$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json) Hash identifier: XwZHM0qk4aFLD0DsWhJmMTYIYdUv2N7/QX86cHvomjE= Subject key identifier: 47:BF:C5:14:E6:75:7A:D1:EB:F5:4F:A7:31:7C:BC:F7:95:7E:55:D8 Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft Manifest number: F9 Signing time: Wed 05 Nov 2025 05:20:50 +0000 Manifest this update: Wed 05 Nov 2025 05:20:50 +0000 Manifest next update: Wed 12 Nov 2025 05:20:50 +0000 Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: 2cGI7ZaIyzqHxjySLp2Wso7wj6ZGwSot0zLzTD1Xj6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Validity Not Before: Nov 5 05:20:50 2025 GMT Not After : Nov 12 05:20:50 2025 GMT Subject: CN=690adeb2-ac86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:55:46:b8:14:b3:76:66:85:60:8e:45:75: 0c:f0:b7:39:31:a9:1a:bb:10:57:52:69:a7:be:1b: a9:6d:f9:8e:55:fc:5e:55:b6:81:52:a0:05:fb:fe: 9f:b9:01:cd:fc:a2:55:85:c2:dd:17:49:d5:10:8c: 05:e8:e2:e0:bd:ab:01:d9:02:f3:e8:ec:51:4f:eb: 0d:45:69:03:b1:cd:76:21:be:c4:d7:5f:c9:bf:e9: d4:65:97:68:d8:2e:29:ea:74:d2:65:8e:d8:b1:1d: 01:85:a7:0f:9e:89:ae:45:e7:fe:79:9d:24:79:ba: af:c1:e3:91:1e:bc:ef:b6:8f:d5:0d:cc:95:2b:0f: 77:bc:c7:23:8a:ba:d8:42:25:11:95:d8:3e:d6:ad: 8a:25:bc:e3:9f:b3:e0:8b:36:4e:ca:1f:e3:84:e5: b8:56:ff:23:bd:3d:70:ac:9f:a2:a9:6c:63:24:84: 39:f4:95:32:da:f8:e0:f3:c2:3a:cd:ad:49:b4:06: c7:58:02:5f:10:13:d8:61:b8:20:4c:43:9e:d5:c3: 07:2b:db:ea:47:ae:a5:ae:e1:46:b2:aa:75:13:b4: 44:24:e5:d3:cd:4e:77:1c:06:d0:e7:d9:9f:ce:5a: e3:b4:01:6c:d7:d5:6c:29:05:77:74:52:c6:04:98: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:C5:14:E6:75:7A:D1:EB:F5:4F:A7:31:7C:BC:F7:95:7E:55:D8 X509v3 Authority Key Identifier: keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3e:44:89:65:68:c9:03:ff:41:d4:fd:29:00:00:bb:75:68: 79:3b:a2:39:95:0a:fa:32:33:47:61:23:cc:b1:de:d6:c9:eb: 8b:4e:60:61:76:6e:19:a0:aa:f0:08:34:b5:ac:6f:20:ff:2f: 63:32:ed:31:f0:83:28:b5:b1:ec:ee:ce:8b:43:ab:29:6b:38: 97:fd:6f:3f:51:d1:62:b2:6a:7b:45:3e:e4:28:67:18:96:df: 50:93:e0:13:91:8c:f7:47:80:c1:2e:67:06:70:06:af:b2:69: cb:ce:aa:e9:41:bf:33:f3:bd:35:de:85:c7:53:f4:f8:74:cd: 0a:1d:73:1e:c1:5e:87:0d:01:57:5f:6f:b5:48:6e:7b:5f:98: b8:93:7e:c3:28:cf:70:e9:19:57:ae:39:4a:b5:ed:46:91:23: de:1d:12:a3:83:19:22:09:9c:6e:62:0f:56:0c:ec:eb:36:43: ff:d5:67:bc:8c:79:84:d6:a0:e7:06:08:32:a0:a9:40:ed:c7: 83:b9:8e:ec:e5:ea:da:0b:96:2d:20:9f:04:a7:c2:09:90:44: b2:11:bf:58:04:8b:56:c1:0b:41:ed:22:94:ed:89:fc:56:43: 9e:6e:b9:62:1a:e6:de:35:2c:b3:39:34:c9:db:2a:10:a0:7f: d0:f2:74:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEMxM0M5QUUzNUMyN0MzMTAzMEUwMjQyODczQkEyRDVB NzM1RDc4MTEwHhcNMjUxMTA1MDUyMDUwWhcNMjUxMTEyMDUyMDUwWjAYMRYwFAYD VQQDEw02OTBhZGViMi1hYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNFVRrgUs3ZmhWCORXUM8Lc5MakauxBXUmmnvhupbfmOVfxeVbaBUqAF+/6f uQHN/KJVhcLdF0nVEIwF6OLgvasB2QLz6OxRT+sNRWkDsc12Ib7E11/Jv+nUZZdo 2C4p6nTSZY7YsR0BhacPnomuRef+eZ0kebqvweORHrzvto/VDcyVKw93vMcjirrY QiURldg+1q2KJbzjn7PgizZOyh/jhOW4Vv8jvT1wrJ+iqWxjJIQ59JUy2vjg88I6 za1JtAbHWAJfEBPYYbggTEOe1cMHK9vqR66lruFGsqp1E7REJOXTzU53HAbQ59mf zlrjtAFs19VsKQV3dFLGBJhmoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe/xRTm dXrR6/VPpzF8vPeVflXYMB8GA1UdIwQYMBaAFME8muNcJ8MQMOAkKHO6LVpzXXgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My83NkRGNzZFRTNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4QXc0Q1FvYzdvdFduTmRl QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUeWE0MXdud3hBdzRDUW9jN290V25OZGVCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My83NkRGNzZFRTNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4 QXc0Q1FvYzdvdFduTmRlQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqPkSJZWjJA/9B1P0pAAC7dWh5O6I5lQr6MjNHYSPMsd7WyeuLTmBh dm4ZoKrwCDS1rG8g/y9jMu0x8IMotbHs7s6LQ6spaziX/W8/UdFismp7RT7kKGcY lt9Qk+ATkYz3R4DBLmcGcAavsmnLzqrpQb8z87013oXHU/T4dM0KHXMewV6HDQFX X2+1SG57X5i4k37DKM9w6RlXrjlKte1GkSPeHRKjgxkiCZxuYg9WDOzrNkP/1We8 jHmE1qDnBggyoKlA7ceDuY7s5eraC5YtIJ8Ep8IJkESyEb9YBItWwQtB7SKU7Yn8 VkOebrliGubeNSyzOTTJ2yoQoH/Q8nS0 -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:21 2025 by rpki-client