$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft File: wSlv-tNPKfBODvrV2SRMAqfYfY0.mft (raw, json) Hash identifier: KaD87SVFsNn/fG3uHrSZFkIaLEsN3vqmJ6uSdfKxYpw= Subject key identifier: 71:19:6C:7E:79:FF:98:9A:A6:EC:D8:64:E3:B0:B9:8A:4A:6C:B9:5B Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Certificate serial: 352B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft Manifest number: 3504 Signing time: Mon 20 Oct 2025 14:40:18 +0000 Manifest this update: Mon 20 Oct 2025 14:40:17 +0000 Manifest next update: Mon 27 Oct 2025 14:40:17 +0000 Files and hashes: 1: wSlv-tNPKfBODvrV2SRMAqfYfY0.crl (hash: YhL8NNM7UJxDQdrYg6AlYy0eZzulFqcxE/f63yUx6sw=) 2: 93215346C57811EA8440684AC4F9AE02.roa (hash: Neo4y3dgUaZAb3jweRA+243JDhV+YXScU7c0GteH4uM=) 3: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (hash: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=) 4: 0000FD82284811EFADB77468C4F9AE02.roa (hash: W9xZ05fzRaVk7lWJKjvq0VcXRDKzdp+VZJErV4rbXxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Validity Not Before: Oct 20 14:40:17 2025 GMT Not After : Oct 27 14:40:17 2025 GMT Subject: CN=68f649d1-36c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:d3:47:25:0e:a0:31:0e:c9:f9:9e:e2:3b: 06:77:34:c8:b3:0a:b5:de:c5:dc:e7:31:ac:9f:a4: 90:ec:43:67:41:77:f8:d2:09:26:9d:44:6a:a8:f8: 3f:60:5d:5e:dd:7a:1a:4a:4a:0c:48:96:24:48:d3: 73:68:75:0f:87:be:b1:68:d3:3b:5b:5d:2f:1a:f5: d6:6a:a3:2d:8c:c6:17:fe:72:fd:e4:b0:b8:92:cc: 27:c2:0b:33:b7:06:a5:b8:0c:c0:07:23:e1:f9:07: 63:6a:e7:65:f7:7d:7f:33:fc:d7:b1:7c:3d:9e:69: fc:79:23:40:50:9d:7f:10:eb:cc:6d:cc:6b:c2:ed: 6b:e5:59:59:fd:f6:3b:10:f6:d4:c7:c6:80:7b:af: 21:34:0a:b9:e0:1e:0f:9b:3a:d6:41:23:09:20:3b: 1f:3c:07:bf:0d:5e:73:c6:b5:44:ab:3e:63:e2:70: d8:a3:d8:f0:1d:d7:a8:d9:b3:34:8d:49:8a:cf:e9: 6f:07:98:dd:a6:32:7e:30:9a:34:19:db:fa:df:ca: 4c:7a:69:47:47:48:e3:34:10:80:74:68:71:e3:7c: 65:6a:0f:0b:e2:9f:4e:a5:5a:46:11:33:ef:15:50: bb:12:83:5b:8b:99:6f:57:d2:c7:a7:3e:93:c0:d3: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:19:6C:7E:79:FF:98:9A:A6:EC:D8:64:E3:B0:B9:8A:4A:6C:B9:5B X509v3 Authority Key Identifier: keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:75:71:4c:de:16:e2:ab:b3:56:b2:88:29:a7:d9:f6:24:af: 5a:ac:04:27:be:12:78:43:be:9f:cc:3b:f1:bd:3a:12:ec:c2: ec:b4:a2:7f:75:c4:c5:7d:fc:b7:c9:50:86:a9:ce:f6:6c:aa: 67:fe:37:1d:d3:d7:21:f2:67:7a:1c:ea:d3:fb:63:09:67:b0: 0e:55:c3:89:6e:79:71:0d:b6:2d:96:8a:92:13:a9:84:d4:2b: ed:2c:1d:3b:c7:9f:7d:0d:87:6f:cd:cf:c8:ff:0d:90:77:14: 17:86:e8:76:ee:be:57:0b:15:95:64:03:ec:57:ae:0f:1b:ce: 77:13:4f:e7:a8:b1:bc:7b:fc:82:96:22:bf:05:c0:49:f5:cf: cd:9d:d3:44:8d:f9:23:0e:99:b2:1a:2f:1c:40:45:ca:9a:bc: b5:4e:95:d8:6f:38:da:02:d7:d4:f4:31:47:a9:ca:fd:55:d6: e9:5c:fa:34:32:d8:2a:07:97:fa:68:ce:a4:c9:df:4f:0a:aa: 5d:18:50:e0:10:11:33:73:4d:9b:ab:f5:04:19:db:f4:87:07: b4:53:09:91:c2:b0:2e:a9:be:bb:23:cb:c5:86:33:70:04:3a: da:34:54:55:a3:ff:ec:c5:62:87:9b:70:ca:22:e7:a2:c7:19: b0:e9:8e:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy QTdEODdEOEQwHhcNMjUxMDIwMTQ0MDE3WhcNMjUxMDI3MTQ0MDE3WjAYMRYwFAYD VQQDEw02OGY2NDlkMS0zNmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PDTRyUOoDEOyfme4jsGdzTIswq13sXc5zGsn6SQ7ENnQXf40gkmnURqqPg/ YF1e3XoaSkoMSJYkSNNzaHUPh76xaNM7W10vGvXWaqMtjMYX/nL95LC4kswnwgsz twaluAzAByPh+Qdjaudl931/M/zXsXw9nmn8eSNAUJ1/EOvMbcxrwu1r5VlZ/fY7 EPbUx8aAe68hNAq54B4PmzrWQSMJIDsfPAe/DV5zxrVEqz5j4nDYo9jwHdeo2bM0 jUmKz+lvB5jdpjJ+MJo0Gdv638pMemlHR0jjNBCAdGhx43xlag8L4p9OpVpGETPv FVC7EoNbi5lvV9LHpz6TwNPT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEZbH55 /5iapuzYZOOwuYpKbLlbMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjU5Qy83MzVEQzRENjFEOEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtm Qk9EdnJWMlNSTUFxZllmWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/dXFM3hbiq7NWsogpp9n2JK9arAQnvhJ4Q76fzDvxvToS7MLstKJ/ dcTFffy3yVCGqc72bKpn/jcd09ch8md6HOrT+2MJZ7AOVcOJbnlxDbYtloqSE6mE 1CvtLB07x599DYdvzc/I/w2QdxQXhuh27r5XCxWVZAPsV64PG853E0/nqLG8e/yC liK/BcBJ9c/NndNEjfkjDpmyGi8cQEXKmry1TpXYbzjaAtfU9DFHqcr9VdbpXPo0 MtgqB5f6aM6kyd9PCqpdGFDgEBEzc02bq/UEGdv0hwe0UwmRwrAuqb67I8vFhjNw BDraNFRVo//sxWKHm3DKIueixxmw6Y7j -----END CERTIFICATE-----Generated at Mon Oct 20 17:07:28 2025 by rpki-client