$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft File: WUvRQ79yOI2ipctku8ORCIj2TcU.mft (raw, json) Hash identifier: Q+1WhBSsDe53OZl47XvGxoPbIFTDJtylzKbiUyV5XPc= Subject key identifier: 3A:05:7F:D2:87:0C:E2:52:AE:CA:AC:95:73:87:1B:39:5B:E8:6B:58 Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft Manifest number: E9 Signing time: Mon 03 Nov 2025 05:20:39 +0000 Manifest this update: Mon 03 Nov 2025 05:20:39 +0000 Manifest next update: Mon 10 Nov 2025 05:20:39 +0000 Files and hashes: 1: WUvRQ79yOI2ipctku8ORCIj2TcU.crl (hash: mfnulTUFYMtUm5P9xRtHcHorogwHKxzebR1vikd4De8=) 2: ACDAB45E592011EF976B8A1BC4F9AE02.roa (hash: 7CSmGMxiJ/eyVM8Zl9g1/yXgrxIsImTrO2e6GsEs7/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A53A, serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Validity Not Before: Nov 3 05:20:39 2025 GMT Not After : Nov 10 05:20:39 2025 GMT Subject: CN=69083ba7-9187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:83:3b:54:a6:9a:d8:9a:24:56:33:53:b6: 4f:a3:71:1c:55:88:98:cb:23:8e:15:53:9f:1d:6d: 1e:98:51:e0:fb:65:c6:c5:12:f3:01:79:c7:f7:44: 00:36:d1:e8:19:8b:51:b2:8d:78:b6:66:b0:e9:67: 3f:80:cd:5b:af:a3:51:d4:02:c3:04:ae:82:41:37: 9b:f1:fb:26:b6:fb:ca:f4:1f:df:be:82:c9:38:3a: aa:26:eb:f3:9f:ec:45:b4:d3:4c:54:fd:3e:f0:a9: 12:2a:4d:83:90:83:5b:97:f8:b0:0c:a3:89:98:c3: f9:52:94:25:03:e2:84:67:63:2e:9d:33:ed:2a:75: e3:95:43:ce:b1:50:02:2b:8b:cd:4e:7d:e2:8e:c9: 11:14:9b:7a:95:47:1c:36:08:56:52:44:f8:a3:8b: 2f:2e:d5:5f:63:be:36:c9:ed:b2:92:e2:eb:29:81: e6:2a:c7:b0:21:33:87:9c:58:94:5c:79:dd:e2:6a: 9f:eb:d1:3a:5e:81:a3:ad:1b:ee:1e:25:1d:ef:2d: a4:08:03:e1:14:3f:3b:99:2b:65:43:3e:62:48:19: 54:ac:f3:26:4d:32:b3:72:d3:e2:d2:57:84:29:64: b5:a4:04:c7:8d:44:55:48:ba:91:68:38:14:7a:eb: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:7F:D2:87:0C:E2:52:AE:CA:AC:95:73:87:1B:39:5B:E8:6B:58 X509v3 Authority Key Identifier: keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:23:2d:21:73:cb:fe:db:8a:cb:84:4f:84:b4:38:3d:e3:47: 5c:18:da:8c:23:08:25:16:0c:11:02:56:10:3d:c7:e6:b5:2a: 32:34:83:af:e8:ff:8b:33:f8:90:82:1b:c5:06:35:06:89:43: 59:e1:3c:9a:09:2b:d9:23:43:6b:9c:96:b3:26:bf:1d:aa:53: e9:80:65:b1:f3:6c:85:46:fd:ae:98:6b:b7:ae:a7:14:37:ae: fc:96:63:b8:65:a8:ff:7c:71:3f:35:8e:f7:2e:fb:46:90:cf: 00:aa:4d:ee:5e:79:cb:01:97:d8:5e:8a:fa:e7:e7:76:bb:45: c5:b5:44:5f:c8:80:cb:b1:c6:3f:3c:4e:0b:6d:2f:b3:11:1f: 7f:65:5b:ad:49:f0:34:29:19:02:15:c4:e8:9e:21:6d:09:35: 52:34:c8:a0:3e:a8:b1:44:75:72:28:24:2d:ef:31:8c:35:c6: 44:6f:6f:3f:e1:2a:28:b5:fc:af:d4:4b:de:55:4f:3e:5a:e8: f3:d6:0c:6f:52:3e:ee:18:75:a2:06:2f:e8:7e:d4:43:ff:db: e3:2a:c1:b4:06:62:44:a7:6f:c6:34:0b:e3:73:fe:28:95:57: df:84:e6:18:37:f6:c7:db:cc:7b:75:91:e3:cf:6f:18:0c:a2: bd:5d:df:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E1M0ExMTAvBgNVBAUTKDU5NEJEMTQzQkY3MjM4OERBMkE1Q0I2NEJCQzM5MTA4 ODhGNjREQzUwHhcNMjUxMTAzMDUyMDM5WhcNMjUxMTEwMDUyMDM5WjAYMRYwFAYD VQQDEw02OTA4M2JhNy05MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGWDO1SmmtiaJFYzU7ZPo3EcVYiYyyOOFVOfHW0emFHg+2XGxRLzAXnH90QA NtHoGYtRso14tmaw6Wc/gM1br6NR1ALDBK6CQTeb8fsmtvvK9B/fvoLJODqqJuvz n+xFtNNMVP0+8KkSKk2DkINbl/iwDKOJmMP5UpQlA+KEZ2MunTPtKnXjlUPOsVAC K4vNTn3ijskRFJt6lUccNghWUkT4o4svLtVfY742ye2ykuLrKYHmKsewITOHnFiU XHnd4mqf69E6XoGjrRvuHiUd7y2kCAPhFD87mStlQz5iSBlUrPMmTTKzctPi0leE KWS1pATHjURVSLqRaDgUeuuslwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoFf9KH DOJSrsqslXOHGzlb6GtYMB8GA1UdIwQYMBaAFFlL0UO/cjiNoqXLZLvDkQiI9k3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTUzQS80RTZCQzY2QTU5 MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9XVXZSUTc5eU9JMmlwY3RrdThPUkNJajJU Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dVdlJRNzl5T0kyaXBjdGt1OE9SQ0lqMlRjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTUzQS80RTZCQzY2QTU5MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9XVXZSUTc5eU9J MmlwY3RrdThPUkNJajJUY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtIy0hc8v+24rLhE+EtDg940dcGNqMIwglFgwRAlYQPcfmtSoyNIOv 6P+LM/iQghvFBjUGiUNZ4TyaCSvZI0NrnJazJr8dqlPpgGWx82yFRv2umGu3rqcU N678lmO4Zaj/fHE/NY73LvtGkM8Aqk3uXnnLAZfYXor65+d2u0XFtURfyIDLscY/ PE4LbS+zER9/ZVutSfA0KRkCFcToniFtCTVSNMigPqixRHVyKCQt7zGMNcZEb28/ 4Sootfyv1EveVU8+Wujz1gxvUj7uGHWiBi/oftRD/9vjKsG0BmJEp2/GNAvjc/4o lVffhOYYN/bH28x7dZHjz28YDKK9Xd+8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:20 2025 by rpki-client