$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: YefGmfk7yECmYEXONHpFKzfjYjwkvwghkReYKoPV9MA= Subject key identifier: AE:4D:79:33:83:9C:72:35:49:63:C7:35:89:5D:D4:C1:C7:77:68:79 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: B6 Signing time: Sun 19 Oct 2025 09:19:21 +0000 Manifest this update: Sun 19 Oct 2025 09:19:20 +0000 Manifest next update: Sun 26 Oct 2025 09:19:20 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: JH1STpvlnOI3FvR48qJwfrpIuV5iQCymUy/gbP/QsvE=) 2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: aRkI7tQEQCwESW+AVm8WUWidr8skaQZ/Cucm3ddKBWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Oct 19 09:19:20 2025 GMT Not After : Oct 26 09:19:20 2025 GMT Subject: CN=68f4ad18-3b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:1b:05:d2:e4:05:ec:c9:ae:f3:27:53:ed: a9:88:b3:bf:17:f3:7b:3b:6d:e0:63:84:e1:6d:e0: 58:ad:f3:62:3f:94:a6:40:64:86:44:29:10:15:63: f0:ea:ce:4e:02:66:b9:51:8b:8a:f4:6c:cc:d4:dd: c7:8f:9f:f0:c2:5e:22:35:5b:b6:ca:1f:f8:da:da: cb:3e:91:a2:01:16:fa:0c:72:ae:0f:74:a8:36:0e: fe:6f:61:8f:2b:d4:b8:a2:35:c7:d8:63:a3:8a:be: 21:c4:35:99:62:7c:ed:f6:ba:bf:e0:68:b6:27:67: d8:75:02:70:65:2a:91:28:72:ea:13:55:ef:c2:e6: d6:4a:90:35:36:eb:0b:54:00:eb:9c:fa:0b:02:84: 97:9e:05:a0:4d:9c:26:63:6c:3a:3f:bd:31:d1:21: b8:7b:67:15:38:31:2a:35:00:aa:32:71:e8:e1:d4: b8:5a:a4:c2:37:e0:76:94:a5:3c:00:03:00:9f:56: db:b1:e8:03:8b:8f:f4:df:27:17:0f:0b:d9:5e:05: c9:d9:ef:a5:6b:00:9e:b7:37:e4:f5:a3:c1:5a:bd: 42:df:17:2d:88:95:bd:64:53:db:6f:aa:26:4c:ad: 5e:22:55:38:50:41:bf:f7:34:a3:ed:08:5d:0b:6f: f9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4D:79:33:83:9C:72:35:49:63:C7:35:89:5D:D4:C1:C7:77:68:79 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:0e:a3:df:83:36:f5:5a:df:8a:dd:4b:fe:01:ab:72:a5:65: 29:7c:fa:24:ce:28:d2:72:50:e9:69:61:1c:30:f9:8e:e9:76: 6b:ff:f5:f5:18:e1:58:d6:e4:1e:70:55:91:a6:cd:47:b9:70: 2e:e7:80:cf:27:0c:c8:8f:d3:35:1d:e1:e3:de:23:42:25:a1: 7e:5b:39:52:9b:fc:3a:2f:89:8d:d4:82:f8:34:7a:36:e2:68: 3f:2f:24:d2:2b:ee:1c:24:2f:2c:9d:12:2a:67:78:3a:46:b4: d6:a7:b3:dc:97:a8:ab:a7:12:04:53:ac:6b:67:39:c6:fd:16: b3:b3:8c:c6:49:1f:da:38:55:c7:be:73:03:08:3c:60:bf:d1: 79:7c:dc:45:c7:8f:cb:ef:43:4f:8f:da:b7:74:55:1d:d9:aa: dd:20:9c:fe:14:4a:d4:96:7e:29:12:8d:fd:49:d6:5e:5b:a0: 95:ea:da:86:a1:e5:03:2d:1c:bc:e3:93:bb:4e:5d:85:f5:ca: de:e6:2f:78:91:45:92:b7:8a:29:4e:87:87:5b:61:c4:cb:8a: bf:d8:bf:0e:05:2b:a7:f9:ca:ad:70:65:f0:ba:cf:ba:99:1c: 8c:d7:36:92:db:a0:21:7d:cf:f8:20:f7:64:66:b3:b7:29:ef: 4c:8b:8b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKDVBNTZDNERFOTQyM0I5RTJCODAwQUI3RTA0MERDQTNF MDlGMjM0NzUwHhcNMjUxMDE5MDkxOTIwWhcNMjUxMDI2MDkxOTIwWjAYMRYwFAYD VQQDEw02OGY0YWQxOC0zYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CYbBdLkBezJrvMnU+2piLO/F/N7O23gY4ThbeBYrfNiP5SmQGSGRCkQFWPw 6s5OAma5UYuK9GzM1N3Hj5/wwl4iNVu2yh/42trLPpGiARb6DHKuD3SoNg7+b2GP K9S4ojXH2GOjir4hxDWZYnzt9rq/4Gi2J2fYdQJwZSqRKHLqE1XvwubWSpA1NusL VADrnPoLAoSXngWgTZwmY2w6P70x0SG4e2cVODEqNQCqMnHo4dS4WqTCN+B2lKU8 AAMAn1bbsegDi4/03ycXDwvZXgXJ2e+lawCetzfk9aPBWr1C3xctiJW9ZFPbb6om TK1eIlU4UEG/9zSj7QhdC2/5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5NeTOD nHI1SWPHNYld1MHHd2h5MB8GA1UdIwQYMBaAFFpWxN6UI7niuACrfgQNyj4J8jR1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84M0ZENkIyRUE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVlSzRBS3QtQkEzS1BnbnlO SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84M0ZENkIyRUE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVl SzRBS3QtQkEzS1BnbnlOSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUDqPfgzb1Wt+K3Uv+AatypWUpfPokzijSclDpaWEcMPmO6XZr//X1 GOFY1uQecFWRps1HuXAu54DPJwzIj9M1HeHj3iNCJaF+WzlSm/w6L4mN1IL4NHo2 4mg/LyTSK+4cJC8snRIqZ3g6RrTWp7Pcl6irpxIEU6xrZznG/Razs4zGSR/aOFXH vnMDCDxgv9F5fNxFx4/L70NPj9q3dFUd2ardIJz+FErUln4pEo39SdZeW6CV6tqG oeUDLRy845O7Tl2F9cre5i94kUWSt4opToeHW2HEy4q/2L8OBSun+cqtcGXwus+6 mRyM1zaS26Ahfc/4IPdkZrO3Ke9Mi4uI -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:45 2025 by rpki-client