$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: 67bNEKuJJZuhVSa7jVifyzAXNm9CjcKAaY98heTmDt0= Subject key identifier: C9:BB:0A:6C:41:9E:5B:A6:3D:39:52:BF:04:D6:BF:06:2E:61:A0:73 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C5A Signing time: Fri 24 Oct 2025 19:09:31 +0000 Manifest this update: Fri 24 Oct 2025 19:09:30 +0000 Manifest next update: Fri 31 Oct 2025 19:09:30 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: z+hwBQuTeB6w2Qt0Gc9j7uxh7HLt8Msq8hhQPLXyz2k=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Oct 24 19:09:30 2025 GMT Not After : Oct 31 19:09:30 2025 GMT Subject: CN=68fbceea-7709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7f:fd:53:20:19:a6:94:8f:54:83:91:f1:2c: 82:a1:20:6f:bb:1b:64:d3:45:c7:d0:61:18:80:7c: 9c:2b:29:df:38:32:35:fa:2e:b6:7a:2d:bf:8c:6d: 2f:1e:47:f7:47:2e:c4:4d:46:f7:8d:c0:25:99:31: d6:52:56:fc:70:19:41:95:08:85:13:03:61:f4:8f: a5:49:ab:45:b4:20:3f:9a:fb:cb:0d:9d:18:88:14: b2:09:f1:5b:57:24:20:2a:88:e1:d5:3d:62:59:20: 4c:b9:11:b9:30:ce:7b:ac:95:02:c3:bf:37:d2:e0: 6b:28:93:82:93:f5:eb:f1:56:62:7c:2e:27:a7:d7: 45:cf:6f:66:4e:12:2d:4c:a6:94:06:81:ec:be:37: 20:92:c5:e0:bf:4a:a8:ad:d7:e7:26:a3:42:66:d8: 34:2c:27:6c:2e:02:73:5e:4a:fd:12:d1:e6:78:8d: 56:48:a7:6c:67:36:ad:23:c3:b3:de:41:9b:9e:e2: ba:d7:94:3d:f5:08:10:da:72:67:91:17:11:91:1e: 6d:11:98:18:f9:7c:aa:4a:59:28:f1:2c:c0:6a:75: 1d:c1:55:f3:08:bf:5a:66:aa:f2:e7:02:b9:85:1e: c8:26:93:eb:d8:98:c2:03:49:75:bb:33:10:9e:bf: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BB:0A:6C:41:9E:5B:A6:3D:39:52:BF:04:D6:BF:06:2E:61:A0:73 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:1c:f4:9e:ed:fd:a8:b0:f8:71:7c:dd:cb:06:37:f5:4d:d9: 95:94:7d:b7:1a:3f:ae:bb:b3:e7:b2:e7:eb:b2:55:a1:4d:21: ec:9b:55:b4:95:07:22:c1:64:3f:77:e7:c3:58:27:07:dd:31: 24:06:99:18:f9:14:29:cf:db:72:91:7e:1a:67:f6:74:cb:fe: 4d:89:b3:c1:e6:5c:a7:2a:a6:ca:7f:c8:52:67:ce:52:22:fe: 1d:99:8f:c2:e3:62:60:2c:15:9b:5e:2c:52:30:b2:db:8c:d9: ae:d8:5b:b6:86:52:5b:cc:12:22:91:86:17:09:24:76:69:c5: 4c:20:ea:38:2c:1d:2f:a1:37:4a:43:7c:cf:c1:4d:d6:59:d4: 7c:e6:c4:1d:ad:59:58:09:22:f9:23:9f:1e:ee:e9:3c:69:b2: 45:e7:c4:12:75:f2:73:1b:24:1c:a4:2f:ea:37:54:b6:35:e6: 7e:08:15:71:ae:61:cf:be:69:87:82:90:a3:87:e0:c8:b3:d6: 9a:69:b4:50:09:33:bc:9e:01:09:d8:82:d7:99:df:2c:2d:05: 7b:69:ac:4e:e2:34:ad:2d:f4:0d:67:0c:cf:34:13:4b:37:43: b3:6e:e6:1b:48:7c:24:ac:06:58:df:95:09:31:ba:14:c2:4c: 4b:e6:a0:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMDI0MTkwOTMwWhcNMjUxMDMxMTkwOTMwWjAYMRYwFAYD VQQDEw02OGZiY2VlYS03NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33/9UyAZppSPVIOR8SyCoSBvuxtk00XH0GEYgHycKynfODI1+i62ei2/jG0v Hkf3Ry7ETUb3jcAlmTHWUlb8cBlBlQiFEwNh9I+lSatFtCA/mvvLDZ0YiBSyCfFb VyQgKojh1T1iWSBMuRG5MM57rJUCw7830uBrKJOCk/Xr8VZifC4np9dFz29mThIt TKaUBoHsvjcgksXgv0qordfnJqNCZtg0LCdsLgJzXkr9EtHmeI1WSKdsZzatI8Oz 3kGbnuK615Q99QgQ2nJnkRcRkR5tEZgY+XyqSlko8SzAanUdwVXzCL9aZqry5wK5 hR7IJpPr2JjCA0l1uzMQnr8nqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMm7CmxB nlumPTlSvwTWvwYuYaBzMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUHPSe7f2osPhxfN3LBjf1TdmVlH23Gj+uu7PnsufrslWhTSHsm1W0 lQciwWQ/d+fDWCcH3TEkBpkY+RQpz9tykX4aZ/Z0y/5NibPB5lynKqbKf8hSZ85S Iv4dmY/C42JgLBWbXixSMLLbjNmu2Fu2hlJbzBIikYYXCSR2acVMIOo4LB0voTdK Q3zPwU3WWdR85sQdrVlYCSL5I58e7uk8abJF58QSdfJzGyQcpC/qN1S2NeZ+CBVx rmHPvmmHgpCjh+DIs9aaabRQCTO8ngEJ2ILXmd8sLQV7aaxO4jStLfQNZwzPNBNL N0OzbuYbSHwkrAZY35UJMboUwkxL5qBL -----END CERTIFICATE-----Generated at Sun Oct 26 09:03:26 2025 by rpki-client