$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: KtlAbpM0wwHkXcgHNr/d2IEpO3risKEnFLg5OtE9NXs= Subject key identifier: 53:C8:59:04:BE:C0:58:F2:80:D9:86:95:13:FD:A3:70:C3:BD:86:80 Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 05AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 05A3 Signing time: Sun 02 Nov 2025 23:09:25 +0000 Manifest this update: Sun 02 Nov 2025 23:09:24 +0000 Manifest next update: Sun 09 Nov 2025 23:09:24 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: cTT4vqm+410/MLREC9E3wFjFz2xQtZiaGuuVPbavGMc=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: z4OD50JJqcb5eLqgxPYFpu+0WPLJOBG84/py9BkQ1lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1450 (0x5aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Nov 2 23:09:24 2025 GMT Not After : Nov 9 23:09:24 2025 GMT Subject: CN=6907e4a5-a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:6f:02:b0:45:8f:15:22:af:cd:4d:3d:c1: f0:3b:4d:82:e9:c3:c7:b2:73:c9:ea:68:92:0a:9a: 37:31:42:ec:ac:07:49:fa:46:23:82:d7:98:8e:aa: ee:33:91:f3:c2:e6:fe:00:3a:71:a8:28:f1:88:34: d4:d0:df:af:ad:c4:8f:ff:f6:01:d3:4b:20:f1:06: ca:39:00:34:26:27:2b:d3:a7:09:18:df:ee:df:b5: 56:f3:d5:b1:71:d0:69:37:45:b4:bf:c4:46:5e:ce: 39:6b:48:fe:15:f5:7b:30:e5:13:76:43:e4:9d:f5: f6:97:fd:ff:fa:4c:11:02:28:48:d6:94:6a:11:15: ce:8a:e2:a7:a2:da:87:5a:e8:3c:02:9e:99:8f:ac: 4a:ed:b9:86:b5:39:9e:8c:da:f1:6e:df:f4:c3:f4: 9a:6f:ce:83:3c:6a:6e:0a:8c:ad:fb:9d:5f:b0:4e: 4b:95:60:3f:30:73:02:36:32:73:93:1c:8e:28:4b: a6:73:35:42:3d:bc:bc:d9:b9:cd:ef:d8:64:7a:44: 4a:0d:1c:c6:66:9c:18:08:ba:e6:48:28:e7:e5:ac: 2c:c2:57:79:c2:ba:1a:86:23:b2:c9:b8:1c:df:87: b6:d0:0a:16:44:ea:a1:00:76:3e:7e:84:3f:b2:68: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C8:59:04:BE:C0:58:F2:80:D9:86:95:13:FD:A3:70:C3:BD:86:80 X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e0:24:a7:07:46:ff:02:6f:e1:e6:79:d7:d5:9c:1d:68:1f: 23:8d:3a:35:09:87:82:d4:a3:d3:3f:36:1b:c4:f8:82:70:f1: cc:d1:0b:f7:16:13:13:81:ab:bd:29:f2:fc:e9:99:91:40:fb: 60:50:59:5c:00:81:c1:ff:91:79:19:db:d4:24:9c:89:e4:8c: eb:d7:88:ce:3c:ea:88:03:e3:4f:85:4d:b2:e9:1a:27:6c:8f: d6:12:c5:11:47:d4:cd:2f:a8:9c:78:75:f6:51:ce:3e:64:4b: fd:ad:63:a5:fb:41:d7:c4:bc:55:47:bb:58:d6:1c:e1:84:3e: 7f:5a:78:5d:1e:30:8c:42:96:dd:74:13:7c:d1:7e:b9:dc:a6: ae:43:21:93:a0:c7:61:d4:97:2f:87:e2:f6:cb:64:01:d9:ec: 55:0e:5e:22:68:3d:5a:a9:df:18:24:54:03:a2:de:24:5a:63: 71:44:b6:e9:c5:ed:36:f5:86:5b:d8:7f:68:2f:d9:a7:d1:c8: bf:eb:a4:c0:3d:f3:f1:2b:4c:48:8e:20:f0:d5:53:58:1b:c1: 48:cb:6a:f1:30:bd:3d:78:b8:af:a0:94:5e:1d:df:f1:ef:b7: d2:7c:0e:38:8d:bb:6b:03:81:f7:7a:a6:1b:39:47:96:82:b4: 1a:5b:40:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUxMTAyMjMwOTI0WhcNMjUxMTA5MjMwOTI0WjAYMRYwFAYD VQQDEw02OTA3ZTRhNS1hOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuFvArBFjxUir81NPcHwO02C6cPHsnPJ6miSCpo3MULsrAdJ+kYjgteYjqru M5Hzwub+ADpxqCjxiDTU0N+vrcSP//YB00sg8QbKOQA0Jicr06cJGN/u37VW89Wx cdBpN0W0v8RGXs45a0j+FfV7MOUTdkPknfX2l/3/+kwRAihI1pRqERXOiuKnotqH Wug8Ap6Zj6xK7bmGtTmejNrxbt/0w/Sab86DPGpuCoyt+51fsE5LlWA/MHMCNjJz kxyOKEumczVCPby82bnN79hkekRKDRzGZpwYCLrmSCjn5awswld5wroahiOyybgc 34e20AoWROqhAHY+foQ/smjmhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFPIWQS+ wFjygNmGlRP9o3DDvYaAMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa4CSnB0b/Am/h5nnX1ZwdaB8jjTo1CYeC1KPTPzYbxPiCcPHM0Qv3 FhMTgau9KfL86ZmRQPtgUFlcAIHB/5F5GdvUJJyJ5Izr14jOPOqIA+NPhU2y6Ron bI/WEsURR9TNL6iceHX2Uc4+ZEv9rWOl+0HXxLxVR7tY1hzhhD5/WnhdHjCMQpbd dBN80X653KauQyGToMdh1Jcvh+L2y2QB2exVDl4iaD1aqd8YJFQDot4kWmNxRLbp xe029YZb2H9oL9mn0ci/66TAPfPxK0xIjiDw1VNYG8FIy2rxML09eLivoJReHd/x 77fSfA44jbtrA4H3eqYbOUeWgrQaW0Aj -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:17 2025 by rpki-client