$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: nOriihOG82S4v5rXUIem7CWYCVxL5jgKb3Tg77vUh/I= Subject key identifier: 9F:9A:3D:35:1E:FA:FE:15:AB:3E:57:2F:C3:4F:2D:2B:F8:5C:15:34 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 5A Signing time: Mon 03 Nov 2025 07:12:34 +0000 Manifest this update: Mon 03 Nov 2025 07:12:33 +0000 Manifest next update: Mon 10 Nov 2025 07:12:33 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: oP/0G7F4NV12td65nzMEXtPhMY4byXA/yUa6gfAkWNc=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Nov 3 07:12:33 2025 GMT Not After : Nov 10 07:12:33 2025 GMT Subject: CN=690855e1-1fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:09:41:e9:12:8f:a1:41:4e:17:4f:0c:c3: e2:b8:87:74:54:c4:37:ea:f0:78:3e:74:3e:c9:6d: c9:47:82:ff:e7:c9:1f:7e:20:ab:4a:49:8e:9c:8a: 00:68:01:f2:91:eb:14:0b:f8:95:f7:d0:cf:76:f5: fa:83:2c:29:3e:e2:8b:65:1f:55:ff:70:10:10:3c: eb:f8:cd:49:ac:36:73:d4:11:d7:4b:92:d0:09:96: d9:a9:31:34:de:49:02:89:d7:48:f3:c7:e4:2a:99: 57:9b:7f:49:44:1f:a1:d8:8f:de:7f:0f:75:db:14: 23:89:29:14:a0:d8:7f:5e:e1:aa:1a:ab:0b:51:10: 27:29:da:5e:76:36:8e:7f:49:d0:1e:ab:29:98:6d: 50:80:8c:95:79:a0:1b:82:7d:ad:d9:32:29:85:2c: ac:75:5f:17:75:da:4e:e6:ae:21:1e:f5:2a:cf:4b: e7:68:e5:2c:3f:b1:d8:28:99:5f:da:87:35:a0:da: 59:1e:fa:f8:f6:67:13:c4:ed:7c:89:0a:75:e8:5e: 41:dd:6b:ef:b6:2c:6e:09:17:88:06:cf:27:09:4e: 74:66:4e:11:c4:4e:3b:34:b1:d7:8d:88:34:df:95: b0:07:6c:8b:97:8e:7b:d9:5e:4f:80:8b:a1:99:13: 08:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9A:3D:35:1E:FA:FE:15:AB:3E:57:2F:C3:4F:2D:2B:F8:5C:15:34 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:60:21:4f:fb:1c:4c:f9:e3:86:fc:15:41:2d:b4:cf:af:65: 27:0a:3b:e7:a6:7e:5a:c8:7b:dc:c6:a3:ac:c7:58:80:bf:96: b9:53:a0:50:5c:0f:20:9c:ff:74:b6:46:d9:e3:cc:89:67:66: 9a:e2:f5:5a:d7:7b:e3:46:f8:5d:75:dc:ac:10:7f:69:d4:54: e0:4e:45:1f:9e:bb:e3:cd:5d:d4:99:71:35:81:1f:01:27:9b: 9f:05:0d:1f:51:ba:a8:65:f3:22:18:46:09:3c:51:19:5a:34: 44:a6:60:d0:57:b3:ef:4c:16:67:5b:cb:47:1b:dc:08:ae:bc: cb:c9:0a:de:41:d2:11:ef:b9:2a:ce:0a:66:4b:1e:c9:d4:50: 5f:b8:66:a1:51:17:44:d5:0f:59:de:20:ac:b4:d1:74:d3:85: 07:63:a2:7c:90:e6:b9:6b:04:43:d5:fb:a4:51:48:24:7e:e2: 52:08:a5:9f:8d:27:22:5f:b9:9a:0a:65:ec:82:c2:d5:38:c4: 56:fa:d0:25:4f:4b:7a:ce:f5:0e:36:60:33:a4:44:1b:39:9a: 85:80:b2:4b:e3:a3:a2:cf:1b:29:74:1e:d6:cb:96:ae:e7:c8: e3:70:48:bc:64:2b:03:7a:36:f4:3e:41:9f:af:f7:44:cc:6f: 00:35:47:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTExMDMwNzEyMzNaFw0yNTExMTAwNzEyMzNaMBgxFjAUBgNV BAMTDTY5MDg1NWUxLTFmZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH+AlB6RKPoUFOF08Mw+K4h3RUxDfq8Hg+dD7JbclHgv/nyR9+IKtKSY6cigBo AfKR6xQL+JX30M929fqDLCk+4otlH1X/cBAQPOv4zUmsNnPUEddLktAJltmpMTTe SQKJ10jzx+QqmVebf0lEH6HYj95/D3XbFCOJKRSg2H9e4aoaqwtRECcp2l52No5/ SdAeqymYbVCAjJV5oBuCfa3ZMimFLKx1Xxd12k7mriEe9SrPS+do5Sw/sdgomV/a hzWg2lke+vj2ZxPE7XyJCnXoXkHda++2LG4JF4gGzycJTnRmThHETjs0sdeNiDTf lbAHbIuXjnvZXk+Ai6GZEwhJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn5o9NR76 /hWrPlcvw08tK/hcFTQwHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNgIU/7HEz544b8FUEttM+vZScKO+emflrIe9zGo6zHWIC/lrlToFBc DyCc/3S2RtnjzIlnZpri9VrXe+NG+F113KwQf2nUVOBORR+eu+PNXdSZcTWBHwEn m58FDR9Ruqhl8yIYRgk8URlaNESmYNBXs+9MFmdby0cb3AiuvMvJCt5B0hHvuSrO CmZLHsnUUF+4ZqFRF0TVD1neIKy00XTThQdjonyQ5rlrBEPV+6RRSCR+4lIIpZ+N JyJfuZoKZeyCwtU4xFb60CVPS3rO9Q42YDOkRBs5moWAskvjo6LPGyl0HtbLlq7n yONwSLxkKwN6NvQ+QZ+v90TMbwA1Ry8= -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:03 2025 by rpki-client