$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: tA0vWTk1Q7IHPs7LwWOrININguIg9BalIlbrG5LAlPw= Subject key identifier: B0:20:CD:D6:9B:3F:A8:26:05:CC:F5:69:F4:B0:F9:5D:D8:3A:8B:56 Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 01EA Signing time: Mon 03 Nov 2025 02:32:52 +0000 Manifest this update: Mon 03 Nov 2025 02:32:51 +0000 Manifest next update: Mon 10 Nov 2025 02:32:51 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: pzrZkiNBQqY2ERMs453fvtLq5Sb8ohmqUPHBUeUsye0=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: HHXQFb70LXf16l4S8JzNbd5w8LQr3pgR5z+FBqxSlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Nov 3 02:32:51 2025 GMT Not After : Nov 10 02:32:51 2025 GMT Subject: CN=69081454-b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bc:34:48:f5:42:39:01:c3:6a:b8:1d:16:a3: 81:6d:57:78:22:94:0b:e1:82:c1:29:c0:2a:19:cf: 55:0c:07:bf:57:33:10:b8:91:2e:59:7e:3f:76:89: 8d:0d:a9:1a:dc:30:c6:0c:0a:22:03:e5:66:99:b7: 9d:e5:fd:65:39:72:fa:3f:62:7e:a8:40:f2:8e:4c: 3e:27:13:1e:ba:96:1d:78:db:15:27:2d:6f:2b:f2: 42:e3:0d:8c:05:19:30:57:ee:12:24:89:d5:a0:21: ef:ab:d8:c1:57:b5:72:f7:d1:c7:99:dd:34:87:ea: b3:57:60:1c:bf:d5:84:0a:93:2e:0d:67:d4:b6:1b: 4e:c8:cd:57:a1:36:28:df:c1:e1:f8:0d:92:94:3a: 32:5e:76:2c:85:72:8e:f4:3c:56:5e:a9:6b:0c:2a: 1d:7a:9b:b8:89:a2:e5:6a:79:a2:a8:46:61:c3:8d: b2:b4:1f:65:cd:d9:42:7b:c6:e9:86:aa:36:64:2b: bb:45:bd:f8:21:e9:88:3b:8d:01:ff:d2:e8:45:9e: c7:93:fa:be:fb:b1:50:1b:ba:f8:be:70:3b:bf:2c: 44:f1:be:d7:92:c5:4e:a0:9b:34:65:65:b4:3a:32: 30:78:5e:71:d0:8b:6a:48:ec:06:a5:75:70:97:b8: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:CD:D6:9B:3F:A8:26:05:CC:F5:69:F4:B0:F9:5D:D8:3A:8B:56 X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4d:8e:d5:a3:c6:99:d5:c6:f3:a3:51:3b:79:f5:a2:04:ff: c8:79:68:20:72:3f:24:5e:91:51:c6:ef:70:7d:f0:78:27:ee: 0b:75:81:77:9e:ab:61:8a:31:cd:28:69:16:d2:66:c9:13:74: 8b:ed:85:c7:b8:98:97:10:51:e7:37:98:a1:d5:89:15:2a:16: 4b:d0:93:8a:d2:79:6e:9f:4d:fa:59:30:0c:5f:0b:14:0d:43: f2:ad:65:3b:10:92:24:08:52:be:6c:06:2b:32:cb:45:f7:d9: fa:4a:2c:f6:50:4a:c8:2f:62:13:2e:bf:c6:89:6c:1a:d3:8f: b8:b9:60:11:d3:12:be:69:90:a8:f8:f1:89:a2:c1:aa:76:5f: ef:c4:d1:56:d5:c5:2b:3d:12:8f:31:6c:16:5a:fc:a2:85:ef: ca:8b:4c:a4:80:eb:2a:99:39:33:cc:ab:e7:c1:db:c2:28:7f: 3c:22:a1:eb:ec:05:6d:cd:c0:e7:79:7c:70:6c:dc:25:60:41: fb:f2:64:c5:0f:03:38:88:4b:00:22:70:67:53:f2:43:df:51: 57:c5:05:10:ea:66:dc:61:56:f7:a3:f6:bd:bb:97:ff:0b:34: 38:65:3e:bd:0c:91:20:91:a0:1a:c3:00:f7:0d:d0:dd:2f:d4: a1:c0:5b:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjUxMTAzMDIzMjUxWhcNMjUxMTEwMDIzMjUxWjAYMRYwFAYD VQQDEw02OTA4MTQ1NC1iNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Lw0SPVCOQHDargdFqOBbVd4IpQL4YLBKcAqGc9VDAe/VzMQuJEuWX4/domN Daka3DDGDAoiA+Vmmbed5f1lOXL6P2J+qEDyjkw+JxMeupYdeNsVJy1vK/JC4w2M BRkwV+4SJInVoCHvq9jBV7Vy99HHmd00h+qzV2Acv9WECpMuDWfUthtOyM1XoTYo 38Hh+A2SlDoyXnYshXKO9DxWXqlrDCodepu4iaLlanmiqEZhw42ytB9lzdlCe8bp hqo2ZCu7Rb34IemIO40B/9LoRZ7Hk/q++7FQG7r4vnA7vyxE8b7XksVOoJs0ZWW0 OjIweF5x0ItqSOwGpXVwl7hgjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAgzdab P6gmBcz1afSw+V3YOotWMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKTY7Vo8aZ1cbzo1E7efWiBP/IeWggcj8kXpFRxu9wffB4J+4LdYF3 nqthijHNKGkW0mbJE3SL7YXHuJiXEFHnN5ih1YkVKhZL0JOK0nlun036WTAMXwsU DUPyrWU7EJIkCFK+bAYrMstF99n6Siz2UErIL2ITLr/GiWwa04+4uWAR0xK+aZCo +PGJosGqdl/vxNFW1cUrPRKPMWwWWvyihe/Ki0ykgOsqmTkzzKvnwdvCKH88IqHr 7AVtzcDneXxwbNwlYEH78mTFDwM4iEsAInBnU/JD31FXxQUQ6mbcYVb3o/a9u5f/ CzQ4ZT69DJEgkaAawwD3DdDdL9ShwFsG -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:59 2025 by rpki-client