$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: 15prnObJ49a22drmD5tANNuICXPppia2fvgRza47mJk= Subject key identifier: C8:79:FB:D3:96:75:99:F7:D0:3D:D6:62:0F:1B:05:58:BA:1C:7D:A2 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 016C Signing time: Mon 03 Nov 2025 04:10:35 +0000 Manifest this update: Mon 03 Nov 2025 04:10:35 +0000 Manifest next update: Mon 10 Nov 2025 04:10:35 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: y3lzBSoIWe++j9GwUixfPl6xtFhJLdBoTib0ylc9vlw=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: Ha1RED7wj5vvuljsqQyxT/3es50bYuYX2UgeIHA9Bqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Nov 3 04:10:35 2025 GMT Not After : Nov 10 04:10:35 2025 GMT Subject: CN=69082b3b-b34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:ed:f4:98:37:2a:42:15:f7:85:3d:ca:ef: 55:4a:54:65:09:68:87:5f:9e:96:be:e5:df:07:8f: 5f:9f:0e:c8:57:47:ba:42:e0:e7:10:4b:66:26:74: 3d:e2:10:60:3b:3c:42:29:1f:66:a0:56:ed:da:b3: e2:a7:d9:b0:da:d7:25:77:a0:53:bf:43:83:54:0e: 5b:70:a3:60:c2:d4:ef:48:64:7a:b6:fd:6b:e0:81: 86:82:0d:d8:79:76:83:a8:37:db:7d:40:9e:87:e4: f3:dc:7a:f0:89:0c:95:b3:12:c9:12:4f:e5:a7:36: bc:ac:7f:c2:a4:f8:13:6a:5d:49:35:db:51:29:f4: 30:58:d1:e9:53:2a:a8:1e:d9:5a:f2:7b:55:79:e4: 1f:75:93:7e:d0:ed:56:85:3f:90:20:26:15:9f:20: 86:6d:c8:8b:70:35:81:f5:f9:b3:a7:aa:36:84:56: de:81:0c:65:97:fd:97:69:ec:b4:c3:94:64:6d:06: d8:88:1f:8a:e9:e5:59:1b:9e:ce:5d:99:70:48:5a: bd:06:ea:1a:aa:a2:e8:b1:53:b6:6b:e9:fa:b8:b3: 2f:cc:2e:49:6a:f7:35:ee:f1:ef:15:d3:36:77:dd: c5:88:6e:e0:fb:e5:3d:9a:99:49:7a:9b:71:5a:a9: 6a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:79:FB:D3:96:75:99:F7:D0:3D:D6:62:0F:1B:05:58:BA:1C:7D:A2 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bf:99:29:4a:77:d8:b1:7e:34:39:84:94:fd:26:4f:b6:a0: c6:a4:3a:25:ca:89:ce:b5:97:25:e7:fe:67:32:23:9d:f3:f0: 38:69:01:b7:d8:45:8c:38:11:76:dd:47:34:ce:ef:e8:d2:95: 9e:b5:6f:a6:d1:15:ec:c3:d6:71:36:25:85:d4:4e:1f:cd:92: 9c:ba:a0:83:b3:7f:0d:49:90:ac:a0:3a:14:5c:f3:38:71:1c: 69:b8:6b:9b:b7:9e:ef:34:3a:45:5a:43:70:f5:9c:4f:2c:a9: d1:e8:d7:2b:b4:c4:ba:e0:ea:4c:3c:2d:f8:ee:e8:01:75:d6: 01:2b:80:90:9e:06:3f:2f:ab:3d:b3:e9:36:30:99:38:ef:86: 84:09:02:c1:82:ab:8c:89:ab:64:12:96:f7:09:1c:22:d4:17: 0c:95:47:df:df:a9:fa:32:79:00:9c:2c:3f:3a:a7:d8:d9:31: c5:67:ec:e2:8a:a6:5c:70:f6:95:ae:f2:57:33:e5:6a:b0:99: c5:9b:8c:a5:fd:f9:fa:a8:54:56:3d:68:43:7e:62:92:c7:ce: 22:5d:3a:96:c4:c7:3b:db:67:86:7a:d0:56:e5:01:33:67:81: 1b:10:41:ba:0b:37:c1:df:5e:29:cc:47:71:2b:bf:22:d2:c5: 79:a6:97:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUxMTAzMDQxMDM1WhcNMjUxMTEwMDQxMDM1WjAYMRYwFAYD VQQDEw02OTA4MmIzYi1iMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX/t9Jg3KkIV94U9yu9VSlRlCWiHX56WvuXfB49fnw7IV0e6QuDnEEtmJnQ9 4hBgOzxCKR9moFbt2rPip9mw2tcld6BTv0ODVA5bcKNgwtTvSGR6tv1r4IGGgg3Y eXaDqDfbfUCeh+Tz3HrwiQyVsxLJEk/lpza8rH/CpPgTal1JNdtRKfQwWNHpUyqo Htla8ntVeeQfdZN+0O1WhT+QICYVnyCGbciLcDWB9fmzp6o2hFbegQxll/2Xaey0 w5RkbQbYiB+K6eVZG57OXZlwSFq9BuoaqqLosVO2a+n6uLMvzC5Javc17vHvFdM2 d93FiG7g++U9mplJeptxWqlq9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMh5+9OW dZn30D3WYg8bBVi6HH2iMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOv5kpSnfYsX40OYSU/SZPtqDGpDolyonOtZcl5/5nMiOd8/A4aQG3 2EWMOBF23Uc0zu/o0pWetW+m0RXsw9ZxNiWF1E4fzZKcuqCDs38NSZCsoDoUXPM4 cRxpuGubt57vNDpFWkNw9ZxPLKnR6NcrtMS64OpMPC347ugBddYBK4CQngY/L6s9 s+k2MJk474aECQLBgquMiatkEpb3CRwi1BcMlUff36n6MnkAnCw/OqfY2THFZ+zi iqZccPaVrvJXM+VqsJnFm4yl/fn6qFRWPWhDfmKSx84iXTqWxMc722eGetBW5QEz Z4EbEEG6CzfB314pzEdxK78i0sV5ppeL -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:30 2025 by rpki-client