$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: 77TuM7bV0MGnwNRSpzAtSpTOITzm6SSm7pCZKiyMkf8= Subject key identifier: BC:70:79:80:CA:18:7D:5A:DD:47:B1:78:B3:77:5A:82:8C:42:9C:28 Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 01C2 Signing time: Mon 03 Nov 2025 02:57:37 +0000 Manifest this update: Mon 03 Nov 2025 02:57:37 +0000 Manifest next update: Mon 10 Nov 2025 02:57:37 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: sOZue+qFl457pyn58YgFom8uOHYeWdzI0AwFuBhSfUw=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: Nov 3 02:57:37 2025 GMT Not After : Nov 10 02:57:37 2025 GMT Subject: CN=69081a21-b38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:34:7e:8a:49:5c:17:32:81:8b:6f:10:3c: 69:9b:86:b0:0e:b0:9e:0c:05:9f:46:df:42:fc:12: 4a:6b:bf:11:88:16:c1:e8:a4:73:f3:d6:06:c6:b1: b2:11:96:db:55:70:b2:13:32:4b:8d:de:33:15:14: b6:67:fb:c4:d5:84:7e:90:72:b2:a4:cd:fb:6a:2e: 0f:32:f1:11:54:8e:b1:22:2b:ed:a0:07:39:3a:1a: 7a:b8:57:48:9a:4d:ba:74:87:d1:81:77:c5:fd:9f: 9e:95:be:4d:4e:8e:d1:bd:b4:8e:ed:ee:41:cd:e4: 4a:74:5c:ae:4c:90:d7:07:08:69:a6:f9:5d:ac:22: 16:7e:3a:a4:2c:cf:6f:64:77:4c:5c:43:d3:c0:8d: 52:1e:cc:84:3d:1b:3b:27:d1:a3:c2:fa:b9:ba:ff: cc:c9:0d:ba:82:65:1e:46:8b:55:98:12:2c:0a:42: a4:00:4c:d4:f4:ef:a8:f5:eb:e7:83:7f:2b:5f:03: e3:1a:00:bd:cd:47:51:09:2d:e5:fd:01:36:fe:3e: 12:4f:5d:41:c9:53:40:72:9d:7e:f6:b9:e4:2e:7d: ac:41:f8:22:45:aa:09:10:10:9f:33:69:02:f2:e3: 9b:9c:0a:08:df:a7:f0:b7:02:c4:f5:8c:f2:ea:56: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:79:80:CA:18:7D:5A:DD:47:B1:78:B3:77:5A:82:8C:42:9C:28 X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:08:61:65:de:ae:96:3b:58:9c:e0:f3:46:b4:58:dd:35:48: b8:10:ab:91:a9:4a:e4:4e:1f:44:62:f4:a5:b6:39:1e:42:7a: 45:40:83:9f:6c:b4:dc:ca:9c:99:2a:cc:c9:ce:9c:64:01:e7: d3:23:80:32:6a:25:22:65:16:90:80:b0:23:0f:68:ab:9e:85: 3d:0a:bb:10:66:db:f7:c4:8b:4b:5b:fa:09:1d:c9:d5:6f:16: f4:7d:b5:a1:af:c2:a8:94:9c:5c:4b:20:aa:34:44:d2:8d:65: 8c:9d:47:79:4d:c3:a8:61:55:04:16:46:21:1c:c2:2f:fd:d6: 6c:81:64:a9:ea:ce:b8:12:fa:64:ce:bf:73:68:96:82:86:f8: e6:57:ec:69:11:79:f3:ea:bb:f2:8c:f0:25:a6:78:28:b3:56: 15:bc:33:8d:5d:9c:a6:3b:0d:43:d9:fa:1f:47:d1:8c:9e:a8: c8:6e:d5:7e:d2:9f:32:d4:2b:94:d3:11:98:42:28:b5:e3:74: 2d:07:74:2b:69:01:76:48:8e:23:fe:54:85:e0:2d:56:b8:26: 89:56:6c:96:c3:80:fd:1c:d0:06:b6:6c:a6:78:3b:75:a0:62: 2e:83:d0:90:9e:ff:82:b3:34:97:bc:e8:83:26:bd:23:49:d2: b6:a6:ac:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUxMTAzMDI1NzM3WhcNMjUxMTEwMDI1NzM3WjAYMRYwFAYD VQQDEw02OTA4MWEyMS1iMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4OI0fopJXBcygYtvEDxpm4awDrCeDAWfRt9C/BJKa78RiBbB6KRz89YGxrGy EZbbVXCyEzJLjd4zFRS2Z/vE1YR+kHKypM37ai4PMvERVI6xIivtoAc5Ohp6uFdI mk26dIfRgXfF/Z+elb5NTo7RvbSO7e5BzeRKdFyuTJDXBwhppvldrCIWfjqkLM9v ZHdMXEPTwI1SHsyEPRs7J9Gjwvq5uv/MyQ26gmUeRotVmBIsCkKkAEzU9O+o9evn g38rXwPjGgC9zUdRCS3l/QE2/j4ST11ByVNAcp1+9rnkLn2sQfgiRaoJEBCfM2kC 8uObnAoI36fwtwLE9Yzy6lbZdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxweYDK GH1a3UexeLN3WoKMQpwoMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHCGFl3q6WO1ic4PNGtFjdNUi4EKuRqUrkTh9EYvSltjkeQnpFQIOf bLTcypyZKszJzpxkAefTI4AyaiUiZRaQgLAjD2irnoU9CrsQZtv3xItLW/oJHcnV bxb0fbWhr8KolJxcSyCqNETSjWWMnUd5TcOoYVUEFkYhHMIv/dZsgWSp6s64Evpk zr9zaJaChvjmV+xpEXnz6rvyjPAlpngos1YVvDONXZymOw1D2fofR9GMnqjIbtV+ 0p8y1CuU0xGYQii143QtB3QraQF2SI4j/lSF4C1WuCaJVmyWw4D9HNAGtmymeDt1 oGIug9CQnv+CszSXvOiDJr0jSdK2pqwc -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:21 2025 by rpki-client