$ rpki-client -vvf rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft File: W3UJDp6gQpi0e6-C-qIoDl42pL8.mft (raw, json) Hash identifier: gfBLmTKblI/uxPeIahV+WMy7c1WVbCI/ex61xsFF6AU= Subject key identifier: F2:4A:B9:14:FE:0C:0D:60:21:EB:27:B8:0B:06:64:3A:3E:85:5E:A7 Authority key identifier: 5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF Certificate issuer: /CN=A913731F/serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft Manifest number: 0165 Signing time: Mon 27 Oct 2025 06:03:17 +0000 Manifest this update: Mon 27 Oct 2025 06:03:16 +0000 Manifest next update: Mon 03 Nov 2025 06:03:16 +0000 Files and hashes: 1: W3UJDp6gQpi0e6-C-qIoDl42pL8.crl (hash: rcvX7ZiUM+H1fimHK0eQ+WKqOHhrM+z8+TVPkHVO4rE=) 2: 32776B2EF77E11EFA2C3C928C4F9AE02.roa (hash: iO0GAxxz6iQr/JhGiMVk8iBOxy3hTg8mQrZcdi3mCzM=) 3: 1701D3A0F36B11EF87FE3725C4F9AE02.roa (hash: QbLxvxoGtnLixtzVPkrtacYsAqvISwhCUE00pyCyTag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 06:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913731F, serialNumber=5B75090E9EA04298B47BAF82FAA2280E5E36A4BF Validity Not Before: Oct 27 06:03:16 2025 GMT Not After : Nov 3 06:03:16 2025 GMT Subject: CN=68ff0b25-3fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:e0:0d:12:56:8c:7c:05:8e:95:a9:23:24: bb:0a:2d:8f:07:8a:1a:43:c8:f3:ff:4e:b3:07:5a: ee:4a:14:2a:9f:75:4b:44:b6:90:2b:36:75:b8:2b: 08:35:c7:a2:1a:3e:3f:17:ae:47:1a:4d:25:e2:7d: d2:1d:cd:bd:53:f3:44:1b:0f:3f:f6:94:4e:1e:8e: b4:a8:2c:be:33:06:27:ca:2d:07:21:eb:8f:34:b8: ab:4b:fe:59:69:c3:90:2c:1b:6c:da:c7:c3:27:2d: 90:89:b0:c5:0e:c0:f9:f3:e1:ee:75:2f:d1:cb:b8: 2d:92:2d:cb:2f:5e:51:ce:3b:fa:c8:28:15:52:2b: d6:5c:96:19:eb:ef:e7:97:92:0f:6b:0e:fb:4e:03: 5e:e4:03:95:78:ea:43:c1:6c:ac:bd:88:ae:6d:d6: db:3c:1c:1a:0c:e7:7b:b5:e3:a2:3e:53:d2:29:b3: 1d:09:f6:38:c4:fd:6a:e1:a0:7e:ce:4f:a4:d1:6c: 58:c0:af:92:a8:97:16:22:ab:75:8f:e2:19:2c:c1: e7:23:d9:5a:9c:e4:50:23:7e:ce:90:7b:99:0f:ed: 48:04:8f:bb:43:2b:29:a6:a1:69:16:d9:3a:d0:62: e6:ec:d5:c1:9f:0b:04:e0:f5:d6:73:b2:da:fe:0f: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4A:B9:14:FE:0C:0D:60:21:EB:27:B8:0B:06:64:3A:3E:85:5E:A7 X509v3 Authority Key Identifier: keyid:5B:75:09:0E:9E:A0:42:98:B4:7B:AF:82:FA:A2:28:0E:5E:36:A4:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W3UJDp6gQpi0e6-C-qIoDl42pL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913731F/81711ED89D6F11EEBBBC9180C4F9AE02/W3UJDp6gQpi0e6-C-qIoDl42pL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:57:f1:0f:b9:1c:9f:00:28:4e:0b:11:93:4e:11:73:35:14: cd:e2:db:91:2c:76:8f:33:af:b4:9b:37:da:b1:af:40:f9:af: e8:93:85:c0:82:42:90:4b:42:a0:de:bd:18:9b:89:88:17:c1: ff:32:53:d6:e3:49:aa:49:78:73:ad:0a:f7:4c:84:69:75:45: 9e:3a:79:31:e8:76:01:d6:39:fc:97:ec:6b:1d:6e:41:d2:41: 6e:fc:3e:12:41:50:73:4e:6a:27:ee:75:3a:77:a1:fb:b3:20: 6f:2d:46:cf:db:a8:3a:55:66:8a:51:a7:10:a1:3a:cf:db:f0: e3:70:4e:e7:1e:a1:b5:7a:25:01:a3:52:40:39:4e:91:da:73: ca:82:66:bc:73:db:98:53:37:d2:b6:78:4f:33:27:c9:d5:8e: e2:93:e6:c0:2b:f7:c4:24:4d:1e:65:23:8b:9d:aa:1d:57:29: 2d:71:f6:ab:51:2c:ec:d5:71:fc:97:d1:1d:33:3d:4d:26:c1: d6:04:07:80:65:12:ff:35:cd:a0:87:c1:e6:8c:79:a5:bd:66: 7e:9f:38:3e:05:19:84:e4:bd:d3:94:d4:e5:f3:e5:5e:74:d4: 3b:f2:74:5b:0c:a9:70:a9:3e:69:d3:15:24:ff:2d:21:06:eb: 52:9e:0c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzczMUYxMTAvBgNVBAUTKDVCNzUwOTBFOUVBMDQyOThCNDdCQUY4MkZBQTIyODBF NUUzNkE0QkYwHhcNMjUxMDI3MDYwMzE2WhcNMjUxMTAzMDYwMzE2WjAYMRYwFAYD VQQDEw02OGZmMGIyNS0zZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjjgDRJWjHwFjpWpIyS7Ci2PB4oaQ8jz/06zB1ruShQqn3VLRLaQKzZ1uCsI NceiGj4/F65HGk0l4n3SHc29U/NEGw8/9pROHo60qCy+MwYnyi0HIeuPNLirS/5Z acOQLBts2sfDJy2QibDFDsD58+HudS/Ry7gtki3LL15Rzjv6yCgVUivWXJYZ6+/n l5IPaw77TgNe5AOVeOpDwWysvYiubdbbPBwaDOd7teOiPlPSKbMdCfY4xP1q4aB+ zk+k0WxYwK+SqJcWIqt1j+IZLMHnI9lanORQI37OkHuZD+1IBI+7QysppqFpFtk6 0GLm7NXBnwsE4PXWc7La/g/48wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJKuRT+ DA1gIesnuAsGZDo+hV6nMB8GA1UdIwQYMBaAFFt1CQ6eoEKYtHuvgvqiKA5eNqS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzMxRi84MTcxMUVEODlE NkYxMUVFQkJCQzkxODBDNEY5QUUwMi9XM1VKRHA2Z1FwaTBlNi1DLXFJb0RsNDJw TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1czVUpEcDZnUXBpMGU2LUMtcUlvRGw0MnBMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzMxRi84MTcxMUVEODlENkYxMUVFQkJCQzkxODBDNEY5QUUwMi9XM1VKRHA2Z1Fw aTBlNi1DLXFJb0RsNDJwTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbV/EPuRyfAChOCxGTThFzNRTN4tuRLHaPM6+0mzfasa9A+a/ok4XA gkKQS0Kg3r0Ym4mIF8H/MlPW40mqSXhzrQr3TIRpdUWeOnkx6HYB1jn8l+xrHW5B 0kFu/D4SQVBzTmon7nU6d6H7syBvLUbP26g6VWaKUacQoTrP2/DjcE7nHqG1eiUB o1JAOU6R2nPKgma8c9uYUzfStnhPMyfJ1Y7ik+bAK/fEJE0eZSOLnaodVyktcfar USzs1XH8l9EdMz1NJsHWBAeAZRL/Nc2gh8HmjHmlvWZ+nzg+BRmE5L3TlNTl8+Ve dNQ78nRbDKlwqT5p0xUk/y0hButSngwT -----END CERTIFICATE-----Generated at Tue Oct 28 18:44:52 2025 by rpki-client