$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: NHu3AvWNt1sByZsbGF4HR87OuDA6As67dsOPmRkbZrc= Subject key identifier: A5:F9:BD:81:1A:94:C7:AF:E9:68:4B:BC:C2:6A:F4:CE:2E:A2:40:D0 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0F09 Signing time: Sat 18 Oct 2025 18:16:01 +0000 Manifest this update: Sat 18 Oct 2025 18:16:00 +0000 Manifest next update: Sat 25 Oct 2025 18:16:00 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: IWWHmap28HeHMKRLHNFco0JBRwX42x0oqgzgNB//9iI=) 2: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: MCZ4hWeiAmt9KhYesLRixKufRw6yQV6zNqKued4Xvos=) 3: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=) 4: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: VEZ7s8au88OcCIFniLaU9jr2DOkZYlGYw2X2o/OxHCE=) 5: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=) 6: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=) 7: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=) 8: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: 10DFF7xCpxy47ECiljTuKfUMmTINmM368KgsuVpPV2A=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3979 (0xf8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Oct 18 18:16:00 2025 GMT Not After : Oct 25 18:16:00 2025 GMT Subject: CN=68f3d961-d870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:57:e5:0f:29:35:ce:16:70:e5:93:f8:77: d1:45:e6:94:eb:50:ec:dc:c9:99:19:e8:74:c3:49: cf:a6:c8:90:72:18:a9:77:e8:2c:55:fb:f0:47:0b: 21:6f:97:20:20:39:fe:d4:78:de:54:de:b4:78:15: 94:d0:80:f8:27:4f:60:68:68:a6:99:1a:64:ee:77: f5:1e:04:d3:66:9e:a5:85:70:91:82:d2:8e:4a:af: 69:b8:e1:f7:b0:4d:a2:b8:61:15:05:de:44:2a:a5: 30:47:fe:3f:0e:11:26:78:98:f0:15:c4:f8:7b:e8: 24:21:5d:a3:63:05:4a:8c:fe:72:0f:9b:9f:57:91: fb:57:0a:9e:2d:a5:b2:c2:47:48:8d:97:86:13:49: c6:d6:47:08:32:ea:e1:75:3a:12:43:55:db:34:10: 0c:64:67:ed:d3:22:a4:d1:41:cb:fa:67:5f:75:f7: 36:30:9c:a5:c2:70:c8:e8:db:1e:58:a4:35:ae:88: b6:40:0a:cd:21:00:c3:91:33:e3:2b:22:b1:40:8f: b1:f1:2d:19:b0:ab:16:99:ca:a1:83:d5:64:b7:17: f3:88:34:83:4d:1a:ce:36:01:ed:8d:23:ca:f0:29: d8:f9:f1:08:5d:aa:1f:36:24:87:bc:d5:1f:58:21: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F9:BD:81:1A:94:C7:AF:E9:68:4B:BC:C2:6A:F4:CE:2E:A2:40:D0 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1b:c5:f2:02:6d:f4:d7:c0:43:ff:0e:24:bf:8f:fb:93:d9: ef:cd:50:ba:8a:b9:56:d6:5c:f1:1b:59:e1:0a:0f:a4:7c:77: 7b:b4:03:ca:13:05:7f:5f:1b:67:dd:03:01:b0:b4:bb:77:33: c2:4c:1c:87:df:bb:6e:93:ba:c9:bb:03:9f:7f:0b:97:3f:10: 6b:ee:f0:b1:fd:f0:4f:5e:b2:52:23:7e:98:58:73:26:eb:49: e9:5e:f6:d6:3e:94:b4:86:31:15:83:f5:2e:b0:4e:df:de:7b: 3a:32:37:b3:36:73:43:33:60:5d:95:53:33:a9:28:45:46:30: de:6c:32:1d:44:71:d6:33:55:47:bb:5f:3e:ef:07:10:bd:df: 54:52:a1:9d:4b:3b:fb:ee:e7:9a:1a:01:d3:c2:54:c0:55:06: 1a:fc:b0:bf:1f:6a:ab:b8:ab:92:9a:f5:ac:2f:a9:7d:7f:7b: a9:63:25:86:b0:4b:4a:d9:48:66:14:1a:d7:e1:43:44:dc:42: ea:22:a2:04:a7:cd:fd:22:d7:bf:c7:f0:ab:1e:2a:4f:57:9e: 6b:f3:ac:d6:20:23:7b:45:d7:be:38:e8:c6:be:3c:34:35:8b: 60:4b:ae:b0:65:97:9c:72:93:ae:39:70:2d:8d:50:c9:45:c1: dc:7a:c0:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUxMDE4MTgxNjAwWhcNMjUxMDI1MTgxNjAwWjAYMRYwFAYD VQQDEw02OGYzZDk2MS1kODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulNX5Q8pNc4WcOWT+HfRReaU61Ds3MmZGeh0w0nPpsiQchipd+gsVfvwRwsh b5cgIDn+1HjeVN60eBWU0ID4J09gaGimmRpk7nf1HgTTZp6lhXCRgtKOSq9puOH3 sE2iuGEVBd5EKqUwR/4/DhEmeJjwFcT4e+gkIV2jYwVKjP5yD5ufV5H7VwqeLaWy wkdIjZeGE0nG1kcIMurhdToSQ1XbNBAMZGft0yKk0UHL+mdfdfc2MJylwnDI6Nse WKQ1roi2QArNIQDDkTPjKyKxQI+x8S0ZsKsWmcqhg9VktxfziDSDTRrONgHtjSPK 8CnY+fEIXaofNiSHvNUfWCEw8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX5vYEa lMev6WhLvMJq9M4uokDQMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGG8XyAm3018BD/w4kv4/7k9nvzVC6irlW1lzxG1nhCg+kfHd7tAPK EwV/Xxtn3QMBsLS7dzPCTByH37tuk7rJuwOffwuXPxBr7vCx/fBPXrJSI36YWHMm 60npXvbWPpS0hjEVg/UusE7f3ns6MjezNnNDM2BdlVMzqShFRjDebDIdRHHWM1VH u18+7wcQvd9UUqGdSzv77ueaGgHTwlTAVQYa/LC/H2qruKuSmvWsL6l9f3upYyWG sEtK2UhmFBrX4UNE3ELqIqIEp839Ite/x/CrHipPV55r86zWICN7Rde+OOjGvjw0 NYtgS66wZZeccpOuOXAtjVDJRcHcesB+ -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:09 2025 by rpki-client