$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: MksJZhrswLNp9256U8ynt283JsBZNFM2r8mdPUuRUBk= Subject key identifier: 15:74:7D:E1:37:B7:03:6A:7B:44:82:B7:F9:D1:E9:7D:92:AE:52:56 Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 07DE Signing time: Tue 04 Nov 2025 21:14:12 +0000 Manifest this update: Tue 04 Nov 2025 21:14:11 +0000 Manifest next update: Tue 11 Nov 2025 21:14:11 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: XuSiFlDSKFIVjSI/CeCCjSJ+LFMezrbmEitQ8MJGWVk=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: FR2j5cdA1il7bWue4siZvyTa/nS4sn/xHWVg4a7OgZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: Nov 4 21:14:11 2025 GMT Not After : Nov 11 21:14:11 2025 GMT Subject: CN=690a6ca3-8287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:b5:1a:df:90:17:3e:7c:8d:b3:59:df:cc: 98:cc:2d:84:25:fd:31:29:cf:48:e3:1d:41:64:be: fe:a3:a4:68:d9:88:a0:6b:73:cf:4f:8f:60:fa:60: f2:3a:a7:04:21:82:5f:8d:57:b3:78:66:ef:14:8a: a8:5b:6a:5d:77:a4:23:28:ba:14:e0:62:2f:4b:58: b8:d7:53:99:bb:9a:1e:a1:4a:85:9a:96:c3:db:23: 51:11:55:da:bb:f0:84:6f:ab:36:8e:b4:63:58:f3: 21:1c:dc:06:e9:86:d9:86:00:40:66:6a:97:e4:7b: 42:d7:a3:ca:92:31:1b:75:e8:7a:74:b7:ea:fb:26: 4c:f2:ea:e3:64:77:a6:63:f6:56:a6:20:bc:1d:bd: c9:09:b9:5e:0b:49:d3:8a:42:ab:b3:6f:21:b5:76: 38:f7:30:4c:f1:c4:d9:c1:8c:8c:c7:5b:8f:eb:53: 23:4e:ea:b2:50:c5:a2:b1:9c:7e:70:f0:d4:6e:ac: f3:73:6a:16:4e:72:89:56:6d:75:3f:7c:5c:a0:ef: 44:6b:d6:70:a5:ee:75:90:9e:18:c6:49:8c:20:5b: 53:1c:f3:26:42:32:48:30:f9:11:d3:4c:44:1d:df: e9:cb:00:41:81:32:56:19:c7:41:a8:b1:c1:5d:55: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:74:7D:E1:37:B7:03:6A:7B:44:82:B7:F9:D1:E9:7D:92:AE:52:56 X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bd:cb:2a:85:92:d5:85:25:7c:a4:1f:b9:a6:29:00:69:4b: 71:24:37:d9:84:8a:b8:26:92:cc:ff:e2:40:db:d5:ff:49:c8: db:e8:b0:81:8e:83:06:a8:6b:92:9a:5d:16:d8:b1:ec:0e:8f: eb:f8:ad:6a:c7:21:3b:be:a6:bf:d3:ce:5b:c9:cc:cc:51:cc: b8:f3:5e:c6:67:25:c3:b0:67:e4:00:3f:39:fa:41:1a:47:d6: 20:a4:b5:86:c2:bc:6e:6a:88:7a:ab:28:7e:de:92:a5:51:41: b3:a1:4c:f2:29:7e:af:f6:b4:19:32:16:4a:33:17:eb:f4:cf: 89:9a:2c:6b:c0:bd:f4:e0:f4:a0:ed:cf:2a:79:a1:23:fe:cb: 76:01:8d:9c:cb:64:83:ab:1a:3a:3a:5b:eb:59:8e:5e:82:e3: 94:91:17:2f:d9:4b:5c:a0:ff:11:7e:7b:31:95:20:dd:01:8d: f2:d5:8a:3f:c2:cd:82:41:1f:a8:9d:aa:87:d8:06:7a:3e:5f: 1e:d3:06:b9:5a:f5:65:04:7f:36:6a:fa:05:be:26:a1:46:76: c1:ab:f6:7e:f8:0b:8f:b8:15:44:35:1e:d1:a1:98:9d:70:9b: 03:d3:27:cc:97:3e:01:ff:83:b0:5c:37:44:8e:1b:40:3b:21: f4:40:b9:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUxMTA0MjExNDExWhcNMjUxMTExMjExNDExWjAYMRYwFAYD VQQDEw02OTBhNmNhMy04Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTC1Gt+QFz58jbNZ38yYzC2EJf0xKc9I4x1BZL7+o6Ro2Yiga3PPT49g+mDy OqcEIYJfjVezeGbvFIqoW2pdd6QjKLoU4GIvS1i411OZu5oeoUqFmpbD2yNREVXa u/CEb6s2jrRjWPMhHNwG6YbZhgBAZmqX5HtC16PKkjEbdeh6dLfq+yZM8urjZHem Y/ZWpiC8Hb3JCbleC0nTikKrs28htXY49zBM8cTZwYyMx1uP61MjTuqyUMWisZx+ cPDUbqzzc2oWTnKJVm11P3xcoO9Ea9Zwpe51kJ4YxkmMIFtTHPMmQjJIMPkR00xE Hd/pywBBgTJWGcdBqLHBXVVkAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV0feE3 twNqe0SCt/nR6X2SrlJWMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAvcsqhZLVhSV8pB+5pikAaUtxJDfZhIq4JpLM/+JA29X/Scjb6LCB joMGqGuSml0W2LHsDo/r+K1qxyE7vqa/085byczMUcy4817GZyXDsGfkAD85+kEa R9YgpLWGwrxuaoh6qyh+3pKlUUGzoUzyKX6v9rQZMhZKMxfr9M+JmixrwL304PSg 7c8qeaEj/st2AY2cy2SDqxo6OlvrWY5eguOUkRcv2UtcoP8RfnsxlSDdAY3y1Yo/ ws2CQR+onaqH2AZ6Pl8e0wa5WvVlBH82avoFviahRnbBq/Z++AuPuBVENR7RoZid cJsD0yfMlz4B/4OwXDdEjhtAOyH0QLnX -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:16 2025 by rpki-client