$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft File: WdWIElpxZphzjR0enm2KaNdAmyc.mft (raw, json) Hash identifier: chErjpRUq/amAU7M5+UmGKSn5pSBo9/BZHaOJ4Xd15o= Subject key identifier: 7F:E2:4E:A0:7A:3C:3B:FC:3A:24:E3:73:1B:09:70:FC:D2:7A:C9:E9 Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27 Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft Manifest number: 01BE Signing time: Sun 19 Oct 2025 05:51:33 +0000 Manifest this update: Sun 19 Oct 2025 05:51:32 +0000 Manifest next update: Sun 26 Oct 2025 05:51:32 +0000 Files and hashes: 1: WdWIElpxZphzjR0enm2KaNdAmyc.crl (hash: KUcwNn/1ZwA2wjU3TIEALOU4GeCmeIb0XqQzFfSn7oQ=) 2: 6A9F1EFECC1211EEAA175022C4F9AE02.roa (hash: FaE6XXkxjwj2xUfh7JuSDMTkitv7rRXPaw2a3g64mao=) 3: 74444F50490E11EFA7EAAA70C4F9AE02.roa (hash: kcHTFnzLikXn0NjPuVY7G48i03xbByG7UkZ4K1tljPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A27AB, serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27 Validity Not Before: Oct 19 05:51:32 2025 GMT Not After : Oct 26 05:51:32 2025 GMT Subject: CN=68f47c65-6783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:86:86:06:b3:3d:14:ce:ce:db:30:c7:25: 1d:18:b1:97:c0:0e:b6:9f:65:ed:95:51:6f:e6:f9: 8d:9f:b4:e3:73:b1:15:92:cd:23:4a:39:be:56:a6: ed:a0:20:24:6f:3f:2e:f4:11:c9:cc:53:19:84:db: d7:8c:a5:63:f4:7b:35:a8:12:5a:f5:36:c9:64:4b: 7e:63:b1:86:2f:1a:4e:c3:d8:eb:61:99:62:e6:6e: 92:ad:4e:b4:a0:80:d4:33:00:9d:49:7e:67:54:37: d9:38:10:54:8f:c2:57:99:b2:fb:01:82:ae:48:2e: 69:04:d8:dd:22:06:d4:37:57:9a:cd:13:86:6d:8a: 2d:e7:8c:02:d0:b3:37:c5:a9:4b:f2:ac:1b:ee:0f: 86:21:2b:7e:2c:90:cf:29:f0:c2:79:03:fb:8d:5a: 16:44:ec:48:ed:94:8f:f6:15:2b:b4:4d:bf:f0:48: 2c:18:66:95:23:bb:83:a8:c8:e9:8d:c9:7c:a1:5e: 1a:05:20:cf:b4:13:2f:49:43:e4:d9:a9:6a:59:7c: 28:dd:83:78:46:78:44:5b:4f:f3:93:4c:e4:12:fe: 6e:77:8a:63:93:06:49:be:26:c7:d6:9b:17:d1:aa: 20:94:29:c7:b7:09:06:2e:d7:4e:e6:25:d1:7c:d5: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E2:4E:A0:7A:3C:3B:FC:3A:24:E3:73:1B:09:70:FC:D2:7A:C9:E9 X509v3 Authority Key Identifier: keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:03:32:85:35:1e:5c:be:87:47:93:c2:a5:a4:05:fc:7b:a1: 24:ac:80:1b:e7:e3:24:4f:12:76:da:99:9f:12:f8:a8:4b:fa: d0:32:38:6f:97:cf:64:3b:a0:1c:51:a3:62:a8:92:95:94:e0: 3b:35:69:61:71:94:3c:1d:44:9c:04:0a:34:c9:a9:74:1a:d3: 63:bb:b2:1c:a9:d4:be:a7:f7:fc:fc:18:b5:f7:59:0c:d3:01: 2f:ce:7e:d1:be:27:cc:fe:87:3c:4c:7b:ba:99:fd:89:1b:03: 31:6b:14:50:de:74:53:86:a0:56:09:cd:3a:eb:1c:30:aa:5b: 2f:67:2d:af:16:58:b8:40:94:6b:06:0a:1f:ae:83:ba:18:5c: 49:ed:e2:0e:59:56:a6:d3:fe:5e:16:a7:48:ce:2a:04:17:aa: 54:5c:02:4c:44:a6:d6:8b:c1:54:34:b0:0e:53:5b:8a:0f:b1: b0:87:be:b1:88:69:0d:ee:33:00:cd:61:29:2e:42:43:e2:74: e6:e0:1b:50:49:2c:4b:9e:be:22:32:4b:f9:a3:32:e9:68:87: e2:72:29:88:b5:60:32:f2:86:ca:67:69:b9:9d:ea:79:9b:1e: db:58:4c:18:aa:2d:63:21:f2:8c:99:62:8a:07:b5:b9:4e:83: 15:f4:db:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3QUIxMTAvBgNVBAUTKDU5RDU4ODEyNUE3MTY2OTg3MzhEMUQxRTlFNkQ4QTY4 RDc0MDlCMjcwHhcNMjUxMDE5MDU1MTMyWhcNMjUxMDI2MDU1MTMyWjAYMRYwFAYD VQQDEw02OGY0N2M2NS02NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q6GhgazPRTOztswxyUdGLGXwA62n2XtlVFv5vmNn7Tjc7EVks0jSjm+Vqbt oCAkbz8u9BHJzFMZhNvXjKVj9Hs1qBJa9TbJZEt+Y7GGLxpOw9jrYZli5m6SrU60 oIDUMwCdSX5nVDfZOBBUj8JXmbL7AYKuSC5pBNjdIgbUN1eazROGbYot54wC0LM3 xalL8qwb7g+GISt+LJDPKfDCeQP7jVoWROxI7ZSP9hUrtE2/8EgsGGaVI7uDqMjp jcl8oV4aBSDPtBMvSUPk2alqWXwo3YN4RnhEW0/zk0zkEv5ud4pjkwZJvibH1psX 0aoglCnHtwkGLtdO5iXRfNX/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/iTqB6 PDv8OiTjcxsJcPzSesnpMB8GA1UdIwQYMBaAFFnViBJacWaYc40dHp5timjXQJsn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjdBQi82RjZFOTgyODMx MEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpwaHpqUjBlbm0yS2FOZEFt eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkV0lFbHB4WnBoempSMGVubTJLYU5kQW15Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjdBQi82RjZFOTgyODMxMEUxMUVFODg5RkYwM0ZDNEY5QUUwMi9XZFdJRWxweFpw aHpqUjBlbm0yS2FOZEFteWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkAzKFNR5cvodHk8KlpAX8e6EkrIAb5+MkTxJ22pmfEvioS/rQMjhv l89kO6AcUaNiqJKVlOA7NWlhcZQ8HUScBAo0yal0GtNju7IcqdS+p/f8/Bi191kM 0wEvzn7RvifM/oc8THu6mf2JGwMxaxRQ3nRThqBWCc066xwwqlsvZy2vFli4QJRr BgofroO6GFxJ7eIOWVam0/5eFqdIzioEF6pUXAJMRKbWi8FUNLAOU1uKD7Gwh76x iGkN7jMAzWEpLkJD4nTm4BtQSSxLnr4iMkv5ozLpaIficimItWAy8obKZ2m5nep5 mx7bWEwYqi1jIfKMmWKKB7W5ToMV9NuW -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:19 2025 by rpki-client