$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: o/XLbPsL/IoA137grFFf5/Vt9iQi00OGCp8zBLuYiVY= Subject key identifier: 9B:EF:08:56:84:83:1A:73:32:6A:00:40:97:34:95:D8:F2:5C:5E:F7 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1C00 Signing time: Sat 18 Oct 2025 16:58:00 +0000 Manifest this update: Sat 18 Oct 2025 16:58:00 +0000 Manifest next update: Sat 25 Oct 2025 16:58:00 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: meL3MOuAALasw91IMTt3rvuZ7wLwOo34MNT0UHFST5Q=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: +EpmAAjo6yFTAjun44cjj7Z2OPFIr6kC+2bjFTkfQ8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Oct 18 16:58:00 2025 GMT Not After : Oct 25 16:58:00 2025 GMT Subject: CN=68f3c718-928c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:4e:b2:98:84:57:c8:6d:96:27:c2:01:8c: 18:b5:c3:d8:8b:4c:67:d6:15:ea:0b:eb:8d:f3:4a: cc:11:45:74:4f:0a:62:57:9d:1d:4d:c7:6e:29:32: a6:f7:d1:99:5d:78:c0:02:72:a0:fa:c8:45:5a:60: 69:9d:b0:41:d6:6c:c5:0d:1a:43:2b:a4:1e:6b:8e: ff:91:01:0b:5c:a9:a1:ab:64:1e:60:c4:f1:70:86: e7:6b:a0:bf:9d:f6:7a:0d:6e:6f:8e:b9:2b:a5:52: 61:b6:20:1d:5c:2a:8f:0d:2e:28:d7:ac:43:b9:56: e5:ba:46:ee:15:dc:37:8e:4c:c4:03:64:ea:cd:34: 26:79:4d:7b:36:d3:5c:ff:c0:2d:93:19:3a:25:49: 71:00:05:d9:e4:66:2a:5f:bb:1f:fe:51:1e:99:6d: eb:ad:e5:eb:06:60:99:75:6d:a5:4a:3d:10:b4:5a: eb:56:12:0d:26:82:01:00:1d:a3:89:52:a3:0b:71: ff:bb:de:5e:3b:ac:c8:4a:1d:6c:07:c5:51:20:58: ee:de:71:b2:8f:ec:72:a9:10:c6:12:a4:fb:a3:fc: 99:91:4c:cf:96:f2:bb:ae:26:1c:db:c2:15:4a:89: 1f:df:2e:7b:3c:9c:a7:f1:d0:a9:18:9f:75:d8:8e: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EF:08:56:84:83:1A:73:32:6A:00:40:97:34:95:D8:F2:5C:5E:F7 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:25:6e:f0:da:66:4a:bd:00:df:cf:0f:a6:53:d8:26:66:ae: 02:b5:7c:58:89:bf:e8:e1:e4:f4:d0:49:61:b3:1c:81:66:2b: d9:59:fe:19:d8:b9:ff:ed:75:a2:86:b3:bb:e2:49:97:42:10: 96:fb:30:65:cf:e0:46:fb:f6:e3:2b:bd:c7:41:9d:0f:d3:59: f3:b0:79:ea:fe:07:bf:d5:69:bc:30:3b:bb:a4:20:b8:96:1d: 71:39:b0:5d:1c:d3:ad:ef:30:43:40:9f:c3:84:9c:30:ce:a3: f0:8e:bc:47:e4:14:86:14:81:6f:eb:c8:e1:e5:cb:fe:f4:14: 3d:1e:dc:17:b4:26:c1:b3:1d:89:c2:0a:25:da:2d:b3:b7:9b: 73:d5:ba:f4:c9:f5:3b:ec:67:e1:76:67:8d:c1:98:49:60:34: 86:5f:b5:97:1b:f0:a8:35:cd:fa:04:18:c7:7e:c6:3a:e9:b1: 2a:5d:4a:6e:ce:9b:0e:25:79:c2:f9:28:b4:ac:03:9a:d9:7e: a0:95:10:f4:59:f4:98:c7:d5:61:cd:7b:f0:45:08:08:63:c8: 86:14:d8:0a:4e:5d:02:48:32:cf:97:91:0f:f1:b5:3b:2d:41: 4d:77:6d:e1:08:4c:3f:8d:96:7c:c9:0f:36:f1:c4:aa:61:7a: 2e:38:1b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUxMDE4MTY1ODAwWhcNMjUxMDI1MTY1ODAwWjAYMRYwFAYD VQQDEw02OGYzYzcxOC05MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveNOspiEV8htlifCAYwYtcPYi0xn1hXqC+uN80rMEUV0TwpiV50dTcduKTKm 99GZXXjAAnKg+shFWmBpnbBB1mzFDRpDK6Qea47/kQELXKmhq2QeYMTxcIbna6C/ nfZ6DW5vjrkrpVJhtiAdXCqPDS4o16xDuVblukbuFdw3jkzEA2TqzTQmeU17NtNc /8Atkxk6JUlxAAXZ5GYqX7sf/lEemW3rreXrBmCZdW2lSj0QtFrrVhINJoIBAB2j iVKjC3H/u95eO6zISh1sB8VRIFju3nGyj+xyqRDGEqT7o/yZkUzPlvK7riYc28IV Sokf3y57PJyn8dCpGJ912I43DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvvCFaE gxpzMmoAQJc0ldjyXF73MB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADJW7w2mZKvQDfzw+mU9gmZq4CtXxYib/o4eT00ElhsxyBZivZWf4Z 2Ln/7XWihrO74kmXQhCW+zBlz+BG+/bjK73HQZ0P01nzsHnq/ge/1Wm8MDu7pCC4 lh1xObBdHNOt7zBDQJ/DhJwwzqPwjrxH5BSGFIFv68jh5cv+9BQ9HtwXtCbBsx2J wgol2i2zt5tz1br0yfU77GfhdmeNwZhJYDSGX7WXG/CoNc36BBjHfsY66bEqXUpu zpsOJXnC+Si0rAOa2X6glRD0WfSYx9VhzXvwRQgIY8iGFNgKTl0CSDLPl5EP8bU7 LUFNd23hCEw/jZZ8yQ828cSqYXouOBs3 -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:33 2025 by rpki-client