$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: w4PaBEXT0lx0FOG/Ad+LeievYBt53BgsKAz1amekWIA= Subject key identifier: 25:4A:3D:A9:1D:26:EB:80:8D:1E:97:BC:50:EE:D8:46:E2:5B:29:E5 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: C0 Signing time: Wed 05 Nov 2025 06:15:29 +0000 Manifest this update: Wed 05 Nov 2025 06:15:28 +0000 Manifest next update: Wed 12 Nov 2025 06:15:28 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: AECMeDzeX3SUZkNQ/EC3pTe2BaLkd2gygkejBfv2+nY=) 2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: 6mMgJQqrTt//DicYwifA+2B1HPeEaPw9MesPtrZauGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Nov 5 06:15:28 2025 GMT Not After : Nov 12 06:15:28 2025 GMT Subject: CN=690aeb80-2397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:66:f5:1b:e7:c8:43:b5:db:12:4a:15:80: 7c:5d:f7:e9:05:86:c6:89:b4:9b:17:ec:87:fe:83: e0:d7:b7:7d:f2:f8:f7:a9:7b:1a:e8:52:59:9d:87: 35:d1:0e:ea:1b:15:56:f3:91:a1:da:72:b6:b7:b6: 37:2c:fa:4e:14:5b:e3:d0:a5:6e:76:26:10:da:e7: 62:e5:a7:e1:0a:72:b6:38:e5:31:a5:7a:90:b3:8b: da:23:68:03:67:1d:fc:ab:7a:fc:27:b6:35:0c:57: 4d:c0:44:03:18:8e:c6:9b:70:c0:f2:50:e3:9e:55: 2c:fb:71:61:14:fb:8c:25:80:ad:30:97:6d:c4:0b: 03:4a:7f:d7:d3:26:8e:4b:59:38:55:0e:8f:20:69: 76:fd:f7:25:c9:1d:89:10:0c:b7:9c:75:bf:52:7e: 3c:9a:2a:9d:40:c6:5f:36:ec:5f:a0:44:41:31:42: 63:46:e4:97:f1:b8:18:2f:33:1d:d0:e0:c4:d4:7e: 55:a2:db:c9:b4:8a:30:9b:14:fa:74:13:04:50:9e: c2:73:f7:11:2c:11:7d:a2:ad:d7:c1:29:e8:6d:9a: e5:49:65:b3:6f:d4:25:26:6a:dd:ee:7f:f3:43:4f: 84:e8:2c:d0:c9:d1:33:20:0b:db:2c:32:11:e4:92: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4A:3D:A9:1D:26:EB:80:8D:1E:97:BC:50:EE:D8:46:E2:5B:29:E5 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cf:22:0d:ac:da:47:12:c4:2d:a4:ce:74:c0:f6:c6:3e:97: 7f:77:05:45:89:de:ee:b8:53:2a:71:df:79:8a:12:8b:a2:ed: 10:2d:3a:8f:be:f1:d5:4e:f4:c4:d0:2e:53:52:bd:f7:f4:ea: a1:98:69:86:18:99:3e:5c:d0:57:dc:2a:e1:b7:51:bb:aa:53: dc:25:91:67:ab:4f:80:81:27:9d:4d:51:3d:7c:45:d9:ca:16: 06:d6:b4:d1:50:9c:14:35:aa:c2:e8:84:c3:6b:54:56:f0:e5: 0c:45:34:45:1d:7e:a2:80:54:02:08:01:73:a8:6f:14:77:69: d1:c3:71:5b:40:df:87:7e:5e:07:9a:02:2c:56:ef:63:7e:6e: d0:c8:fa:f9:70:fb:db:54:3d:d3:3c:03:83:88:73:b1:1f:1d: f7:02:94:cf:7f:f0:33:7e:0a:0d:6e:1f:9e:af:57:68:ec:32: 9b:d7:1c:dc:a5:eb:ac:36:2d:94:27:4e:dd:8e:9f:0b:aa:57: 71:d2:5e:5c:c6:be:87:3d:c2:da:f1:99:22:1c:9a:dc:25:84: 97:8a:40:64:66:2f:ad:6b:9c:59:71:b3:83:7f:62:40:d6:96: 9a:46:5e:e2:5e:26:74:2c:89:3e:18:ac:6f:d0:d7:b3:56:ad: b6:b1:ae:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKDVBNTZDNERFOTQyM0I5RTJCODAwQUI3RTA0MERDQTNF MDlGMjM0NzUwHhcNMjUxMTA1MDYxNTI4WhcNMjUxMTEyMDYxNTI4WjAYMRYwFAYD VQQDEw02OTBhZWI4MC0yMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlY5m9RvnyEO12xJKFYB8XffpBYbGibSbF+yH/oPg17d98vj3qXsa6FJZnYc1 0Q7qGxVW85Gh2nK2t7Y3LPpOFFvj0KVudiYQ2udi5afhCnK2OOUxpXqQs4vaI2gD Zx38q3r8J7Y1DFdNwEQDGI7Gm3DA8lDjnlUs+3FhFPuMJYCtMJdtxAsDSn/X0yaO S1k4VQ6PIGl2/fclyR2JEAy3nHW/Un48miqdQMZfNuxfoERBMUJjRuSX8bgYLzMd 0ODE1H5VotvJtIowmxT6dBMEUJ7Cc/cRLBF9oq3XwSnobZrlSWWzb9QlJmrd7n/z Q0+E6CzQydEzIAvbLDIR5JIkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVKPakd JuuAjR6XvFDu2EbiWynlMB8GA1UdIwQYMBaAFFpWxN6UI7niuACrfgQNyj4J8jR1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84M0ZENkIyRUE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVlSzRBS3QtQkEzS1BnbnlO SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84M0ZENkIyRUE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVl SzRBS3QtQkEzS1BnbnlOSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9zyINrNpHEsQtpM50wPbGPpd/dwVFid7uuFMqcd95ihKLou0QLTqP vvHVTvTE0C5TUr339OqhmGmGGJk+XNBX3Crht1G7qlPcJZFnq0+AgSedTVE9fEXZ yhYG1rTRUJwUNarC6ITDa1RW8OUMRTRFHX6igFQCCAFzqG8Ud2nRw3FbQN+Hfl4H mgIsVu9jfm7QyPr5cPvbVD3TPAODiHOxHx33ApTPf/AzfgoNbh+er1do7DKb1xzc peusNi2UJ07djp8Lqldx0l5cxr6HPcLa8ZkiHJrcJYSXikBkZi+ta5xZcbODf2JA 1paaRl7iXiZ0LIk+GKxv0NezVq22sa4l -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:23 2025 by rpki-client