$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft File: wsFz12JIhbwL1vwZPvvO6VQ_okM.mft (raw, json) Hash identifier: 17PeUb8nzhNG9JWVXyzUSqUkPbDkwV9jpDIUdmP2Njo= Subject key identifier: 55:FB:53:C5:03:72:35:29:A4:A8:EF:5A:BE:88:EC:CB:FF:3D:94:D7 Authority key identifier: C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 Certificate issuer: /CN=A91C8DF1/serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft Manifest number: 05 Signing time: Sun 19 Oct 2025 11:44:49 +0000 Manifest this update: Sun 19 Oct 2025 11:44:49 +0000 Manifest next update: Sun 26 Oct 2025 11:44:49 +0000 Files and hashes: 1: wsFz12JIhbwL1vwZPvvO6VQ_okM.crl (hash: LWiAgOVYymT95fu9KBuKfyo8/v0jNtvAGjmmnqQMyWk=) 2: BD37307CAAD011F0ACA9F95DC4F9AE02.roa (hash: EBR7I5Emy01zmCBxXGGOXl37lY5pYBdqwHQoDpK1N3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DF1, serialNumber=C2C173D7624885BC0BD6FC193EFBCEE9543FA243 Validity Not Before: Oct 19 11:44:49 2025 GMT Not After : Oct 26 11:44:49 2025 GMT Subject: CN=68f4cf31-044d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:f5:3d:6e:0a:a0:e1:30:98:84:2e:db:00: 91:44:4c:44:1c:a0:07:9f:46:b3:20:28:61:2c:1d: 88:4e:cb:f2:b0:48:6d:93:38:be:b9:f4:34:94:cf: 7b:16:26:1c:3e:3a:c8:cd:fc:e9:5f:b0:05:f9:55: 8e:7e:38:91:3f:88:82:3c:88:ed:86:b2:ec:57:11: 5d:af:1c:b0:73:92:46:70:52:4a:63:4a:3c:f4:35: 24:34:b5:19:07:24:dc:25:d1:70:74:c8:6d:ed:bd: fc:09:a9:58:e2:82:4c:f3:02:bc:9f:bc:a9:6c:97: 58:d5:48:96:5e:50:d1:58:0b:06:c9:43:15:b8:25: 8a:19:53:1e:29:59:78:b8:09:4a:8c:c8:64:79:cd: b2:bb:69:10:7d:f9:af:95:b4:e0:26:d8:db:d1:6a: 09:85:08:cd:10:87:3d:d4:74:e3:ab:48:c3:a2:b8: a1:2a:fd:bd:54:18:f2:67:1f:01:f3:dd:48:3f:a0: 83:a3:b7:23:1e:35:54:c1:6d:f6:22:df:7f:8a:65: ff:b2:f0:0e:de:84:6c:36:e9:8d:ba:a4:1e:5b:d3: b2:ff:08:1f:66:1f:11:27:e9:13:64:c7:4a:ab:29: db:a9:2b:0c:0a:c9:b0:f7:b5:3e:09:87:32:aa:e0: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FB:53:C5:03:72:35:29:A4:A8:EF:5A:BE:88:EC:CB:FF:3D:94:D7 X509v3 Authority Key Identifier: keyid:C2:C1:73:D7:62:48:85:BC:0B:D6:FC:19:3E:FB:CE:E9:54:3F:A2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsFz12JIhbwL1vwZPvvO6VQ_okM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DF1/E617AD92AACF11F0BB11FB5BC4F9AE02/wsFz12JIhbwL1vwZPvvO6VQ_okM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:20:53:8c:ef:fe:41:d5:8e:c7:eb:1f:c3:99:e3:fd:3a:57: 6a:e5:17:b4:fc:2d:61:9e:e9:16:57:f4:b6:73:4a:84:e8:cd: b0:74:03:ee:0b:e0:6b:1a:87:9b:e7:e8:38:38:40:6a:30:c8: 58:18:0a:04:08:60:c7:55:2b:65:e4:3d:bf:02:47:40:1e:86: 62:75:74:a1:4a:e7:5f:b7:8e:e8:bc:c4:4a:25:dd:76:61:72: fe:27:4f:2c:c3:eb:19:33:32:14:73:13:41:78:db:58:0f:f1: cb:c2:56:f2:b7:c3:ec:6a:54:f8:8f:b8:02:d9:aa:31:7d:55: 46:4c:98:35:e3:d5:41:19:fb:72:75:7e:7e:3e:61:36:97:95: 16:6c:29:47:a8:71:c4:90:00:db:2b:0c:bf:9b:cb:a5:30:35: 0b:66:c2:25:49:74:24:68:78:71:31:6b:fa:15:7b:57:ff:8d: d6:d0:7a:fc:c5:f7:a6:1b:80:50:6e:54:38:15:c0:4e:bc:cb: 1a:1a:8e:d1:5f:75:9b:71:18:20:e7:65:07:0e:ee:5f:22:97: 4e:41:b2:a4:4b:ba:28:f7:6a:fb:ec:e8:59:0d:de:e4:fb:2c: 61:b9:4a:04:07:1e:56:49:12:6b:a9:fa:20:2f:1d:01:0a:28: 72:80:d9:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OERGMTExMC8GA1UEBRMoQzJDMTczRDc2MjQ4ODVCQzBCRDZGQzE5M0VGQkNFRTk1 NDNGQTI0MzAeFw0yNTEwMTkxMTQ0NDlaFw0yNTEwMjYxMTQ0NDlaMBgxFjAUBgNV BAMTDTY4ZjRjZjMxLTA0NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDH/U9bgqg4TCYhC7bAJFETEQcoAefRrMgKGEsHYhOy/KwSG2TOL659DSUz3sW Jhw+OsjN/OlfsAX5VY5+OJE/iII8iO2GsuxXEV2vHLBzkkZwUkpjSjz0NSQ0tRkH JNwl0XB0yG3tvfwJqVjigkzzAryfvKlsl1jVSJZeUNFYCwbJQxW4JYoZUx4pWXi4 CUqMyGR5zbK7aRB9+a+VtOAm2NvRagmFCM0Qhz3UdOOrSMOiuKEq/b1UGPJnHwHz 3Ug/oIOjtyMeNVTBbfYi33+KZf+y8A7ehGw26Y26pB5b07L/CB9mHxEn6RNkx0qr KdupKwwKybD3tT4JhzKq4HKpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVftTxQNy NSmkqO9avojsy/89lNcwHwYDVR0jBBgwFoAUwsFz12JIhbwL1vwZPvvO6VQ/okMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4REYxL0U2MTdBRDkyQUFD RjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3TDF2d1pQdnZPNlZRX29r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd3NGejEySkloYndMMXZ3WlB2dk82VlFfb2tNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 REYxL0U2MTdBRDkyQUFDRjExRjBCQjExRkI1QkM0RjlBRTAyL3dzRnoxMkpJaGJ3 TDF2d1pQdnZPNlZRX29rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4gU4zv/kHVjsfrH8OZ4/06V2rlF7T8LWGe6RZX9LZzSoTozbB0A+4L 4Gsah5vn6Dg4QGowyFgYCgQIYMdVK2XkPb8CR0AehmJ1dKFK51+3jui8xEol3XZh cv4nTyzD6xkzMhRzE0F421gP8cvCVvK3w+xqVPiPuALZqjF9VUZMmDXj1UEZ+3J1 fn4+YTaXlRZsKUeoccSQANsrDL+by6UwNQtmwiVJdCRoeHExa/oVe1f/jdbQevzF 96YbgFBuVDgVwE68yxoajtFfdZtxGCDnZQcO7l8il05BsqRLuij3avvs6FkN3uT7 LGG5SgQHHlZJEmup+iAvHQEKKHKA2eY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:42:24 2025 by rpki-client