$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft File: WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json) Hash identifier: 5VAFmFdS4qXEsvKmXVl+vLtfVJ3R6LnoD+7zfDsa6h8= Subject key identifier: 4E:78:72:BB:3B:DE:84:7C:47:2D:1E:8C:8C:B8:C3:7A:D8:29:24:56 Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 Certificate issuer: /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft Manifest number: 071E Signing time: Sun 26 Oct 2025 22:38:59 +0000 Manifest this update: Sun 26 Oct 2025 22:38:59 +0000 Manifest next update: Sun 02 Nov 2025 22:38:58 +0000 Files and hashes: 1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: lWfOUUJe4o69b5HnT00kx4270TlZn0K/2k+ObneQ6+8=) 2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=) 3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 22:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Validity Not Before: Oct 26 22:38:59 2025 GMT Not After : Nov 2 22:38:58 2025 GMT Subject: CN=68fea303-55e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:d1:3c:96:6e:a0:bf:af:67:76:14:c8:42: 6e:e5:87:16:00:3d:e6:5b:2b:bc:ad:a7:63:01:58: a7:34:96:2a:45:db:3e:13:ae:da:b6:d8:dc:95:27: 09:5a:37:28:fe:a9:3c:84:ba:5b:df:2b:2d:b0:da: 9f:52:37:ae:10:53:b7:0e:17:da:e1:3e:a3:67:c4: c8:75:03:20:0c:ff:a9:1c:04:36:12:0d:59:65:32: 7f:b4:89:38:cf:a0:22:33:07:bf:b3:05:f4:e7:bd: 92:c7:dd:8e:f7:1f:5e:79:ee:a9:7e:ed:7d:37:cd: 5f:b2:af:55:e3:85:a3:28:68:5e:04:10:52:e0:27: 31:4e:ee:32:73:e1:60:55:e4:bd:c7:4a:6c:ef:5f: 44:b4:a9:4c:27:7e:7b:9a:c6:f7:1e:82:e5:d2:6c: 3a:ad:e9:16:e6:1f:35:0a:d0:59:de:1d:c5:56:78: 28:1c:e1:a1:be:c9:66:17:1e:b1:0d:0f:04:ff:a9: 47:d2:ce:af:b4:26:ab:4b:54:60:45:2b:ba:29:8e: f3:45:7e:62:e6:ba:0f:47:55:2d:fd:0c:3e:b4:0e: 65:9d:ce:50:29:62:49:f0:52:8a:5d:54:8f:fb:79: 09:c0:3c:0f:b0:06:07:89:c9:5b:08:10:3e:5f:15: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:78:72:BB:3B:DE:84:7C:47:2D:1E:8C:8C:B8:C3:7A:D8:29:24:56 X509v3 Authority Key Identifier: keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:21:9c:49:04:57:bc:e8:5a:36:33:31:e5:d7:c9:62:6d:16: e3:ab:98:c3:c2:59:f1:54:df:d0:6d:0e:79:48:b8:d7:d4:b4: b6:fa:bb:df:03:3c:ba:2f:84:33:76:95:fb:ec:6c:26:ea:35: bb:26:81:68:6e:5d:b5:1d:9d:b3:e4:c8:ca:08:90:d4:7d:7c: 6b:6f:e0:50:0e:5e:2a:d2:fd:5f:4f:3a:6e:9f:77:75:cc:a3: c4:63:63:8f:9a:5c:40:ca:88:37:c9:3f:95:46:26:62:9e:b5: d0:dd:61:36:0b:b3:af:81:28:c1:51:db:3c:a0:58:50:1c:26: 10:25:f2:ea:a8:8d:83:0d:ad:65:75:b1:ce:79:b1:e6:c2:7d: cb:f7:18:ca:1b:6b:d6:f9:ca:e2:3f:87:12:0c:e7:f0:b5:51: 16:67:3b:bc:6b:ad:9d:62:b6:ef:8e:3f:7e:72:1b:c8:98:84: ff:f1:ca:bb:53:10:06:0c:10:83:08:fd:04:0d:31:21:05:71: 7b:16:3b:c0:7a:73:dc:9e:95:c1:e4:cd:5d:4e:7a:c8:8d:18: 3d:98:9e:30:75:06:fa:a6:4e:f0:e1:e3:2b:43:b2:09:b0:ba: cf:9d:7e:84:1c:00:9a:2a:95:04:41:dc:ad:56:05:55:41:b7: 7a:11:c8:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1QjIxMTAvBgNVBAUTKDU4NDA4RDJDOUVGNzk5NTExQTZFNUQ3MEY4MkVDODY5 OTZGMzEzRjQwHhcNMjUxMDI2MjIzODU5WhcNMjUxMTAyMjIzODU4WjAYMRYwFAYD VQQDEw02OGZlYTMwMy01NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV3RPJZuoL+vZ3YUyEJu5YcWAD3mWyu8radjAVinNJYqRds+E67attjclScJ Wjco/qk8hLpb3ystsNqfUjeuEFO3Dhfa4T6jZ8TIdQMgDP+pHAQ2Eg1ZZTJ/tIk4 z6AiMwe/swX0572Sx92O9x9eee6pfu19N81fsq9V44WjKGheBBBS4CcxTu4yc+Fg VeS9x0ps719EtKlMJ357msb3HoLl0mw6rekW5h81CtBZ3h3FVngoHOGhvslmFx6x DQ8E/6lH0s6vtCarS1RgRSu6KY7zRX5i5roPR1Ut/Qw+tA5lnc5QKWJJ8FKKXVSP +3kJwDwPsAYHiclbCBA+XxUU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE54crs7 3oR8Ry0ejIy4w3rYKSRWMB8GA1UdIwQYMBaAFFhAjSye95lRGm5dcPguyGmW8xP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVCMi8yMDhGRjlEMjU3 NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21WRWFibDF3LUM3SWFaYnpF X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dFQ05MSjczbVZFYWJsMXctQzdJYVpiekVfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVCMi8yMDhGRjlEMjU3NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21W RWFibDF3LUM3SWFaYnpFX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwIZxJBFe86Fo2MzHl18libRbjq5jDwlnxVN/QbQ55SLjX1LS2+rvf Azy6L4QzdpX77Gwm6jW7JoFobl21HZ2z5MjKCJDUfXxrb+BQDl4q0v1fTzpun3d1 zKPEY2OPmlxAyog3yT+VRiZinrXQ3WE2C7OvgSjBUds8oFhQHCYQJfLqqI2DDa1l dbHOebHmwn3L9xjKG2vW+criP4cSDOfwtVEWZzu8a62dYrbvjj9+chvImIT/8cq7 UxAGDBCDCP0EDTEhBXF7FjvAenPcnpXB5M1dTnrIjRg9mJ4wdQb6pk7w4eMrQ7IJ sLrPnX6EHACaKpUEQdytVgVVQbd6Ecjj -----END CERTIFICATE-----Generated at Tue Oct 28 12:56:02 2025 by rpki-client