$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft File: WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json) Hash identifier: tTX99g6WnfGzaAXXO9/0AN8Dzyn0akn6ZfaGFxafLKU= Subject key identifier: 80:7F:A0:F6:40:E0:B7:B7:4F:CB:D5:D1:A9:B5:A4:C7:BF:2F:48:B5 Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C Certificate issuer: /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft Manifest number: 34D1 Signing time: Sun 02 Nov 2025 15:04:45 +0000 Manifest this update: Sun 02 Nov 2025 15:04:45 +0000 Manifest next update: Sun 09 Nov 2025 15:04:45 +0000 Files and hashes: 1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: hJ7BsQC47f5+Fnj7K1KsVyhZ+9dc1+EsUTkKY2Eg7g8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Validity Not Before: Nov 2 15:04:45 2025 GMT Not After : Nov 9 15:04:45 2025 GMT Subject: CN=6907730d-13ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:95:cf:2b:99:09:e1:c9:71:a5:9f:39:24: 70:17:66:68:18:c6:43:41:98:e8:fe:e0:25:94:78: 4c:31:ab:61:b8:f0:97:c0:b1:19:9c:fb:7d:82:63: 70:aa:23:8d:c4:1d:2c:f5:57:04:76:b6:4f:8d:fd: 06:c8:96:15:e3:b2:d5:51:39:8b:90:4a:c6:97:77: a8:44:d0:4d:83:97:33:7e:da:d5:ed:11:92:dd:92: e5:60:a4:05:2d:51:d5:23:24:fc:62:40:96:ee:fd: 8e:f4:bb:b6:e6:2a:57:58:b0:0f:a7:f9:d4:05:21: c9:c5:1a:8f:ad:f1:ba:8a:45:23:69:c9:df:a8:68: 7a:95:54:29:72:8f:85:ab:46:86:95:49:89:7c:f9: ca:2f:46:63:87:4d:6d:01:9d:00:86:79:2b:8c:9b: 23:a9:d7:8b:8f:74:fe:23:f2:41:a1:6e:0e:19:8c: 2c:7a:7b:a6:d4:67:88:24:41:29:02:5d:ed:a3:5f: 34:17:19:24:68:ae:73:55:d1:6d:e4:f6:ed:89:d7: ee:ec:3b:e2:61:21:c0:88:6b:25:68:04:41:b3:cb: 65:a5:54:62:f5:74:6c:a5:64:d5:2b:95:f6:59:d5: 81:7d:8d:43:d3:fc:64:d3:ff:97:05:71:20:99:f0: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:A0:F6:40:E0:B7:B7:4F:CB:D5:D1:A9:B5:A4:C7:BF:2F:48:B5 X509v3 Authority Key Identifier: keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:5e:8c:6f:9c:6a:3e:56:f7:6a:f4:88:2c:df:6d:39:d4:c4: 84:14:8b:d4:38:78:98:e2:fb:c0:97:31:25:89:d2:a4:e0:8e: f8:c2:50:4b:f4:80:1c:f8:bb:91:82:56:ce:ec:fc:1d:7d:5c: 65:7e:be:e8:6d:4e:ea:97:8c:c3:0e:e2:4c:7c:9a:6b:ff:dd: e0:51:28:6c:d4:4e:c9:2a:fd:1e:05:1d:e3:79:13:7c:d0:97: 24:4d:fc:f7:dc:7a:6c:2d:31:d2:55:41:50:32:83:c1:00:a5: c2:86:34:df:46:99:11:41:b8:e7:71:2d:41:31:1e:61:37:f0: c3:4b:dc:d7:90:77:06:62:0e:92:e1:a3:86:b4:34:87:07:d6: 39:9a:f1:14:a9:ac:94:ec:4a:48:c9:8c:6c:af:da:1d:2e:25: 4e:34:bc:3d:e4:44:b7:3b:2b:e0:e8:b3:73:fd:89:68:be:00: 91:85:05:ad:ba:35:7e:a0:63:cf:1b:b5:31:f2:12:ab:b2:0d: 4c:42:22:af:28:e1:00:8c:f6:e2:19:73:91:02:e2:b4:55:51: 95:a5:ac:f9:d6:8d:16:17:aa:0c:f5:71:94:88:e6:fd:24:8b: ef:8a:b6:74:8e:85:e5:31:31:41:d8:2c:30:7e:3c:06:86:c2: 42:b7:20:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYxQzYxMTAvBgNVBAUTKDU4NTcxOTg3NkMxRjlBMjBGREVCOEUwNEMzRDY5MzdB NUFDQUE1N0MwHhcNMjUxMTAyMTUwNDQ1WhcNMjUxMTA5MTUwNDQ1WjAYMRYwFAYD VQQDEw02OTA3NzMwZC0xM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iCVzyuZCeHJcaWfOSRwF2ZoGMZDQZjo/uAllHhMMathuPCXwLEZnPt9gmNw qiONxB0s9VcEdrZPjf0GyJYV47LVUTmLkErGl3eoRNBNg5czftrV7RGS3ZLlYKQF LVHVIyT8YkCW7v2O9Lu25ipXWLAPp/nUBSHJxRqPrfG6ikUjacnfqGh6lVQpco+F q0aGlUmJfPnKL0Zjh01tAZ0AhnkrjJsjqdeLj3T+I/JBoW4OGYwsenum1GeIJEEp Al3to180FxkkaK5zVdFt5Pbtidfu7DviYSHAiGslaARBs8tlpVRi9XRspWTVK5X2 WdWBfY1D0/xk0/+XBXEgmfDRwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB/oPZA 4Le3T8vV0am1pMe/L0i1MB8GA1UdIwQYMBaAFFhXGYdsH5og/euOBMPWk3payqV8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjFDNi8zN0JEQUFDQzFE QTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1pRDk2NDRFdzlhVGVscktw WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGY1poMndmbWlEOTY0NEV3OWFUZWxyS3BYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjFDNi8zN0JEQUFDQzFEQTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1p RDk2NDRFdzlhVGVscktwWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+XoxvnGo+Vvdq9Igs32051MSEFIvUOHiY4vvAlzElidKk4I74wlBL 9IAc+LuRglbO7PwdfVxlfr7obU7ql4zDDuJMfJpr/93gUShs1E7JKv0eBR3jeRN8 0JckTfz33HpsLTHSVUFQMoPBAKXChjTfRpkRQbjncS1BMR5hN/DDS9zXkHcGYg6S 4aOGtDSHB9Y5mvEUqayU7EpIyYxsr9odLiVONLw95ES3Oyvg6LNz/YlovgCRhQWt ujV+oGPPG7Ux8hKrsg1MQiKvKOEAjPbiGXORAuK0VVGVpaz51o0WF6oM9XGUiOb9 JIvvirZ0joXlMTFB2CwwfjwGhsJCtyBm -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:10 2025 by rpki-client