$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: NFOW+tCKDx5b8hgmbRC/PEQVau5iLqI6mF98qGhU/hE= Subject key identifier: 1E:1A:0D:49:29:91:01:70:5D:67:39:03:F7:EA:75:B9:EF:8C:5E:F6 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 97 Signing time: Sun 19 Oct 2025 09:36:50 +0000 Manifest this update: Sun 19 Oct 2025 09:36:49 +0000 Manifest next update: Sun 26 Oct 2025 09:36:49 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: HgrplicSocrCBTTAJ+3HX/Zkg3LwFyGNCiwVR1moJGY=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Oct 19 09:36:49 2025 GMT Not After : Oct 26 09:36:49 2025 GMT Subject: CN=68f4b131-c2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:e8:38:65:0c:81:2d:93:5f:1b:8d:ab:9f: 2e:f1:6e:13:b1:15:0c:95:74:e6:62:e2:41:50:3a: 51:98:32:f8:42:dd:22:01:97:39:fc:d0:d7:a6:f9: 67:aa:b6:6c:e0:f5:54:ff:23:3f:5d:78:67:f3:da: 6e:5c:ec:cd:8b:5d:88:08:fe:f8:b1:04:b8:e3:ff: 36:f8:31:ab:9f:bb:b5:c1:cf:00:66:0a:f2:f1:d2: 52:f8:33:9a:ac:13:92:f4:94:95:09:51:19:41:a0: b3:91:fe:76:44:41:c2:9a:47:5f:4b:ba:62:c9:ec: f2:ac:09:07:4e:fe:e9:22:78:41:21:96:27:29:aa: 9a:bc:f5:83:3d:3d:57:e1:f4:d7:aa:d0:1b:7d:5c: 3e:2c:98:8a:ad:08:66:e9:ad:eb:95:3f:80:64:f3: 2f:a7:f3:a5:48:82:eb:47:75:e7:bc:66:95:73:a2: 7f:45:7d:9e:50:23:91:30:bf:57:e5:f8:58:35:e6: 54:10:2a:34:65:d6:a2:78:4d:96:12:6a:c4:85:cd: a7:d3:35:d7:04:ab:f0:d2:86:4f:1c:97:f3:a8:18: 97:8d:af:76:e9:b0:0a:9c:db:a1:6e:98:92:ad:1f: 9d:f0:a7:4f:1c:ac:87:57:90:aa:50:c4:10:75:ef: 0f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1A:0D:49:29:91:01:70:5D:67:39:03:F7:EA:75:B9:EF:8C:5E:F6 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:58:5d:9c:33:a0:0c:67:c1:32:10:73:6f:cd:1e:30:2d:79: 32:8a:96:9c:23:aa:9b:3f:55:9b:43:62:f8:f9:80:f3:2d:3e: 96:f7:ff:43:68:8f:16:c5:2b:89:29:54:14:1a:1c:f2:ff:b9: 7e:81:5d:e0:81:04:d7:88:59:b1:39:f6:28:54:21:cc:bc:ea: 9f:75:05:80:37:d5:d0:04:24:c8:47:e9:09:da:63:33:31:73: 9f:76:38:fe:3f:bc:89:5b:0d:4f:f2:77:ce:89:ab:47:3c:14: ec:23:b7:fb:cb:e2:33:d5:f4:74:45:c3:69:ae:55:47:9f:3c: f9:0e:01:23:32:82:44:b2:ac:5e:96:04:35:0b:c1:04:6b:21: 59:d2:6d:70:01:0a:3f:f7:e9:b8:e0:90:97:3e:69:64:96:7b: 11:48:74:d4:40:6c:d4:2a:5f:fb:b2:ab:f4:57:a9:6e:4f:35: 2a:e2:91:ba:23:b4:c3:fb:a0:78:f5:41:e0:e8:42:8a:8e:12: 0b:cf:aa:75:1a:31:3e:8c:23:75:d2:dc:41:43:51:fe:e0:2d: 4e:24:df:52:73:3d:a1:67:ff:e6:5c:0d:99:a5:1c:96:db:75: d0:bb:8e:5a:88:0b:e8:5f:03:53:68:a2:17:35:f8:4e:99:5f: 39:a9:fe:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0 NTQ0NEQ2MTUwHhcNMjUxMDE5MDkzNjQ5WhcNMjUxMDI2MDkzNjQ5WjAYMRYwFAYD VQQDEw02OGY0YjEzMS1jMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmXoOGUMgS2TXxuNq58u8W4TsRUMlXTmYuJBUDpRmDL4Qt0iAZc5/NDXpvln qrZs4PVU/yM/XXhn89puXOzNi12ICP74sQS44/82+DGrn7u1wc8AZgry8dJS+DOa rBOS9JSVCVEZQaCzkf52REHCmkdfS7piyezyrAkHTv7pInhBIZYnKaqavPWDPT1X 4fTXqtAbfVw+LJiKrQhm6a3rlT+AZPMvp/OlSILrR3XnvGaVc6J/RX2eUCORML9X 5fhYNeZUECo0ZdaieE2WEmrEhc2n0zXXBKvw0oZPHJfzqBiXja926bAKnNuhbpiS rR+d8KdPHKyHV5CqUMQQde8PBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4aDUkp kQFwXWc5A/fqdbnvjF72MB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xQUY3REY2QUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtU M2ZwY3pyQ3VRcGRGUkUxaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNWF2cM6AMZ8EyEHNvzR4wLXkyipacI6qbP1WbQ2L4+YDzLT6W9/9D aI8WxSuJKVQUGhzy/7l+gV3ggQTXiFmxOfYoVCHMvOqfdQWAN9XQBCTIR+kJ2mMz MXOfdjj+P7yJWw1P8nfOiatHPBTsI7f7y+Iz1fR0RcNprlVHnzz5DgEjMoJEsqxe lgQ1C8EEayFZ0m1wAQo/9+m44JCXPmlklnsRSHTUQGzUKl/7sqv0V6luTzUq4pG6 I7TD+6B49UHg6EKKjhILz6p1GjE+jCN10txBQ1H+4C1OJN9Scz2hZ//mXA2ZpRyW 23XQu45aiAvoXwNTaKIXNfhOmV85qf7M -----END CERTIFICATE-----Generated at Tue Oct 21 00:51:33 2025 by rpki-client