$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: jKOPykrXsHR2CC2exOkU1UOm/WpV/hh//iKIy+BSHJQ= Subject key identifier: 14:CD:5D:37:38:0D:D8:FF:F6:2D:E8:62:A8:DB:A9:D3:BF:BB:E7:D6 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 9F Signing time: Wed 05 Nov 2025 06:29:38 +0000 Manifest this update: Wed 05 Nov 2025 06:29:37 +0000 Manifest next update: Wed 12 Nov 2025 06:29:37 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: 6NzEWUHftYJFmvmS54eRIQ9r/3HZyYBXz9fQ/oFDQ5U=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Nov 5 06:29:37 2025 GMT Not After : Nov 12 06:29:37 2025 GMT Subject: CN=690aeed2-96d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:d1:03:9b:94:b9:de:aa:88:54:73:7a:4b: b3:df:af:3e:c3:ce:c0:00:be:43:22:61:e2:11:7f: 7a:f0:e5:95:29:af:48:6e:e0:e5:ba:88:00:d7:ed: a8:91:e7:b0:a4:4c:be:23:5e:a8:c8:46:4c:99:59: ae:74:95:dd:7b:f0:84:52:29:08:60:bc:f1:90:f7: 36:27:12:07:4a:79:e1:95:df:df:cf:07:5c:c1:c8: 36:1c:cf:b7:fe:1d:43:16:e9:c0:3f:13:77:2a:5e: d9:ce:5b:ef:a0:62:18:90:a1:78:d1:19:74:d1:13: 49:e7:f1:ff:46:63:8d:db:17:7f:db:b7:62:9d:f4: 61:fe:cf:ba:e9:a2:0f:7f:aa:5e:47:33:88:aa:c2: ed:8e:5c:f9:7d:a7:56:0f:88:0b:f6:4a:6a:fa:9c: 69:92:97:7e:93:c0:e2:ae:af:10:f9:05:32:92:64: e1:da:cf:72:81:c5:e6:94:4b:20:27:fa:7d:98:50: 42:86:ac:fe:d1:26:0e:21:03:38:da:4a:96:ce:5c: b7:02:3e:a1:59:a6:60:f6:f3:ec:0f:bb:80:98:9d: 95:89:0a:ea:15:11:8f:d6:f4:79:a0:36:79:bb:f8: 38:df:51:bb:e3:e8:54:94:96:50:8c:ac:b8:2d:ff: cc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CD:5D:37:38:0D:D8:FF:F6:2D:E8:62:A8:DB:A9:D3:BF:BB:E7:D6 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b4:37:c4:af:cb:30:a7:0c:40:53:89:19:f0:57:ad:7f:ae: 20:f4:51:af:c4:24:98:eb:9a:f7:51:52:16:74:e2:7d:f6:22: 8b:b9:b9:61:63:9b:6d:c7:33:54:d5:4e:f4:3e:75:30:4c:23: f9:fb:fa:b3:f5:1f:18:79:ee:e3:aa:19:6e:66:16:1c:65:1a: ad:64:88:2d:91:9b:29:0e:61:42:af:f2:4e:0f:88:51:b7:26: 65:dd:7b:e7:b7:cd:6a:65:4a:31:93:13:aa:c0:67:bc:30:65: c9:74:ed:76:fa:ce:1d:8d:40:77:b0:21:c2:a6:d0:8e:22:19: ee:a5:59:f9:5a:f6:d0:b2:5d:dc:63:58:18:c1:72:7e:7c:e8: bc:b6:58:f0:9c:99:f7:68:71:56:f3:e3:d4:73:55:d4:c3:2d: c7:03:d1:7e:f5:fb:01:4f:ef:5e:19:0d:18:aa:c8:e3:4f:91: 78:c0:3f:ce:bc:15:5b:f5:d2:b0:ad:ac:10:c3:90:1e:47:2e: 1d:17:68:b8:06:fd:47:7d:3b:b4:c0:62:a0:b3:c4:ea:fe:07: b0:54:84:40:31:66:2f:21:99:ed:7e:6d:d3:4b:ed:85:a9:1a: f7:1e:8c:d4:bc:7c:b4:d0:bf:38:eb:d8:d1:50:8d:b0:ef:f8: fc:bc:44:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0 NTQ0NEQ2MTUwHhcNMjUxMTA1MDYyOTM3WhcNMjUxMTEyMDYyOTM3WjAYMRYwFAYD VQQDEw02OTBhZWVkMi05NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVrRA5uUud6qiFRzekuz368+w87AAL5DImHiEX968OWVKa9IbuDluogA1+2o keewpEy+I16oyEZMmVmudJXde/CEUikIYLzxkPc2JxIHSnnhld/fzwdcwcg2HM+3 /h1DFunAPxN3Kl7ZzlvvoGIYkKF40Rl00RNJ5/H/RmON2xd/27dinfRh/s+66aIP f6peRzOIqsLtjlz5fadWD4gL9kpq+pxpkpd+k8Dirq8Q+QUykmTh2s9ygcXmlEsg J/p9mFBChqz+0SYOIQM42kqWzly3Aj6hWaZg9vPsD7uAmJ2ViQrqFRGP1vR5oDZ5 u/g431G74+hUlJZQjKy4Lf/MCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTNXTc4 Ddj/9i3oYqjbqdO/u+fWMB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xQUY3REY2QUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtU M2ZwY3pyQ3VRcGRGUkUxaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCStDfEr8swpwxAU4kZ8Fetf64g9FGvxCSY65r3UVIWdOJ99iKLublh Y5ttxzNU1U70PnUwTCP5+/qz9R8Yee7jqhluZhYcZRqtZIgtkZspDmFCr/JOD4hR tyZl3Xvnt81qZUoxkxOqwGe8MGXJdO12+s4djUB3sCHCptCOIhnupVn5WvbQsl3c Y1gYwXJ+fOi8tljwnJn3aHFW8+PUc1XUwy3HA9F+9fsBT+9eGQ0YqsjjT5F4wD/O vBVb9dKwrawQw5AeRy4dF2i4Bv1HfTu0wGKgs8Tq/gewVIRAMWYvIZntfm3TS+2F qRr3HozUvHy00L8469jRUI2w7/j8vEQ6 -----END CERTIFICATE-----Generated at Wed Nov 5 09:59:32 2025 by rpki-client