$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json) Hash identifier: NSNfYttEorOAXs7RPA1k3x6Odq0akmaE+fG9TSejqzk= Subject key identifier: 1A:F3:3B:A8:27:37:38:E8:B1:0A:CB:16:E3:C9:EA:0B:91:B4:65:96 Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft Manifest number: A9 Signing time: Sat 25 Oct 2025 10:01:31 +0000 Manifest this update: Sat 25 Oct 2025 10:01:30 +0000 Manifest next update: Sat 01 Nov 2025 10:01:30 +0000 Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 4q/vT2MI6YICQOjjTnMnx0Rf6AJXTnr2XOTF0KUEzwM=) 2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 09:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Validity Not Before: Oct 25 10:01:30 2025 GMT Not After : Nov 1 10:01:30 2025 GMT Subject: CN=68fc9ffa-8f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:96:74:58:3c:c1:fc:f8:d9:69:16:64:68: ae:df:bc:ca:54:09:9a:e4:00:33:70:bb:b6:2e:53: 09:11:99:fd:21:4c:02:f9:71:83:1a:e7:5b:57:35: 56:da:51:ce:7f:f5:33:fb:88:40:3d:fd:cc:9b:08: 86:15:97:57:51:23:03:a9:80:fd:6f:c1:b8:7d:f2: 99:67:06:bf:e1:56:72:a3:21:5f:c3:5e:1c:72:80: 02:2e:4c:3a:76:81:03:23:5d:c9:f3:68:33:21:91: 84:96:01:df:7e:fc:1b:0b:83:f0:86:7f:27:8c:6b: 6a:4f:74:33:29:92:75:0b:d6:9b:d9:60:42:d1:27: 81:37:85:5b:2e:5c:52:14:90:a8:0c:ba:47:34:4e: 08:b6:cf:ec:2f:95:7a:b6:0e:da:8f:04:b4:b0:6b: 3b:aa:ba:82:1b:f4:fb:8f:c7:84:f2:af:18:18:2c: e3:ec:05:06:36:18:f4:e3:4b:2a:c6:d7:2c:75:0d: 2a:f2:d5:b8:63:c0:08:b9:ad:2b:07:cf:93:ea:c1: c6:0b:ab:bb:69:c2:8c:3f:7f:16:05:33:0c:10:c6: 69:fe:60:b9:68:38:67:d6:52:8b:ca:55:93:3b:d5: 00:9a:fa:73:98:11:ba:9a:83:a9:74:8c:26:8d:de: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:3B:A8:27:37:38:E8:B1:0A:CB:16:E3:C9:EA:0B:91:B4:65:96 X509v3 Authority Key Identifier: keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:54:e9:b2:f8:0f:44:75:39:1d:93:2c:cb:92:6c:b1:5a:ba: cd:a7:33:57:33:df:bb:e3:3f:89:5e:cc:30:cf:fd:2b:d7:17: 76:14:b1:47:91:94:3b:4d:0d:7f:d6:02:b4:81:8f:7e:fe:29: 84:ef:d1:b6:b2:ec:77:3e:ee:c8:07:f1:b8:5b:8b:12:77:31: f7:ec:d3:ee:fd:86:bc:16:73:5c:c1:4a:e5:60:2b:f0:a8:7f: 5e:a4:0c:18:e3:25:55:04:28:4d:bd:2a:f3:d8:74:00:6b:64: 92:8c:8b:73:93:19:a5:27:f6:12:44:f0:57:4a:07:59:3a:c0: 29:2f:78:15:6a:32:7d:f0:c7:4e:c0:f4:a5:db:bd:a5:90:82: 66:c1:59:2a:ec:b5:05:0e:cf:67:51:2c:7b:68:5a:d9:3d:08: 13:1b:1b:ed:22:7c:03:b2:2c:72:1b:96:ad:70:87:35:fc:ff: 0f:49:83:ad:a5:3a:ea:94:fc:49:40:6b:db:e3:86:2b:17:64: 61:d9:e0:6c:2b:da:94:50:c7:b2:71:53:b3:3e:48:f5:ce:2c: b2:37:79:46:b9:4a:ed:24:57:44:88:43:c9:61:30:0c:7a:41: af:f2:df:00:0c:f9:1a:eb:68:6e:ee:3f:a2:fe:b8:86:62:73: 2b:53:28:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzQTIxMTAvBgNVBAUTKEMyM0RGQzI2OTczOTQxOEZBNTc5MjFGOEQyOTA1QkEx Njc0MkZDNEQwHhcNMjUxMDI1MTAwMTMwWhcNMjUxMTAxMTAwMTMwWjAYMRYwFAYD VQQDEw02OGZjOWZmYS04ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRCWdFg8wfz42WkWZGiu37zKVAma5AAzcLu2LlMJEZn9IUwC+XGDGudbVzVW 2lHOf/Uz+4hAPf3MmwiGFZdXUSMDqYD9b8G4ffKZZwa/4VZyoyFfw14ccoACLkw6 doEDI13J82gzIZGElgHffvwbC4Pwhn8njGtqT3QzKZJ1C9ab2WBC0SeBN4VbLlxS FJCoDLpHNE4Its/sL5V6tg7ajwS0sGs7qrqCG/T7j8eE8q8YGCzj7AUGNhj040sq xtcsdQ0q8tW4Y8AIua0rB8+T6sHGC6u7acKMP38WBTMMEMZp/mC5aDhn1lKLylWT O9UAmvpzmBG6moOpdIwmjd664QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrzO6gn NzjosQrLFuPJ6guRtGWWMB8GA1UdIwQYMBaAFMI9/CaXOUGPpXkh+NKQW6FnQvxN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjNBMi81Rjg0NUNFQUFF NDkxMUVGOUIyOTUyMzlDNEY5QUUwMi93ajM4SnBjNVFZLWxlU0g0MHBCYm9XZENf RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19FMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjNBMi81Rjg0NUNFQUFFNDkxMUVGOUIyOTUyMzlDNEY5QUUwMi93ajM4SnBjNVFZ LWxlU0g0MHBCYm9XZENfRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsVOmy+A9EdTkdkyzLkmyxWrrNpzNXM9+74z+JXswwz/0r1xd2FLFH kZQ7TQ1/1gK0gY9+/imE79G2sux3Pu7IB/G4W4sSdzH37NPu/Ya8FnNcwUrlYCvw qH9epAwY4yVVBChNvSrz2HQAa2SSjItzkxmlJ/YSRPBXSgdZOsApL3gVajJ98MdO wPSl272lkIJmwVkq7LUFDs9nUSx7aFrZPQgTGxvtInwDsixyG5atcIc1/P8PSYOt pTrqlPxJQGvb44YrF2Rh2eBsK9qUUMeycVOzPkj1ziyyN3lGuUrtJFdEiEPJYTAM ekGv8t8ADPka62hu7j+i/riGYnMrUygg -----END CERTIFICATE-----Generated at Sat Oct 25 13:06:06 2025 by rpki-client