$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: CaOW1ObI+pS4BKnaZah9U4sRl3jOytqLafrHhUAvTGQ= Subject key identifier: 02:1C:1A:A2:FB:6B:B6:A4:43:47:FA:F4:B4:A3:58:EB:16:20:2D:4D Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 07F4 Signing time: Sat 18 Oct 2025 22:17:00 +0000 Manifest this update: Sat 18 Oct 2025 22:17:00 +0000 Manifest next update: Sat 25 Oct 2025 22:17:00 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: XCDlvN/xR+lz9p5cz2O+haVbCg15EEVcm3/rydHoVVg=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: j533qWfQDQ1HymyH0hgMDgvytaiHKZxrVSfT2G+RT2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Oct 18 22:17:00 2025 GMT Not After : Oct 25 22:17:00 2025 GMT Subject: CN=68f411dc-3d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:f5:7a:cd:75:3c:f1:fd:44:92:df:6a:1f: 64:7f:b9:87:dc:4b:a5:f7:c6:0d:5f:b9:6f:eb:81: 83:c0:29:bf:74:7d:9c:6b:aa:65:59:33:2c:95:43: 9a:54:d7:fa:d4:bf:dc:9e:53:04:cb:d7:0d:b1:4b: ae:a7:8f:b4:be:1e:d8:31:1a:d3:60:35:ff:78:39: c4:b0:a8:b7:9a:1a:0f:1f:d8:fc:13:ac:48:6d:95: ec:72:7c:44:e9:45:e8:67:9f:c4:5c:38:89:0e:58: 5e:be:42:ff:5a:a1:c5:ef:69:a5:48:35:5e:37:7b: d2:71:9e:89:a6:c7:33:db:bd:d0:ed:6f:59:51:e4: 6d:17:e0:d1:06:96:a0:aa:50:d4:a6:ca:b8:34:06: 8e:09:2c:61:da:8a:6c:b8:ad:9b:55:f6:39:b9:4a: e5:34:fd:a8:ae:e0:83:82:d3:70:b4:cb:93:c7:94: 7d:b7:a2:d1:79:04:48:36:5c:17:b0:3c:88:7f:e7: 00:3d:0e:ef:65:42:8c:6b:85:74:8f:8f:b2:f5:60: 9f:21:ad:cb:cf:e1:ac:97:a0:03:af:c7:bd:55:82: 73:a2:d5:2f:da:72:80:bb:5a:51:5b:45:01:12:2b: be:e8:34:54:3b:e4:92:cc:f4:35:f7:6e:35:7f:47: ac:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1C:1A:A2:FB:6B:B6:A4:43:47:FA:F4:B4:A3:58:EB:16:20:2D:4D X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c8:dc:e6:80:e9:22:b0:71:5a:7e:70:ee:27:be:34:8c:81: 1b:c4:12:27:4a:2e:a7:64:61:f8:b7:7a:82:2c:82:ae:21:13: 1c:2d:11:08:b6:ee:1a:a6:24:b3:21:60:b6:bc:b4:9e:3b:4e: 5b:ea:84:9b:f0:4b:04:8a:b0:ab:c3:b1:0a:f3:cd:2f:fa:ea: ac:53:56:7d:7e:03:99:90:6b:3b:d9:0c:1b:3d:bc:55:dd:55: d6:83:ea:d5:9e:a0:a8:02:d1:62:4e:e3:c9:69:5e:a3:1c:5b: d9:88:90:ac:11:6d:c8:6c:59:ad:ed:5b:79:cb:71:0b:4b:d3: 05:80:ac:49:c1:7f:a9:b9:eb:09:e3:87:c0:a6:0c:42:df:36: 99:a3:10:9b:b5:08:ef:d6:2f:59:6e:d7:d7:79:a6:1f:99:e7: 3a:e9:bc:53:cd:48:61:f7:11:ba:b7:6a:eb:ac:c1:c3:00:33: 5d:2c:50:b1:b9:73:c7:00:15:a5:e9:63:e1:69:5e:69:2a:53: 54:9c:34:ae:85:b8:67:65:91:d7:8b:23:c9:fb:87:8c:dc:ea: 5e:77:b7:1b:5a:b1:eb:6d:e5:28:4f:93:1f:d3:4d:7c:e8:d5: 24:4e:45:5b:d3:e0:33:dc:0a:53:66:36:cc:84:3b:83:ac:0b: ec:10:02:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUxMDE4MjIxNzAwWhcNMjUxMDI1MjIxNzAwWjAYMRYwFAYD VQQDEw02OGY0MTFkYy0zZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg31es11PPH9RJLfah9kf7mH3Eul98YNX7lv64GDwCm/dH2ca6plWTMslUOa VNf61L/cnlMEy9cNsUuup4+0vh7YMRrTYDX/eDnEsKi3mhoPH9j8E6xIbZXscnxE 6UXoZ5/EXDiJDlhevkL/WqHF72mlSDVeN3vScZ6Jpscz273Q7W9ZUeRtF+DRBpag qlDUpsq4NAaOCSxh2opsuK2bVfY5uUrlNP2oruCDgtNwtMuTx5R9t6LReQRINlwX sDyIf+cAPQ7vZUKMa4V0j4+y9WCfIa3Lz+Gsl6ADr8e9VYJzotUv2nKAu1pRW0UB Eiu+6DRUO+SSzPQ19241f0estwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIcGqL7 a7akQ0f69LSjWOsWIC1NMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIyNzmgOkisHFafnDuJ740jIEbxBInSi6nZGH4t3qCLIKuIRMcLREI tu4apiSzIWC2vLSeO05b6oSb8EsEirCrw7EK880v+uqsU1Z9fgOZkGs72QwbPbxV 3VXWg+rVnqCoAtFiTuPJaV6jHFvZiJCsEW3IbFmt7Vt5y3ELS9MFgKxJwX+puesJ 44fApgxC3zaZoxCbtQjv1i9ZbtfXeaYfmec66bxTzUhh9xG6t2rrrMHDADNdLFCx uXPHABWl6WPhaV5pKlNUnDSuhbhnZZHXiyPJ+4eM3Oped7cbWrHrbeUoT5Mf0018 6NUkTkVb0+Az3ApTZjbMhDuDrAvsEAKh -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:06 2025 by rpki-client