$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: +7thWspa1VuXFzsu18O8KDz7sNttGROpXPoZUq2dyrw= Subject key identifier: 52:5B:14:03:17:B4:5F:5F:72:C8:E9:86:FE:D0:61:BC:CE:82:D0:E1 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 0337 Signing time: Mon 03 Nov 2025 01:00:52 +0000 Manifest this update: Mon 03 Nov 2025 01:00:51 +0000 Manifest next update: Mon 10 Nov 2025 01:00:51 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: sQiFy0S6U7VCoo7Qn8tu53rx1rIq4LdO/pnY8IlcW6w=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: Xrafpe77KwQvstPxSi5BewNbQ3AA268J09ld6Gi8xF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: Nov 3 01:00:51 2025 GMT Not After : Nov 10 01:00:51 2025 GMT Subject: CN=6907fec4-c4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:d7:b6:07:4b:5e:38:5c:01:6a:38:fc:da: e6:65:c3:f9:d5:e2:f3:9d:43:c8:64:6b:3f:1e:ff: b7:c7:d2:3c:cb:4a:ab:92:15:7e:25:6d:35:63:80: f2:51:88:e1:5a:cd:64:7c:38:b6:40:0f:c5:59:78: 9e:a4:06:4c:ed:d8:c6:0b:2f:03:bc:a3:15:31:0a: 61:87:75:05:58:ea:26:9c:eb:cb:d9:75:79:7b:f1: 12:38:e4:9b:47:90:60:45:e1:67:3e:4c:fa:06:0b: d9:c8:b9:41:38:fe:63:98:74:6d:82:e3:e1:c5:8d: 86:87:f2:c4:25:74:d6:56:95:ef:58:6d:6f:a7:f0: 96:c2:9b:af:12:ba:9c:ce:ce:d9:f8:99:05:a3:2d: d5:02:6a:68:99:f1:ea:12:1c:f0:e5:84:83:74:a3: 35:6c:b0:df:05:06:c0:52:1b:61:23:2c:a1:64:69: 95:cd:b8:d9:6d:92:a7:ba:83:63:8f:a7:b4:a9:7b: 40:72:ff:1b:fe:f5:12:87:bc:22:25:94:4d:1d:6d: 17:23:12:fb:48:a1:93:f8:24:bf:70:ec:b6:a9:12: f7:b1:52:7a:73:38:1e:07:75:15:12:2e:3f:41:fb: 7e:6e:22:ae:3f:3c:19:15:98:72:14:8f:96:48:51: 22:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5B:14:03:17:B4:5F:5F:72:C8:E9:86:FE:D0:61:BC:CE:82:D0:E1 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3d:3c:43:a7:0e:aa:88:1f:f8:ee:a3:7c:75:13:95:d2:83: 47:eb:a5:d4:d7:a1:28:fe:4b:18:c0:63:fe:41:f7:8e:78:a7: e0:e1:69:d2:88:fe:07:9e:79:19:58:36:27:14:35:b0:18:84: ee:d8:d1:af:20:f2:ee:16:90:33:b3:0a:41:52:39:df:be:05: 63:8c:df:11:82:1a:5d:fa:26:e3:62:ac:77:19:89:70:20:f4: d2:b8:13:d8:be:0d:47:a7:da:37:f5:e2:86:49:76:e8:7f:ca: 79:56:0b:ef:4b:23:8d:8d:42:37:68:3e:4f:3e:77:1a:2c:45: 2b:2c:90:0b:1e:23:83:4d:5e:fd:34:bb:db:17:1c:6f:ce:aa: ec:17:24:f9:b6:4d:3f:59:9e:38:15:21:4a:94:14:43:ae:8c: 16:77:70:f8:20:6d:86:22:4c:2e:b7:0a:f0:06:1b:c2:2e:5d: d7:e5:1e:cd:42:c8:8c:3b:a3:e2:f2:31:cf:09:ba:88:e0:95: 67:14:da:92:c4:0f:61:f1:9b:9d:7f:5b:b7:84:42:35:88:35: 10:37:0f:0e:3c:2d:c9:dc:b5:0e:f1:74:eb:94:1a:cf:6c:61: 91:2d:4a:97:eb:ca:01:97:7b:38:b6:cb:80:b1:ee:9a:2f:32: d5:98:cd:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUxMTAzMDEwMDUxWhcNMjUxMTEwMDEwMDUxWjAYMRYwFAYD VQQDEw02OTA3ZmVjNC1jNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPPXtgdLXjhcAWo4/NrmZcP51eLznUPIZGs/Hv+3x9I8y0qrkhV+JW01Y4Dy UYjhWs1kfDi2QA/FWXiepAZM7djGCy8DvKMVMQphh3UFWOomnOvL2XV5e/ESOOSb R5BgReFnPkz6BgvZyLlBOP5jmHRtguPhxY2Gh/LEJXTWVpXvWG1vp/CWwpuvErqc zs7Z+JkFoy3VAmpomfHqEhzw5YSDdKM1bLDfBQbAUhthIyyhZGmVzbjZbZKnuoNj j6e0qXtAcv8b/vUSh7wiJZRNHW0XIxL7SKGT+CS/cOy2qRL3sVJ6czgeB3UVEi4/ Qft+biKuPzwZFZhyFI+WSFEijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJbFAMX tF9fcsjphv7QYbzOgtDhMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASPTxDpw6qiB/47qN8dROV0oNH66XU16Eo/ksYwGP+QfeOeKfg4WnS iP4HnnkZWDYnFDWwGITu2NGvIPLuFpAzswpBUjnfvgVjjN8Rghpd+ibjYqx3GYlw IPTSuBPYvg1Hp9o39eKGSXbof8p5VgvvSyONjUI3aD5PPncaLEUrLJALHiODTV79 NLvbFxxvzqrsFyT5tk0/WZ44FSFKlBRDrowWd3D4IG2GIkwutwrwBhvCLl3X5R7N QsiMO6Pi8jHPCbqI4JVnFNqSxA9h8Zudf1u3hEI1iDUQNw8OPC3J3LUO8XTrlBrP bGGRLUqX68oBl3s4tsuAse6aLzLVmM2J -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:36 2025 by rpki-client