$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: l3iqyv/ls/Xnw6BPKjC12z9mzLkzKSoCvlrWWID8e00= Subject key identifier: B0:BC:53:A2:61:4D:27:D6:BF:F8:6F:B3:6B:6F:66:F4:5C:94:A7:0B Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 059C Signing time: Sun 19 Oct 2025 00:52:08 +0000 Manifest this update: Sun 19 Oct 2025 00:52:08 +0000 Manifest next update: Sun 26 Oct 2025 00:52:08 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: CK6ukTutdSSgJF2Fkis5VOG1G1aiK9WkZqgziguBERM=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: z4OD50JJqcb5eLqgxPYFpu+0WPLJOBG84/py9BkQ1lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Oct 19 00:52:08 2025 GMT Not After : Oct 26 00:52:08 2025 GMT Subject: CN=68f43638-3f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:8a:d6:b6:b9:c6:bc:4a:4a:17:28:68:86: b6:6c:b4:9a:d0:54:e8:86:9d:12:91:f4:11:32:a6: a4:d8:32:f1:84:82:8a:96:ac:91:49:6a:8e:7f:67: ab:03:0e:66:be:c2:be:4a:6b:5f:d1:09:d2:29:89: f1:27:55:77:62:86:6b:fe:61:71:97:bc:ef:6c:09: 41:75:ee:3a:98:4b:2c:82:38:68:13:bd:ab:96:1c: 1e:d0:7d:0b:7a:1a:e1:bd:3b:12:61:33:51:f4:c2: 34:fd:a5:a9:ec:2e:69:30:fa:35:0f:fd:37:a3:73: 18:57:28:fd:2f:1c:a6:56:a5:e6:78:2f:3b:9c:fe: e2:fa:09:39:4d:08:f0:f5:13:d9:15:38:bd:79:c8: 78:08:32:b9:ff:4c:66:d7:03:97:24:e6:69:93:aa: 95:14:79:0a:0d:de:36:b6:b5:c7:3d:d8:fc:5d:de: eb:21:08:9c:90:08:6d:30:5d:b3:67:5d:c4:a6:2f: 93:00:01:1b:e4:e2:04:ce:2c:a9:2b:dc:25:c2:ef: d6:17:7f:1a:46:29:9b:93:1b:37:e7:42:4e:d0:3a: 22:cf:97:07:da:7d:cd:d8:13:55:d3:d1:1b:33:a9: 16:73:6b:0d:c7:9f:e4:e4:34:11:51:a0:a4:39:c8: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:53:A2:61:4D:27:D6:BF:F8:6F:B3:6B:6F:66:F4:5C:94:A7:0B X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:8c:37:e9:92:3a:a2:24:0e:52:ca:c1:b4:ec:c4:b4:18: e3:97:4a:b9:ed:a6:00:0d:c7:e2:98:01:cb:fb:e2:35:3f:6c: cd:7b:05:63:2e:76:55:46:c2:e8:0e:2b:72:db:28:89:62:f3: 66:22:c5:13:74:22:48:45:f2:e2:ae:5b:81:85:f8:29:a8:8a: 68:66:35:e9:53:23:4d:58:d9:c3:a5:e4:99:80:41:55:23:d1: 4c:e3:d9:b2:fd:ff:44:35:51:4e:0d:d6:90:17:13:08:c2:ea: f6:ff:84:05:c0:23:74:89:a5:49:54:4b:f9:f1:a4:c5:3d:c5: a9:0b:a7:56:57:7b:cf:ea:a6:6b:a4:fd:9b:21:94:85:f3:d0: 60:35:2e:95:37:b9:fb:e9:be:55:dc:b0:64:0b:6a:ad:12:9d: 62:44:a4:f1:35:db:43:7b:58:10:2e:1f:ce:16:2b:72:29:7f: ec:7d:84:96:ce:05:86:af:e2:62:ef:7e:57:ac:3b:13:2d:5a: bc:0e:30:de:99:b9:1f:da:46:7d:51:be:06:f0:87:53:ce:42: 03:f4:95:f3:8a:dd:75:f2:46:74:d3:8c:5b:5b:85:1b:ff:36: 57:fb:fe:a9:3d:95:65:ed:f0:ed:03:e3:69:fa:b5:0f:63:1f: 21:b9:0f:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUxMDE5MDA1MjA4WhcNMjUxMDI2MDA1MjA4WjAYMRYwFAYD VQQDEw02OGY0MzYzOC0zZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxGK1ra5xrxKShcoaIa2bLSa0FTohp0SkfQRMqak2DLxhIKKlqyRSWqOf2er Aw5mvsK+Smtf0QnSKYnxJ1V3YoZr/mFxl7zvbAlBde46mEssgjhoE72rlhwe0H0L ehrhvTsSYTNR9MI0/aWp7C5pMPo1D/03o3MYVyj9LxymVqXmeC87nP7i+gk5TQjw 9RPZFTi9ech4CDK5/0xm1wOXJOZpk6qVFHkKDd42trXHPdj8Xd7rIQickAhtMF2z Z13Epi+TAAEb5OIEziypK9wlwu/WF38aRimbkxs350JO0Doiz5cH2n3N2BNV09Eb M6kWc2sNx5/k5DQRUaCkOciniwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8U6Jh TSfWv/hvs2tvZvRclKcLMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcf4w36ZI6oiQOUsrBtOzEtBjjl0q57aYADcfimAHL++I1P2zNewVj LnZVRsLoDity2yiJYvNmIsUTdCJIRfLirluBhfgpqIpoZjXpUyNNWNnDpeSZgEFV I9FM49my/f9ENVFODdaQFxMIwur2/4QFwCN0iaVJVEv58aTFPcWpC6dWV3vP6qZr pP2bIZSF89BgNS6VN7n76b5V3LBkC2qtEp1iRKTxNdtDe1gQLh/OFityKX/sfYSW zgWGr+Ji735XrDsTLVq8DjDembkf2kZ9Ub4G8IdTzkID9JXzit118kZ004xbW4Ub /zZX+/6pPZVl7fDtA+Np+rUPYx8huQ8I -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:13 2025 by rpki-client