$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json) Hash identifier: qNOUlJUI2g6By+2o1rT7Xr96tcSO6Di3Oj2b8TJPeCY= Subject key identifier: 66:86:A5:69:0D:4A:A5:DF:DD:38:1C:32:A6:42:75:7D:49:D7:9E:1E Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Certificate serial: 0FA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft Manifest number: 0F9C Signing time: Sat 18 Oct 2025 18:06:57 +0000 Manifest this update: Sat 18 Oct 2025 18:06:56 +0000 Manifest next update: Sat 25 Oct 2025 18:06:56 +0000 Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: KRvuhH02UkxvVnf2ttbur8hVYDw+dhMx3K5V5yOO9fQ=) 2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: JDJx+bW699vTjkG4SZTOilca+2ZG/Wo+x5hxTR1zUag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4005 (0xfa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Validity Not Before: Oct 18 18:06:56 2025 GMT Not After : Oct 25 18:06:56 2025 GMT Subject: CN=68f3d741-caeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:c0:6e:27:9a:2d:7b:b3:d5:0a:a0:50:15: c3:49:b3:19:af:1d:d7:e1:24:d9:9e:01:b4:11:4f: 04:32:1e:90:a8:3a:7f:2a:33:62:05:14:30:be:bf: 01:a4:d8:59:c8:b8:27:64:1a:37:df:00:9c:a3:14: 27:a9:8f:f9:d8:a3:92:59:9e:05:a0:e9:f7:0a:99: e0:6d:4f:76:d8:9b:93:fa:d2:11:1a:29:1d:27:5e: 43:03:14:66:d3:5d:f3:0e:0d:04:78:e8:83:3b:3b: 17:05:ad:a1:d5:18:4b:46:c5:15:68:2d:9d:00:3b: 84:de:12:9c:d9:1d:a5:a3:7a:9d:9a:e1:f4:4c:9c: bc:4d:f8:2a:f2:7e:48:ac:20:bb:e6:0b:04:19:c2: a4:13:1f:44:dd:34:5b:c8:4c:38:3c:b8:fe:fa:56: c1:b5:85:72:53:7b:2d:2c:d3:91:a2:6c:48:71:c4: 45:ca:81:09:17:58:fa:80:ff:fc:2d:24:ec:27:dc: c2:36:90:a0:94:66:12:51:76:18:3d:67:0c:78:82: d0:c8:d4:2f:87:3c:a3:9a:95:28:fd:0b:a9:32:ba: 8d:25:0f:ed:a0:ad:92:64:23:b0:dd:03:0a:e2:cf: 6c:f4:2c:54:2e:35:a5:d7:ad:42:dd:ba:5d:cb:16: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:86:A5:69:0D:4A:A5:DF:DD:38:1C:32:A6:42:75:7D:49:D7:9E:1E X509v3 Authority Key Identifier: keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c4:86:7f:a3:c4:67:11:d7:f5:93:99:eb:18:0c:fa:d4:10: a2:1f:5d:8a:e0:7d:f3:8c:a6:f8:2c:5a:0a:21:97:4c:9f:fc: b5:a2:da:71:be:d3:d3:40:52:9b:f5:04:5b:ad:0d:f7:55:10: 6f:d4:0d:90:23:2c:91:dd:b3:ba:86:2a:b5:59:0d:d4:83:0a: 3a:41:a9:c1:c3:19:28:3c:b9:80:06:5a:88:fb:ce:ff:9a:24: 63:86:5d:88:5a:20:4c:11:a0:b4:ab:37:49:a7:8e:9c:04:37: 13:8f:cb:3d:da:61:0e:b0:3f:87:7d:50:9a:84:c2:05:7a:af: d9:78:5f:02:fc:1f:1a:25:97:0c:c4:43:a2:74:3c:a7:25:9a: 99:10:ee:21:2e:0b:88:aa:8d:3f:85:d0:ce:55:4b:44:30:ae: 41:f5:9c:6b:7a:93:96:b8:28:09:27:db:48:43:89:e2:fe:e4: fe:dd:cd:fb:f2:41:f6:ce:f3:87:40:b8:79:e9:29:fa:ef:f9: 20:d6:96:11:c5:6f:4d:a3:9c:79:27:54:07:a5:ef:a5:c2:82: 63:ea:a3:b7:2b:d8:5c:41:2d:dc:ee:3f:9e:59:90:61:5d:f1: 5c:4a:ca:14:32:3a:51:d7:56:e9:26:2f:d7:56:a6:e5:1b:b9: 18:bd:bf:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVFMkRDOENBOUY1 QUZBRTFCNTMwHhcNMjUxMDE4MTgwNjU2WhcNMjUxMDI1MTgwNjU2WjAYMRYwFAYD VQQDEw02OGYzZDc0MS1jYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XvAbieaLXuz1QqgUBXDSbMZrx3X4STZngG0EU8EMh6QqDp/KjNiBRQwvr8B pNhZyLgnZBo33wCcoxQnqY/52KOSWZ4FoOn3CpngbU922JuT+tIRGikdJ15DAxRm 013zDg0EeOiDOzsXBa2h1RhLRsUVaC2dADuE3hKc2R2lo3qdmuH0TJy8Tfgq8n5I rCC75gsEGcKkEx9E3TRbyEw4PLj++lbBtYVyU3stLNORomxIccRFyoEJF1j6gP/8 LSTsJ9zCNpCglGYSUXYYPWcMeILQyNQvhzyjmpUo/QupMrqNJQ/toK2SZCOw3QMK 4s9s9CxULjWl161C3bpdyxYDFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaGpWkN SqXf3TgcMqZCdX1J154eMB8GA1UdIwQYMBaAFFl2710L8WaI4l7F4tyMqfWvrhtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzJDNi8wQUE0RDY2NDZB NEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpvamlYc1hpM0l5cDlhLXVH MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dYYnZYUXZ4Wm9qaVhzWGkzSXlwOWEtdUcxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpv amlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9xIZ/o8RnEdf1k5nrGAz61BCiH12K4H3zjKb4LFoKIZdMn/y1otpx vtPTQFKb9QRbrQ33VRBv1A2QIyyR3bO6hiq1WQ3Ugwo6QanBwxkoPLmABlqI+87/ miRjhl2IWiBMEaC0qzdJp46cBDcTj8s92mEOsD+HfVCahMIFeq/ZeF8C/B8aJZcM xEOidDynJZqZEO4hLguIqo0/hdDOVUtEMK5B9ZxrepOWuCgJJ9tIQ4ni/uT+3c37 8kH2zvOHQLh56Sn67/kg1pYRxW9No5x5J1QHpe+lwoJj6qO3K9hcQS3c7j+eWZBh XfFcSsoUMjpR11bpJi/XVqblG7kYvb9N -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:10 2025 by rpki-client