$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: RvtrjeFP5dbVhs1Yp+SJBVzn40Vf8bye5Nc5L2T0CSc= Subject key identifier: 61:6A:9B:E9:0F:41:4C:B2:07:33:EF:4A:44:18:1F:67:C3:75:0C:E3 Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 0211 Signing time: Sat 18 Oct 2025 17:21:13 +0000 Manifest this update: Sat 18 Oct 2025 17:21:13 +0000 Manifest next update: Sat 25 Oct 2025 17:21:13 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: H/tvJUTFQSW0DR3yQ+asbaAWO5LKvVvtfZFicj0/u6Q=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Oct 18 17:21:13 2025 GMT Not After : Oct 25 17:21:13 2025 GMT Subject: CN=68f3cc89-6f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:79:dd:3f:7b:98:b4:52:9c:4a:42:38:be: b2:8b:fe:21:d6:9f:d8:9a:94:15:67:10:f4:0a:b5: 77:81:e3:a7:d2:89:f9:1b:5a:29:3c:6d:c2:dd:7d: a3:f5:f5:cc:f3:25:cc:ca:2b:ab:72:a9:b8:f8:95: 91:98:7b:f1:5d:ea:26:22:8b:05:88:82:e4:f6:d4: 86:28:c5:5e:e4:b9:c3:f4:4f:87:3d:2e:9e:87:ae: 38:12:a5:3f:5b:73:f7:7f:1b:63:11:12:6a:8e:5d: c2:09:73:c8:31:22:87:db:f4:b3:d6:8c:87:8f:c7: f5:97:88:b4:04:65:10:8d:cd:49:f0:76:21:7f:6e: a6:5f:86:47:87:35:3b:9f:b6:c5:c3:f5:8f:03:22: 05:59:cb:18:64:b9:81:6a:63:28:41:41:2c:f6:3e: d4:86:e8:39:93:47:2a:dd:29:a5:c3:ca:68:fd:0a: 6a:c0:57:13:e0:8b:c8:9d:d3:8c:0f:51:3f:88:ea: c9:ac:17:bc:eb:5d:92:6d:10:9b:78:c0:e5:ac:ff: 4b:74:7e:8f:06:d7:f4:7e:64:85:fb:c7:fc:07:ac: 36:de:be:2c:5f:aa:52:fa:80:e8:87:e9:bb:7b:67: f3:46:9d:ad:b4:dc:95:2d:67:76:cd:a6:94:5e:75: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6A:9B:E9:0F:41:4C:B2:07:33:EF:4A:44:18:1F:67:C3:75:0C:E3 X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e1:42:1f:de:fe:34:6b:fe:99:5d:d7:91:b4:06:4a:5a:aa: 3d:f2:a3:14:f9:44:48:65:83:ba:64:f6:9b:40:39:81:90:7f: d6:64:84:01:a5:49:42:0b:13:0b:f4:dc:13:42:67:6c:12:0c: 81:dd:6e:6a:b3:15:f3:d5:f3:9d:0e:54:53:da:73:73:d9:4b: d3:40:09:d2:9a:27:c2:ef:b5:b0:21:ca:1c:2f:2f:75:fe:c4: 57:de:23:b7:e5:6a:2a:79:e0:5b:5d:a7:49:6e:95:41:41:97: 11:b6:dd:35:b0:48:bf:43:cb:9e:67:47:3b:fd:76:43:53:f4: c2:ea:7f:4b:ff:94:21:3e:66:6a:77:a9:ea:f1:63:74:d6:94: d1:1f:71:68:e6:35:34:9f:7d:9b:34:31:16:69:da:9e:b4:24: e4:5d:6c:a6:21:f3:05:c1:4b:5f:5b:66:19:d6:28:22:a5:58: a6:d9:6a:db:aa:0f:53:5f:0b:81:79:fa:96:29:7b:57:dd:15: 2e:eb:c3:fd:a9:92:2b:5c:96:df:5f:12:ce:be:99:e3:15:e9: c5:e4:f1:ac:89:b3:8a:5c:77:75:55:d3:c2:5e:19:ed:98:00: 30:fc:d4:8b:bf:13:68:e9:9b:cb:ee:95:05:3f:73:5c:ff:64: bc:89:a7:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUxMDE4MTcyMTEzWhcNMjUxMDI1MTcyMTEzWjAYMRYwFAYD VQQDEw02OGYzY2M4OS02Zjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1B53T97mLRSnEpCOL6yi/4h1p/YmpQVZxD0CrV3geOn0on5G1opPG3C3X2j 9fXM8yXMyiurcqm4+JWRmHvxXeomIosFiILk9tSGKMVe5LnD9E+HPS6eh644EqU/ W3P3fxtjERJqjl3CCXPIMSKH2/Sz1oyHj8f1l4i0BGUQjc1J8HYhf26mX4ZHhzU7 n7bFw/WPAyIFWcsYZLmBamMoQUEs9j7Uhug5k0cq3Smlw8po/QpqwFcT4IvIndOM D1E/iOrJrBe8612SbRCbeMDlrP9LdH6PBtf0fmSF+8f8B6w23r4sX6pS+oDoh+m7 e2fzRp2ttNyVLWd2zaaUXnWIpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFqm+kP QUyyBzPvSkQYH2fDdQzjMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk4UIf3v40a/6ZXdeRtAZKWqo98qMU+URIZYO6ZPabQDmBkH/WZIQB pUlCCxML9NwTQmdsEgyB3W5qsxXz1fOdDlRT2nNz2UvTQAnSmifC77WwIcocLy91 /sRX3iO35WoqeeBbXadJbpVBQZcRtt01sEi/Q8ueZ0c7/XZDU/TC6n9L/5QhPmZq d6nq8WN01pTRH3Fo5jU0n32bNDEWadqetCTkXWymIfMFwUtfW2YZ1igipVim2Wrb qg9TXwuBefqWKXtX3RUu68P9qZIrXJbfXxLOvpnjFenF5PGsibOKXHd1VdPCXhnt mAAw/NSLvxNo6ZvL7pUFP3Nc/2S8iafl -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:43 2025 by rpki-client