$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: E8DBETknVibh2KN+FfqZliMSNiCu3raffn4dW6oNQ4M= Subject key identifier: C9:A1:C8:26:16:3B:83:2E:00:30:8E:27:62:B7:7D:27:BF:CE:AC:12 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0249 Signing time: Mon 03 Nov 2025 01:45:41 +0000 Manifest this update: Mon 03 Nov 2025 01:45:41 +0000 Manifest next update: Mon 10 Nov 2025 01:45:41 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: yS3xTiwjFpG72z8zFzW+UKPB7A/AnGTshxY0AbjOSjg=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Nov 3 01:45:41 2025 GMT Not After : Nov 10 01:45:41 2025 GMT Subject: CN=69080945-0d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:68:1d:0a:a0:28:b6:0b:d6:1f:89:e8:50: 72:90:fd:7d:84:bd:77:24:a2:1a:19:4d:94:e0:38: bb:9e:4c:1d:58:bd:25:dd:1f:f2:e4:fd:14:c6:f3: eb:2f:f6:a4:81:2d:ce:da:b4:fd:fa:14:56:43:51: 11:2b:5b:2a:23:1c:09:34:55:71:9f:99:7d:45:b8: 83:37:07:9a:ff:92:f1:42:26:c5:ca:67:63:b9:e5: b6:c8:e3:f6:9f:bd:c1:98:2f:7e:30:4c:cf:c1:31: 47:bf:a7:5a:19:ab:59:8f:7f:88:18:25:c8:bd:65: 50:0e:39:7a:9d:e5:99:53:41:21:bc:83:89:e6:af: 94:0a:07:57:cb:eb:19:fb:35:5e:8b:5a:41:dd:cf: 4e:0e:79:c0:4b:b0:4b:9b:14:ea:97:42:99:2b:51: d1:9b:b7:87:da:15:02:0d:62:04:1c:14:b1:8f:e2: 17:85:0b:f8:3c:a6:78:72:9f:c6:27:0e:a1:0f:2b: 6a:08:86:d7:fc:39:74:53:81:74:2e:90:41:8b:d2: fa:f8:80:eb:6b:00:a5:e6:76:fe:1c:bb:02:a3:22: b1:6a:cf:10:0a:71:0e:21:69:19:42:04:d6:25:eb: d5:81:99:e6:f5:ac:48:86:d3:78:31:d0:a1:f8:47: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:C8:26:16:3B:83:2E:00:30:8E:27:62:B7:7D:27:BF:CE:AC:12 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3e:2b:c8:1d:36:d8:71:40:8f:a7:9c:b2:39:cf:84:72:8b: fa:dc:8e:69:b1:ab:0f:c9:8f:0f:8e:41:24:f6:0c:de:b0:d9: c3:72:e4:21:9c:16:c3:1c:2a:c3:58:a5:c7:b6:f6:fa:97:d2: ea:70:9f:79:8a:f4:67:ec:94:15:27:20:8e:91:e5:c9:52:d6: 0d:2e:cf:94:6c:61:b4:52:9e:b6:30:f6:98:03:8b:4e:9c:a5: 48:01:c4:ad:6f:3e:b8:5a:c8:40:a6:7a:46:5c:2d:56:f2:89: 00:22:28:1a:09:fc:7b:fb:2f:aa:76:27:a6:0b:ee:69:b2:c5: 3b:25:89:1f:2f:be:87:a8:d2:d5:f3:09:86:ae:e3:ff:89:77: 08:9a:b3:6b:70:83:df:81:2f:6d:cf:10:8e:6a:8e:40:3c:99: 50:ae:10:e4:17:24:a2:20:ec:f7:81:8b:c1:2f:1e:fe:b8:9d: fe:12:ab:29:c8:28:8b:5a:29:aa:8f:1c:dc:9e:63:3e:9d:60: d2:5a:0b:38:cd:e2:f2:af:d9:23:84:e9:e4:b2:c3:2f:95:90: 73:73:a8:61:c4:ec:5f:07:b9:4a:37:0f:2c:b0:d8:eb:64:86: aa:e8:12:b3:8d:e3:42:8e:6b:ef:6b:6b:c0:26:c0:52:cd:91: 2b:59:0c:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUxMTAzMDE0NTQxWhcNMjUxMTEwMDE0NTQxWjAYMRYwFAYD VQQDEw02OTA4MDk0NS0wZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHZoHQqgKLYL1h+J6FBykP19hL13JKIaGU2U4Di7nkwdWL0l3R/y5P0UxvPr L/akgS3O2rT9+hRWQ1ERK1sqIxwJNFVxn5l9RbiDNwea/5LxQibFymdjueW2yOP2 n73BmC9+MEzPwTFHv6daGatZj3+IGCXIvWVQDjl6neWZU0EhvIOJ5q+UCgdXy+sZ +zVei1pB3c9ODnnAS7BLmxTql0KZK1HRm7eH2hUCDWIEHBSxj+IXhQv4PKZ4cp/G Jw6hDytqCIbX/Dl0U4F0LpBBi9L6+IDrawCl5nb+HLsCoyKxas8QCnEOIWkZQgTW JevVgZnm9axIhtN4MdCh+EczKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmhyCYW O4MuADCOJ2K3fSe/zqwSMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlPivIHTbYcUCPp5yyOc+Ecov63I5psasPyY8PjkEk9gzesNnDcuQh nBbDHCrDWKXHtvb6l9LqcJ95ivRn7JQVJyCOkeXJUtYNLs+UbGG0Up62MPaYA4tO nKVIAcStbz64WshApnpGXC1W8okAIigaCfx7+y+qdiemC+5pssU7JYkfL76HqNLV 8wmGruP/iXcImrNrcIPfgS9tzxCOao5APJlQrhDkFySiIOz3gYvBLx7+uJ3+Eqsp yCiLWimqjxzcnmM+nWDSWgs4zeLyr9kjhOnkssMvlZBzc6hhxOxfB7lKNw8ssNjr ZIaq6BKzjeNCjmvva2vAJsBSzZErWQxT -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:44 2025 by rpki-client