$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft File: w5XQGgjBWiERA86BBh4mgk9Wvdg.mft (raw, json) Hash identifier: oxymRXbXUNpUr3Y9qpLkojBTbpFmRbtIDBYBdBxM2v0= Subject key identifier: 44:B1:DF:49:EA:2F:31:C3:1E:05:68:26:7C:D7:B6:5C:75:04:3D:08 Authority key identifier: C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8 Certificate issuer: /CN=A918D1BD/serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft Manifest number: 05 Signing time: Fri 17 Oct 2025 11:56:13 +0000 Manifest this update: Fri 17 Oct 2025 11:56:13 +0000 Manifest next update: Fri 24 Oct 2025 11:56:13 +0000 Files and hashes: 1: w5XQGgjBWiERA86BBh4mgk9Wvdg.crl (hash: t5lNuBsvl5OZ3vGIHm3zCln82V6iIJbenp1XqQfeMqE=) 2: 7506D296A76311F0AD88321FC4F9AE02.roa (hash: frork6Vp5nTPit2f2Krk9q4CNRaNCPR0fWvNDj+VLgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1BD, serialNumber=C395D01A08C15A211103CE81061E26824F56BDD8 Validity Not Before: Oct 17 11:56:13 2025 GMT Not After : Oct 24 11:56:13 2025 GMT Subject: CN=68f22edd-f07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:52:8a:5b:b2:2a:93:67:9a:f3:59:7b:e4: 48:cf:cf:17:46:ba:95:28:25:02:5f:e3:33:41:19: ef:3e:6e:cd:67:63:cc:82:d7:39:03:8c:bd:f2:01: d5:6e:2e:4d:64:7b:4d:42:40:84:a4:b4:67:ee:0a: 94:2a:21:16:9c:b1:1a:85:25:c9:a4:98:e7:98:15: 0c:f4:70:56:56:26:e4:45:06:57:bd:69:b6:b8:c9: 09:bc:0e:ae:54:41:e8:cf:47:da:a0:c8:5a:74:04: b5:5b:ba:8c:58:a3:b4:25:cb:27:e8:cc:4b:4b:5d: 96:8d:ce:11:1d:be:72:07:42:aa:9d:f6:f8:82:ee: 6c:0e:bd:1d:94:64:aa:e2:72:c3:c9:d9:c2:99:63: 70:fd:54:3c:4b:38:a6:31:ae:7f:34:a9:8a:3e:d1: 8a:4c:09:fb:b4:19:d3:f2:7b:1c:ae:29:b9:19:18: b8:4c:c5:22:a4:59:bc:b1:bc:78:4c:85:4f:a2:32: 4f:fc:8a:26:18:9c:52:75:0e:48:08:f4:7e:07:15: 9c:bb:43:76:10:9f:e2:64:ac:41:66:57:dc:c9:21: fb:dc:73:ef:4c:8c:d9:2c:21:06:a8:8f:72:1a:48: b6:23:98:d1:e5:4e:da:dc:e4:ae:e4:37:ee:6d:db: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B1:DF:49:EA:2F:31:C3:1E:05:68:26:7C:D7:B6:5C:75:04:3D:08 X509v3 Authority Key Identifier: keyid:C3:95:D0:1A:08:C1:5A:21:11:03:CE:81:06:1E:26:82:4F:56:BD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5XQGgjBWiERA86BBh4mgk9Wvdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1BD/A706F8B2A76211F08FDE3413C4F9AE02/w5XQGgjBWiERA86BBh4mgk9Wvdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:04:2c:97:7d:cf:85:89:6e:dd:ff:bb:0a:0c:17:d4:0a:49: a2:5b:8e:2e:e6:9d:ce:fa:b5:84:b3:5a:2e:5e:28:62:40:07: ea:0e:0c:cf:bf:1e:9f:ab:6b:4a:93:39:12:27:94:77:ed:be: e4:4f:5f:51:a8:e2:33:e2:45:cf:1a:85:8f:52:71:30:68:da: 44:94:15:ba:7d:19:d1:e8:00:fe:43:88:96:08:c0:02:07:e7: cb:76:a0:7d:4d:2a:f0:78:d0:e0:dd:9e:56:16:0a:e8:ca:16: 80:dd:33:15:5e:56:05:d3:10:58:b4:4b:b5:4e:37:62:75:b6: be:99:a9:62:fd:bd:ba:36:48:a8:3e:bb:6a:18:48:2f:e2:f7: 26:83:a6:bd:4b:0e:f4:0f:41:30:34:08:01:87:89:51:e1:43: 01:6b:43:a3:a4:71:9f:a0:df:88:52:a0:83:c8:e4:d9:c7:e3: d9:13:08:01:85:f7:b0:68:75:5b:35:dd:e3:f7:97:ef:23:e6: c2:90:ba:81:76:9d:40:ab:4d:92:27:c9:bb:0c:65:ef:27:f6: 7f:f0:7b:86:7c:4a:42:8d:0d:a4:85:74:45:7e:28:4f:0c:ba: de:bc:e0:08:50:be:91:cd:c0:af:b6:e5:c5:9e:80:7d:33:c5: 02:00:f2:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDFCRDExMC8GA1UEBRMoQzM5NUQwMUEwOEMxNUEyMTExMDNDRTgxMDYxRTI2ODI0 RjU2QkREODAeFw0yNTEwMTcxMTU2MTNaFw0yNTEwMjQxMTU2MTNaMBgxFjAUBgNV BAMTDTY4ZjIyZWRkLWYwN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH/lKKW7Iqk2ea81l75EjPzxdGupUoJQJf4zNBGe8+bs1nY8yC1zkDjL3yAdVu Lk1ke01CQISktGfuCpQqIRacsRqFJcmkmOeYFQz0cFZWJuRFBle9aba4yQm8Dq5U QejPR9qgyFp0BLVbuoxYo7QlyyfozEtLXZaNzhEdvnIHQqqd9viC7mwOvR2UZKri csPJ2cKZY3D9VDxLOKYxrn80qYo+0YpMCfu0GdPyexyuKbkZGLhMxSKkWbyxvHhM hU+iMk/8iiYYnFJ1DkgI9H4HFZy7Q3YQn+JkrEFmV9zJIfvcc+9MjNksIQaoj3Ia SLYjmNHlTtrc5K7kN+5t2wDHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURLHfSeov McMeBWgmfNe2XHUEPQgwHwYDVR0jBBgwFoAUw5XQGgjBWiERA86BBh4mgk9Wvdgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMUJEL0E3MDZGOEIyQTc2 MjExRjA4RkRFMzQxM0M0RjlBRTAyL3c1WFFHZ2pCV2lFUkE4NkJCaDRtZ2s5V3Zk Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdzVYUUdnakJXaUVSQTg2QkJoNG1nazlXdmRnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MUJEL0E3MDZGOEIyQTc2MjExRjA4RkRFMzQxM0M0RjlBRTAyL3c1WFFHZ2pCV2lF UkE4NkJCaDRtZ2s5V3ZkZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMgELJd9z4WJbt3/uwoMF9QKSaJbji7mnc76tYSzWi5eKGJAB+oODM+/ Hp+ra0qTORInlHftvuRPX1Go4jPiRc8ahY9ScTBo2kSUFbp9GdHoAP5DiJYIwAIH 58t2oH1NKvB40ODdnlYWCujKFoDdMxVeVgXTEFi0S7VON2J1tr6ZqWL9vbo2SKg+ u2oYSC/i9yaDpr1LDvQPQTA0CAGHiVHhQwFrQ6OkcZ+g34hSoIPI5NnH49kTCAGF 97BodVs13eP3l+8j5sKQuoF2nUCrTZInybsMZe8n9n/we4Z8SkKNDaSFdEV+KE8M ut684AhQvpHNwK+25cWegH0zxQIA8qg= -----END CERTIFICATE-----Generated at Sat Oct 18 23:29:06 2025 by rpki-client