$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: nfYI7TS1rdSS5cp3T0R9iI2WLguOzv4frhoddnGDQcs= Subject key identifier: 01:79:70:22:EA:D5:0D:18:75:76:4C:89:7D:A0:2A:36:EB:80:69:45 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 0163 Signing time: Mon 03 Nov 2025 04:00:54 +0000 Manifest this update: Mon 03 Nov 2025 04:00:53 +0000 Manifest next update: Mon 10 Nov 2025 04:00:53 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: cjqnyL8Kd80EOGrLIjC1pM5B9BvfGqUDtOtIZm7/mIA=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Nov 3 04:00:53 2025 GMT Not After : Nov 10 04:00:53 2025 GMT Subject: CN=690828f5-1a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:b3:f5:0e:c6:9d:20:59:cf:37:b2:14:45: 35:2c:64:97:9b:81:d8:9f:ed:4d:29:01:b4:a4:7e: 38:b8:fc:09:c4:a2:1e:14:f0:b7:9c:aa:cd:bc:d7: 42:9d:8e:a4:45:73:7a:12:b8:b0:71:03:28:e7:3b: 63:d9:47:94:1c:b8:34:d1:7d:82:14:8f:dd:6e:a2: 98:a1:65:ee:74:20:8f:85:cd:c6:9d:d7:87:ef:75: 98:db:0a:c7:42:27:3e:3e:5d:2d:42:64:f4:d2:aa: 76:60:f2:fe:97:97:08:6f:4b:6a:91:54:cf:5a:e2: e3:8e:da:3c:96:31:4b:d3:ce:0a:de:60:76:5e:7f: 04:71:50:45:73:f7:5f:10:9a:03:6b:6d:4e:69:64: 52:a9:8a:7c:38:3b:05:6e:f0:e5:43:21:3e:40:4f: e1:ee:3b:f2:cc:32:84:56:d0:dd:14:b0:ed:03:0f: 86:e4:7e:1e:71:ba:8f:e7:2b:69:7d:1e:d2:b5:cb: e3:51:6e:b7:28:03:9c:35:89:36:da:e4:a8:f1:6e: 47:4c:a3:dd:60:78:88:4d:53:de:d8:8f:a3:fb:c6: 37:64:c9:6c:0a:60:18:2f:b7:dc:3d:f6:35:57:d9: 0f:f8:a5:6d:15:40:17:a3:79:09:b0:a2:f8:35:b1: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:70:22:EA:D5:0D:18:75:76:4C:89:7D:A0:2A:36:EB:80:69:45 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:cf:76:db:a5:28:57:68:57:74:ab:08:f0:c0:68:44:56:0b: 3d:4f:81:cf:5b:d0:e0:72:5a:ed:29:2b:34:95:c3:09:c7:d6: ec:4c:30:1f:7e:f4:20:4f:4a:d0:93:3d:d2:1c:48:3c:0d:85: 78:94:8a:4c:01:67:1e:22:35:7d:5b:ee:5d:b4:e7:7b:28:28: ef:68:3c:06:c3:34:68:e7:a2:23:45:68:92:09:0c:9c:dd:62: 02:2e:4e:49:d3:92:24:db:db:1a:3d:a1:ac:ba:99:7d:de:2f: ef:be:41:03:d8:6b:2c:dc:bc:0c:b3:81:72:f9:53:69:39:aa: 27:41:85:25:63:44:23:cd:68:4d:fc:f4:b6:85:77:88:c3:9b: 0d:97:cf:1a:c1:96:b1:6c:7c:f5:72:91:59:d5:34:5e:e5:2c: d5:34:52:57:1a:f8:6f:54:8b:6c:e7:17:8c:45:cc:6b:c5:b7: 70:6d:75:82:80:3a:a8:89:06:5f:1c:31:9c:58:15:a8:f7:93: 5f:f6:5c:81:5a:3c:96:56:dc:d7:4b:cc:d7:c7:8f:6d:7b:c2: 8f:3d:dd:68:25:30:3f:ee:d3:8a:33:91:ed:06:87:e6:57:6c: ef:b4:e8:93:89:0d:22:b5:51:e6:37:aa:61:83:43:8b:ca:75: ae:4c:31:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUxMTAzMDQwMDUzWhcNMjUxMTEwMDQwMDUzWjAYMRYwFAYD VQQDEw02OTA4MjhmNS0xYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mCz9Q7GnSBZzzeyFEU1LGSXm4HYn+1NKQG0pH44uPwJxKIeFPC3nKrNvNdC nY6kRXN6EriwcQMo5ztj2UeUHLg00X2CFI/dbqKYoWXudCCPhc3GndeH73WY2wrH Qic+Pl0tQmT00qp2YPL+l5cIb0tqkVTPWuLjjto8ljFL084K3mB2Xn8EcVBFc/df EJoDa21OaWRSqYp8ODsFbvDlQyE+QE/h7jvyzDKEVtDdFLDtAw+G5H4ecbqP5ytp fR7StcvjUW63KAOcNYk22uSo8W5HTKPdYHiITVPe2I+j+8Y3ZMlsCmAYL7fcPfY1 V9kP+KVtFUAXo3kJsKL4NbEUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF5cCLq 1Q0YdXZMiX2gKjbrgGlFMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXz3bbpShXaFd0qwjwwGhEVgs9T4HPW9DgclrtKSs0lcMJx9bsTDAf fvQgT0rQkz3SHEg8DYV4lIpMAWceIjV9W+5dtOd7KCjvaDwGwzRo56IjRWiSCQyc 3WICLk5J05Ik29saPaGsupl93i/vvkED2Gss3LwMs4Fy+VNpOaonQYUlY0QjzWhN /PS2hXeIw5sNl88awZaxbHz1cpFZ1TRe5SzVNFJXGvhvVIts5xeMRcxrxbdwbXWC gDqoiQZfHDGcWBWo95Nf9lyBWjyWVtzXS8zXx49te8KPPd1oJTA/7tOKM5HtBofm V2zvtOiTiQ0itVHmN6phg0OLynWuTDE9 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:58 2025 by rpki-client