$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: wEnyE8W/EXMyXqdgfF+BRXtuKoCwG1LAaEJf4gxVLec= Subject key identifier: 65:DA:BA:80:92:21:30:B1:C0:22:3E:6A:DF:E1:F4:7B:8C:79:1B:2E Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 05A8 Signing time: Sun 02 Nov 2025 23:07:40 +0000 Manifest this update: Sun 02 Nov 2025 23:07:39 +0000 Manifest next update: Sun 09 Nov 2025 23:07:39 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: AdhN/6n7GanAfa+aPHTwWTk6jJS/pc6B5NtRZb0c6xI=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Nov 2 23:07:39 2025 GMT Not After : Nov 9 23:07:39 2025 GMT Subject: CN=6907e43c-287f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:cc:bc:b4:58:b9:83:1b:8e:d4:bb:db:1e: a8:ea:5c:1c:fd:92:db:5b:e6:27:85:ce:bb:35:b0: bc:d2:3f:b3:c0:98:cc:5e:6d:c2:64:88:79:3f:34: d4:2a:5f:63:6e:1c:9e:a5:a0:07:6b:f1:66:92:f4: 54:c0:7c:18:97:61:62:fe:c9:a2:63:b2:be:84:80: 32:a3:c8:03:5d:09:fc:5e:a1:f7:35:4a:a2:18:30: 2b:a0:2f:a7:cb:e8:ce:1b:eb:6b:b8:85:be:b8:8e: 87:cd:35:84:07:3a:f7:57:22:5f:aa:cd:39:ed:21: e8:6e:3d:89:80:bc:02:7a:e9:f2:5b:95:e6:cb:e0: 4b:ee:1c:a1:d5:06:cc:c2:67:49:0b:fd:2d:c7:a0: 1b:c2:9e:3d:85:8e:d4:13:82:b3:3a:a6:de:6a:c1: 18:d9:9f:f7:cf:d0:c3:7c:de:8b:56:6e:39:f0:1c: 33:53:8b:08:40:53:51:f0:af:42:2e:cd:40:2d:44: af:8b:76:a3:06:99:3e:bc:0b:f6:1e:cf:7f:ba:8b: 93:99:c2:f1:53:d5:60:dc:c9:f4:1a:99:9f:89:8d: 58:3e:86:b0:2a:d9:79:d9:ab:66:e9:e0:ca:db:b0: 67:ce:12:95:18:48:cf:b8:bb:2c:01:c5:60:87:6a: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DA:BA:80:92:21:30:B1:C0:22:3E:6A:DF:E1:F4:7B:8C:79:1B:2E X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b0:6a:8b:df:ba:9b:f2:45:0f:7d:3e:07:42:12:7e:ff:36: 7b:16:5a:9d:65:3c:96:b2:45:78:07:9b:13:f6:76:1e:7e:7a: 26:a8:1d:a4:f1:7c:90:a5:a6:07:60:d8:3d:8e:cd:21:a0:24: 4e:b3:5a:54:2f:39:21:b5:9c:2a:28:43:5f:bd:64:d2:d3:a0: 48:1d:46:cd:ad:61:35:22:67:04:16:3f:66:e1:2c:c2:49:a6: b4:f3:06:be:f6:2a:f3:54:c0:05:69:42:f4:72:d3:6f:02:2b: 91:7d:88:3f:05:20:41:e9:38:4f:82:6e:84:53:30:8d:73:f5: ab:43:44:3b:64:c2:0f:44:10:aa:02:39:8e:bb:48:e1:69:75: 9d:fa:3f:0b:e8:f6:9a:1b:62:37:29:7e:c0:bd:c5:42:c5:a7: 5f:24:3a:4c:88:35:81:f9:94:68:65:73:8c:90:db:21:7f:91: 55:23:8f:b2:2b:b9:cd:7b:0e:b4:a0:25:8a:e2:a4:c6:f4:f3: 9d:e6:07:f4:d5:7c:29:80:60:a1:00:88:c3:38:74:61:ff:36: e9:b4:18:fb:42:81:f9:75:fe:48:f9:ba:e8:20:26:07:0b:7b: 41:26:98:8f:15:f4:13:1e:9d:61:e0:dc:56:1e:63:4e:40:38: bf:87:87:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjUxMTAyMjMwNzM5WhcNMjUxMTA5MjMwNzM5WjAYMRYwFAYD VQQDEw02OTA3ZTQzYy0yODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJ3MvLRYuYMbjtS72x6o6lwc/ZLbW+Ynhc67NbC80j+zwJjMXm3CZIh5PzTU Kl9jbhyepaAHa/FmkvRUwHwYl2Fi/smiY7K+hIAyo8gDXQn8XqH3NUqiGDAroC+n y+jOG+truIW+uI6HzTWEBzr3VyJfqs057SHobj2JgLwCeunyW5Xmy+BL7hyh1QbM wmdJC/0tx6Abwp49hY7UE4KzOqbeasEY2Z/3z9DDfN6LVm458BwzU4sIQFNR8K9C Ls1ALUSvi3ajBpk+vAv2Hs9/uouTmcLxU9Vg3Mn0GpmfiY1YPoawKtl52atm6eDK 27BnzhKVGEjPuLssAcVgh2qRJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXauoCS ITCxwCI+at/h9HuMeRsuMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhsGqL37qb8kUPfT4HQhJ+/zZ7FlqdZTyWskV4B5sT9nYefnomqB2k 8XyQpaYHYNg9js0hoCROs1pULzkhtZwqKENfvWTS06BIHUbNrWE1ImcEFj9m4SzC Saa08wa+9irzVMAFaUL0ctNvAiuRfYg/BSBB6ThPgm6EUzCNc/WrQ0Q7ZMIPRBCq AjmOu0jhaXWd+j8L6PaaG2I3KX7AvcVCxadfJDpMiDWB+ZRoZXOMkNshf5FVI4+y K7nNew60oCWK4qTG9POd5gf01XwpgGChAIjDOHRh/zbptBj7QoH5df5I+broICYH C3tBJpiPFfQTHp1h4NxWHmNOQDi/h4eM -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:45 2025 by rpki-client