmpESmh0aOmBRBkKTXWH UvwnRXf8y3FVw8XbuaPy3vbfgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHSvLee ukCG4K9vbKYK95Byn7q7MB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTJGQi9FMEQ2NDUxNEVEMUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3 N2NLNHc3NG1PLTJ3ek92QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFsCz/bjAXMDWShS0iNA1YoGTKkB2K8jk/t7d8wektJw+Jml4OPhKC ZKXPS433BP8pi5lj0ALZKQKf70OWMPg0Wda4j29cCoY1qs66O4eDYcM0SlYnIF65 UV4/MmOOxU4E+jghshBj0Ztfop/7SoggEgAEZyQHItRwwQXGz0/vE7Sgce7WybfZ 5Eqj8xRJ2sMNzJ3VfbUAfB6SwWUs3396+NxOsPIVB48jASAECMTxmltTcv0Vwhbt xOf3ie/Vj4lWO1q3UMteE6nsWFkzl4KE74mUmHGZrlOwF4hmqS7bfEoxcFZzLZCR rgqovOFGFNQgiKuVI2+erO7R1jn7qBIr -----END CERTIFICATE-----Generated at Thu Oct 23 19:26:01 2025 by rpki-client