$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: q0MhgGyKW3TgYvKR8ky8gLl7/K7QgmK98oki+BINCBE= Subject key identifier: 8C:F3:AA:D4:53:70:BE:E9:BA:5C:C6:37:0E:55:D7:EA:FB:45:20:FF Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 05A1 Signing time: Sun 19 Oct 2025 00:49:57 +0000 Manifest this update: Sun 19 Oct 2025 00:49:56 +0000 Manifest next update: Sun 26 Oct 2025 00:49:56 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: O1wysQEeXIZ2TFbkEoHaottwR52aWmrIYDyymNWFMWA=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Oct 19 00:49:56 2025 GMT Not After : Oct 26 00:49:56 2025 GMT Subject: CN=68f435b5-5d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:fa:ba:0e:8b:14:2a:cc:a5:3a:2a:4c:3b: 16:cc:17:83:14:cf:91:79:9f:07:e8:5b:4c:28:68: ea:fc:1c:e9:13:67:eb:84:66:6d:ef:65:31:53:08: c4:ec:70:8f:55:96:c6:5b:2e:68:cb:86:fa:3d:3f: 52:5d:2a:eb:4d:95:07:c2:6a:3a:09:d9:da:e4:99: c9:60:17:33:2d:94:a4:e0:9a:3b:fa:e1:ed:a4:d3: 58:14:bf:c3:8f:95:21:fc:3b:0b:8a:f5:72:1f:8a: 4f:2d:b2:48:fe:27:e0:58:ef:23:e5:e2:df:02:b1: 93:f4:d7:e4:9e:82:20:d8:59:c7:a5:fb:f5:e1:7a: f6:78:05:91:b1:8c:45:1b:b4:23:d7:87:3d:50:3a: d2:ba:fb:57:71:95:b2:a4:3f:e3:d6:96:7c:ee:02: cf:ea:16:55:76:02:5e:91:22:42:fc:08:59:42:40: 98:7a:f7:99:a2:cd:7e:4e:1f:54:bd:9f:8a:3f:97: 85:fc:21:66:2f:4f:ed:33:f6:89:7d:2e:8b:d8:14: 8b:f6:d6:f5:e4:4d:82:b6:ee:c9:a0:b4:f9:83:5d: ba:d5:f6:c1:64:f5:60:4a:c3:a5:3e:29:58:6e:0d: 6b:28:a1:ed:ba:24:ad:33:68:6d:c2:65:bc:95:60: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F3:AA:D4:53:70:BE:E9:BA:5C:C6:37:0E:55:D7:EA:FB:45:20:FF X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:de:5a:0c:cc:89:f0:45:2f:7e:23:dd:81:0c:9e:f6:31:75: 68:f7:80:79:3d:80:34:bb:fc:62:6d:9a:69:9d:be:84:e3:65: 1c:70:0f:eb:9c:6c:61:6a:7c:51:0b:4b:7a:d6:15:28:a0:37: cf:03:f9:a6:49:30:4e:81:b8:9c:30:31:28:fb:50:83:f0:eb: 01:1c:98:9e:26:8f:83:c5:16:fa:57:ce:db:4a:15:20:1c:b6: 53:bb:74:ea:64:d8:c4:0a:e2:e3:d3:83:03:6f:f0:65:07:5a: b9:4f:05:66:6f:f3:8d:2e:f2:a2:81:1b:2b:e6:70:bc:15:26: 78:80:f4:bb:ac:38:4e:cb:b2:47:32:2b:fe:51:f7:2d:b3:00: 8c:67:83:23:82:a1:03:e2:1d:0d:94:51:bd:0b:c3:ef:3e:e8: ad:88:4b:cb:c7:92:8a:16:37:37:1b:da:92:d9:6f:d9:70:fa: 45:99:fd:e1:06:bf:f7:f1:3b:83:8b:5f:95:61:3e:f7:22:c5: 57:fa:f6:da:a7:4e:91:a4:bc:68:20:f5:3d:05:68:48:01:e7: 36:d7:07:d0:bb:54:fc:46:68:f6:54:64:a3:8f:41:9a:3b:89: ab:61:d7:95:fe:67:fd:43:57:17:df:f7:d1:1c:86:38:a3:d3: ed:05:bd:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjUxMDE5MDA0OTU2WhcNMjUxMDI2MDA0OTU2WjAYMRYwFAYD VQQDEw02OGY0MzViNS01ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOz6ug6LFCrMpToqTDsWzBeDFM+ReZ8H6FtMKGjq/BzpE2frhGZt72UxUwjE 7HCPVZbGWy5oy4b6PT9SXSrrTZUHwmo6Cdna5JnJYBczLZSk4Jo7+uHtpNNYFL/D j5Uh/DsLivVyH4pPLbJI/ifgWO8j5eLfArGT9NfknoIg2FnHpfv14Xr2eAWRsYxF G7Qj14c9UDrSuvtXcZWypD/j1pZ87gLP6hZVdgJekSJC/AhZQkCYeveZos1+Th9U vZ+KP5eF/CFmL0/tM/aJfS6L2BSL9tb15E2Ctu7JoLT5g1261fbBZPVgSsOlPilY bg1rKKHtuiStM2htwmW8lWD5OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzzqtRT cL7pulzGNw5V1+r7RSD/MB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/3loMzInwRS9+I92BDJ72MXVo94B5PYA0u/xibZppnb6E42UccA/r nGxhanxRC0t61hUooDfPA/mmSTBOgbicMDEo+1CD8OsBHJieJo+DxRb6V87bShUg HLZTu3TqZNjECuLj04MDb/BlB1q5TwVmb/ONLvKigRsr5nC8FSZ4gPS7rDhOy7JH Miv+UfctswCMZ4MjgqED4h0NlFG9C8PvPuitiEvLx5KKFjc3G9qS2W/ZcPpFmf3h Br/38TuDi1+VYT73IsVX+vbap06RpLxoIPU9BWhIAec21wfQu1T8Rmj2VGSjj0Ga O4mrYdeV/mf9Q1cX3/fRHIY4o9PtBb1g -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:19 2025 by rpki-client