$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft File: wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json) Hash identifier: OzNQsjUumtYGRGIs7WxUKV0stbZ8Wa4lLJNxuKegPA4= Subject key identifier: BB:D6:A6:A2:CA:86:E4:2D:20:86:34:D1:D1:E6:86:69:85:D3:2C:D1 Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A Certificate issuer: /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft Manifest number: 01B4 Signing time: Wed 05 Nov 2025 03:15:44 +0000 Manifest this update: Wed 05 Nov 2025 03:15:44 +0000 Manifest next update: Wed 12 Nov 2025 03:15:44 +0000 Files and hashes: 1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: w2NUFYUM3QVIykGzxceKznh0ljqDTD0hGp9Z9lcmMKE=) 2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: coDJ25CP62J5iPaE/zCXs0A10y/EaRgWhlToPaB3W0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FED9, serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Validity Not Before: Nov 5 03:15:44 2025 GMT Not After : Nov 12 03:15:44 2025 GMT Subject: CN=690ac160-c24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:58:46:47:99:db:14:41:0d:eb:45:bd:99: 5f:e4:2e:dc:f5:ab:9f:17:1b:4b:b2:83:51:34:71: 03:20:2e:23:e0:bb:18:ef:cd:32:c4:67:4e:27:18: f9:1d:a2:2c:85:ce:00:8c:94:e7:17:6c:ae:b7:24: ab:2a:7b:91:1f:74:a9:23:c5:59:a6:d0:3c:fa:11: f7:3f:1e:9f:3d:f1:46:9e:02:cb:a2:42:2a:a0:8a: 31:8c:a2:ce:31:94:e9:16:e7:88:3b:db:24:af:fb: e3:18:ce:88:dd:23:a9:9d:e2:17:83:11:49:d0:81: 3a:ce:81:2a:9e:21:cb:c9:01:f3:85:f8:d6:ee:77: b1:52:75:84:16:26:d5:d3:c3:32:26:8f:76:c7:88: b4:6f:6c:53:50:2d:12:66:99:d5:43:37:59:31:fc: 5e:e8:61:29:ab:66:7b:9a:91:bc:5c:b6:7b:9f:80: 3c:c9:87:9f:26:c0:01:82:09:34:ae:ad:8f:a2:f6: 05:d5:14:9b:cc:e3:61:08:ea:89:6c:12:0f:de:5d: d5:02:01:62:a7:87:2d:5c:8f:16:2e:de:a4:4f:a0: 5b:5d:c6:a7:78:3f:b4:aa:f6:74:19:49:b8:22:23: 4f:51:45:e5:a2:5a:24:6a:92:62:91:e5:0a:18:fc: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D6:A6:A2:CA:86:E4:2D:20:86:34:D1:D1:E6:86:69:85:D3:2C:D1 X509v3 Authority Key Identifier: keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:31:a0:df:56:1d:e4:e2:d5:b8:be:40:f3:da:3a:66:68:ee: 9d:1e:f3:29:03:f2:a8:5d:c2:40:4c:48:a3:5a:84:bb:38:a5: 56:60:89:ed:94:c2:e2:99:a7:1c:d9:4a:00:7c:4d:a2:e3:5e: 6b:d0:fe:38:b7:7b:18:5f:c8:97:fe:f4:1c:27:93:88:3e:51: fb:b1:d6:7b:a4:1a:f2:7b:c3:8a:fc:c3:93:29:48:5e:82:f4: e9:2f:be:45:eb:d1:b7:f5:a7:16:9e:6a:96:fd:b6:b3:e3:d5: dc:69:ff:24:86:a2:9a:99:4a:1c:cf:7a:9c:cf:94:25:0f:48: e4:2e:e6:4f:90:f3:73:db:58:6f:2a:5b:65:b6:4f:1d:6e:8d: 9f:8c:cc:49:91:db:29:c4:28:5e:ad:7e:38:76:75:10:c2:57: 6c:1f:f0:34:e3:5b:92:17:1e:12:ac:01:07:05:ec:35:57:93: 31:96:99:17:09:e7:9e:d3:01:2b:3f:4d:29:9a:f8:3c:73:98: 55:63:c1:d3:21:2c:5b:89:bc:58:43:92:03:3e:68:06:06:39: 3d:b9:47:a3:71:02:b9:a8:2c:cb:a0:ed:56:56:51:36:2a:d1: 7e:e8:cc:33:23:38:47:ba:53:32:7f:b4:0d:ad:d8:3c:e9:24: 12:99:62:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky ODg4QTQ5NUEwHhcNMjUxMTA1MDMxNTQ0WhcNMjUxMTEyMDMxNTQ0WjAYMRYwFAYD VQQDEw02OTBhYzE2MC1jMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ptYRkeZ2xRBDetFvZlf5C7c9aufFxtLsoNRNHEDIC4j4LsY780yxGdOJxj5 HaIshc4AjJTnF2yutySrKnuRH3SpI8VZptA8+hH3Px6fPfFGngLLokIqoIoxjKLO MZTpFueIO9skr/vjGM6I3SOpneIXgxFJ0IE6zoEqniHLyQHzhfjW7nexUnWEFibV 08MyJo92x4i0b2xTUC0SZpnVQzdZMfxe6GEpq2Z7mpG8XLZ7n4A8yYefJsABggk0 rq2PovYF1RSbzONhCOqJbBIP3l3VAgFip4ctXI8WLt6kT6BbXcaneD+0qvZ0GUm4 IiNPUUXlolokapJikeUKGPxX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvWpqLK huQtIIY00dHmhmmF0yzRMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS QThXc1YxYjVkbGtvaUtTVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzMaDfVh3k4tW4vkDz2jpmaO6dHvMpA/KoXcJATEijWoS7OKVWYInt lMLimacc2UoAfE2i415r0P44t3sYX8iX/vQcJ5OIPlH7sdZ7pBrye8OK/MOTKUhe gvTpL75F69G39acWnmqW/baz49Xcaf8khqKamUocz3qcz5QlD0jkLuZPkPNz21hv Kltltk8dbo2fjMxJkdspxCherX44dnUQwldsH/A041uSFx4SrAEHBew1V5MxlpkX Ceee0wErP00pmvg8c5hVY8HTISxbibxYQ5IDPmgGBjk9uUejcQK5qCzLoO1WVlE2 KtF+6MwzIzhHulMyf7QNrdg86SQSmWIb -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:38 2025 by rpki-client