$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: 9GZ41G7LSW8ifIRi8adtuS9FuDC51jwIop5DiGSUscU= Subject key identifier: F2:02:9B:8F:0C:55:52:FD:38:3B:76:AD:91:FB:71:74:3E:AB:F1:A5 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 089B Signing time: Thu 30 Oct 2025 21:10:13 +0000 Manifest this update: Thu 30 Oct 2025 21:10:13 +0000 Manifest next update: Thu 06 Nov 2025 21:10:13 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: EaEarIA01Yikpu4rNmfh9K5BZTAT7DtZKON6+zxzqBQ=) 2: 097FE948B5D411F0B0C6A940C4F9AE02.roa (hash: KP2R1m2iHAsNa4Z3YCVwK/8wK6Mg0zZi0OmDMYURiVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Oct 30 21:10:13 2025 GMT Not After : Nov 6 21:10:13 2025 GMT Subject: CN=6903d435-5a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:52:83:6c:dc:1c:dc:c8:56:55:d3:85:33: 42:a0:3b:07:fd:83:30:ab:0f:cc:d8:bb:d2:6f:c7: 6e:3a:a9:c6:67:5c:92:15:39:a1:b2:50:b8:1a:40: d6:75:69:75:a2:57:da:5e:d5:e4:76:79:b7:18:69: e4:de:40:84:f9:51:f3:87:87:bd:f5:7f:aa:3d:22: 25:38:c3:cc:14:80:9f:61:51:ac:95:c6:4f:f9:0c: e8:0e:34:f7:1c:9d:8c:0a:d4:ae:ed:14:d5:73:3f: 00:72:d4:2e:b3:ea:a4:81:c7:a8:94:42:35:bf:b2: 3e:12:e4:20:03:55:60:7b:f0:9d:0e:6d:b0:6f:13: 10:65:bf:6e:ec:29:d4:18:ff:c6:3c:83:10:10:16: 0a:90:a0:a9:22:58:9c:ba:3c:73:0a:2f:2e:ee:66: ef:a1:49:c4:7d:29:90:89:1d:b6:30:4f:7a:37:ca: d3:09:4a:ea:56:81:5f:13:ff:32:48:f7:67:28:db: f0:b1:2e:c1:e6:25:92:5d:8b:9b:89:ab:19:85:c5: f1:49:82:f3:32:90:0a:2a:ef:d4:30:16:59:e2:e9: 12:57:ed:bd:c0:e7:22:0a:4a:50:da:ab:56:df:d1: f1:24:e8:ca:e4:cc:fe:f4:39:b3:10:a6:61:7d:16: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:9B:8F:0C:55:52:FD:38:3B:76:AD:91:FB:71:74:3E:AB:F1:A5 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:87:28:ed:cb:4c:22:19:8d:0c:e8:74:18:3c:91:86:9e:08: 9c:fd:6a:a8:08:34:8b:9d:1c:ca:00:b5:7f:b0:97:4d:1e:c1: f9:1f:7b:3b:e5:e9:f5:0e:62:88:b8:b8:1b:f9:da:a9:4f:c5: e0:59:b4:5d:77:a8:81:dd:07:b5:49:2a:5a:86:61:41:c0:a4: ca:fb:f9:a3:fa:b3:52:ec:ba:80:61:19:1a:35:c1:57:31:03: 1a:2a:98:db:dd:c0:95:1f:f0:85:a0:67:2e:16:0f:01:a3:ed: 91:77:b7:0e:c2:79:1c:6e:4c:cd:68:32:2c:c4:3a:bb:0f:02: 2b:ae:86:b3:ad:41:7b:4f:e9:c5:ab:b3:e9:ff:1d:f3:53:9e: f9:6f:9f:d5:5d:f4:b7:d0:7b:ce:e7:1f:d9:4a:7d:f6:3e:83: 1e:be:a8:fe:95:a1:25:96:2d:80:a1:07:ec:c1:79:3d:1e:4b: 18:32:83:a0:d8:e0:31:6f:58:cc:dc:f2:10:5a:63:14:28:c3: c8:73:67:35:da:7a:87:31:7f:6a:71:26:27:7c:0c:15:3f:13: ce:d4:e5:ea:bb:ce:d8:5c:06:11:09:db:cc:c7:78:62:93:29: b9:65:63:ad:88:d8:52:3f:3f:98:fa:29:a8:f3:bc:1a:f8:69: 4a:6c:d8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUxMDMwMjExMDEzWhcNMjUxMTA2MjExMDEzWjAYMRYwFAYD VQQDEw02OTAzZDQzNS01YTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XFSg2zcHNzIVlXThTNCoDsH/YMwqw/M2LvSb8duOqnGZ1ySFTmhslC4GkDW dWl1olfaXtXkdnm3GGnk3kCE+VHzh4e99X+qPSIlOMPMFICfYVGslcZP+QzoDjT3 HJ2MCtSu7RTVcz8ActQus+qkgceolEI1v7I+EuQgA1Vge/CdDm2wbxMQZb9u7CnU GP/GPIMQEBYKkKCpIlicujxzCi8u7mbvoUnEfSmQiR22ME96N8rTCUrqVoFfE/8y SPdnKNvwsS7B5iWSXYubiasZhcXxSYLzMpAKKu/UMBZZ4ukSV+29wOciCkpQ2qtW 39HxJOjK5Mz+9DmzEKZhfRZcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPICm48M VVL9ODt2rZH7cXQ+q/GlMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMhyjty0wiGY0M6HQYPJGGngic/WqoCDSLnRzKALV/sJdNHsH5H3s7 5en1DmKIuLgb+dqpT8XgWbRdd6iB3Qe1SSpahmFBwKTK+/mj+rNS7LqAYRkaNcFX MQMaKpjb3cCVH/CFoGcuFg8Bo+2Rd7cOwnkcbkzNaDIsxDq7DwIrroazrUF7T+nF q7Pp/x3zU575b5/VXfS30HvO5x/ZSn32PoMevqj+laElli2AoQfswXk9HksYMoOg 2OAxb1jM3PIQWmMUKMPIc2c12nqHMX9qcSYnfAwVPxPO1OXqu87YXAYRCdvMx3hi kym5ZWOtiNhSPz+Y+imo87wa+GlKbNjn -----END CERTIFICATE-----Generated at Fri Oct 31 11:41:52 2025 by rpki-client