$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: 4LZZwzKDEccJi8X9OQ6GoNd2CbPJFtCStr2DGdh/W4U= Subject key identifier: 67:4D:1C:5B:80:81:91:F8:63:97:31:78:97:38:E3:87:1F:4A:5E:88 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 53 Signing time: Sun 19 Oct 2025 10:43:00 +0000 Manifest this update: Sun 19 Oct 2025 10:42:59 +0000 Manifest next update: Sun 26 Oct 2025 10:42:59 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: 0amiYYfN83pCLjHJviutgYTzg345EKFxwfcnnrIC9aw=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Oct 19 10:42:59 2025 GMT Not After : Oct 26 10:42:59 2025 GMT Subject: CN=68f4c0b4-995d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:b6:00:0a:e6:64:74:59:34:1a:ba:41:c3: 27:cd:2f:06:8d:b4:40:78:01:6b:78:8d:61:0a:83: 8c:4e:e4:b2:cc:e0:b6:d6:22:91:85:69:77:b9:c1: b5:3c:e8:22:ff:29:c3:62:6f:72:76:bd:0a:23:0e: 49:fb:ba:36:2a:a0:c2:22:7f:3e:34:65:d4:a1:4b: a0:00:24:46:e1:40:c0:8d:d2:57:75:43:78:ec:89: 4d:a5:af:75:46:09:21:aa:eb:1d:61:af:1b:35:71: b7:a6:c0:a8:29:6d:bd:13:20:a1:d7:3f:60:bb:3d: 4c:ac:8f:72:e8:fb:d6:33:eb:38:7b:6e:e2:a2:11: 92:57:73:22:f6:66:21:b5:f2:76:92:e7:35:41:1a: 34:4f:2c:cf:a8:ec:1e:bf:ea:6a:cc:8c:6d:67:64: 7e:bb:e3:aa:ad:23:a4:9c:a6:c5:25:69:43:06:c9: 0c:93:ab:59:e9:bf:cc:cf:d8:44:1b:90:02:18:c7: 84:fe:69:3f:17:cc:ae:32:25:ad:b6:dc:9f:01:0c: ac:c8:78:19:e6:73:4c:68:a3:c8:cc:ed:e9:21:35: 8e:ab:92:92:33:ad:c4:6b:05:86:2c:86:6f:2c:c4: ad:45:76:43:81:bf:d7:70:19:b8:79:43:67:95:65: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4D:1C:5B:80:81:91:F8:63:97:31:78:97:38:E3:87:1F:4A:5E:88 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bf:3b:32:f2:0f:4c:27:16:d0:76:db:c5:42:ca:90:b7:a5: 5e:a9:1c:e6:cd:51:69:e9:2f:af:4d:5a:24:81:07:b0:64:eb: 6b:1d:e9:2e:1f:f2:22:e6:ee:aa:63:6c:1a:a4:52:bc:83:53: 0c:13:80:dc:27:38:73:a4:40:a2:17:6d:6a:54:07:e5:9c:b0: 71:c8:80:6a:48:09:1a:f2:9c:7d:66:86:cf:cd:82:80:86:67: 6c:a2:7f:a2:02:3a:2d:13:58:e4:62:68:52:90:06:86:fd:ae: e8:91:31:ab:56:88:23:90:3d:7a:07:8c:5a:87:b1:60:1b:37: c3:87:8e:1f:3e:9a:72:9d:6c:72:18:7c:33:bb:25:17:21:6c: 85:da:08:70:6a:af:cd:e8:04:f0:e8:fa:ba:e4:c0:8a:ab:7f: 06:c0:77:54:5c:90:da:e9:4e:af:77:5e:4c:b9:9e:4e:de:8d: a3:d1:0d:5a:f9:43:48:f1:06:e0:ec:0a:98:63:20:29:7a:05: 66:1e:30:f7:1b:2b:bb:b7:77:73:41:a5:f8:4b:ea:2b:9d:fd: 2d:1b:de:74:ef:fc:aa:66:f2:a8:93:e9:de:59:2a:40:fe:25: bd:3e:9d:4c:46:58:de:92:59:b5:05:cd:80:81:f2:e2:15:f3: f9:cc:5b:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTEwMTkxMDQyNTlaFw0yNTEwMjYxMDQyNTlaMBgxFjAUBgNV BAMTDTY4ZjRjMGI0LTk5NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXqLYACuZkdFk0GrpBwyfNLwaNtEB4AWt4jWEKg4xO5LLM4LbWIpGFaXe5wbU8 6CL/KcNib3J2vQojDkn7ujYqoMIifz40ZdShS6AAJEbhQMCN0ld1Q3jsiU2lr3VG CSGq6x1hrxs1cbemwKgpbb0TIKHXP2C7PUysj3Lo+9Yz6zh7buKiEZJXcyL2ZiG1 8naS5zVBGjRPLM+o7B6/6mrMjG1nZH6746qtI6ScpsUlaUMGyQyTq1npv8zP2EQb kAIYx4T+aT8XzK4yJa223J8BDKzIeBnmc0xoo8jM7ekhNY6rkpIzrcRrBYYshm8s xK1FdkOBv9dwGbh5Q2eVZe9ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ00cW4CB kfhjlzF4lzjjhx9KXogwHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJi/OzLyD0wnFtB228VCypC3pV6pHObNUWnpL69NWiSBB7Bk62sd6S4f 8iLm7qpjbBqkUryDUwwTgNwnOHOkQKIXbWpUB+WcsHHIgGpICRrynH1mhs/NgoCG Z2yif6ICOi0TWORiaFKQBob9ruiRMatWiCOQPXoHjFqHsWAbN8OHjh8+mnKdbHIY fDO7JRchbIXaCHBqr83oBPDo+rrkwIqrfwbAd1RckNrpTq93Xky5nk7ejaPRDVr5 Q0jxBuDsCphjICl6BWYeMPcbK7u3d3NBpfhL6iud/S0b3nTv/Kpm8qiT6d5ZKkD+ Jb0+nUxGWN6SWbUFzYCB8uIV8/nMW74= -----END CERTIFICATE-----Generated at Mon Oct 20 11:18:30 2025 by rpki-client