$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: DLPQrkiOgpe83yI2aHpsLjW3cBBScTh7G+L9LYUwl1g= Subject key identifier: 42:D1:7D:39:9D:DA:75:89:48:51:26:23:DC:73:1F:7B:D8:92:31:BF Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: 0104 Signing time: Wed 29 Oct 2025 04:55:41 +0000 Manifest this update: Wed 29 Oct 2025 04:55:40 +0000 Manifest next update: Wed 05 Nov 2025 04:55:40 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: 4DlXcRZ22QH1UJowqUSMhxk6xaHkuouTVP+WeiQoR2Q=) 2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=) 3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Oct 29 04:55:40 2025 GMT Not After : Nov 5 04:55:40 2025 GMT Subject: CN=69019e4d-8bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:d0:5c:10:15:74:f8:62:ff:a1:89:3b:f1: 83:d8:d3:3e:24:8b:54:40:0b:ba:b3:97:07:74:8d: 30:79:41:e7:9f:d8:8f:85:cb:41:b1:07:44:52:04: 26:e5:39:95:d5:9b:8a:72:d5:9f:6f:d5:08:40:93: fa:d7:05:49:e8:7d:67:2e:7f:2d:d9:17:d6:53:81: ce:47:d5:d4:89:91:7b:e8:cf:64:97:c9:fb:7a:a9: 60:86:c4:b6:f3:ff:19:51:4e:ca:d3:85:26:33:d6: 96:9e:72:e6:8e:b3:75:98:0e:f0:f9:97:a9:f0:16: b4:eb:4d:31:0f:85:68:52:86:e8:69:94:ef:4f:8d: 69:e6:50:e4:b3:70:56:fa:a9:e1:0d:ed:da:ba:a2: 9a:66:84:d3:b9:60:3f:2d:5e:9b:4f:ec:4b:6e:74: 97:26:3b:e6:87:db:77:cb:a9:5d:e2:ea:13:a9:08: 96:fc:b7:d2:54:30:7c:26:f0:84:d4:68:c0:40:ca: eb:97:7f:39:bb:0d:9d:90:ba:e2:64:c2:0f:a7:aa: e1:d7:67:fa:88:6b:1a:66:46:82:1f:6d:58:91:78: e9:3f:91:7d:a8:9a:b5:28:94:12:bf:03:cb:44:10: ba:39:10:13:70:93:0e:b0:bf:f1:b8:3a:62:0f:30: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:7D:39:9D:DA:75:89:48:51:26:23:DC:73:1F:7B:D8:92:31:BF X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:87:ca:4f:0c:7f:8c:36:d5:27:3d:d3:9e:10:79:ac:34:61: d7:e0:f4:1b:5c:4b:80:b7:8d:6c:b8:b2:30:21:7b:89:12:54: 66:a6:a0:84:34:b2:05:e1:a8:6b:eb:e3:53:91:87:69:7a:73: 78:b0:b8:db:9a:41:f1:28:1d:d4:72:ea:b4:e1:e3:b5:b3:97: cb:35:86:d9:b8:3d:11:6c:70:0b:16:86:46:96:de:d7:95:85: fc:5d:39:33:3e:09:ac:91:9f:9a:d6:54:5a:18:ba:78:08:45: f2:90:c1:f7:a3:2d:63:1e:1c:78:88:21:33:91:80:92:43:23: 1f:55:07:0a:e5:86:60:83:00:72:8d:23:27:29:6b:55:90:01: 74:ba:c0:87:73:91:b9:23:84:f0:e5:8b:3a:48:23:c9:51:dc: 0a:d5:cc:d7:bd:dd:49:09:a0:4b:29:85:e7:13:a1:38:25:99: e1:b8:4b:1a:e4:69:ea:0a:f6:41:a1:12:82:95:14:e3:cc:fa: ca:33:85:32:25:05:f7:6e:54:ac:e5:a2:bf:b6:99:30:d5:68: 1d:81:c2:ec:2a:7e:40:8d:74:ec:8b:e1:7f:b0:22:e7:a4:aa: f6:e4:d7:95:a9:9c:ea:4a:89:99:75:c6:10:da:00:94:82:78: 9c:40:8e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUxMDI5MDQ1NTQwWhcNMjUxMTA1MDQ1NTQwWjAYMRYwFAYD VQQDEw02OTAxOWU0ZC04YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBDQXBAVdPhi/6GJO/GD2NM+JItUQAu6s5cHdI0weUHnn9iPhctBsQdEUgQm 5TmV1ZuKctWfb9UIQJP61wVJ6H1nLn8t2RfWU4HOR9XUiZF76M9kl8n7eqlghsS2 8/8ZUU7K04UmM9aWnnLmjrN1mA7w+Zep8Ba0600xD4VoUoboaZTvT41p5lDks3BW +qnhDe3auqKaZoTTuWA/LV6bT+xLbnSXJjvmh9t3y6ld4uoTqQiW/LfSVDB8JvCE 1GjAQMrrl385uw2dkLriZMIPp6rh12f6iGsaZkaCH21YkXjpP5F9qJq1KJQSvwPL RBC6ORATcJMOsL/xuDpiDzDSTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELRfTmd 2nWJSFEmI9xzH3vYkjG/MB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2 ODZmWEZkNGI4NlllSmNlWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDh8pPDH+MNtUnPdOeEHmsNGHX4PQbXEuAt41suLIwIXuJElRmpqCE NLIF4ahr6+NTkYdpenN4sLjbmkHxKB3Ucuq04eO1s5fLNYbZuD0RbHALFoZGlt7X lYX8XTkzPgmskZ+a1lRaGLp4CEXykMH3oy1jHhx4iCEzkYCSQyMfVQcK5YZggwBy jSMnKWtVkAF0usCHc5G5I4Tw5Ys6SCPJUdwK1czXvd1JCaBLKYXnE6E4JZnhuEsa 5GnqCvZBoRKClRTjzPrKM4UyJQX3blSs5aK/tpkw1WgdgcLsKn5AjXTsi+F/sCLn pKr25NeVqZzqSomZdcYQ2gCUgnicQI6K -----END CERTIFICATE-----Generated at Wed Oct 29 08:35:40 2025 by rpki-client