$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: o1jCFD5oMnQRdzKxZXDMA95+FK7KZnsDcBxiRs8DM9I= Subject key identifier: 07:79:C8:D1:E2:AE:7A:CA:E1:5D:FE:4E:0C:03:5F:26:8C:B2:8A:2C Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 05FF Signing time: Sun 02 Nov 2025 22:53:27 +0000 Manifest this update: Sun 02 Nov 2025 22:53:27 +0000 Manifest next update: Sun 09 Nov 2025 22:53:27 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: B3ZlVa7XBMPVm1bEYDGHyqgzZr6FngboOj8iOQPYjHI=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Nov 2 22:53:27 2025 GMT Not After : Nov 9 22:53:27 2025 GMT Subject: CN=6907e0e7-5df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:5d:e1:a8:54:9b:c8:14:b4:cf:95:2a:72: f4:85:08:c2:8c:70:85:6f:25:e2:e9:f6:4d:42:4c: 81:64:96:05:7b:63:5a:cf:9b:f3:17:97:1b:58:44: d1:40:a0:6c:ad:66:64:0f:fc:82:83:2d:02:b5:65: bc:25:b2:91:55:d0:02:7e:e1:fa:2a:5f:d3:c8:ca: c7:d3:d9:d9:05:16:b4:87:05:b4:a1:8d:b5:79:31: e3:20:30:53:4d:ea:94:63:1d:eb:fa:e5:6d:0d:14: 7b:98:2d:ca:49:c4:ba:a1:6d:c5:df:dd:ae:e1:b8: f1:2b:4f:8a:5a:64:11:fc:2c:25:07:d6:9a:1c:bf: 43:be:93:0f:24:e0:a4:28:c1:0c:a1:ec:9c:2a:34: 78:1b:1a:b1:4a:95:2d:30:49:12:19:20:f0:b1:58: 36:88:b2:af:c6:ef:ef:32:67:e5:8c:e0:6e:e0:4b: 22:7b:ab:72:e5:4d:db:95:50:72:79:9a:20:2d:a6: cb:13:fe:66:53:2c:2a:5b:20:6c:20:a7:a7:51:aa: 1e:39:d1:ed:a6:60:42:bf:2a:bf:95:ec:c3:a7:44: 1b:26:06:8a:a7:a5:b9:44:fb:f7:4f:d0:6e:83:c2: a2:84:1a:a7:08:c4:20:bc:92:34:8f:29:59:e2:1a: 31:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:79:C8:D1:E2:AE:7A:CA:E1:5D:FE:4E:0C:03:5F:26:8C:B2:8A:2C X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:82:fe:48:bb:ba:6d:9d:ab:1b:f5:03:05:53:dc:fa:74:3e: 48:40:d9:3a:8d:65:74:e7:1f:54:de:71:ff:aa:57:cc:2b:ab: 85:c9:58:b8:ab:92:a7:e0:63:55:32:35:ea:a5:f6:bf:3d:7b: ab:f4:c9:8e:40:24:c3:45:6c:1e:95:f7:30:e2:6a:52:da:9f: 0b:dc:dc:b7:d5:90:37:c0:51:21:d0:eb:3c:a7:18:99:09:84: 74:48:c3:e7:d5:cc:83:2a:ce:2d:73:b0:df:ac:24:c6:75:ac: 61:63:35:f3:c9:41:1b:b1:d0:82:92:f2:8a:1a:70:cd:26:4b: c2:ba:c1:74:48:0d:ef:bc:ba:78:ec:27:05:47:a1:ca:c1:85: b3:cb:b1:9c:20:7f:0b:ee:a8:a3:10:c1:34:1b:c0:b6:d6:3d: 78:85:e0:80:db:2e:87:d6:71:b1:88:e0:97:6c:7e:5d:9f:36: 52:6c:53:d9:b2:92:cb:ce:cd:95:cc:0e:c4:b7:51:ba:b6:c4: 5d:ca:74:6f:23:3b:2d:0d:01:ac:bc:42:83:29:44:46:79:99: 74:58:f3:b3:ff:5f:ce:80:ff:25:6f:2f:39:63:25:4f:03:5d: 6b:c8:f7:85:8e:06:0b:a1:4f:e3:fb:9e:f0:ad:0f:5f:38:fc: 60:cb:83:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUxMTAyMjI1MzI3WhcNMjUxMTA5MjI1MzI3WjAYMRYwFAYD VQQDEw02OTA3ZTBlNy01ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSVd4ahUm8gUtM+VKnL0hQjCjHCFbyXi6fZNQkyBZJYFe2Naz5vzF5cbWETR QKBsrWZkD/yCgy0CtWW8JbKRVdACfuH6Kl/TyMrH09nZBRa0hwW0oY21eTHjIDBT TeqUYx3r+uVtDRR7mC3KScS6oW3F392u4bjxK0+KWmQR/CwlB9aaHL9DvpMPJOCk KMEMoeycKjR4GxqxSpUtMEkSGSDwsVg2iLKvxu/vMmfljOBu4Esie6ty5U3blVBy eZogLabLE/5mUywqWyBsIKenUaoeOdHtpmBCvyq/lezDp0QbJgaKp6W5RPv3T9Bu g8KihBqnCMQgvJI0jylZ4hoxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAd5yNHi rnrK4V3+TgwDXyaMsoosMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASgv5Iu7ptnasb9QMFU9z6dD5IQNk6jWV05x9U3nH/qlfMK6uFyVi4 q5Kn4GNVMjXqpfa/PXur9MmOQCTDRWwelfcw4mpS2p8L3Ny31ZA3wFEh0Os8pxiZ CYR0SMPn1cyDKs4tc7DfrCTGdaxhYzXzyUEbsdCCkvKKGnDNJkvCusF0SA3vvLp4 7CcFR6HKwYWzy7GcIH8L7qijEME0G8C21j14heCA2y6H1nGxiOCXbH5dnzZSbFPZ spLLzs2VzA7Et1G6tsRdynRvIzstDQGsvEKDKURGeZl0WPOz/1/OgP8lby85YyVP A11ryPeFjgYLoU/j+57wrQ9fOPxgy4Nl -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:09 2025 by rpki-client