$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: v8kyWUBSrcvebxA0sEmOz+GAZeOM51LOvrssWLYWy2o= Subject key identifier: 7E:5A:3B:43:A2:FE:E7:BC:40:E2:D6:16:91:2B:C4:08:EC:89:69:20 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0666 Signing time: Wed 22 Oct 2025 23:33:51 +0000 Manifest this update: Wed 22 Oct 2025 23:33:51 +0000 Manifest next update: Wed 29 Oct 2025 23:33:51 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: 5hB6WRF+V494O50wBSlE+Mc5D/+SlqznuBkCZTfIVJg=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: +9NJjEZlHqkxwGJezaqZvNw38PXtW0zuO81yVZ8rOEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Oct 22 23:33:51 2025 GMT Not After : Oct 29 23:33:51 2025 GMT Subject: CN=68f969df-0a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:ec:b4:91:d6:52:2d:0b:91:da:48:76:4d: 2d:e0:d4:b2:19:02:50:be:1f:a3:63:7c:60:4f:7b: d5:fd:3e:88:92:17:ec:60:6a:ee:30:e6:e8:50:5e: e6:f6:f6:5f:b4:44:36:6e:a9:27:56:73:11:f5:aa: f5:f5:9b:2e:11:3b:46:65:a4:08:17:01:cd:4c:91: fd:e7:bd:f4:4c:1f:bf:af:e9:a2:97:bc:2d:a1:52: 99:68:d1:bb:99:cf:54:be:c8:e8:08:f2:11:c9:76: f4:25:79:42:ab:7d:ba:0f:d9:ca:b1:e3:87:c8:c2: 81:57:8b:1d:0d:13:fc:ea:18:3a:78:a0:97:13:59: c1:db:9d:5b:64:d4:82:03:d0:e6:09:f7:af:4a:a4: 7b:ff:41:77:7d:ff:61:99:bc:ba:d1:52:25:53:55: 31:73:cd:8a:51:e6:46:53:ba:e9:15:53:bf:45:7a: 54:a8:7a:1b:58:60:70:98:b4:23:1c:b1:7a:03:04: 4c:85:d9:e7:00:86:56:8d:ad:ca:1e:57:a4:f6:da: 18:28:61:54:0f:eb:7a:31:ef:47:da:51:8d:4e:b7: b6:a0:72:08:55:c8:ad:e7:a1:86:37:97:63:b2:e7: 1f:fe:b7:9b:22:69:e9:70:57:f5:09:df:48:47:bd: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5A:3B:43:A2:FE:E7:BC:40:E2:D6:16:91:2B:C4:08:EC:89:69:20 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:df:68:62:9f:5a:aa:dc:b4:ea:2a:35:cd:a9:da:3f:1f:aa: ef:f5:5c:1e:8c:1c:a4:80:84:14:a3:1e:ee:90:54:79:da:2b: 59:06:b9:01:58:c4:df:cb:c2:fb:f7:2f:da:62:d9:af:d6:6f: 41:4d:0e:70:82:b6:e2:e5:b1:87:e5:8d:51:c6:c3:55:13:07: bb:6c:db:d4:f3:97:5c:7e:ac:fc:fb:ab:71:02:0c:ef:61:27: e6:f4:c6:73:68:46:48:78:4e:e6:c0:33:7b:6b:39:84:9f:b4: 6e:1d:2f:28:15:a5:e3:0c:d0:07:33:6c:92:f5:bc:d1:8d:c2: 94:f8:16:bd:8c:30:1c:af:f0:53:cd:8a:e6:05:30:4a:65:65: f0:1a:db:5e:58:9a:2d:bb:de:a2:1c:08:d1:6a:12:14:07:4d: b6:d1:fc:c3:04:c1:7d:f4:e6:cd:b1:69:fb:ef:54:7f:91:ef: 4e:a3:26:1a:dd:fc:95:64:0c:04:72:0e:2d:ae:81:e2:8e:67: 2d:9a:ab:28:7c:bd:ac:2c:88:ae:9d:72:a4:38:03:e5:4c:36: 8f:7f:d6:be:27:df:a8:b3:bf:bb:ee:a8:48:9e:b2:2b:ed:b3: dd:63:63:38:50:af:ad:6d:fc:87:29:8a:41:ba:24:6b:90:e1: 2d:bc:23:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUxMDIyMjMzMzUxWhcNMjUxMDI5MjMzMzUxWjAYMRYwFAYD VQQDEw02OGY5NjlkZi0wYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmh/stJHWUi0LkdpIdk0t4NSyGQJQvh+jY3xgT3vV/T6IkhfsYGruMOboUF7m 9vZftEQ2bqknVnMR9ar19ZsuETtGZaQIFwHNTJH95730TB+/r+mil7wtoVKZaNG7 mc9UvsjoCPIRyXb0JXlCq326D9nKseOHyMKBV4sdDRP86hg6eKCXE1nB251bZNSC A9DmCfevSqR7/0F3ff9hmby60VIlU1Uxc82KUeZGU7rpFVO/RXpUqHobWGBwmLQj HLF6AwRMhdnnAIZWja3KHlek9toYKGFUD+t6Me9H2lGNTre2oHIIVcit56GGN5dj sucf/rebImnpcFf1Cd9IR72/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5aO0Oi /ue8QOLWFpErxAjsiWkgMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj32hin1qq3LTqKjXNqdo/H6rv9VwejBykgIQUox7ukFR52itZBrkB WMTfy8L79y/aYtmv1m9BTQ5wgrbi5bGH5Y1RxsNVEwe7bNvU85dcfqz8+6txAgzv YSfm9MZzaEZIeE7mwDN7azmEn7RuHS8oFaXjDNAHM2yS9bzRjcKU+Ba9jDAcr/BT zYrmBTBKZWXwGtteWJotu96iHAjRahIUB0220fzDBMF99ObNsWn771R/ke9OoyYa 3fyVZAwEcg4troHijmctmqsofL2sLIiunXKkOAPlTDaPf9a+J9+os7+77qhInrIr 7bPdY2M4UK+tbfyHKYpBuiRrkOEtvCNK -----END CERTIFICATE-----Generated at Fri Oct 24 19:03:39 2025 by rpki-client