$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: qC/r2CX6Et+/zDcis2sOpp04Tp/bfvoL4+g+WbXiHjk= Subject key identifier: 61:D8:A1:88:4F:C0:92:C0:F2:5A:8B:0E:8A:1A:E3:5F:85:17:6F:3D Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: 020F Signing time: Mon 27 Oct 2025 03:57:39 +0000 Manifest this update: Mon 27 Oct 2025 03:57:39 +0000 Manifest next update: Mon 03 Nov 2025 03:57:39 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: ZlLWssPv2DwOndybNyz0E1GGsWo9gpV0JDQgQnixUxg=) 2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: oOyEu7HdLHeRDgmI/hlcMUg6eiIlRVxLKBMf9ShkBXw=) 3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: gHzhXWPrMjpB1xHZWRltAYhKlgAf5L30L7o2Q9t3Hyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 03:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Oct 27 03:57:39 2025 GMT Not After : Nov 3 03:57:39 2025 GMT Subject: CN=68feedb3-1211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:86:8c:1b:c5:b0:b1:3c:f1:2e:95:0e:88: f8:fa:18:a6:f7:09:5d:ce:70:48:9c:b6:43:ba:33: c4:1a:dc:d0:a4:fe:34:32:a1:74:cd:86:4c:a5:14: 3f:a1:4e:38:75:f4:16:ba:ec:0c:95:84:d7:3d:c7: 91:97:d1:d0:08:e3:bd:0f:75:f9:19:73:6c:1e:d4: bc:c2:c3:af:b4:2e:df:37:15:90:df:45:54:f8:9c: a9:4f:01:7f:65:89:de:f4:09:9f:81:84:d8:d4:a5: 17:21:0d:97:27:38:3d:2b:b6:20:75:97:87:2f:f3: 21:bf:15:8d:ff:11:0b:8c:b8:08:b8:96:cb:25:02: f5:49:38:b4:1c:91:74:8e:9f:a7:7c:c7:5b:48:b2: 67:19:61:4b:1c:ea:a0:57:f2:8d:41:bf:2c:ea:3a: 24:2d:19:f4:36:ae:32:55:e0:58:83:37:bc:6f:f4: 85:72:40:69:36:0f:d4:89:41:44:1e:6e:d0:db:41: ca:fd:89:82:76:3b:23:9a:68:3d:09:5b:91:43:eb: 60:71:ef:f4:aa:53:69:4c:a0:19:03:3f:07:f0:86: c1:a9:65:e3:99:98:97:06:dd:c0:01:44:ec:78:23: 9c:c8:81:f7:9b:df:2e:01:6c:78:8f:20:13:03:f8: 9c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:A1:88:4F:C0:92:C0:F2:5A:8B:0E:8A:1A:E3:5F:85:17:6F:3D X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:0e:17:b8:e3:2e:f8:64:2a:01:eb:2f:d4:0e:be:1e:b3:a0: 6c:3e:78:ca:7a:cb:a5:22:96:33:b9:5f:43:71:31:a8:90:03: cb:32:97:2c:be:34:04:74:93:ac:fb:5d:db:33:de:c2:a5:83: 35:e3:58:bb:04:69:6e:bb:a7:50:aa:93:8a:8d:88:ed:7c:25: 26:69:2c:25:dc:c3:7f:cb:c6:40:76:93:6a:ec:bb:4a:da:b3: b4:c1:66:d0:f2:39:c3:73:bd:8c:dc:6f:63:b4:8d:90:e6:06: 58:03:b3:93:29:0c:2a:6b:a2:cb:b2:ae:24:e4:c9:fc:ec:4f: dd:4f:84:e3:fc:b2:95:6b:ff:0b:41:e9:81:0f:21:18:3d:d4: d4:6e:78:0d:0c:fc:f1:37:de:4f:25:69:8f:d0:c5:01:c1:7c: ee:98:05:07:80:d7:8d:27:cf:73:e1:53:6b:57:8f:25:dc:59: 4c:ef:17:63:bc:f1:5f:a4:59:8e:00:6d:34:c4:e4:d6:e2:fa: be:44:b6:00:30:05:b5:e7:1a:1f:8c:7f:fb:4a:e2:bb:02:40: bf:36:16:da:c3:8a:f2:05:ec:d1:10:e5:a6:55:11:d9:bc:2b: d8:a5:8a:2a:74:8b:6d:92:26:8d:61:83:e7:c9:63:29:9b:ee: 82:92:7d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUxMDI3MDM1NzM5WhcNMjUxMTAzMDM1NzM5WjAYMRYwFAYD VQQDEw02OGZlZWRiMy0xMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28+GjBvFsLE88S6VDoj4+him9wldznBInLZDujPEGtzQpP40MqF0zYZMpRQ/ oU44dfQWuuwMlYTXPceRl9HQCOO9D3X5GXNsHtS8wsOvtC7fNxWQ30VU+JypTwF/ ZYne9AmfgYTY1KUXIQ2XJzg9K7YgdZeHL/MhvxWN/xELjLgIuJbLJQL1STi0HJF0 jp+nfMdbSLJnGWFLHOqgV/KNQb8s6jokLRn0Nq4yVeBYgze8b/SFckBpNg/UiUFE Hm7Q20HK/YmCdjsjmmg9CVuRQ+tgce/0qlNpTKAZAz8H8IbBqWXjmZiXBt3AAUTs eCOcyIH3m98uAWx4jyATA/icgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHYoYhP wJLA8lqLDooa41+FF289MB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCDhe44y74ZCoB6y/UDr4es6BsPnjKesulIpYzuV9DcTGokAPLMpcs vjQEdJOs+13bM97CpYM141i7BGluu6dQqpOKjYjtfCUmaSwl3MN/y8ZAdpNq7LtK 2rO0wWbQ8jnDc72M3G9jtI2Q5gZYA7OTKQwqa6LLsq4k5Mn87E/dT4Tj/LKVa/8L QemBDyEYPdTUbngNDPzxN95PJWmP0MUBwXzumAUHgNeNJ89z4VNrV48l3FlM7xdj vPFfpFmOAG00xOTW4vq+RLYAMAW15xofjH/7SuK7AkC/Nhbaw4ryBezREOWmVRHZ vCvYpYoqdIttkiaNYYPnyWMpm+6Ckn1G -----END CERTIFICATE-----Generated at Mon Oct 27 15:06:01 2025 by rpki-client