$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: 47IBdBH21y7blzRJIJAPQH2dWnaa6Bz8m1Zlbp0W3Vo= Subject key identifier: 3E:3B:94:7D:1A:CC:22:69:E5:35:F9:9E:D3:45:CD:B2:54:1E:67:C5 Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: 0152 Signing time: Wed 05 Nov 2025 04:20:10 +0000 Manifest this update: Wed 05 Nov 2025 04:20:09 +0000 Manifest next update: Wed 12 Nov 2025 04:20:09 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: efpRMoGSzx2kUNVhjGne9oZI++gHfDeeFdMTTgob4Lw=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: mx+hZNnEHjoWsdsKMFKjqe1rg9GBHxL9Qf87GWS5aXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: Nov 5 04:20:09 2025 GMT Not After : Nov 12 04:20:09 2025 GMT Subject: CN=690ad079-ddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:04:e4:ed:a5:81:21:1e:55:40:a0:15:a5: d1:07:09:91:82:8b:8c:ea:87:3f:89:f6:b9:0e:41: 89:28:ab:9d:d1:3d:40:e1:e0:2d:ca:5f:f2:6b:57: 50:3c:15:f8:cc:e6:3d:fd:a4:27:3b:aa:27:d2:ab: 28:cf:a5:74:cf:a0:a6:43:2f:a1:36:6d:dd:c0:2d: 6e:ff:c0:6a:46:c7:03:8b:28:70:c4:4c:c6:04:3c: 5f:73:23:25:d9:57:dc:c7:2a:a1:af:ca:0b:41:1a: 37:4c:60:6f:8f:89:af:8d:c1:e3:e8:fb:80:bf:81: 5e:85:cc:c4:93:37:3f:6a:aa:56:1a:a2:19:31:97: 7c:a7:64:e3:11:a8:aa:95:a1:3c:0a:70:c8:43:38: e8:7f:28:ac:14:19:5c:8a:83:e3:86:14:4c:7c:0b: 51:44:a0:53:e3:fd:0d:49:0a:34:17:79:0a:1e:cc: e1:58:66:b6:1a:35:aa:3e:d9:36:b5:1a:04:f0:24: bf:6f:1d:62:b0:2d:77:ac:5f:96:4f:b2:72:a4:c7: 1f:f3:69:cf:19:10:e7:5f:dc:d1:00:54:85:50:bc: 5e:52:0f:3b:4a:4a:b4:49:1e:1f:cb:24:87:5d:f4: ba:6e:48:27:06:08:7a:74:0b:45:b0:21:34:47:59: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:94:7D:1A:CC:22:69:E5:35:F9:9E:D3:45:CD:B2:54:1E:67:C5 X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:8b:21:49:a4:1e:9c:ae:4e:cd:23:bf:51:b8:c1:93:b0:e8: 52:cc:70:75:1c:e0:69:53:9f:60:b7:ff:ed:04:f7:3d:59:75: 23:76:6e:8d:44:cb:eb:db:fb:2f:d6:f7:2c:94:df:26:3e:60: a2:53:a9:22:74:05:b6:9a:79:e4:9a:c7:14:49:d5:b2:c6:35: 5b:cc:6a:2d:2e:85:37:49:d0:1b:92:92:41:da:9f:ab:b0:3e: c4:09:0a:46:c3:e2:87:9d:f1:0f:51:cb:52:22:74:aa:63:64: 69:15:a8:be:6f:33:d5:c9:8c:67:22:ed:f4:8c:01:c5:82:28: 67:42:c7:dc:85:e5:52:1b:15:a4:03:a5:7a:e5:45:49:12:42: b5:0d:cf:0e:d8:cf:ea:6f:20:5f:bd:70:b5:34:4e:6c:81:5f: 08:c9:47:b1:e0:1f:be:8d:eb:d9:fe:c2:55:ae:5c:1b:19:6d: 5e:28:03:a7:60:84:5a:a9:cf:e4:f1:10:c1:ca:ca:82:7a:8f: 8b:3f:20:2a:a0:c1:7a:20:31:e6:b5:8b:20:61:e7:7d:6a:48: 7d:61:8a:50:42:36:b0:eb:5d:cf:82:ee:66:eb:1c:a1:b1:7c: 39:90:6f:3f:b9:39:ba:c7:7a:e5:f4:25:68:ab:c1:b0:40:80: ec:b2:e4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjUxMTA1MDQyMDA5WhcNMjUxMTEyMDQyMDA5WjAYMRYwFAYD VQQDEw02OTBhZDA3OS1kZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtckE5O2lgSEeVUCgFaXRBwmRgouM6oc/ifa5DkGJKKud0T1A4eAtyl/ya1dQ PBX4zOY9/aQnO6on0qsoz6V0z6CmQy+hNm3dwC1u/8BqRscDiyhwxEzGBDxfcyMl 2Vfcxyqhr8oLQRo3TGBvj4mvjcHj6PuAv4FehczEkzc/aqpWGqIZMZd8p2TjEaiq laE8CnDIQzjofyisFBlcioPjhhRMfAtRRKBT4/0NSQo0F3kKHszhWGa2GjWqPtk2 tRoE8CS/bx1isC13rF+WT7JypMcf82nPGRDnX9zRAFSFULxeUg87Skq0SR4fyySH XfS6bkgnBgh6dAtFsCE0R1kpUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD47lH0a zCJp5TX5ntNFzbJUHmfFMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiiyFJpB6crk7NI79RuMGTsOhSzHB1HOBpU59gt//tBPc9WXUjdm6N RMvr2/sv1vcslN8mPmCiU6kidAW2mnnkmscUSdWyxjVbzGotLoU3SdAbkpJB2p+r sD7ECQpGw+KHnfEPUctSInSqY2RpFai+bzPVyYxnIu30jAHFgihnQsfcheVSGxWk A6V65UVJEkK1Dc8O2M/qbyBfvXC1NE5sgV8IyUex4B++jevZ/sJVrlwbGW1eKAOn YIRaqc/k8RDBysqCeo+LPyAqoMF6IDHmtYsgYed9akh9YYpQQjaw613Pgu5m6xyh sXw5kG8/uTm6x3rl9CVoq8GwQIDssuQN -----END CERTIFICATE-----Generated at Wed Nov 5 19:29:40 2025 by rpki-client