$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft File: wN6dhGshfHjdZIVanteaw9JxEI4.mft (raw, json) Hash identifier: ae6Yvcdi5WI6sQ/oDGpfYzH4Wuvp2vyHeRSCo97HuRM= Subject key identifier: 61:BB:A5:0B:00:0F:0A:C1:3B:4F:90:DD:A8:12:70:D1:BB:17:81:9E Authority key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E Certificate issuer: /CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft Manifest number: 02AB Signing time: Wed 05 Nov 2025 01:37:08 +0000 Manifest this update: Wed 05 Nov 2025 01:37:07 +0000 Manifest next update: Wed 12 Nov 2025 01:37:07 +0000 Files and hashes: 1: wN6dhGshfHjdZIVanteaw9JxEI4.crl (hash: 7gsCHseA5wLZ+vwOB0WJwoQ4xWQl64Iay1SGAbo/hkw=) 2: F3862312575011EDA38B8A6DC4F9AE02.roa (hash: FHhxFiwEHfrB67j1JRUhwFUs5PcyZ5zcISqei7dq5Jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC4, serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Validity Not Before: Nov 5 01:37:07 2025 GMT Not After : Nov 12 01:37:07 2025 GMT Subject: CN=690aaa44-dc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:f6:b9:f3:be:3a:4e:0d:00:65:7b:9b:be: 55:c7:74:81:0e:92:17:1c:1e:07:ba:d4:7f:8b:11: 10:e5:77:1c:1e:d3:53:92:0c:c0:04:30:0f:38:8d: 53:da:03:8b:7d:a9:5e:01:3b:54:4f:9f:57:1a:ec: 93:4e:b7:7d:e2:59:38:55:85:0d:b6:0e:69:41:71: 8e:c8:87:cb:29:eb:d8:18:e2:73:0a:65:ef:5e:91: 7b:ae:52:89:b0:4d:44:90:2a:74:01:9e:f1:8c:00: 66:61:94:67:e6:b8:0d:cf:a0:79:f5:23:c4:2d:14: 91:7b:b2:98:09:d1:3c:d4:8d:1b:81:43:ff:df:69: 68:c4:10:54:dc:9f:88:03:4c:89:bc:4d:71:c7:a3: 6e:0f:42:4f:6a:37:a4:37:35:b5:40:0c:fd:b4:ff: c7:2d:20:9d:50:f0:01:e7:5a:1a:a0:86:76:8e:dc: a6:ea:a5:23:f1:af:61:7f:e4:30:1c:02:fa:11:80: fa:2c:45:98:37:9f:d5:7c:31:11:27:86:f3:1f:47: cf:c3:32:b7:60:53:24:d3:8c:cd:8f:f6:9d:15:a4: de:55:68:11:f5:b1:f1:11:83:07:19:8b:7f:8e:7c: 5b:d0:26:9e:7a:1d:f8:c2:85:3e:88:7b:43:3e:e6: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BB:A5:0B:00:0F:0A:C1:3B:4F:90:DD:A8:12:70:D1:BB:17:81:9E X509v3 Authority Key Identifier: keyid:C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4f:ef:a1:47:3e:54:d6:29:9a:4f:da:50:8e:8c:a8:50:3d: 88:eb:9b:56:74:6c:e2:d3:8c:3b:01:2e:72:de:f8:03:82:64: 0a:0b:bb:55:cd:55:a1:db:e9:6d:7d:1d:8b:1d:79:16:14:c2: ae:28:4c:4a:c6:59:ba:61:7a:d9:c1:11:12:52:73:69:c3:bb: 6a:9d:a4:e2:a3:8f:14:c2:ff:0e:05:1d:ab:0e:5d:96:31:7f: 20:ad:98:75:ab:ed:8c:14:95:ff:7f:26:78:97:30:f5:b0:de: fd:bc:89:74:70:7c:d0:a7:ed:b7:6b:61:0c:ea:74:71:04:d3: 6a:da:e4:50:eb:3e:16:18:25:f2:15:62:b4:ae:60:89:84:87: 34:3f:d4:70:98:4d:d8:e7:b3:64:65:3d:07:5b:66:1c:d6:85: ff:35:0a:5b:2b:6f:62:9e:b3:20:03:29:df:d2:96:d6:86:e8: 89:99:c8:28:5e:91:15:3f:16:97:27:fa:03:7f:35:23:e2:66: 09:4a:cf:ad:b7:62:d5:38:8f:01:7d:49:c6:00:1b:56:09:03: d7:8d:5a:ad:c3:08:ad:60:7a:33:d5:ce:43:b1:ce:2a:25:7b: 9c:78:1a:76:6b:15:a0:ee:49:01:08:42:3e:52:5e:f7:6a:02: a2:0b:96:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzQxMTAvBgNVBAUTKEMwREU5RDg0NkIyMTdDNzhERDY0ODU1QTlFRDc5QUMz RDI3MTEwOEUwHhcNMjUxMTA1MDEzNzA3WhcNMjUxMTEyMDEzNzA3WjAYMRYwFAYD VQQDEw02OTBhYWE0NC1kYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcn2ufO+Ok4NAGV7m75Vx3SBDpIXHB4HutR/ixEQ5XccHtNTkgzABDAPOI1T 2gOLfaleATtUT59XGuyTTrd94lk4VYUNtg5pQXGOyIfLKevYGOJzCmXvXpF7rlKJ sE1EkCp0AZ7xjABmYZRn5rgNz6B59SPELRSRe7KYCdE81I0bgUP/32loxBBU3J+I A0yJvE1xx6NuD0JPajekNzW1QAz9tP/HLSCdUPAB51oaoIZ2jtym6qUj8a9hf+Qw HAL6EYD6LEWYN5/VfDERJ4bzH0fPwzK3YFMk04zNj/adFaTeVWgR9bHxEYMHGYt/ jnxb0Caeeh34woU+iHtDPuaRVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG7pQsA DwrBO0+Q3agScNG7F4GeMB8GA1UdIwQYMBaAFMDenYRrIXx43WSFWp7XmsPScRCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDNC8wQjIyQTZGODFC QUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZIamRaSVZhbnRlYXc5SnhF STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dONmRoR3NoZkhqZFpJVmFudGVhdzlKeEVJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDNC8wQjIyQTZGODFCQUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZI amRaSVZhbnRlYXc5SnhFSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoT++hRz5U1imaT9pQjoyoUD2I65tWdGzi04w7AS5y3vgDgmQKC7tV zVWh2+ltfR2LHXkWFMKuKExKxlm6YXrZwRESUnNpw7tqnaTio48Uwv8OBR2rDl2W MX8grZh1q+2MFJX/fyZ4lzD1sN79vIl0cHzQp+23a2EM6nRxBNNq2uRQ6z4WGCXy FWK0rmCJhIc0P9RwmE3Y57NkZT0HW2Yc1oX/NQpbK29inrMgAynf0pbWhuiJmcgo XpEVPxaXJ/oDfzUj4mYJSs+tt2LVOI8BfUnGABtWCQPXjVqtwwitYHoz1c5Dsc4q JXuceBp2axWg7kkBCEI+Ul73agKiC5Ya -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:10 2025 by rpki-client