$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json) Hash identifier: +RIGPpgObJDWg0v2kDGLUKh0o+SvfiRiQLovswk35sI= Subject key identifier: 66:31:F0:A9:BB:DE:08:E9:76:F4:2A:D9:F5:C4:2D:94:3E:92:B2:3D Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Certificate serial: 0F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft Manifest number: 0F0A Signing time: Mon 20 Oct 2025 05:24:46 +0000 Manifest this update: Mon 20 Oct 2025 05:24:46 +0000 Manifest next update: Mon 27 Oct 2025 05:24:46 +0000 Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: b5uOZS9psQ5QnZ6TJGrGaKDfP2CdQ4eqpO0Cmhv9OOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 05:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3858 (0xf12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Validity Not Before: Oct 20 05:24:46 2025 GMT Not After : Oct 27 05:24:46 2025 GMT Subject: CN=68f5c79e-f9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:bb:d3:a4:44:bc:f9:4c:f3:3a:6c:9c:54: 6d:2f:b9:f3:87:68:13:b4:b8:e4:44:ca:2b:89:a1: e6:cf:34:01:23:a4:ec:76:2f:16:04:65:e2:d3:c7: 90:a0:a8:c3:af:28:3d:5d:90:b9:f9:7d:f8:e1:a8: 11:a9:cc:b5:b9:cf:c2:3e:67:9d:c6:73:db:7f:99: 51:e3:4d:2c:78:55:25:32:f6:67:88:c6:8f:ab:2e: df:e5:8b:b4:ce:54:bf:6c:23:fb:3a:f6:4b:b2:6a: 21:99:d6:19:0d:7d:6a:4b:a2:14:ef:f9:1a:d5:ba: 8f:07:8f:51:6a:3d:a7:e0:ea:27:05:10:4a:92:0d: 3f:d5:6d:fc:11:5c:5a:ea:e7:09:7e:0c:70:ee:e3: fd:3b:0f:3a:21:72:a9:bf:5f:c2:16:81:3f:29:30: 8d:58:ce:1e:aa:c7:0d:5a:ce:99:c5:67:7f:58:be: 4b:ab:87:16:bb:77:4a:ab:d0:dd:55:27:ba:40:17: 11:6c:9f:78:e5:d2:f6:bd:87:47:b1:e0:98:e6:b6: 88:ac:30:25:6c:13:09:f9:8f:d8:b4:e2:a6:ba:14: 81:c4:0c:15:0e:05:7a:41:c7:5e:9f:89:7e:4e:7c: 01:d0:64:d8:54:a4:47:c0:3c:a4:c0:41:0d:12:8e: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:31:F0:A9:BB:DE:08:E9:76:F4:2A:D9:F5:C4:2D:94:3E:92:B2:3D X509v3 Authority Key Identifier: keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:64:d4:1d:5a:41:b6:28:12:55:b5:8c:37:17:8d:c8:93:fe: 73:14:2c:0c:cc:4f:71:93:20:9d:6f:61:1b:08:e8:f6:ef:8b: 54:0a:0f:06:36:0b:f1:da:06:9b:08:e8:14:7c:f3:5c:12:6f: f4:bf:fd:19:0e:e5:bf:c5:da:fa:4f:a7:76:65:d3:4d:e1:dd: ae:ad:2a:24:37:1b:98:44:ac:84:31:00:30:d2:f5:7a:0d:54: 74:56:b3:c2:d4:ce:37:e9:8d:06:1b:d8:d3:22:95:24:ce:9c: 03:4e:08:ff:d7:ef:6b:09:fe:3a:4f:be:f5:6e:ff:ac:46:6f: f9:f2:01:bf:66:8b:0a:47:d9:34:d4:3d:11:bb:d0:69:be:15: 3e:b1:2e:90:df:17:6c:5e:c1:f4:f0:2a:d6:8c:bb:cf:d2:c3: 88:ff:65:50:bf:0b:4b:e6:22:25:51:7b:c4:46:a8:dc:05:4f: 25:43:86:5a:48:a9:25:4b:01:dd:0c:ac:38:ef:a9:ca:ac:c3: d6:0c:f4:77:07:f1:4f:57:62:74:09:f2:a2:e0:5b:70:b0:ad: 5a:aa:5d:8f:c2:ba:90:b1:7e:70:62:f5:3d:3d:ae:2b:1b:ef: 91:5b:7c:0a:33:33:8a:55:02:03:f7:2f:8d:b5:fe:3a:f7:f4: 6b:fc:bd:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC MEQxNjhCQ0MwHhcNMjUxMDIwMDUyNDQ2WhcNMjUxMDI3MDUyNDQ2WjAYMRYwFAYD VQQDEw02OGY1Yzc5ZS1mOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEe706REvPlM8zpsnFRtL7nzh2gTtLjkRMoriaHmzzQBI6Tsdi8WBGXi08eQ oKjDryg9XZC5+X344agRqcy1uc/CPmedxnPbf5lR400seFUlMvZniMaPqy7f5Yu0 zlS/bCP7OvZLsmohmdYZDX1qS6IU7/ka1bqPB49Raj2n4OonBRBKkg0/1W38EVxa 6ucJfgxw7uP9Ow86IXKpv1/CFoE/KTCNWM4eqscNWs6ZxWd/WL5Lq4cWu3dKq9Dd VSe6QBcRbJ945dL2vYdHseCY5raIrDAlbBMJ+Y/YtOKmuhSBxAwVDgV6Qcden4l+ TnwB0GTYVKRHwDykwEENEo6vawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYx8Km7 3gjpdvQq2fXELZQ+krI9MB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4 MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeZNQdWkG2KBJVtYw3F43Ik/5zFCwMzE9xkyCdb2EbCOj274tUCg8G Ngvx2gabCOgUfPNcEm/0v/0ZDuW/xdr6T6d2ZdNN4d2urSokNxuYRKyEMQAw0vV6 DVR0VrPC1M436Y0GG9jTIpUkzpwDTgj/1+9rCf46T771bv+sRm/58gG/ZosKR9k0 1D0Ru9BpvhU+sS6Q3xdsXsH08CrWjLvP0sOI/2VQvwtL5iIlUXvERqjcBU8lQ4Za SKklSwHdDKw476nKrMPWDPR3B/FPV2J0CfKi4FtwsK1aql2PwrqQsX5wYvU9Pa4r G++RW3wKMzOKVQID9y+Ntf469/Rr/L37 -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:55 2025 by rpki-client