$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: c3JD/1f2gpESnvNYo22axj+SOULA4eEJvEzsY3AAsMo= Subject key identifier: C0:D0:67:0A:C9:09:DE:CB:CD:AF:2F:28:7F:3C:04:AB:A9:F3:F6:CA Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05DF Signing time: Sun 19 Oct 2025 00:38:32 +0000 Manifest this update: Sun 19 Oct 2025 00:38:31 +0000 Manifest next update: Sun 26 Oct 2025 00:38:31 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: ionrZut9FmMjzoTff8CYdEzaCIyuuwiPctekL9aJCxM=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Oct 19 00:38:31 2025 GMT Not After : Oct 26 00:38:31 2025 GMT Subject: CN=68f43308-6f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:74:0d:c2:60:ed:0d:66:96:32:ee:90:83: 17:aa:f6:ab:03:aa:42:48:f9:e1:9c:57:64:9a:03: 3d:e8:48:35:2f:1d:2c:bd:73:e1:82:21:e7:3d:38: f7:26:c0:4a:31:49:75:0c:d9:54:d9:29:ee:94:5c: af:56:ce:81:15:ad:ce:99:33:2c:5d:ed:5f:40:d1: a7:59:15:ec:e6:41:9a:14:51:e7:37:7f:dc:e2:75: 6f:57:db:53:df:16:32:5a:77:75:73:b3:09:a9:fa: b0:b0:9c:3f:37:05:14:60:b0:1f:f2:37:a5:95:c3: f5:d8:ff:c7:47:9f:19:59:f8:25:69:81:b7:97:23: c6:e2:c3:4e:0b:de:9a:3f:b2:6a:f4:55:97:3e:7f: f3:be:00:16:62:5b:13:30:22:d2:32:81:03:72:67: b1:52:bb:63:12:5a:47:f6:b1:1f:ae:ed:22:7e:4c: 2c:41:44:ac:8b:aa:e7:4c:42:24:7e:43:57:dd:a3: 1a:7e:74:3c:13:b7:9c:93:f6:e7:f1:72:e8:24:3b: 22:53:bf:de:58:82:09:a6:a0:60:3c:6f:f4:5c:0d: ed:e2:1a:2a:5d:12:6d:10:19:e5:50:90:b8:4b:27: 97:ce:32:92:41:f1:3c:06:73:d6:e9:bb:4e:6a:48: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D0:67:0A:C9:09:DE:CB:CD:AF:2F:28:7F:3C:04:AB:A9:F3:F6:CA X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:19:f9:d4:53:50:7f:27:76:e7:a1:27:6b:44:9a:b6:d6:a1: 4c:8b:4d:72:36:71:8e:16:b3:53:1a:12:55:d7:4e:e6:77:05: 75:95:ec:36:31:05:8b:50:3a:68:ce:70:b5:fd:dc:a2:c0:e6: 2c:91:18:9d:48:76:f2:d3:e3:0d:59:06:0a:70:38:d4:3b:bb: 48:5e:36:4e:ab:51:e0:9a:63:23:40:d5:92:7a:56:44:16:6b: f4:bf:88:7c:4b:38:52:61:87:ca:cc:43:c8:c4:7c:9a:6c:62: 74:f0:97:6c:93:e0:18:28:e1:79:4c:b4:49:2f:f0:1f:9b:6b: 6f:5d:53:90:78:ac:fc:5f:75:16:7e:fb:a9:eb:43:8e:c6:a6: 59:a2:45:7c:28:6e:2a:44:71:f2:ef:ba:c7:70:0c:09:36:9b: 19:7d:b4:70:2e:36:9b:fc:36:6a:71:da:15:c1:04:0c:d1:0f: 65:13:6f:e8:4c:8a:20:d2:d4:f6:2b:41:76:5e:b4:55:a1:f3: 02:7a:3c:ba:48:aa:38:e3:0d:13:6d:67:fb:c9:66:be:c9:fa: 60:22:f1:33:26:76:90:c1:44:0d:83:15:c6:c0:02:2e:ab:d5: a5:5f:cf:73:0c:a0:06:d7:49:32:08:12:46:2a:fe:f1:54:25: 37:0d:7b:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUxMDE5MDAzODMxWhcNMjUxMDI2MDAzODMxWjAYMRYwFAYD VQQDEw02OGY0MzMwOC02ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7F0DcJg7Q1mljLukIMXqvarA6pCSPnhnFdkmgM96Eg1Lx0svXPhgiHnPTj3 JsBKMUl1DNlU2SnulFyvVs6BFa3OmTMsXe1fQNGnWRXs5kGaFFHnN3/c4nVvV9tT 3xYyWnd1c7MJqfqwsJw/NwUUYLAf8jellcP12P/HR58ZWfglaYG3lyPG4sNOC96a P7Jq9FWXPn/zvgAWYlsTMCLSMoEDcmexUrtjElpH9rEfru0ifkwsQUSsi6rnTEIk fkNX3aMafnQ8E7eck/bn8XLoJDsiU7/eWIIJpqBgPG/0XA3t4hoqXRJtEBnlUJC4 SyeXzjKSQfE8BnPW6btOakjsuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDQZwrJ Cd7Lza8vKH88BKup8/bKMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGfnUU1B/J3bnoSdrRJq21qFMi01yNnGOFrNTGhJV107mdwV1lew2 MQWLUDpoznC1/dyiwOYskRidSHby0+MNWQYKcDjUO7tIXjZOq1HgmmMjQNWSelZE Fmv0v4h8SzhSYYfKzEPIxHyabGJ08Jdsk+AYKOF5TLRJL/Afm2tvXVOQeKz8X3UW fvup60OOxqZZokV8KG4qRHHy77rHcAwJNpsZfbRwLjab/DZqcdoVwQQM0Q9lE2/o TIog0tT2K0F2XrRVofMCejy6SKo44w0TbWf7yWa+yfpgIvEzJnaQwUQNgxXGwAIu q9WlX89zDKAG10kyCBJGKv7xVCU3DXtc -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:59 2025 by rpki-client