$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: Kl4JWTLjdwLdygPBJ9/vW1aX771UWjz5ReC/0gH0KMg= Subject key identifier: E0:14:5F:D0:54:8A:A6:8D:34:CA:80:43:F2:F7:0B:A3:D5:8B:A0:D1 Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 0309 Signing time: Sun 19 Oct 2025 03:16:09 +0000 Manifest this update: Sun 19 Oct 2025 03:16:09 +0000 Manifest next update: Sun 26 Oct 2025 03:16:09 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: 5KU109Evlf3Z2R50h4Y+pHBvf9sAQDEvrEL00az7u+U=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Oct 19 03:16:09 2025 GMT Not After : Oct 26 03:16:09 2025 GMT Subject: CN=68f457f9-418c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:3f:4b:a4:53:90:a6:24:f5:f9:6c:54:09: b3:32:7f:fa:d1:08:ac:bb:9a:7f:8d:48:37:10:33: 09:4f:fc:d5:2b:5e:cc:4b:48:f1:78:0b:43:54:ed: 20:5b:3c:3e:f1:9b:94:0c:25:6a:c2:af:62:71:41: cd:7f:45:76:52:69:6d:6c:b1:95:90:ca:ff:b8:3d: fd:45:1b:fc:4f:7d:bc:0a:d8:c8:17:5d:84:49:2b: 46:6d:ff:eb:4b:7b:db:c3:87:3e:cf:b8:67:69:17: 62:76:cf:ea:71:71:5a:cc:af:84:8f:06:09:f4:cb: c2:2a:a8:b0:3e:2a:43:83:57:22:26:ab:23:4e:39: 37:15:27:89:55:50:b1:ab:be:b9:48:1f:43:75:a6: 4b:0c:ea:e3:ea:54:0e:be:41:73:e8:6e:59:b7:71: 7c:d0:d8:83:d6:97:c6:11:52:66:9a:3c:00:64:eb: 59:1a:2c:a9:17:88:e2:55:19:14:a7:86:84:ee:e0: 26:73:b5:de:7f:6f:f0:93:22:db:42:af:a5:84:e2: 16:81:6e:03:35:83:85:f4:42:54:bf:72:13:02:b7: bd:06:04:ca:0b:1c:56:30:ed:5a:71:1f:32:12:03: 96:ba:ce:70:08:33:be:d1:98:92:ac:fa:79:3f:37: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:14:5F:D0:54:8A:A6:8D:34:CA:80:43:F2:F7:0B:A3:D5:8B:A0:D1 X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:be:f1:85:25:e0:16:5b:c6:9a:c7:4d:d3:7f:56:cc:43:db: aa:4f:d2:92:9c:84:b8:5d:42:d5:65:c9:a9:02:de:17:20:8a: aa:d8:87:81:be:ba:70:0c:b2:c5:ae:8c:1e:d3:86:17:66:6d: d3:4a:4e:8a:12:7f:cc:df:db:e4:27:52:27:1f:b0:21:f9:21: e5:ee:31:ad:ca:a8:0d:92:b7:f7:95:c9:19:c9:c1:f7:27:dd: f2:fe:e3:17:28:86:77:9e:56:e3:04:8b:95:2c:b8:75:d3:56: a0:4b:4b:24:28:9c:70:d7:ad:f9:b6:59:24:e6:d8:8e:9e:32: 9e:09:24:4e:8d:61:cb:ed:1a:da:73:25:89:28:50:97:81:6c: c1:6c:e6:c2:d4:2c:b7:c4:f9:05:2d:77:c2:f6:7c:0d:2a:53: 8f:6a:4f:20:27:65:76:15:07:9a:28:d8:8b:9c:d0:e6:53:0c: 71:95:07:8f:92:f0:3a:53:b7:33:22:d0:3e:b4:ac:27:d8:a3: 04:36:38:e5:ce:52:99:fc:e8:79:66:61:53:b1:50:63:db:cb: 82:d4:5a:e2:b9:69:c8:50:da:a6:3a:ae:48:dc:bd:be:76:e0: 17:9c:68:3a:4c:f7:5c:c0:56:81:e9:93:ff:35:32:43:c4:66: da:8c:33:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUxMDE5MDMxNjA5WhcNMjUxMDI2MDMxNjA5WjAYMRYwFAYD VQQDEw02OGY0NTdmOS00MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx68/S6RTkKYk9flsVAmzMn/60Qisu5p/jUg3EDMJT/zVK17MS0jxeAtDVO0g Wzw+8ZuUDCVqwq9icUHNf0V2UmltbLGVkMr/uD39RRv8T328CtjIF12ESStGbf/r S3vbw4c+z7hnaRdids/qcXFazK+EjwYJ9MvCKqiwPipDg1ciJqsjTjk3FSeJVVCx q765SB9DdaZLDOrj6lQOvkFz6G5Zt3F80NiD1pfGEVJmmjwAZOtZGiypF4jiVRkU p4aE7uAmc7Xef2/wkyLbQq+lhOIWgW4DNYOF9EJUv3ITAre9BgTKCxxWMO1acR8y EgOWus5wCDO+0ZiSrPp5PzcHIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAUX9BU iqaNNMqAQ/L3C6PVi6DRMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXvvGFJeAWW8aax03Tf1bMQ9uqT9KSnIS4XULVZcmpAt4XIIqq2IeB vrpwDLLFrowe04YXZm3TSk6KEn/M39vkJ1InH7Ah+SHl7jGtyqgNkrf3lckZycH3 J93y/uMXKIZ3nlbjBIuVLLh101agS0skKJxw1635tlkk5tiOnjKeCSROjWHL7Rra cyWJKFCXgWzBbObC1Cy3xPkFLXfC9nwNKlOPak8gJ2V2FQeaKNiLnNDmUwxxlQeP kvA6U7czItA+tKwn2KMENjjlzlKZ/Oh5ZmFTsVBj28uC1FriuWnIUNqmOq5I3L2+ duAXnGg6TPdcwFaB6ZP/NTJDxGbajDNb -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:12 2025 by rpki-client