$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: 9wrWbhfN10NMtkTn+Ib6oGTvccF+Z4xTGQ+Yr2ngKLY= Subject key identifier: 92:CB:71:8E:7F:C1:00:9D:FE:42:CF:C6:3C:81:DD:4A:08:32:DA:3A Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0B42 Signing time: Sat 18 Oct 2025 20:08:19 +0000 Manifest this update: Sat 18 Oct 2025 20:08:18 +0000 Manifest next update: Sat 25 Oct 2025 20:08:18 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: Rwoek8dkXDcgWI+MK/7AT9v9Go9qbOkn6W5kIdaXVjg=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2892 (0xb4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Oct 18 20:08:18 2025 GMT Not After : Oct 25 20:08:18 2025 GMT Subject: CN=68f3f3b2-88de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f9:1a:50:df:24:06:04:7c:01:6c:45:e6:d3: 33:e8:71:1c:9c:6f:32:b2:40:08:b7:34:c1:c8:21: 7d:86:90:97:e6:77:f1:d2:0f:a4:72:23:9e:cb:6a: 37:2b:96:59:b5:1d:14:09:81:a2:08:f6:fd:39:88: 54:76:82:41:5e:4c:12:b3:fb:13:8d:8f:74:23:d9: 64:a2:fd:aa:0e:d7:46:15:27:d4:c9:a7:40:bf:af: 96:58:76:da:30:63:6f:d8:51:86:5d:38:e4:62:96: 72:06:12:9a:3d:ea:a3:5f:56:eb:2b:dc:5a:81:a3: a6:b8:4e:f2:c1:4a:ea:e6:23:d0:50:ba:a7:39:ff: 25:4b:e0:51:f5:66:1b:75:4e:51:a0:01:46:09:c3: ec:a3:5a:e3:bd:14:40:b5:b3:32:97:c9:f5:75:cb: 19:0b:98:47:70:ee:b1:1a:b2:86:19:3f:1a:0e:b4: e9:0d:7b:25:54:5d:5d:35:9f:e6:e5:42:44:d2:e2: 49:ec:8d:26:62:08:a6:74:5b:2c:04:19:fc:87:09: 3c:f5:34:4e:57:d6:4a:8a:d3:3f:f5:f4:c7:02:fa: f2:ad:1b:23:b5:c1:22:c4:67:80:15:16:b4:26:0d: 92:53:18:04:71:03:32:02:37:30:7d:6d:7c:b0:4d: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:71:8E:7F:C1:00:9D:FE:42:CF:C6:3C:81:DD:4A:08:32:DA:3A X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7f:2b:6b:04:54:8a:bb:ca:ef:ba:db:fa:4b:74:9a:aa:6b: 76:e2:a7:bd:42:b6:0f:67:db:6c:b4:85:59:8b:1d:0b:42:29: 96:26:35:15:e3:ae:4f:f8:5a:40:e0:3d:29:45:85:64:2a:bb: 82:39:4d:e9:09:d9:31:32:09:68:aa:7b:f7:8d:88:ac:7a:b2: bf:2f:ef:b6:91:a7:bf:8c:14:34:89:e7:87:f3:05:7d:43:18: 94:3c:e1:55:55:e3:23:7f:35:cb:ea:f3:b3:70:98:74:8b:9e: a3:a0:d8:a3:f3:8d:80:64:1f:41:08:ce:92:e8:a7:a0:0e:4d: 16:4c:3a:e3:85:b2:13:c5:a3:2e:ba:a9:40:d4:34:f1:11:c7: 83:fa:df:9e:bf:63:82:c7:c2:f0:e3:03:f8:5e:df:88:fb:65: 25:a8:20:a4:ea:75:61:71:db:73:23:29:ab:33:5b:3d:1b:4c: 40:56:e8:6d:88:fe:79:1e:b3:2e:62:7f:3d:43:fd:4a:d1:6a: 16:84:9d:12:63:f6:a1:33:1a:9d:5a:ee:b8:a8:64:38:7b:09: 43:ed:5c:a9:51:49:d5:27:5d:ac:63:32:94:0b:8c:93:9b:e5: 1f:ea:cd:5c:5c:d0:90:5b:c5:85:fc:cc:c9:98:63:c1:13:af: a8:28:86:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUxMDE4MjAwODE4WhcNMjUxMDI1MjAwODE4WjAYMRYwFAYD VQQDEw02OGYzZjNiMi04OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fkaUN8kBgR8AWxF5tMz6HEcnG8yskAItzTByCF9hpCX5nfx0g+kciOey2o3 K5ZZtR0UCYGiCPb9OYhUdoJBXkwSs/sTjY90I9lkov2qDtdGFSfUyadAv6+WWHba MGNv2FGGXTjkYpZyBhKaPeqjX1brK9xagaOmuE7ywUrq5iPQULqnOf8lS+BR9WYb dU5RoAFGCcPso1rjvRRAtbMyl8n1dcsZC5hHcO6xGrKGGT8aDrTpDXslVF1dNZ/m 5UJE0uJJ7I0mYgimdFssBBn8hwk89TROV9ZKitM/9fTHAvryrRsjtcEixGeAFRa0 Jg2SUxgEcQMyAjcwfW18sE0yVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLLcY5/ wQCd/kLPxjyB3UoIMto6MB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhfytrBFSKu8rvutv6S3Saqmt24qe9QrYPZ9tstIVZix0LQimWJjUV 465P+FpA4D0pRYVkKruCOU3pCdkxMgloqnv3jYiserK/L++2kae/jBQ0ieeH8wV9 QxiUPOFVVeMjfzXL6vOzcJh0i56joNij842AZB9BCM6S6KegDk0WTDrjhbITxaMu uqlA1DTxEceD+t+ev2OCx8Lw4wP4Xt+I+2UlqCCk6nVhcdtzIymrM1s9G0xAVuht iP55HrMuYn89Q/1K0WoWhJ0SY/ahMxqdWu64qGQ4ewlD7VypUUnVJ12sYzKUC4yT m+Uf6s1cXNCQW8WF/MzJmGPBE6+oKIaD -----END CERTIFICATE-----Generated at Mon Oct 20 15:39:49 2025 by rpki-client