$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft File: wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json) Hash identifier: D0IaQ1IlH5gxdSNUzo8tsxlUg2WGh/UjuY0YbkuF1TQ= Subject key identifier: 57:C3:5C:55:F6:33:87:FB:14:AB:0B:22:E4:6E:9F:51:24:09:88:D0 Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft Manifest number: 0C Signing time: Mon 03 Nov 2025 07:59:25 +0000 Manifest this update: Mon 03 Nov 2025 07:59:24 +0000 Manifest next update: Mon 10 Nov 2025 07:59:24 +0000 Files and hashes: 1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: J1Ksrc1sg8fBmuPHRpbamspryF8TRXDstRgIXfu89AY=) 2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: EBR7I5Emy01zmCBxXGGOXl37lY5pYBdqwHQoDpK1N3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Validity Not Before: Nov 3 07:59:24 2025 GMT Not After : Nov 10 07:59:24 2025 GMT Subject: CN=690860dd-5b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:14:56:d3:98:17:4e:c6:1c:92:da:6b:30: a8:6d:8a:c2:28:93:af:33:fe:31:f3:c2:ee:0f:5b: 7c:7a:88:03:57:46:e2:72:f1:53:fb:11:61:85:89: 6b:e0:45:af:e2:4a:4d:5a:bb:d4:03:6e:35:e9:f5: f6:4e:b1:dc:58:a7:e6:37:1a:37:b0:8a:66:f3:c4: 89:ab:9b:c9:ce:6d:b8:ce:eb:d9:fb:2a:c9:91:ea: 65:2f:51:27:3c:7c:05:a5:b1:6c:02:2b:c7:c1:9f: 24:aa:29:0b:10:16:d4:95:d3:68:fc:a8:6b:4c:45: 01:9a:38:d4:26:97:7c:22:c7:42:c8:49:b1:77:be: 1a:ab:62:22:a5:3f:ea:d3:9c:1c:0b:83:e8:ff:2e: 5c:f5:e3:01:a1:57:50:21:83:4c:41:9c:d2:d0:c0: cf:b0:c7:d7:57:a0:99:77:c0:86:ff:b8:56:93:f8: 5b:4e:67:b5:5b:30:d4:2f:d8:4b:28:db:98:d4:5d: 06:9d:15:fb:8d:a7:13:1b:41:ef:e9:68:82:d8:a4: ed:5e:3c:0b:e7:5e:9e:99:c7:79:a4:07:a9:98:d8: 1d:6c:2b:3d:3f:53:f8:18:e0:74:86:61:30:ef:97: b8:5c:a8:54:f4:52:22:ba:19:22:6b:84:55:c9:51: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C3:5C:55:F6:33:87:FB:14:AB:0B:22:E4:6E:9F:51:24:09:88:D0 X509v3 Authority Key Identifier: keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:aa:f6:a6:8e:48:c7:8f:76:29:2d:fe:b1:2b:8e:ef:0d:4b: e7:a4:66:7a:d2:e8:58:ea:60:66:c2:aa:dc:f4:8d:64:f8:e3: 07:11:36:c0:5f:40:3e:99:0b:ee:d7:e2:6c:ea:3b:a2:aa:9e: 90:10:4a:68:f0:15:1a:bb:cd:b6:f8:38:8c:23:fa:d2:6e:91: 86:e2:57:59:a1:19:58:3b:60:ac:f7:5b:9b:fa:79:03:30:09: f3:3c:2f:9f:7c:0c:f6:88:81:96:f2:22:b8:d6:b3:1b:96:c1: 02:eb:a2:92:5b:a1:7f:38:09:08:eb:55:06:f3:73:3d:9a:42: 56:6d:f8:a2:2c:33:bd:44:47:07:aa:90:0a:0e:db:1d:f1:56: 29:cd:41:2e:d5:30:83:74:66:cf:12:88:e1:f7:31:4f:a5:ee: 5e:17:c5:fb:1b:8e:53:02:48:dc:9e:8e:d5:30:b6:e4:af:be: ec:2d:5d:d1:6f:2e:c9:c5:7a:26:23:7c:21:c1:6d:60:ac:3d: b2:ba:6a:54:a3:e1:36:db:f3:22:34:0b:c9:41:c8:7a:dd:9e: 43:92:4e:44:5c:b8:04:26:23:63:a5:a8:7e:d5:e4:f5:07:3c: 75:79:01:24:e8:33:a7:7f:90:bb:37:15:c0:9f:de:90:20:3b: 98:32:67:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1 NDNGQTI0MzAeFw0yNTExMDMwNzU5MjRaFw0yNTExMTAwNzU5MjRaMBgxFjAUBgNV BAMTDTY5MDg2MGRkLTViMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBUBRW05gXTsYcktprMKhtisIok68z/jHzwu4PW3x6iANXRuJy8VP7EWGFiWvg Ra/iSk1au9QDbjXp9fZOsdxYp+Y3GjewimbzxImrm8nObbjO69n7KsmR6mUvUSc8 fAWlsWwCK8fBnySqKQsQFtSV02j8qGtMRQGaONQml3wix0LISbF3vhqrYiKlP+rT nBwLg+j/Llz14wGhV1Ahg0xBnNLQwM+wx9dXoJl3wIb/uFaT+FtOZ7VbMNQv2Eso 25jUXQadFfuNpxMbQe/paILYpO1ePAvnXp6Zx3mkB6mY2B1sKz0/U/gY4HSGYTDv l7hcqFT0UiK6GSJrhFXJUW9HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV8NcVfYz h/sUqwsi5G6fUSQJiNAwHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3 TDF2d1pQdnZPNlZRX29rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKmq9qaOSMePdikt/rErju8NS+ekZnrS6FjqYGbCqtz0jWT44wcRNsBf QD6ZC+7X4mzqO6KqnpAQSmjwFRq7zbb4OIwj+tJukYbiV1mhGVg7YKz3W5v6eQMw CfM8L598DPaIgZbyIrjWsxuWwQLropJboX84CQjrVQbzcz2aQlZt+KIsM71ERweq kAoO2x3xVinNQS7VMIN0Zs8SiOH3MU+l7l4XxfsbjlMCSNyejtUwtuSvvuwtXdFv LsnFeiYjfCHBbWCsPbK6alSj4Tbb8yI0C8lByHrdnkOSTkRcuAQmI2OlqH7V5PUH PHV5ASToM6d/kLs3FcCf3pAgO5gyZ6Q= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:21 2025 by rpki-client