$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: nA5g7iFXD36H2GV1WYU9khXVgHCbF0Wz0ftERi2cTbU= Subject key identifier: ED:64:7B:70:F7:5F:5D:17:3C:88:02:FF:A4:49:7E:EE:9B:92:39:33 Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0490 Signing time: Sun 19 Oct 2025 01:50:19 +0000 Manifest this update: Sun 19 Oct 2025 01:50:19 +0000 Manifest next update: Sun 26 Oct 2025 01:50:19 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: R9Fz9dF1n5fOTg8H2Vly3ZmDTHRrd4wmEqGGesJJxm0=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Oct 19 01:50:19 2025 GMT Not After : Oct 26 01:50:19 2025 GMT Subject: CN=68f443db-cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:8a:98:8b:f3:4b:7b:3c:84:60:d3:e6:6e: 6f:28:c1:11:a4:5f:b8:63:28:90:e3:17:a1:41:f8: 71:20:63:02:44:f3:51:54:6f:8e:c0:1f:b7:e9:0b: e5:bf:d6:91:bc:d4:41:2c:3b:3b:4a:0f:28:66:31: 97:86:55:65:68:34:e3:65:99:e7:6f:82:74:42:d4: 95:b3:1a:39:8f:d7:64:2e:9d:aa:7e:62:5a:21:9a: 89:4c:d1:48:89:06:dd:3b:ca:6e:75:58:8f:5d:38: 07:1a:9e:48:2f:ef:59:4e:3e:a3:18:5f:16:42:8a: 97:92:ee:7f:0b:60:05:71:6f:5b:12:8a:5f:a2:5f: 9c:61:91:5c:7f:01:ec:d7:8c:2f:70:ad:9b:6a:4d: dc:bc:91:54:83:ca:82:ff:10:5e:89:48:6d:13:21: f3:62:07:3f:2e:87:01:59:41:88:08:c5:74:9e:72: ca:2a:b6:27:ac:43:10:5e:0a:df:bc:25:3e:7a:ae: 72:04:70:eb:d4:a6:c1:8d:ec:1a:34:63:a8:5a:ab: 15:8b:a9:58:1d:f2:29:a6:13:41:6c:ec:fe:3e:37: 63:55:b4:8d:c2:14:99:7a:ed:cc:e8:7a:0d:ab:7d: 84:c1:c5:b8:de:77:94:a7:90:e3:dc:5f:4b:9f:1e: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:64:7B:70:F7:5F:5D:17:3C:88:02:FF:A4:49:7E:EE:9B:92:39:33 X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:27:a7:7f:11:00:c0:b6:f3:f7:8d:a1:a2:5b:b6:90:42: e6:85:6d:96:03:23:cb:61:97:5a:29:03:ae:d9:90:4e:62:7e: f2:dc:d4:29:a6:0f:8c:d2:09:f4:49:49:24:ed:b3:99:9b:9d: 6b:62:98:29:89:57:1d:86:38:1b:41:ce:fa:7f:95:16:14:08: 85:c6:ad:a3:78:3a:1d:68:e0:fe:06:d7:16:90:3c:c7:fa:8d: a7:48:56:7c:fc:ab:fb:c5:7e:49:d3:22:00:5e:98:23:98:ef: f9:07:28:7b:8a:aa:55:a1:3f:fe:1f:9e:9d:5f:2f:32:39:e7: 26:1d:1f:27:33:08:25:5b:c9:52:a6:2b:84:45:33:a8:60:4e: e0:78:5c:0e:c6:81:92:39:d5:da:d5:01:51:f6:37:b2:dc:2d: f0:a7:b8:b8:56:a4:2b:86:32:30:1e:4f:19:b5:10:8f:a1:60: 31:4e:d5:bd:36:15:b0:ba:8d:3d:28:a8:7d:95:25:7f:30:aa: c6:ba:48:2e:9c:0f:72:77:07:7e:f7:75:b5:4f:bf:8a:e7:e9: 16:7c:77:51:38:e4:6e:b9:b6:dc:14:d1:98:9c:2c:1f:c9:b7: 8f:16:07:95:ac:17:23:3e:af:0a:2c:a0:e4:04:14:bf:2b:15: 2c:82:fb:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUxMDE5MDE1MDE5WhcNMjUxMDI2MDE1MDE5WjAYMRYwFAYD VQQDEw02OGY0NDNkYi1jYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOuKmIvzS3s8hGDT5m5vKMERpF+4YyiQ4xehQfhxIGMCRPNRVG+OwB+36Qvl v9aRvNRBLDs7Sg8oZjGXhlVlaDTjZZnnb4J0QtSVsxo5j9dkLp2qfmJaIZqJTNFI iQbdO8pudViPXTgHGp5IL+9ZTj6jGF8WQoqXku5/C2AFcW9bEopfol+cYZFcfwHs 14wvcK2bak3cvJFUg8qC/xBeiUhtEyHzYgc/LocBWUGICMV0nnLKKrYnrEMQXgrf vCU+eq5yBHDr1KbBjewaNGOoWqsVi6lYHfIpphNBbOz+PjdjVbSNwhSZeu3M6HoN q32EwcW43neUp5Dj3F9Lnx6N9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1ke3D3 X10XPIgC/6RJfu6bkjkzMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5sienfxEAwLbz942holu2kELmhW2WAyPLYZdaKQOu2ZBOYn7y3NQp pg+M0gn0SUkk7bOZm51rYpgpiVcdhjgbQc76f5UWFAiFxq2jeDodaOD+BtcWkDzH +o2nSFZ8/Kv7xX5J0yIAXpgjmO/5Byh7iqpVoT/+H56dXy8yOecmHR8nMwglW8lS piuERTOoYE7geFwOxoGSOdXa1QFR9jey3C3wp7i4VqQrhjIwHk8ZtRCPoWAxTtW9 NhWwuo09KKh9lSV/MKrGukgunA9ydwd+93W1T7+K5+kWfHdROORuubbcFNGYnCwf ybePFgeVrBcjPq8KLKDkBBS/KxUsgvtp -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:51 2025 by rpki-client