$ rpki-client -vvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft File: WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft (raw, json) Hash identifier: YrMvP8EcC2aO3d5swwHDCkoUYQIBKLOfkq4hXJhB5fk= Subject key identifier: 58:79:65:DF:F4:CB:B7:AE:1E:10:19:84:F8:AB:51:CD:7A:4F:86:DF Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03 Certificate issuer: /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03 Certificate serial: 0B40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft Manifest number: 0B3A Signing time: Sun 02 Nov 2025 19:13:50 +0000 Manifest this update: Sun 02 Nov 2025 19:13:49 +0000 Manifest next update: Sun 09 Nov 2025 19:13:49 +0000 Files and hashes: 1: WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl (hash: df9QpYLIUqZ/0wy8jNKx+lyjRbZ4V0HCL/b43Kkis+Q=) 2: 8E49B7320E8C11EDAB2A8680C4F9AE02.roa (hash: VuF9orA5J7vXCiLLMMCPSh+EHWEmru/ngzX9FULaM9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2880 (0xb40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166638, serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03 Validity Not Before: Nov 2 19:13:49 2025 GMT Not After : Nov 9 19:13:49 2025 GMT Subject: CN=6907ad6d-b98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6b:aa:6c:ef:a0:9b:74:0e:fa:f1:f0:ea:10: ab:36:71:d2:6b:77:5b:19:97:bc:8f:b1:25:95:4d: f5:c1:63:30:25:db:66:a8:52:2a:a2:12:2f:c4:eb: 92:07:09:d8:df:8b:99:d6:0c:e4:ed:c5:0d:48:f8: 42:76:14:8f:be:5e:06:39:0f:4c:d7:65:cc:1e:6f: 5c:c7:f5:53:68:ec:70:54:47:53:10:b0:68:e9:cd: c4:c9:06:76:cd:40:5a:bf:5d:21:dd:38:72:5f:2e: aa:38:a8:12:64:26:1d:b5:c4:6c:f3:63:47:5f:26: 2e:eb:44:09:7f:f6:9e:4a:2e:8e:42:7c:71:a1:3a: 70:8e:2f:93:5b:14:4e:2d:32:0e:18:01:f0:bb:81: 97:8d:fa:f3:43:00:22:37:36:e1:58:b5:c6:e6:7a: 3f:94:ee:8b:0e:43:42:c2:e0:fd:29:91:3d:32:f1: 1d:da:49:ed:31:be:19:bb:02:af:c6:b2:73:c0:b2: 90:06:d6:7c:ac:fb:20:83:ef:dd:99:e9:e2:ce:5f: 6f:b9:ec:87:b2:30:ba:05:73:7c:a8:0a:f0:ff:8f: 5b:1f:38:47:54:0b:68:ef:bb:70:83:2b:2b:a6:d8: c7:2f:2d:b6:01:36:18:28:74:cf:68:99:86:88:94: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:65:DF:F4:CB:B7:AE:1E:10:19:84:F8:AB:51:CD:7A:4F:86:DF X509v3 Authority Key Identifier: keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c2:76:de:2d:24:28:e7:0c:e5:5e:13:b4:9f:1b:5b:30:81: 28:0f:6d:ef:ff:0b:5f:91:22:1a:73:cb:51:2e:94:c5:dd:2d: a8:1d:c9:be:a2:2b:55:cb:07:52:dc:3f:ee:66:67:d5:01:75: f4:74:71:34:79:5b:7e:e2:03:ab:a7:b2:17:87:56:ed:a6:b7: f4:b5:44:68:50:27:ff:cc:20:82:5a:b0:2d:1b:02:ba:86:21: f8:48:a4:4d:95:4b:a9:b1:66:6f:aa:e0:fe:61:35:89:e5:21: 2e:7a:97:8d:f6:81:f6:bf:23:0b:22:cb:7c:5e:48:32:1b:8e: 19:0b:b1:b6:90:fe:5d:1f:7a:cb:2e:d0:cb:30:32:b1:09:8d: f5:37:e3:a0:90:81:e1:e6:b8:fd:84:bc:09:4f:79:00:7b:aa: ce:ea:e8:28:e0:4a:20:21:87:8b:6c:37:f0:03:b6:f7:6e:5c: 27:12:9e:46:fa:47:26:b6:77:2a:56:86:03:51:b9:9b:bb:50: 35:b5:e0:2d:2d:fd:09:5b:b7:0e:27:78:25:37:91:b0:8c:a7: 9b:98:3e:1b:29:18:de:7f:9d:8e:87:43:18:04:82:6b:c9:d6: f0:76:2e:ef:ea:a4:23:1e:00:53:95:1e:f6:67:26:cc:df:93: a0:2b:08:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY2MzgxMTAvBgNVBAUTKDVBNkNBODZFNDBGQjZDMjY4RThGRTY1MUZGMzJFQ0U0 NEQ4NTdEMDMwHhcNMjUxMTAyMTkxMzQ5WhcNMjUxMTA5MTkxMzQ5WjAYMRYwFAYD VQQDEw02OTA3YWQ2ZC1iOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmuqbO+gm3QO+vHw6hCrNnHSa3dbGZe8j7EllU31wWMwJdtmqFIqohIvxOuS BwnY34uZ1gzk7cUNSPhCdhSPvl4GOQ9M12XMHm9cx/VTaOxwVEdTELBo6c3EyQZ2 zUBav10h3ThyXy6qOKgSZCYdtcRs82NHXyYu60QJf/aeSi6OQnxxoTpwji+TWxRO LTIOGAHwu4GXjfrzQwAiNzbhWLXG5no/lO6LDkNCwuD9KZE9MvEd2kntMb4ZuwKv xrJzwLKQBtZ8rPsgg+/dmenizl9vueyHsjC6BXN8qArw/49bHzhHVAto77twgysr ptjHLy22ATYYKHTPaJmGiJTvoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh5Zd/0 y7euHhAZhPirUc16T4bfMB8GA1UdIwQYMBaAFFpsqG5A+2wmjo/mUf8y7ORNhX0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjYzOC80MUVGQzUxRTQ4 Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JDYU9qLVpSX3pMczVFMkZm UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dteW9ia0Q3YkNhT2otWlJfekxzNUUyRmZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjYzOC80MUVGQzUxRTQ4Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JD YU9qLVpSX3pMczVFMkZmUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOwnbeLSQo5wzlXhO0nxtbMIEoD23v/wtfkSIac8tRLpTF3S2oHcm+ oitVywdS3D/uZmfVAXX0dHE0eVt+4gOrp7IXh1btprf0tURoUCf/zCCCWrAtGwK6 hiH4SKRNlUupsWZvquD+YTWJ5SEuepeN9oH2vyMLIst8XkgyG44ZC7G2kP5dH3rL LtDLMDKxCY31N+OgkIHh5rj9hLwJT3kAe6rO6ugo4EogIYeLbDfwA7b3blwnEp5G +kcmtncqVoYDUbmbu1A1teAtLf0JW7cOJ3glN5GwjKebmD4bKRjef52Oh0MYBIJr ydbwdi7v6qQjHgBTlR72ZybM35OgKwg6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:19 2025 by rpki-client