$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft File: wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json) Hash identifier: QZ/jMmmJolmzG7+Z03Bl3fq+T3iR/GFb/ms3bxalPzw= Subject key identifier: F8:9C:4A:2A:B6:81:E9:DA:27:FD:AC:48:EE:BD:72:31:10:45:DF:EA Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1 Certificate issuer: /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft Manifest number: 49 Signing time: Sun 19 Oct 2025 10:47:22 +0000 Manifest this update: Sun 19 Oct 2025 10:47:22 +0000 Manifest next update: Sun 26 Oct 2025 10:47:22 +0000 Files and hashes: 1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: HQ2yZUXDYZzEPiWIgQVroUZAgjZAbKLBbRvH1387lLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1 Validity Not Before: Oct 19 10:47:22 2025 GMT Not After : Oct 26 10:47:22 2025 GMT Subject: CN=68f4c1ba-393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:80:eb:fe:3e:06:2a:d1:03:4e:86:85:e7: 95:da:49:70:1d:1e:02:8c:3f:e8:34:9e:1c:73:57: e8:c5:c4:63:68:0c:9c:41:c5:24:91:a8:9a:3c:d3: 9a:79:88:10:ff:e7:44:c4:c1:1f:cc:f7:72:8d:1c: 88:ca:9c:00:6d:4f:25:ab:58:a8:10:64:e1:7d:e8: 4d:45:56:b7:c3:49:07:07:a8:0d:14:82:6d:09:54: 5d:dc:4d:32:ce:b6:d5:7f:b5:77:21:80:8c:f7:b9: 29:ab:e8:40:23:c6:d3:49:dd:ce:11:c5:12:a6:98: 98:4a:f7:e8:c8:85:18:3d:75:1e:36:31:98:b4:2f: af:ac:e5:8c:f3:b8:81:2c:84:00:56:11:74:3f:19: ae:c5:a9:d1:6d:b1:6f:b1:36:2c:f9:47:9d:74:81: f9:3e:e8:df:be:9c:f0:5f:1f:a1:ae:01:88:13:c8: 2d:ec:44:b6:9e:68:fa:95:a3:0e:1e:f4:bb:7f:8b: ef:e4:5b:c6:6b:6d:8b:d2:0c:1d:0a:b4:56:84:90: bd:f4:c9:d7:30:81:d7:d2:36:6d:93:93:a1:ae:a0: e9:35:13:ec:fe:a4:58:4d:e4:2d:45:de:d3:aa:e8: 71:8c:d2:ee:f7:6c:e7:61:0b:f2:cb:70:cd:05:e1: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:4A:2A:B6:81:E9:DA:27:FD:AC:48:EE:BD:72:31:10:45:DF:EA X509v3 Authority Key Identifier: keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0d:ce:73:c0:d5:f6:e7:1a:00:56:04:c9:b4:60:05:78:c6: cb:e1:9e:23:c8:24:ae:7a:2d:07:26:25:b2:5c:86:44:1d:ff: 05:62:50:e8:ae:b4:1b:94:6d:14:7e:d6:6d:e4:45:c8:2d:9b: 8a:cc:2e:35:a5:2a:17:64:5a:96:20:bd:dc:fb:18:0a:bb:77: ad:a1:8f:ff:b4:a9:94:2c:48:c5:6c:c1:97:2c:07:4b:06:17: 18:05:bc:3f:3b:6a:9b:ae:b4:95:be:bd:75:3d:45:70:96:a7: a4:12:51:f2:83:a3:ff:ca:70:ea:52:ca:7e:ca:79:b3:45:10: 3f:40:ab:5d:ce:0d:2e:ae:2a:e1:27:17:22:82:66:6d:bc:ba: 66:5c:e2:0f:60:16:f1:d1:8d:53:aa:d2:bf:c4:33:32:cd:01: 11:c6:34:18:a0:a3:57:2d:d8:63:7f:87:95:8f:ca:52:69:71: 06:d0:84:ab:b0:9a:d2:b1:4b:ce:f4:50:da:39:49:e1:40:7e: 96:67:8b:1f:0d:a0:75:e3:4d:b0:b3:16:af:51:a6:41:ed:df: 01:81:4d:ab:0d:93:88:6c:03:15:d2:a7:7c:2a:36:97:5f:8d: d2:6f:05:79:df:d5:68:01:09:ce:b3:23:84:87:56:0a:77:9c: 7c:54:65:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoQzBCNDY2RDk5OUI4MUJGOTVENkY5NUQ2QzEyQUIzQzlD NzVCNDJEMTAeFw0yNTEwMTkxMDQ3MjJaFw0yNTEwMjYxMDQ3MjJaMBgxFjAUBgNV BAMTDTY4ZjRjMWJhLTM5M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpI4Dr/j4GKtEDToaF55XaSXAdHgKMP+g0nhxzV+jFxGNoDJxBxSSRqJo805p5 iBD/50TEwR/M93KNHIjKnABtTyWrWKgQZOF96E1FVrfDSQcHqA0Ugm0JVF3cTTLO ttV/tXchgIz3uSmr6EAjxtNJ3c4RxRKmmJhK9+jIhRg9dR42MZi0L6+s5YzzuIEs hABWEXQ/Ga7FqdFtsW+xNiz5R510gfk+6N++nPBfH6GuAYgTyC3sRLaeaPqVow4e 9Lt/i+/kW8ZrbYvSDB0KtFaEkL30ydcwgdfSNm2Tk6GuoOk1E+z+pFhN5C1F3tOq 6HGM0u73bOdhC/LLcM0F4SjLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+JxKKraB 6don/axI7r1yMRBF3+owHwYDVR0jBBgwFoAUwLRm2Zm4G/ldb5XWwSqzycdbQtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0RFMzYzNDVDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19sZGI1WFd3U3F6eWNkYlF0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0xSbTJabTRHX2xkYjVYV3dTcXp5Y2RiUXRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0RFMzYzNDVDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19s ZGI1WFd3U3F6eWNkYlF0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABINznPA1fbnGgBWBMm0YAV4xsvhniPIJK56LQcmJbJchkQd/wViUOiu tBuUbRR+1m3kRcgtm4rMLjWlKhdkWpYgvdz7GAq7d62hj/+0qZQsSMVswZcsB0sG FxgFvD87apuutJW+vXU9RXCWp6QSUfKDo//KcOpSyn7KebNFED9Aq13ODS6uKuEn FyKCZm28umZc4g9gFvHRjVOq0r/EMzLNARHGNBigo1ct2GN/h5WPylJpcQbQhKuw mtKxS870UNo5SeFAfpZnix8NoHXjTbCzFq9RpkHt3wGBTasNk4hsAxXSp3wqNpdf jdJvBXnf1WgBCc6zI4SHVgp3nHxUZdA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:32 2025 by rpki-client