$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: Gi6o/XaanWN2xzj7e+MBiLFFJJ3rlC2kO0SQFsitaqQ= Subject key identifier: BB:44:44:E5:1C:08:F1:B5:63:C7:A6:A9:35:64:F5:5C:72:EB:D0:94 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0FDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0FCA Signing time: Sat 18 Oct 2025 18:06:20 +0000 Manifest this update: Sat 18 Oct 2025 18:06:19 +0000 Manifest next update: Sat 25 Oct 2025 18:06:19 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: tYFqxTZh6jc9FqkIq5PrTHOIeCdAzy5Z1TgC4TRxz0k=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4060 (0xfdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Oct 18 18:06:19 2025 GMT Not After : Oct 25 18:06:19 2025 GMT Subject: CN=68f3d71b-155f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:87:f7:00:11:6d:1e:5d:fc:d8:02:2f:b1: 23:8e:39:56:16:a7:ec:00:e8:0d:48:39:8c:3c:81: 8c:22:a1:6d:43:e2:3b:d8:00:c0:5f:00:e0:71:62: c2:ee:25:0f:56:e3:66:96:dc:4a:f6:97:48:26:57: a4:7f:2e:9c:9e:c0:e0:ed:44:46:6f:70:d0:78:ae: a7:7a:f5:41:92:10:63:1b:29:8b:4f:e5:90:a7:37: 97:ae:94:d0:61:02:4b:53:99:3e:a9:d7:4c:cd:50: 1f:42:89:0a:d2:8e:6b:b1:85:05:de:0d:b4:2a:f6: a4:f0:86:2c:3c:f0:5a:cd:9c:74:62:f2:cb:db:d6: 7c:d5:86:9c:1d:64:4a:42:41:0f:05:af:7b:4c:0b: 41:58:30:07:78:9f:49:79:cd:8d:90:82:c3:0d:92: d3:91:ae:77:0b:85:37:27:0c:05:f9:cf:a2:8e:b6: 96:d1:4f:21:21:b2:da:e3:53:bc:ec:07:9c:9d:1b: 2a:36:25:f2:1a:b7:70:ab:69:45:e0:06:d2:08:c1: 7f:01:5c:3f:07:9b:a0:e4:07:ac:48:91:1c:51:4c: f8:6b:2e:9a:a3:97:ae:68:df:f2:42:f9:25:b7:7a: a8:de:3e:7d:c9:e7:10:e7:81:f9:32:b1:19:8f:31: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:44:44:E5:1C:08:F1:B5:63:C7:A6:A9:35:64:F5:5C:72:EB:D0:94 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2a:2d:4b:21:da:6f:20:82:c9:54:70:d6:32:c0:9b:83:25: 3c:0e:1f:b8:6e:fc:5a:44:e3:1b:1b:92:2e:d6:ee:d8:81:24: ec:df:04:93:03:37:4f:01:81:7e:8c:45:8d:8f:71:0e:ba:23: 2c:c4:95:7c:3d:a2:63:fa:6b:dd:8c:b6:0d:6d:26:1d:11:88: 68:57:a4:a9:bb:e8:41:0d:15:9c:fe:7d:9c:17:6b:3e:8e:a0: 8d:2a:cb:fb:7b:27:6f:f4:be:c0:71:24:27:12:c5:85:61:09: 90:c8:ef:f5:30:ca:22:88:f6:fe:30:cd:db:07:3c:12:07:5b: 53:9a:6f:6b:0b:8d:47:12:d1:eb:9c:bf:18:75:0c:cd:9d:b3: cb:f5:5c:cd:17:2f:36:f2:d3:d8:a4:a9:8b:00:41:e7:70:4f: 2b:8a:4d:36:96:59:41:ba:50:c2:4b:25:64:cd:5a:4e:cc:cb: 9e:aa:19:e3:63:bd:8b:99:d4:94:83:48:8d:e2:85:86:40:a9: c4:ca:57:4f:91:c6:f5:e0:55:15:67:60:5f:a6:3f:1a:8d:58: e2:a5:3b:72:b6:30:49:dc:f7:9d:69:f7:8c:1c:2e:f4:24:2b: e5:3f:d2:fc:7f:33:ad:d2:72:16:2f:cb:a0:6d:7c:2b:25:26: af:e1:91:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUxMDE4MTgwNjE5WhcNMjUxMDI1MTgwNjE5WjAYMRYwFAYD VQQDEw02OGYzZDcxYi0xNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspeH9wARbR5d/NgCL7EjjjlWFqfsAOgNSDmMPIGMIqFtQ+I72ADAXwDgcWLC 7iUPVuNmltxK9pdIJlekfy6cnsDg7URGb3DQeK6nevVBkhBjGymLT+WQpzeXrpTQ YQJLU5k+qddMzVAfQokK0o5rsYUF3g20Kvak8IYsPPBazZx0YvLL29Z81YacHWRK QkEPBa97TAtBWDAHeJ9Jec2NkILDDZLTka53C4U3JwwF+c+ijraW0U8hIbLa41O8 7AecnRsqNiXyGrdwq2lF4AbSCMF/AVw/B5ug5AesSJEcUUz4ay6ao5euaN/yQvkl t3qo3j59yecQ54H5MrEZjzFAowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtEROUc CPG1Y8emqTVk9Vxy69CUMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvKi1LIdpvIILJVHDWMsCbgyU8Dh+4bvxaROMbG5Iu1u7YgSTs3wST AzdPAYF+jEWNj3EOuiMsxJV8PaJj+mvdjLYNbSYdEYhoV6Spu+hBDRWc/n2cF2s+ jqCNKsv7eydv9L7AcSQnEsWFYQmQyO/1MMoiiPb+MM3bBzwSB1tTmm9rC41HEtHr nL8YdQzNnbPL9VzNFy828tPYpKmLAEHncE8rik02lllBulDCSyVkzVpOzMueqhnj Y72LmdSUg0iN4oWGQKnEyldPkcb14FUVZ2Bfpj8ajVjipTtytjBJ3PedafeMHC70 JCvlP9L8fzOt0nIWL8ugbXwrJSav4ZGS -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:49 2025 by rpki-client