$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: d6A1W7NpaXtcqqW2m5NpZxohn3Vdr1AK5aTwJMw6lsI= Subject key identifier: AF:61:D4:6F:72:94:20:07:AD:04:1E:4C:01:3B:2A:4D:8F:12:B2:EE Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0C4D Signing time: Fri 24 Oct 2025 19:13:15 +0000 Manifest this update: Fri 24 Oct 2025 19:13:14 +0000 Manifest next update: Fri 31 Oct 2025 19:13:14 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: LbjqBQlDf9Z3/ozvzWZXJ6iHod4mrqTV6n4co0ccF7c=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Oct 24 19:13:14 2025 GMT Not After : Oct 31 19:13:14 2025 GMT Subject: CN=68fbcfca-58dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:0e:be:b8:35:d5:f7:d4:9a:2c:cb:7d:26: ed:98:47:a0:a6:f4:56:59:a7:3c:24:d3:5e:b7:18: aa:96:cd:1c:f0:b5:79:57:36:60:2b:0d:73:de:76: ca:89:1c:08:fe:0f:20:cb:cb:0e:44:31:e4:9b:63: 13:f6:5d:14:82:49:a5:24:90:93:2a:b1:55:5e:0d: 0b:c0:48:36:00:d9:fb:36:dd:6c:ea:79:ce:4d:05: ab:5c:02:04:1d:fa:06:c7:71:e3:e0:e9:f2:81:2d: d6:05:2d:fa:81:86:dc:66:fd:b6:dd:1c:3f:a7:5a: d8:0b:49:b4:69:95:dd:ea:7e:42:30:f5:bd:a1:e7: fc:f6:39:80:14:80:0e:8d:a1:04:27:18:66:de:38: d9:f5:c2:23:4a:09:54:2d:ca:f2:ab:5a:57:b7:65: cd:fc:d6:e0:0c:3a:97:b9:39:33:b3:46:fc:93:de: 42:43:1c:65:fb:5a:32:ab:db:51:14:32:14:a9:e5: a4:15:ed:80:dc:17:65:b4:0b:b6:5a:52:11:54:30: 84:75:f0:37:79:6e:0d:ad:19:06:c4:99:0e:87:1e: 15:de:e6:5b:5c:b1:fd:4c:b7:9f:8a:ae:c8:4a:eb: f2:94:0a:71:25:b2:89:b8:31:94:c3:1a:4a:4d:99: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:D4:6F:72:94:20:07:AD:04:1E:4C:01:3B:2A:4D:8F:12:B2:EE X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:af:5b:47:f8:33:71:a6:ac:55:5e:85:b1:fa:fb:15:4d:7a: b4:29:b9:96:29:9c:48:58:75:2a:69:56:d3:03:30:02:e0:de: cc:a8:41:91:3b:90:71:78:ff:48:68:3a:2d:0e:84:e6:67:19: db:f8:a8:2b:6b:e8:1e:d6:d6:e2:e2:ac:23:9b:06:56:6c:bc: a6:f8:80:95:24:bd:9c:db:5e:a4:1c:41:40:f5:53:45:43:26: bf:4d:e5:b0:7f:2a:23:66:90:47:46:2a:ec:a7:83:b5:14:eb: 5c:1c:20:03:64:7d:e2:a7:f4:32:cf:8e:80:55:87:06:58:0e: 96:22:54:65:f8:31:9c:f0:70:fa:50:40:82:18:79:8a:c0:32: a0:23:c0:fe:b2:ab:d1:e0:26:ce:a6:f5:a9:8b:28:e8:e8:ef: 86:94:a5:16:20:84:84:86:b9:e4:ff:dc:fa:48:15:7a:f9:2e: 11:0b:ef:ab:6d:dd:7f:86:43:c6:bc:08:0d:88:1a:09:87:fa: 24:b1:5a:6a:16:41:77:ae:be:14:2d:33:cd:4d:23:6b:35:e4: 7a:e0:cd:84:41:b8:af:8f:72:a4:e0:38:b7:82:ab:41:e1:07: 16:d2:92:1a:51:74:81:be:57:0f:cc:0a:6e:5c:ac:a3:27:c4: f1:14:df:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjUxMDI0MTkxMzE0WhcNMjUxMDMxMTkxMzE0WjAYMRYwFAYD VQQDEw02OGZiY2ZjYS01OGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PYOvrg11ffUmizLfSbtmEegpvRWWac8JNNetxiqls0c8LV5VzZgKw1z3nbK iRwI/g8gy8sORDHkm2MT9l0UgkmlJJCTKrFVXg0LwEg2ANn7Nt1s6nnOTQWrXAIE HfoGx3Hj4OnygS3WBS36gYbcZv223Rw/p1rYC0m0aZXd6n5CMPW9oef89jmAFIAO jaEEJxhm3jjZ9cIjSglULcryq1pXt2XN/NbgDDqXuTkzs0b8k95CQxxl+1oyq9tR FDIUqeWkFe2A3BdltAu2WlIRVDCEdfA3eW4NrRkGxJkOhx4V3uZbXLH9TLefiq7I SuvylApxJbKJuDGUwxpKTZkCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9h1G9y lCAHrQQeTAE7Kk2PErLuMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBer1tH+DNxpqxVXoWx+vsVTXq0KbmWKZxIWHUqaVbTAzAC4N7MqEGR O5BxeP9IaDotDoTmZxnb+Kgra+ge1tbi4qwjmwZWbLym+ICVJL2c216kHEFA9VNF Qya/TeWwfyojZpBHRirsp4O1FOtcHCADZH3ip/Qyz46AVYcGWA6WIlRl+DGc8HD6 UECCGHmKwDKgI8D+sqvR4CbOpvWpiyjo6O+GlKUWIISEhrnk/9z6SBV6+S4RC++r bd1/hkPGvAgNiBoJh/oksVpqFkF3rr4ULTPNTSNrNeR64M2EQbivj3Kk4Di3gqtB 4QcW0pIaUXSBvlcPzApuXKyjJ8TxFN/z -----END CERTIFICATE-----Generated at Sat Oct 25 17:41:28 2025 by rpki-client