$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: XlyfnLaelL4CUYra2j1SDrQQ14//rZU88r+DveyRCzw= Subject key identifier: C2:7A:3A:6A:E1:BD:DF:25:36:BF:44:3F:B5:96:8B:47:65:7A:B0:A5 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 095D Signing time: Wed 22 Oct 2025 20:50:43 +0000 Manifest this update: Wed 22 Oct 2025 20:50:43 +0000 Manifest next update: Wed 29 Oct 2025 20:50:43 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: aLZBOhbIsIuniD5MjjyaaM+M2daBNBtQ2zqIkTU02hA=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Oct 22 20:50:43 2025 GMT Not After : Oct 29 20:50:43 2025 GMT Subject: CN=68f943a3-e315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:80:41:90:4c:ca:43:bb:fc:37:de:6f:23: bb:05:bc:ce:91:4d:5e:f7:e3:99:12:97:b9:6b:c1: 80:14:ae:8f:bf:da:36:a0:6d:7e:39:cf:ba:0d:67: d2:55:59:c6:dd:e3:08:fd:36:dc:7e:c2:00:be:84: c3:ac:d4:ca:de:c4:ce:cd:ad:9d:a9:c2:78:f0:1f: 69:5a:8f:fe:21:13:17:b6:8f:a0:6d:d6:af:d2:6c: 45:0b:f8:40:18:c0:29:6f:7e:fb:10:7f:6f:ec:c0: e3:21:3c:31:cd:ba:47:9b:5c:50:de:17:8f:3d:e8: 18:6b:f2:9d:73:b0:92:cf:8e:2f:ab:ee:ff:b5:0f: 08:87:c8:92:1b:d1:65:4d:fa:16:df:91:ad:ac:d8: 6d:bf:08:54:ff:7a:33:cd:4c:51:26:2f:b4:42:aa: 0d:5e:ff:14:bd:09:4f:03:3f:a5:99:c7:b8:4c:a4: 53:b6:8f:f2:dc:92:ca:f1:e3:a0:40:a8:13:e2:2e: bf:12:89:38:82:ee:e1:c2:5c:e2:51:c8:8f:2c:9f: ef:62:14:71:57:9e:a5:a4:96:4c:bb:96:a1:57:31: 5c:c1:07:f9:9b:79:c1:b3:8f:af:4b:af:7d:ae:99: c3:c0:23:18:97:b9:80:9d:02:93:c5:3f:a1:ee:d0: e9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:3A:6A:E1:BD:DF:25:36:BF:44:3F:B5:96:8B:47:65:7A:B0:A5 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ca:f8:02:de:76:ec:d0:91:c5:9b:d3:0d:8a:59:cb:e8:69: f5:02:bb:e9:ec:56:6f:4d:dc:49:9f:fe:f1:25:be:41:45:b0: 99:d6:24:62:31:fd:19:79:9c:7a:90:72:a7:06:8b:b8:f1:85: 76:a2:09:70:13:cf:1f:6d:d4:f2:c1:89:d9:f0:aa:f5:ce:3c: 72:03:7b:30:f1:83:8f:ba:71:56:ca:b0:e9:2e:2c:60:a5:a3: b1:ce:8d:ce:17:53:6b:02:44:6e:f3:a4:0a:b7:71:54:ae:3c: c7:b7:60:f6:9e:de:b4:c1:76:5c:8c:cb:c0:83:3c:ab:f5:aa: 5a:7d:23:44:04:e4:c8:46:95:b4:31:fd:fd:f5:a1:64:84:35: 03:80:cd:77:be:9c:22:4b:bb:41:b1:c9:4b:d7:3c:e7:27:be: 51:4d:45:6f:a5:34:82:a1:ef:e0:73:80:7b:60:41:b9:9a:14: 90:b5:bb:d2:a4:54:7d:35:05:32:aa:7d:1d:68:97:e0:23:a3: 20:28:4e:cf:22:b2:fb:6c:b3:a8:54:cf:ac:d4:11:df:b8:c5: a9:15:11:73:ca:7c:14:94:b6:37:30:0b:f4:00:fd:8d:b2:fa: c3:9c:a2:41:0f:e2:df:7b:f1:8a:b6:ae:6d:7f:39:10:44:86: 08:7e:06:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUxMDIyMjA1MDQzWhcNMjUxMDI5MjA1MDQzWjAYMRYwFAYD VQQDEw02OGY5NDNhMy1lMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveCAQZBMykO7/DfebyO7BbzOkU1e9+OZEpe5a8GAFK6Pv9o2oG1+Oc+6DWfS VVnG3eMI/TbcfsIAvoTDrNTK3sTOza2dqcJ48B9pWo/+IRMXto+gbdav0mxFC/hA GMApb377EH9v7MDjITwxzbpHm1xQ3hePPegYa/Kdc7CSz44vq+7/tQ8Ih8iSG9Fl TfoW35GtrNhtvwhU/3ozzUxRJi+0QqoNXv8UvQlPAz+lmce4TKRTto/y3JLK8eOg QKgT4i6/Eok4gu7hwlziUciPLJ/vYhRxV56lpJZMu5ahVzFcwQf5m3nBs4+vS699 rpnDwCMYl7mAnQKTxT+h7tDpGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ6Omrh vd8lNr9EP7WWi0dlerClMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjyvgC3nbs0JHFm9MNilnL6Gn1Arvp7FZvTdxJn/7xJb5BRbCZ1iRi Mf0ZeZx6kHKnBou48YV2oglwE88fbdTywYnZ8Kr1zjxyA3sw8YOPunFWyrDpLixg paOxzo3OF1NrAkRu86QKt3FUrjzHt2D2nt60wXZcjMvAgzyr9apafSNEBOTIRpW0 Mf399aFkhDUDgM13vpwiS7tBsclL1zznJ75RTUVvpTSCoe/gc4B7YEG5mhSQtbvS pFR9NQUyqn0daJfgI6MgKE7PIrL7bLOoVM+s1BHfuMWpFRFzynwUlLY3MAv0AP2N svrDnKJBD+Lfe/GKtq5tfzkQRIYIfgZ9 -----END CERTIFICATE-----Generated at Fri Oct 24 22:02:20 2025 by rpki-client