$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: PnnA0VASoRJdWJHUqHwzZcK0CYkSI9EKSqCUAShLZJU= Subject key identifier: C3:00:27:4C:CF:BE:6C:95:EA:33:A7:B3:90:B4:00:03:E5:E7:0F:0A Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 0331 Signing time: Mon 27 Oct 2025 02:30:55 +0000 Manifest this update: Mon 27 Oct 2025 02:30:55 +0000 Manifest next update: Mon 03 Nov 2025 02:30:55 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: sXgD/s17wYcoOdXwD/aEMtSwsKb5XmjYReOAtbaEr+M=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: WrNqwpKibajA317uV8R1n49/EqSR3J93tv1ZPGtLnSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: Oct 27 02:30:55 2025 GMT Not After : Nov 3 02:30:55 2025 GMT Subject: CN=68fed95f-bd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:27:8c:19:d2:0d:9d:9e:b6:67:45:65:0f: eb:a8:ec:a2:26:21:a6:82:29:f9:79:42:2d:cb:96: 13:68:bd:b1:7d:77:00:f1:34:74:2e:5e:a9:17:6b: 28:53:74:a1:de:ae:bd:b4:7f:e2:af:05:93:63:3b: d0:ad:4f:4e:eb:3d:a8:b1:24:63:00:4a:76:f4:03: 90:f1:42:a3:a0:7e:d0:18:61:be:40:6a:b5:4f:b0: fc:77:ad:5c:c0:5a:24:54:9b:d5:a5:ea:59:62:b7: 4b:3d:b5:0c:4c:8d:5b:0a:7d:d9:70:27:56:df:d8: 91:7a:4f:4b:46:4d:2a:d0:2b:e4:68:51:e5:92:5c: 85:e3:aa:fd:5b:7c:05:36:89:8f:7a:ee:59:45:e7: 21:36:0b:34:e5:e0:8b:31:9a:c1:73:2e:7e:d8:a3: fe:9b:8e:93:78:58:1a:e2:c4:79:0f:84:6f:0b:92: c4:10:5d:d0:76:96:7f:91:12:63:cf:42:f0:1c:4f: 57:1b:a9:9e:81:21:9e:07:1e:37:45:b8:f0:f9:d8: 41:b5:52:f1:ff:8e:da:36:b7:89:e3:89:98:91:f7: 52:66:5d:80:cf:76:ea:61:40:37:56:11:e8:2d:81: e3:59:df:f5:ca:e5:fa:51:25:6f:3b:2b:da:2d:19: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:00:27:4C:CF:BE:6C:95:EA:33:A7:B3:90:B4:00:03:E5:E7:0F:0A X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:77:8b:01:8b:d7:4b:2a:69:b6:80:84:53:72:85:d6:6e:16: ea:51:c0:45:4c:ed:d1:53:d7:65:e8:63:12:de:06:5c:2b:90: 24:70:6d:54:ee:a5:ae:3a:3e:16:78:58:17:2b:ec:17:2d:ac: 1e:0a:0a:1e:20:83:9d:01:e1:f8:60:1c:fb:35:c3:c0:9c:d4: aa:48:5a:9f:53:14:4e:38:59:fc:c5:78:95:70:24:3a:72:03: c2:6a:7f:4f:7d:13:e0:01:52:bf:4d:6e:64:87:70:8f:e9:f2: 32:ee:7d:3b:a6:7c:ba:c0:30:4c:46:25:10:9e:33:a1:ba:71: 02:66:ec:03:be:65:67:ae:81:3f:0f:bd:88:3a:86:d5:aa:24: 0a:0d:aa:58:66:d6:27:d0:04:f1:83:14:a8:6d:9d:72:97:47: 9d:9d:0f:6d:c3:7f:66:fa:fa:88:31:02:61:25:c6:34:8f:58: f0:14:d7:df:57:c5:05:da:11:dd:7f:0e:97:16:d4:72:99:be: d8:ae:a4:20:47:30:43:dd:d6:60:78:37:c3:34:5d:3d:58:9a: 48:61:b2:62:7d:47:d9:f9:4d:5a:4d:f3:9c:83:f7:f6:14:06: 8c:cd:49:a4:22:7d:9e:74:09:56:df:3e:38:81:35:5d:03:01: 1b:30:ae:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjUxMDI3MDIzMDU1WhcNMjUxMTAzMDIzMDU1WjAYMRYwFAYD VQQDEw02OGZlZDk1Zi1iZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+YnjBnSDZ2etmdFZQ/rqOyiJiGmgin5eUIty5YTaL2xfXcA8TR0Ll6pF2so U3Sh3q69tH/irwWTYzvQrU9O6z2osSRjAEp29AOQ8UKjoH7QGGG+QGq1T7D8d61c wFokVJvVpepZYrdLPbUMTI1bCn3ZcCdW39iRek9LRk0q0CvkaFHlklyF46r9W3wF NomPeu5ZRechNgs05eCLMZrBcy5+2KP+m46TeFga4sR5D4RvC5LEEF3QdpZ/kRJj z0LwHE9XG6megSGeBx43Rbjw+dhBtVLx/47aNreJ44mYkfdSZl2Az3bqYUA3VhHo LYHjWd/1yuX6USVvOyvaLRmhxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMAJ0zP vmyV6jOns5C0AAPl5w8KMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4d4sBi9dLKmm2gIRTcoXWbhbqUcBFTO3RU9dl6GMS3gZcK5AkcG1U 7qWuOj4WeFgXK+wXLaweCgoeIIOdAeH4YBz7NcPAnNSqSFqfUxROOFn8xXiVcCQ6 cgPCan9PfRPgAVK/TW5kh3CP6fIy7n07pny6wDBMRiUQnjOhunECZuwDvmVnroE/ D72IOobVqiQKDapYZtYn0ATxgxSobZ1yl0ednQ9tw39m+vqIMQJhJcY0j1jwFNff V8UF2hHdfw6XFtRymb7YrqQgRzBD3dZgeDfDNF09WJpIYbJifUfZ+U1aTfOcg/f2 FAaMzUmkIn2edAlW3z44gTVdAwEbMK6N -----END CERTIFICATE-----Generated at Tue Oct 28 09:24:45 2025 by rpki-client