$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: LIkpjP8Rgm9Vv3o1YmwkuS0/IC0W4on1SvuJMlYBccU= Subject key identifier: 0D:B7:EA:D3:D4:E6:7C:7A:C1:CC:6D:D6:8C:2B:0F:AB:FC:04:88:DD Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 03BB Signing time: Mon 27 Oct 2025 02:04:21 +0000 Manifest this update: Mon 27 Oct 2025 02:04:21 +0000 Manifest next update: Mon 03 Nov 2025 02:04:21 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: QGnCxuRDJrIx5ODH2AC0wp2WwNW1OeIkfSrM94o5M5Y=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: nfR34cWIXlmbnxZObF117xAPX2RJTODqf4QtFwTlL+c=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: uBqvI5dq8qNrDbHw4p02iYakpWTkn0S51P6ziID2+EI=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: scTIVhqGYW6GoZyvhCkZ72zHa5qMbQB5MWHuWvi79lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Oct 27 02:04:21 2025 GMT Not After : Nov 3 02:04:21 2025 GMT Subject: CN=68fed325-1a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:10:a7:ad:7b:25:df:5b:0a:da:b8:41:a5: d4:72:ae:85:0e:07:1d:52:76:6a:de:3b:cd:60:ff: da:f8:0b:c1:52:b2:33:f9:e8:c1:65:8a:90:1e:f2: 5b:e4:79:0d:fa:9a:c4:c7:c9:1f:45:74:01:36:57: 47:f1:b0:39:ce:a1:a5:bc:be:a7:57:77:35:b8:73: 98:ca:3a:25:2f:70:21:ab:3a:1a:c1:23:26:ba:09: 17:40:7b:1f:05:3f:21:d3:5f:a4:65:cd:e5:cb:b2: 55:e1:41:23:f9:cf:f0:18:10:80:3c:ea:05:1e:f2: d6:a3:37:7a:1f:ca:2c:2e:e4:e7:50:95:6d:3d:ee: c9:d0:62:7c:bb:a3:4c:10:e0:5e:f7:d4:99:b3:31: d5:c0:39:62:83:c7:82:1c:86:9a:b8:db:7a:2d:7a: 04:07:c3:53:31:dd:a2:b4:51:3c:fe:72:df:f3:c5: be:a5:48:d9:98:2a:90:56:0b:73:ae:cb:09:0b:c3: fc:2f:7e:27:af:fc:7f:54:62:56:d0:d1:07:87:fd: 08:03:d8:53:80:bc:d6:b1:03:59:50:17:fa:ef:a4: dd:30:c7:a2:9d:52:f5:cf:91:b6:bd:77:15:35:4c: 61:e6:e3:ef:fb:60:cd:09:a5:50:42:6b:a6:de:1d: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B7:EA:D3:D4:E6:7C:7A:C1:CC:6D:D6:8C:2B:0F:AB:FC:04:88:DD X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c4:6f:38:1c:d4:e1:aa:c7:a4:fd:d5:67:de:7c:69:b8:0d: 72:23:f1:a8:69:7e:2a:1e:7f:0f:7e:88:a1:ea:40:19:0b:42: 1f:f7:76:ac:c6:14:72:b9:4d:9d:da:88:e2:c6:9f:5e:d8:94: 33:fb:03:1f:5f:e2:98:f0:91:54:78:15:f2:b3:c3:a4:fe:6d: a2:de:8e:06:2f:bd:93:a5:84:e6:fd:b0:86:63:00:c9:2d:39: 2d:d6:c3:a5:d1:1b:25:a2:62:c7:c4:34:a8:9a:5a:c8:c8:71: 16:92:14:90:72:b3:0b:5e:6e:5e:8f:10:d0:95:9f:b9:31:99: 5a:d3:33:34:d7:13:cb:ec:c3:90:bb:7d:fb:9d:a2:ba:5c:07: 40:69:eb:e2:43:d9:9c:1c:1b:4c:da:33:b7:33:a2:aa:e6:95: 7f:c5:a9:f6:87:c1:af:45:76:f6:cb:66:ac:16:3e:ec:9a:e5: c9:c9:62:dd:8a:e0:20:dd:38:bd:63:35:54:dc:1e:3d:3d:30: 41:53:8a:88:fb:fd:d7:06:e5:da:98:2b:d7:a7:cc:3b:31:d6: a3:f5:8c:0c:7e:be:89:b9:ce:8e:0d:3e:69:d7:d6:eb:31:7d: bb:12:1b:64:a9:e2:d7:3c:b6:c5:e1:8e:38:55:be:29:00:41: ab:14:32:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUxMDI3MDIwNDIxWhcNMjUxMTAzMDIwNDIxWjAYMRYwFAYD VQQDEw02OGZlZDMyNS0xYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFEQp617Jd9bCtq4QaXUcq6FDgcdUnZq3jvNYP/a+AvBUrIz+ejBZYqQHvJb 5HkN+prEx8kfRXQBNldH8bA5zqGlvL6nV3c1uHOYyjolL3AhqzoawSMmugkXQHsf BT8h01+kZc3ly7JV4UEj+c/wGBCAPOoFHvLWozd6H8osLuTnUJVtPe7J0GJ8u6NM EOBe99SZszHVwDlig8eCHIaauNt6LXoEB8NTMd2itFE8/nLf88W+pUjZmCqQVgtz rssJC8P8L34nr/x/VGJW0NEHh/0IA9hTgLzWsQNZUBf676TdMMeinVL1z5G2vXcV NUxh5uPv+2DNCaVQQmum3h0m5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA236tPU 5nx6wcxt1owrD6v8BIjdMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSxG84HNThqsek/dVn3nxpuA1yI/GoaX4qHn8Pfoih6kAZC0If93as xhRyuU2d2ojixp9e2JQz+wMfX+KY8JFUeBXys8Ok/m2i3o4GL72TpYTm/bCGYwDJ LTkt1sOl0RslomLHxDSomlrIyHEWkhSQcrMLXm5ejxDQlZ+5MZla0zM01xPL7MOQ u337naK6XAdAaeviQ9mcHBtM2jO3M6Kq5pV/xan2h8GvRXb2y2asFj7smuXJyWLd iuAg3Ti9YzVU3B49PTBBU4qI+/3XBuXamCvXp8w7Mdaj9YwMfr6Juc6ODT5p19br MX27EhtkqeLXPLbF4Y44Vb4pAEGrFDI7 -----END CERTIFICATE-----Generated at Mon Oct 27 04:34:48 2025 by rpki-client