$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json) Hash identifier: VD8oPXZXHy6A5BIykceyWYdPtlJQQWAJQlmD1Blv27E= Subject key identifier: 92:09:3A:35:F9:F7:59:11:A5:E4:E3:7A:6E:24:CD:C1:58:BC:35:6F Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5 Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5 Certificate serial: 0B6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft Manifest number: 0B62 Signing time: Tue 04 Nov 2025 19:12:41 +0000 Manifest this update: Tue 04 Nov 2025 19:12:40 +0000 Manifest next update: Tue 11 Nov 2025 19:12:40 +0000 Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: HUi1nO3x2E6dJHvdcp+rxTs1YDAo2KUWzL2qCUDbCQs=) 2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: cE46r29KbbkAXjWAwbBON9XRly7r0/vPAZnB5kdMO20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2922 (0xb6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5 Validity Not Before: Nov 4 19:12:40 2025 GMT Not After : Nov 11 19:12:40 2025 GMT Subject: CN=690a5028-87a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:fc:9f:ae:63:c6:0b:82:0c:3a:e2:0e:19: 86:7e:f8:60:ba:7e:27:4e:a7:3e:47:52:06:7b:8b: cd:3d:d3:79:b5:70:f4:e3:1d:62:e6:da:23:55:62: 56:9f:24:54:db:3f:7a:c5:4a:a7:3b:a6:88:c9:2e: 1c:a2:65:87:66:f4:57:ea:5e:9f:14:e1:bb:77:cc: 12:9f:3e:13:a8:12:b9:33:ea:b6:1e:65:78:91:cb: 15:9d:95:09:65:06:4e:bf:02:86:b6:c5:06:ef:3f: b9:2e:b5:8f:19:dc:fc:f1:7c:0c:c0:74:cf:62:41: d9:2a:84:86:da:6d:db:01:29:2e:1f:f5:49:72:85: 46:73:c5:e3:8c:71:aa:48:a5:78:b6:8c:77:52:0d: f0:8e:81:03:d4:fc:78:09:ee:59:cc:70:b6:2d:06: f3:44:f1:18:7a:0c:67:50:3b:93:70:37:ec:39:98: 58:23:c6:54:a6:c2:e8:37:aa:9b:4a:a9:d3:30:50: 7a:60:99:05:9c:40:a0:5a:e0:2c:39:d4:79:b6:65: 49:c5:86:94:fd:2c:f6:a6:0a:22:a3:ac:0a:23:70: ea:e8:09:4d:41:0a:89:50:49:6e:e0:75:be:12:52: b3:ed:75:60:33:a5:fd:d9:09:b7:d6:74:9c:83:f5: b6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:3A:35:F9:F7:59:11:A5:E4:E3:7A:6E:24:CD:C1:58:BC:35:6F X509v3 Authority Key Identifier: keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:06:80:9f:76:e2:af:66:2f:e2:85:cd:76:32:b3:50:79:ef: 79:88:97:03:34:90:69:cb:c2:50:7c:28:94:f2:69:10:4d:52: 38:09:ac:ce:84:cc:c3:7c:7b:34:80:07:8d:df:f6:8b:de:06: f2:4f:ae:23:b4:b5:7b:7e:11:a3:e5:9c:83:24:71:c0:0d:93: ac:d3:89:e2:f7:7a:5d:8d:43:cb:20:23:72:29:d0:ad:dc:24: 1b:3e:1f:ed:ff:32:31:9e:7d:ff:3f:bf:00:aa:1e:77:a7:24: a9:ab:2b:98:8c:ba:1f:a4:b6:fb:d5:35:34:d0:ab:d8:e1:07: 32:ad:84:98:f3:bf:e6:15:1d:8b:44:02:84:77:f1:70:3b:0f: fd:e3:9c:e4:67:77:50:dd:59:ec:af:68:a3:42:34:fc:86:55: de:1f:82:3d:5a:cb:8e:aa:db:9b:15:ae:6b:08:dc:38:e0:1d: e0:ab:db:ce:6e:b1:35:f6:56:cf:b2:a0:c3:76:1c:b2:1a:12: 08:8f:41:fb:3c:d8:3e:97:55:7d:ec:9f:f3:58:a5:3d:1f:73: d8:4f:22:98:fd:74:43:87:ef:ef:c5:76:0c:b4:a1:79:a9:c3: 52:5c:a9:7b:2f:65:91:4b:3d:96:48:f0:24:d3:e8:3d:e1:c7: 9b:7f:3d:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNTMxMTAvBgNVBAUTKEZGMEIxNTQ2RDg0QzBEOTM1NTkwNUI2Q0EyOTNFMjVC NDQwOTQ4QzUwHhcNMjUxMTA0MTkxMjQwWhcNMjUxMTExMTkxMjQwWjAYMRYwFAYD VQQDEw02OTBhNTAyOC04N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSf8n65jxguCDDriDhmGfvhgun4nTqc+R1IGe4vNPdN5tXD04x1i5tojVWJW nyRU2z96xUqnO6aIyS4comWHZvRX6l6fFOG7d8wSnz4TqBK5M+q2HmV4kcsVnZUJ ZQZOvwKGtsUG7z+5LrWPGdz88XwMwHTPYkHZKoSG2m3bASkuH/VJcoVGc8XjjHGq SKV4tox3Ug3wjoED1Px4Ce5ZzHC2LQbzRPEYegxnUDuTcDfsOZhYI8ZUpsLoN6qb SqnTMFB6YJkFnECgWuAsOdR5tmVJxYaU/Sz2pgoio6wKI3Dq6AlNQQqJUElu4HW+ ElKz7XVgM6X92Qm31nScg/W2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIJOjX5 91kRpeTjem4kzcFYvDVvMB8GA1UdIwQYMBaAFP8LFUbYTA2TVZBbbKKT4ltECUjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY1My9DRDA2MjE3NjQw RjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURaTlZrRnRzb3BQaVcwUUpT TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193c1ZSdGhNRFpOVmtGdHNvcFBpVzBRSlNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY1My9DRDA2MjE3NjQwRjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURa TlZrRnRzb3BQaVcwUUpTTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9BoCfduKvZi/ihc12MrNQee95iJcDNJBpy8JQfCiU8mkQTVI4CazO hMzDfHs0gAeN3/aL3gbyT64jtLV7fhGj5ZyDJHHADZOs04ni93pdjUPLICNyKdCt 3CQbPh/t/zIxnn3/P78Aqh53pySpqyuYjLofpLb71TU00KvY4QcyrYSY87/mFR2L RAKEd/FwOw/945zkZ3dQ3Vnsr2ijQjT8hlXeH4I9WsuOqtubFa5rCNw44B3gq9vO brE19lbPsqDDdhyyGhIIj0H7PNg+l1V97J/zWKU9H3PYTyKY/XRDh+/vxXYMtKF5 qcNSXKl7L2WRSz2WSPAk0+g94cebfz2m -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:36 2025 by rpki-client