$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json) Hash identifier: ktNdR7rhZgm3DAETbNGAKPCw4iwprktjIcUfVU/jE50= Subject key identifier: D2:6B:BE:2B:EB:82:ED:71:4A:05:FA:A8:F5:1C:75:E5:66:51:BC:FC Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft Manifest number: 020D Signing time: Sun 19 Oct 2025 04:41:43 +0000 Manifest this update: Sun 19 Oct 2025 04:41:42 +0000 Manifest next update: Sun 26 Oct 2025 04:41:42 +0000 Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: fKoAae7Ow1hMlRqgk+0gVtYGCc6DKhOGMN3C8FyvdZY=) 2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: IXWkWs++k8QNiBEV5gRLUUd6hmjdG0gw9M6G9nB2OC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Validity Not Before: Oct 19 04:41:42 2025 GMT Not After : Oct 26 04:41:42 2025 GMT Subject: CN=68f46c06-8c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:e8:cf:a9:a0:1e:5d:34:c4:4f:13:52:b4: 17:4d:3a:b6:1d:6a:37:22:3f:4a:97:ab:fc:85:56: ab:96:30:7c:75:17:ee:7b:de:b9:fd:71:1b:cd:4b: a5:ba:00:86:3e:2a:e8:40:dd:d0:fd:3a:43:53:1e: a0:b9:12:85:9d:49:eb:11:54:0e:1d:df:e9:53:4f: ff:19:94:48:5d:59:d7:7e:e4:f2:81:98:75:27:ba: b6:9b:da:10:25:eb:45:68:69:a6:11:4d:ac:82:1d: 31:cb:8d:ef:9a:a4:e2:af:df:a9:a2:dd:e4:49:21: 2f:d8:18:00:68:a1:6d:8c:5f:8e:cf:79:73:5b:88: 8b:2d:fd:98:1a:df:d5:d4:dd:bb:2f:5a:c6:4a:fd: 6d:97:85:57:2b:38:90:8a:b4:7c:ca:d1:b9:7a:48: 82:2c:f4:ed:d0:23:05:af:ea:68:1f:53:b1:76:3d: 10:d2:ae:8c:a2:1a:ac:4c:ad:72:ea:08:d2:49:e3: 92:78:96:1a:ab:cb:9d:9f:f0:2e:77:e9:35:aa:10: d5:a5:0e:8c:69:c7:59:60:ff:75:74:3d:8a:b3:cf: 4c:7b:c2:12:b0:52:e0:a0:08:d9:da:0b:40:b3:5a: 21:62:20:6e:13:16:9f:04:6b:12:c0:3e:da:e3:1b: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6B:BE:2B:EB:82:ED:71:4A:05:FA:A8:F5:1C:75:E5:66:51:BC:FC X509v3 Authority Key Identifier: keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:22:1d:10:b0:8a:20:7f:d2:8e:57:4a:69:05:5f:b7:3f:b5: 19:03:39:a4:15:5f:d1:6e:c7:9e:6f:b0:5d:7f:cb:11:4e:2d: d0:2a:df:90:5f:3e:fc:7d:7b:58:de:e5:54:43:be:8e:00:9e: b4:88:f3:5c:3b:de:35:bb:36:be:25:6e:7e:6b:e6:c1:92:4e: 66:2b:d3:c0:b4:47:d3:4b:d0:43:04:16:44:94:7c:cb:18:fe: 8f:c0:33:03:c0:6c:90:ee:41:cc:a3:1b:b9:fc:a0:3c:d3:a8: 7a:be:bf:0f:da:ea:6b:44:89:8c:6d:c2:0f:ff:f1:29:fa:62: a8:82:3b:db:fa:6e:ce:5d:28:10:f5:e9:37:3b:d9:9b:86:5d: 81:a3:37:3a:c5:57:5c:bf:7b:60:bc:15:c9:30:3c:a8:dd:d9: 35:53:16:1a:67:f3:3d:f2:99:be:1e:64:2d:fd:d3:4d:b9:62: bb:88:aa:09:a4:ae:e3:a4:01:4b:ea:21:a1:6a:57:de:7a:bf: 5d:db:d2:04:68:a2:17:8a:a2:10:a7:77:f1:fa:bc:f6:43:b2: 14:f2:8a:3e:f4:be:83:8a:e2:2e:c5:01:39:a4:09:9e:d1:50: b9:aa:69:e8:d4:89:3e:9f:a9:2f:a7:90:04:2c:81:24:8f:5e: b7:47:34:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2 OUM5MDAzRjQwHhcNMjUxMDE5MDQ0MTQyWhcNMjUxMDI2MDQ0MTQyWjAYMRYwFAYD VQQDEw02OGY0NmMwNi04YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsLoz6mgHl00xE8TUrQXTTq2HWo3Ij9Kl6v8hVarljB8dRfue965/XEbzUul ugCGPiroQN3Q/TpDUx6guRKFnUnrEVQOHd/pU0//GZRIXVnXfuTygZh1J7q2m9oQ JetFaGmmEU2sgh0xy43vmqTir9+pot3kSSEv2BgAaKFtjF+Oz3lzW4iLLf2YGt/V 1N27L1rGSv1tl4VXKziQirR8ytG5ekiCLPTt0CMFr+poH1Oxdj0Q0q6MohqsTK1y 6gjSSeOSeJYaq8udn/Aud+k1qhDVpQ6MacdZYP91dD2Ks89Me8ISsFLgoAjZ2gtA s1ohYiBuExafBGsSwD7a4xuoDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJrvivr gu1xSgX6qPUcdeVmUbz8MB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF cm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvIh0QsIogf9KOV0ppBV+3P7UZAzmkFV/Rbseeb7Bdf8sRTi3QKt+Q Xz78fXtY3uVUQ76OAJ60iPNcO941uza+JW5+a+bBkk5mK9PAtEfTS9BDBBZElHzL GP6PwDMDwGyQ7kHMoxu5/KA806h6vr8P2uprRImMbcIP//Ep+mKogjvb+m7OXSgQ 9ek3O9mbhl2Bozc6xVdcv3tgvBXJMDyo3dk1UxYaZ/M98pm+HmQt/dNNuWK7iKoJ pK7jpAFL6iGhalfeer9d29IEaKIXiqIQp3fx+rz2Q7IU8oo+9L6DiuIuxQE5pAme 0VC5qmno1Ik+n6kvp5AELIEkj163RzRb -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:14 2025 by rpki-client