$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: ndcFXyCdyePiMtY/UPX7VIra6WgF9RnW1wI4ndOvj+4= Subject key identifier: 7E:99:D7:94:06:10:62:8D:A5:B3:FB:70:1B:55:1B:1D:6D:D9:AD:58 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 09CF Signing time: Mon 20 Oct 2025 20:48:45 +0000 Manifest this update: Mon 20 Oct 2025 20:48:44 +0000 Manifest next update: Mon 27 Oct 2025 20:48:44 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: SBI/FkSAWW3kHPE1XhevVfI8IMVG+ergAViPMkdaXfI=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Oct 20 20:48:44 2025 GMT Not After : Oct 27 20:48:44 2025 GMT Subject: CN=68f6a02d-54cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:da:ca:4b:79:ff:9c:80:62:6e:a0:11:b1: 19:2d:27:8a:22:66:0f:14:3b:a6:15:53:e6:a3:34: f0:2f:2c:06:fc:7f:5d:ed:04:19:0e:3a:91:24:b7: e1:02:f2:16:3e:e0:02:2c:e6:7c:68:86:cc:ed:19: c1:29:74:4b:60:1e:3d:c3:83:4e:8f:41:17:8d:52: bd:f4:cc:a1:0f:38:3b:e0:22:ca:f1:51:ea:f4:bb: 7c:9f:45:0f:c9:a4:3e:7d:4e:f6:96:cd:74:f7:11: 20:c1:d5:da:b9:0e:43:93:a5:e3:83:66:1e:28:98: 3d:e2:c1:78:f4:6f:a8:ee:ac:a9:55:92:a2:7d:76: 1f:1a:7f:9e:74:d9:5f:e5:c3:05:c1:77:9f:4e:a1: 29:ff:87:86:a3:63:b1:8c:e3:1c:cf:55:5d:33:c3: c7:86:d8:d3:36:30:2f:8f:29:90:db:37:a9:3e:5c: 0e:dd:f5:ff:45:14:1b:4b:68:d4:a7:fd:b2:13:e2: 76:b0:08:a6:a6:06:7c:c7:09:2d:e7:76:be:2c:3c: 77:4f:df:a4:6b:03:fa:1b:1a:31:e3:47:99:09:92: 9f:93:a6:ac:8b:1e:b9:d5:35:e4:e3:59:b6:f7:c4: b0:8d:f5:38:02:5c:86:0e:5a:2a:a0:25:e6:c4:d2: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:99:D7:94:06:10:62:8D:A5:B3:FB:70:1B:55:1B:1D:6D:D9:AD:58 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:6e:45:07:d5:0a:e6:10:cd:b5:24:90:32:bb:a2:55:14:87: fd:d1:2d:fa:95:58:79:d9:3e:0e:89:dc:49:30:7e:80:09:1f: e6:9b:04:2d:c5:d8:c9:1f:40:31:93:28:74:d7:1e:98:5e:ff: f5:e9:53:07:d7:e1:68:bb:26:eb:e8:9f:a4:46:c0:89:50:cf: 21:a9:32:ae:e2:f1:fd:d6:c0:f3:cf:17:32:46:11:57:ab:4c: 1f:72:5b:16:42:a4:d4:22:d3:2e:68:ed:0c:2a:5a:bf:90:3b: 95:9c:22:ef:a4:1b:fa:5d:00:de:e5:4f:b1:e8:be:96:fa:ce: d7:44:81:5e:50:fb:d0:b7:ad:51:22:96:0b:35:f3:fb:84:b3: 66:82:e2:37:fa:41:01:ed:27:82:2a:7b:a1:1b:22:b4:67:62: 34:4c:96:2b:32:e9:26:ce:80:65:d9:a0:38:c6:5c:74:18:e8: 59:ff:c4:1d:6e:4c:90:39:17:c1:f5:60:11:b9:75:41:f3:a1: 37:42:9c:09:82:3d:b3:aa:2b:44:90:59:45:b3:ae:42:02:1d: 05:0c:7c:be:33:e5:a8:e6:dc:60:7f:91:fd:5e:cb:18:f2:25: 84:30:02:6a:a9:b7:29:df:53:dc:c3:ec:4e:28:8f:2e:14:aa: ed:79:8f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUxMDIwMjA0ODQ0WhcNMjUxMDI3MjA0ODQ0WjAYMRYwFAYD VQQDEw02OGY2YTAyZC01NGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdTaykt5/5yAYm6gEbEZLSeKImYPFDumFVPmozTwLywG/H9d7QQZDjqRJLfh AvIWPuACLOZ8aIbM7RnBKXRLYB49w4NOj0EXjVK99MyhDzg74CLK8VHq9Lt8n0UP yaQ+fU72ls109xEgwdXauQ5Dk6Xjg2YeKJg94sF49G+o7qypVZKifXYfGn+edNlf 5cMFwXefTqEp/4eGo2OxjOMcz1VdM8PHhtjTNjAvjymQ2zepPlwO3fX/RRQbS2jU p/2yE+J2sAimpgZ8xwkt53a+LDx3T9+kawP6Gxox40eZCZKfk6asix651TXk41m2 98SwjfU4AlyGDloqoCXmxNKWhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6Z15QG EGKNpbP7cBtVGx1t2a1YMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAibkUH1QrmEM21JJAyu6JVFIf90S36lVh52T4OidxJMH6ACR/mmwQt xdjJH0Axkyh01x6YXv/16VMH1+Fouybr6J+kRsCJUM8hqTKu4vH91sDzzxcyRhFX q0wfclsWQqTUItMuaO0MKlq/kDuVnCLvpBv6XQDe5U+x6L6W+s7XRIFeUPvQt61R IpYLNfP7hLNmguI3+kEB7SeCKnuhGyK0Z2I0TJYrMukmzoBl2aA4xlx0GOhZ/8Qd bkyQORfB9WARuXVB86E3QpwJgj2zqitEkFlFs65CAh0FDHy+M+Wo5txgf5H9XssY 8iWEMAJqqbcp31Pcw+xOKI8uFKrteY9A -----END CERTIFICATE-----Generated at Wed Oct 22 07:46:35 2025 by rpki-client