$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: lnTRcyNOLWXLe7DunaOVGefFftaqyEbuKNb+wG55JtA= Subject key identifier: DE:1E:AC:D1:92:4C:D8:44:DF:A3:0E:17:E8:0B:00:E1:C1:7A:03:EE Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 34CD Signing time: Mon 20 Oct 2025 14:59:10 +0000 Manifest this update: Mon 20 Oct 2025 14:59:09 +0000 Manifest next update: Mon 27 Oct 2025 14:59:09 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: b1gKUYi7fxB7uYqq/m4q4lQd0e6FVnNgy34V8UabUlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Oct 20 14:59:09 2025 GMT Not After : Oct 27 14:59:09 2025 GMT Subject: CN=68f64e3d-8d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:aa:fe:4a:e3:f0:d2:7c:02:91:77:96:6e: 43:27:7d:bd:91:86:d6:9a:32:a3:f3:51:3b:cb:23: a1:02:20:57:a0:e9:b2:da:4d:08:2e:b1:31:35:b3: 0d:0b:62:ca:6e:8d:97:f2:c5:d7:25:51:b1:3f:40: 74:a4:f4:ac:c0:24:73:28:39:02:a4:4f:79:4b:45: a8:4b:4a:84:a5:39:e4:5e:d8:68:41:97:0f:dd:94: 28:48:d0:1e:61:86:3f:74:5f:2c:34:94:b2:54:53: 34:5d:82:3e:9c:7c:b3:fb:6a:43:26:1d:78:eb:3d: 02:e0:8e:b0:56:01:65:7a:51:13:88:b0:38:7e:3d: 7b:51:50:a1:af:d9:21:0d:37:50:44:0c:e3:8b:e9: 3c:7d:9a:1d:90:3a:69:6c:b5:04:fc:99:b2:e6:1b: b4:e7:ee:61:61:cb:2c:34:5a:7c:5d:4d:13:ad:1c: 1f:36:f7:6b:3d:30:7d:c6:92:7e:75:1d:54:40:1e: 3b:5e:67:d2:be:ce:a8:10:67:1f:3b:6c:c4:9b:25: 58:a0:cd:81:81:d0:67:41:a7:d2:6a:27:cb:ec:b2: e7:b3:d7:1e:ae:72:f0:5a:c6:4a:5d:c4:e9:a4:9f: 39:38:75:b2:50:14:9c:8e:10:17:0d:b9:ea:0f:0e: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:AC:D1:92:4C:D8:44:DF:A3:0E:17:E8:0B:00:E1:C1:7A:03:EE X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3b:6a:af:cb:3d:54:47:b2:df:b6:62:4a:e7:bc:3d:bb:db: 91:bf:58:96:e2:e3:1d:f4:a3:b1:cf:c0:ed:57:5c:ae:31:86: d5:16:5a:a5:1f:50:34:18:33:7b:ef:bd:39:94:31:3b:ca:65: c7:18:70:45:96:67:ec:c9:ce:b0:e6:90:3d:67:99:be:a7:53: 36:5d:6c:8d:d3:32:72:b9:bf:a2:73:f3:5d:a0:14:63:23:13: ba:34:7e:8d:cb:97:37:79:a4:0e:99:18:0d:6e:0f:33:eb:ab: cc:72:3f:87:13:9e:c2:aa:ca:ca:48:8f:3f:7b:03:6e:1b:4b: b0:23:1b:2b:d3:f4:66:29:5c:ba:c6:94:de:12:e3:48:16:92: b1:91:ca:9d:8f:0c:4d:65:af:5f:ae:dc:36:2c:24:e0:d8:08: 06:31:f3:37:9a:91:e9:78:e2:98:93:d1:c9:b0:f3:4c:74:32: 84:cc:7b:e8:93:be:21:60:ce:d6:cb:81:bc:80:9c:69:02:b1: de:4e:db:fb:93:45:45:e0:b6:4d:11:e3:7d:d5:5b:f7:ba:eb: ac:72:e5:92:b6:f0:63:1b:de:b7:5a:9c:f7:0f:d6:e7:97:0e: b7:a7:9d:b7:ba:ed:8c:ff:57:ad:44:47:c1:de:7c:b4:da:a2: 47:9a:ad:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUxMDIwMTQ1OTA5WhcNMjUxMDI3MTQ1OTA5WjAYMRYwFAYD VQQDEw02OGY2NGUzZC04ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1Kq/krj8NJ8ApF3lm5DJ329kYbWmjKj81E7yyOhAiBXoOmy2k0ILrExNbMN C2LKbo2X8sXXJVGxP0B0pPSswCRzKDkCpE95S0WoS0qEpTnkXthoQZcP3ZQoSNAe YYY/dF8sNJSyVFM0XYI+nHyz+2pDJh146z0C4I6wVgFlelETiLA4fj17UVChr9kh DTdQRAzji+k8fZodkDppbLUE/Jmy5hu05+5hYcssNFp8XU0TrRwfNvdrPTB9xpJ+ dR1UQB47XmfSvs6oEGcfO2zEmyVYoM2BgdBnQafSaifL7LLns9cernLwWsZKXcTp pJ85OHWyUBScjhAXDbnqDw6PaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4erNGS TNhE36MOF+gLAOHBegPuMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNO2qvyz1UR7LftmJK57w9u9uRv1iW4uMd9KOxz8DtV1yuMYbVFlql H1A0GDN77705lDE7ymXHGHBFlmfsyc6w5pA9Z5m+p1M2XWyN0zJyub+ic/NdoBRj IxO6NH6Ny5c3eaQOmRgNbg8z66vMcj+HE57CqsrKSI8/ewNuG0uwIxsr0/RmKVy6 xpTeEuNIFpKxkcqdjwxNZa9frtw2LCTg2AgGMfM3mpHpeOKYk9HJsPNMdDKEzHvo k74hYM7Wy4G8gJxpArHeTtv7k0VF4LZNEeN91Vv3uuuscuWStvBjG963Wpz3D9bn lw63p523uu2M/1etREfB3ny02qJHmq1D -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:31 2025 by rpki-client