$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft File: Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json) Hash identifier: g6TLwlGn7obwXkDleOwibb0akMXOMupAC66hojQZd8o= Subject key identifier: 36:B9:AE:51:14:03:71:02:82:1A:A1:C3:8F:7D:45:DB:D1:11:6E:65 Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB Certificate issuer: /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft Manifest number: AF Signing time: Mon 03 Nov 2025 06:06:58 +0000 Manifest this update: Mon 03 Nov 2025 06:06:57 +0000 Manifest next update: Mon 10 Nov 2025 06:06:57 +0000 Files and hashes: 1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: 44zv79DxcXaoW9vR1hhLv2ZnWj7RERJ7SEboG4cN2xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Validity Not Before: Nov 3 06:06:57 2025 GMT Not After : Nov 10 06:06:57 2025 GMT Subject: CN=69084682-d205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:de:39:34:cc:fc:ab:a5:a7:57:56:5f:76: cf:88:e9:e9:5a:8b:b0:7a:76:1e:08:64:57:ef:4f: 19:d0:f5:65:be:03:12:62:1c:16:78:bb:f1:85:b4: c8:ae:f4:5e:e8:46:a6:fb:cb:b6:e8:5c:ca:83:12: a7:97:25:59:85:91:26:ee:44:0e:8a:70:04:fc:6f: 67:17:5a:20:80:54:0e:03:47:a7:67:81:e8:9e:8e: cf:36:78:69:1d:57:64:1d:b1:97:2e:f9:f8:1c:90: fc:8b:08:7d:41:65:b9:47:0d:23:e3:36:04:b5:78: 05:04:d0:66:01:9e:73:a0:a0:14:08:0b:4a:8e:d4: 5b:64:c0:89:84:81:bd:45:06:9b:10:06:b4:81:df: ec:ec:85:26:f9:38:d2:93:84:82:2d:c6:cd:85:6c: df:3d:db:36:50:6f:48:a7:1b:ad:5b:a2:8b:c1:2a: c1:30:07:24:82:66:91:8a:b2:13:3f:e0:7e:ac:44: a3:51:ae:28:c9:c3:a4:5d:4d:86:23:29:f7:65:a3: a8:7e:cb:d8:b0:ca:4f:67:06:4a:7e:26:39:f3:fe: 96:f7:2e:0c:a3:12:f3:e8:86:d9:00:88:44:d7:36: e2:8b:f3:24:ac:65:14:bb:97:15:8d:fd:cd:bd:37: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B9:AE:51:14:03:71:02:82:1A:A1:C3:8F:7D:45:DB:D1:11:6E:65 X509v3 Authority Key Identifier: keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:04:1a:63:e4:41:47:6e:75:23:b7:fe:e8:3f:6e:fe:a8:1b: 8c:a4:9c:c9:f5:b0:a8:72:2a:56:bd:be:71:98:c7:6e:10:e2: 25:e1:5f:7a:23:84:88:d0:e7:88:bd:77:80:b0:41:e3:df:eb: bd:93:8a:64:e0:f7:03:8b:3f:ab:ca:a6:b5:23:5e:58:34:31: f5:f1:d1:cb:44:c2:3f:f6:5d:15:4d:be:fd:ea:3e:7c:be:d5: 93:b5:21:c4:cd:9b:fe:f6:39:da:83:02:fa:4c:cb:1f:c2:4c: 13:04:4b:99:3c:39:d5:97:d7:cf:2e:ef:0b:de:01:8b:8b:b5: 45:c2:45:d2:29:c6:69:2b:ee:10:17:ea:95:28:d7:86:22:fb: 7d:c0:1b:99:25:bb:f3:f9:1c:68:5a:e8:2c:ef:6e:c6:e9:20: 7c:61:45:87:bf:93:80:97:21:5d:df:ef:9d:fe:f3:60:ec:ff: 38:4b:e8:14:d1:72:be:b3:ba:31:19:54:97:94:06:88:93:9d: 22:be:79:2b:65:86:a4:ff:1a:18:50:9a:9a:50:ee:7e:5b:74: f7:25:fc:8a:9d:7f:9e:d0:3b:38:0b:8d:a5:3e:12:a3:d0:c0: 61:36:14:65:61:95:19:6f:fd:33:33:43:38:9b:1b:32:7b:c7: 1d:ea:c7:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBQzUxMTAvBgNVBAUTKDVBRUQwNUE2NDI3NjQxMDgxQUZDRTg0RjY5NzI1RUM4 NTZBMEE0RUIwHhcNMjUxMTAzMDYwNjU3WhcNMjUxMTEwMDYwNjU3WjAYMRYwFAYD VQQDEw02OTA4NDY4Mi1kMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vbeOTTM/Kulp1dWX3bPiOnpWouwenYeCGRX708Z0PVlvgMSYhwWeLvxhbTI rvRe6Eam+8u26FzKgxKnlyVZhZEm7kQOinAE/G9nF1oggFQOA0enZ4Hono7PNnhp HVdkHbGXLvn4HJD8iwh9QWW5Rw0j4zYEtXgFBNBmAZ5zoKAUCAtKjtRbZMCJhIG9 RQabEAa0gd/s7IUm+TjSk4SCLcbNhWzfPds2UG9IpxutW6KLwSrBMAckgmaRirIT P+B+rESjUa4oycOkXU2GIyn3ZaOofsvYsMpPZwZKfiY58/6W9y4MoxLz6IbZAIhE 1zbii/MkrGUUu5cVjf3NvTf2LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDa5rlEU A3ECghqhw499RdvREW5lMB8GA1UdIwQYMBaAFFrtBaZCdkEIGvzoT2lyXshWoKTr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REFDNS9DQjlBRDVGNkFC REExMUVGQTFDMTRFNzZDNEY5QUUwMi9XdTBGcGtKMlFRZ2FfT2hQYVhKZXlGYWdw T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1MEZwa0oyUVFnYV9PaFBhWEpleUZhZ3BPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REFDNS9DQjlBRDVGNkFCREExMUVGQTFDMTRFNzZDNEY5QUUwMi9XdTBGcGtKMlFR Z2FfT2hQYVhKZXlGYWdwT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvBBpj5EFHbnUjt/7oP27+qBuMpJzJ9bCocipWvb5xmMduEOIl4V96 I4SI0OeIvXeAsEHj3+u9k4pk4PcDiz+ryqa1I15YNDH18dHLRMI/9l0VTb796j58 vtWTtSHEzZv+9jnagwL6TMsfwkwTBEuZPDnVl9fPLu8L3gGLi7VFwkXSKcZpK+4Q F+qVKNeGIvt9wBuZJbvz+RxoWugs727G6SB8YUWHv5OAlyFd3++d/vNg7P84S+gU 0XK+s7oxGVSXlAaIk50ivnkrZYak/xoYUJqaUO5+W3T3JfyKnX+e0Ds4C42lPhKj 0MBhNhRlYZUZb/0zM0M4mxsye8cd6sfN -----END CERTIFICATE-----Generated at Tue Nov 4 08:32:01 2025 by rpki-client