$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json) Hash identifier: ncvYKSAEabjhRzTvBI4WOJu5quh2ia+KsrKOxXH8bt0= Subject key identifier: 46:AA:1B:32:65:86:F7:29:98:C7:8A:BF:27:5A:DC:73:26:AF:9E:A2 Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft Manifest number: A7 Signing time: Sun 19 Oct 2025 09:25:55 +0000 Manifest this update: Sun 19 Oct 2025 09:25:54 +0000 Manifest next update: Sun 26 Oct 2025 09:25:54 +0000 Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 9AB3i+esAYEd+IA77bPlvfA50P5Um1oO9U0fMberjqE=) 2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Validity Not Before: Oct 19 09:25:54 2025 GMT Not After : Oct 26 09:25:54 2025 GMT Subject: CN=68f4aea3-4678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:5f:82:35:e8:c6:42:9c:b0:d9:ec:4a:95: d3:33:c6:44:18:23:5a:5d:45:44:f4:a9:c3:5f:ed: d1:af:6b:f5:7b:86:2b:72:f5:39:b0:5a:7d:cd:fa: c2:db:ed:83:c6:cf:b0:ce:62:77:f9:ff:06:73:79: 00:f9:13:82:d4:ce:97:2e:30:fd:13:f6:01:56:4a: 2c:8b:9c:df:8b:cc:dc:16:62:6a:ff:bf:22:ee:32: 53:5b:51:df:bc:2c:0b:fc:7a:96:1b:1f:22:f3:24: 3f:f1:3a:ac:15:ae:34:5a:d6:e3:db:aa:04:f6:18: fa:c5:31:18:30:f5:c8:f3:63:b8:c3:03:9e:d2:65: 2f:6c:de:97:59:75:56:ed:93:6d:62:34:fa:96:1d: 5a:23:5b:b2:6c:4a:43:7d:65:89:04:6c:72:54:9f: 02:60:d5:a1:7c:19:d4:4a:37:5b:89:f1:eb:23:34: 6f:06:3d:e4:1c:26:1c:5c:d5:7d:8c:32:05:e8:01: 03:a4:d3:43:fa:e8:66:cb:d1:ab:74:48:67:0f:84: 04:ab:46:60:43:71:0f:bc:be:53:11:d9:17:ab:7d: 68:47:95:fa:9e:77:f6:90:9f:57:9f:e2:e8:dc:8a: 26:53:fa:f7:c5:67:b2:be:9c:9a:4a:7d:a6:3e:81: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AA:1B:32:65:86:F7:29:98:C7:8A:BF:27:5A:DC:73:26:AF:9E:A2 X509v3 Authority Key Identifier: keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3e:e5:83:6a:88:6f:db:d7:0d:4c:27:49:39:25:2c:41:2a: 5f:67:61:52:1d:2b:4e:50:4b:76:29:8b:f3:22:0c:a2:77:8c: 3e:9d:40:3e:71:5d:9c:50:5a:29:ed:ca:be:06:6b:b1:d2:74: e9:08:74:f5:b0:4b:c5:ab:ba:4a:05:a8:17:37:ca:04:b1:77: e4:28:51:9d:8a:07:5a:fe:1b:22:33:28:e3:22:ab:e9:90:00: e0:05:7a:ae:b5:b2:c4:e6:83:5c:2c:91:44:d5:b4:ae:56:86: 07:f3:01:74:8c:b4:d6:b8:ac:a4:e2:50:de:3a:8b:91:45:a5: e0:6d:90:57:50:80:00:2f:43:91:5e:a7:fc:6b:97:42:45:36: 84:19:0b:bb:51:c9:63:7a:f6:f0:94:de:20:49:c0:4c:81:f9: 5b:6b:db:f2:1b:f4:8b:05:ea:74:d3:19:4d:7a:bb:b0:c7:1a: 9d:57:5e:8e:ec:33:22:83:6b:94:e0:37:a3:0e:31:a2:ae:01: 28:ba:dd:7b:2b:db:b0:d5:e9:04:8a:ce:b9:7d:d7:20:81:ec: c3:b4:f7:67:32:6a:8f:16:ce:c1:e1:19:a8:0b:0e:f3:c4:ae: 9e:d3:95:4f:c9:7d:0f:be:9b:ca:20:1d:be:38:10:1f:5c:51: 1c:66:a2:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzQTIxMTAvBgNVBAUTKEMyM0RGQzI2OTczOTQxOEZBNTc5MjFGOEQyOTA1QkEx Njc0MkZDNEQwHhcNMjUxMDE5MDkyNTU0WhcNMjUxMDI2MDkyNTU0WjAYMRYwFAYD VQQDEw02OGY0YWVhMy00Njc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33NfgjXoxkKcsNnsSpXTM8ZEGCNaXUVE9KnDX+3Rr2v1e4YrcvU5sFp9zfrC 2+2Dxs+wzmJ3+f8Gc3kA+ROC1M6XLjD9E/YBVkosi5zfi8zcFmJq/78i7jJTW1Hf vCwL/HqWGx8i8yQ/8TqsFa40Wtbj26oE9hj6xTEYMPXI82O4wwOe0mUvbN6XWXVW 7ZNtYjT6lh1aI1uybEpDfWWJBGxyVJ8CYNWhfBnUSjdbifHrIzRvBj3kHCYcXNV9 jDIF6AEDpNND+uhmy9GrdEhnD4QEq0ZgQ3EPvL5TEdkXq31oR5X6nnf2kJ9Xn+Lo 3IomU/r3xWeyvpyaSn2mPoHY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaqGzJl hvcpmMeKvyda3HMmr56iMB8GA1UdIwQYMBaAFMI9/CaXOUGPpXkh+NKQW6FnQvxN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjNBMi81Rjg0NUNFQUFF NDkxMUVGOUIyOTUyMzlDNEY5QUUwMi93ajM4SnBjNVFZLWxlU0g0MHBCYm9XZENf RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19FMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjNBMi81Rjg0NUNFQUFFNDkxMUVGOUIyOTUyMzlDNEY5QUUwMi93ajM4SnBjNVFZ LWxlU0g0MHBCYm9XZENfRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPuWDaohv29cNTCdJOSUsQSpfZ2FSHStOUEt2KYvzIgyid4w+nUA+ cV2cUFop7cq+Bmux0nTpCHT1sEvFq7pKBagXN8oEsXfkKFGdigda/hsiMyjjIqvp kADgBXqutbLE5oNcLJFE1bSuVoYH8wF0jLTWuKyk4lDeOouRRaXgbZBXUIAAL0OR Xqf8a5dCRTaEGQu7UcljevbwlN4gScBMgflba9vyG/SLBep00xlNeruwxxqdV16O 7DMig2uU4DejDjGirgEout17K9uw1ekEis65fdcggezDtPdnMmqPFs7B4RmoCw7z xK6e05VPyX0PvpvKIB2+OBAfXFEcZqJ3 -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:33 2025 by rpki-client