$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: yoh8aMg86D3wNtxpIMfQ1wzmt/dOim08rCYyYgAR4do= Subject key identifier: BD:E6:0C:A8:3C:02:C3:0B:95:83:42:32:E5:D2:46:1A:FC:AB:22:14 Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: 0100 Signing time: Sun 19 Oct 2025 07:59:57 +0000 Manifest this update: Sun 19 Oct 2025 07:59:56 +0000 Manifest next update: Sun 26 Oct 2025 07:59:56 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: ivq3GrFgFGRZtIlINFqKUIgsyMN0HCIzDtJKiSZo86Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Oct 19 07:59:56 2025 GMT Not After : Oct 26 07:59:56 2025 GMT Subject: CN=68f49a7c-8acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:1d:12:53:7b:72:b5:ec:b8:e4:d1:33:77: 85:ec:fe:8d:36:b2:1d:52:3f:38:3c:00:37:03:9c: 41:72:f1:c4:6b:9c:d8:00:9f:c7:55:e2:6e:37:57: b0:21:25:07:36:36:9d:05:70:36:4c:81:91:75:06: 2a:ec:81:3b:e0:11:23:bb:c6:b6:f9:d2:90:d5:1d: b7:93:a0:05:7f:57:8f:d7:a4:a3:5b:51:67:b1:af: ca:23:7b:22:e7:16:ab:70:c9:fe:82:6b:1e:08:0e: 08:66:6c:5b:dd:f1:25:54:82:59:75:e1:25:9d:9f: 4c:df:be:be:53:dc:6e:fa:1f:37:c3:98:2d:83:8a: 55:16:77:6c:11:fc:4b:06:26:d4:2a:20:c3:25:01: f9:b0:a8:a9:c9:a8:f8:b9:c6:c4:4d:d3:27:32:fc: ae:cb:95:0f:38:18:50:ef:f8:15:74:43:66:5a:80: d8:9a:48:0b:cc:77:4f:ca:7e:10:f1:4f:a8:ac:dc: 63:a7:2a:7b:db:e8:0e:2f:26:ae:ab:9f:7c:bf:0c: 36:05:36:c5:f7:88:dd:7a:73:d1:f3:44:28:6d:75: ff:03:11:0b:70:58:f2:28:96:c4:63:b2:de:08:1c: 9e:ba:c1:52:9b:b0:12:02:c0:d2:66:56:46:28:38: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E6:0C:A8:3C:02:C3:0B:95:83:42:32:E5:D2:46:1A:FC:AB:22:14 X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:31:af:da:09:18:dc:a6:fd:77:36:66:bb:c6:74:69:6d:9c: 9e:f0:c3:d3:6e:51:5d:ab:a9:90:21:68:01:dd:1c:3c:2f:55: 3c:f3:e7:51:7a:dd:a7:8b:27:66:91:4d:73:1b:09:12:37:df: b0:c2:b8:76:96:9f:d1:ef:55:e2:7c:21:31:39:46:1f:3c:25: f2:33:06:4c:4e:dd:25:e1:c5:56:92:b1:9e:a2:a0:a3:a8:90: f9:45:f5:5e:72:32:23:b6:91:54:e4:60:64:ad:85:27:4c:36: c5:36:81:58:79:8a:8f:2c:bd:ee:79:f5:5e:83:2d:dc:36:bd: f8:ad:67:0d:ac:46:48:4b:a5:dd:37:52:fd:8e:09:ae:5b:57: 22:91:9d:82:c3:c7:d2:21:da:c1:bf:bd:02:4b:67:33:65:77: 5b:ef:13:f2:6f:e5:23:e4:c1:e7:7b:2c:87:4b:18:88:8e:3b: 12:e2:14:6b:84:08:96:96:f9:39:24:01:e0:ab:05:7f:58:19: 62:6e:c3:80:ff:f7:c6:21:7a:8f:a8:5b:6e:d4:7a:7f:7b:ed: 5f:4b:7c:69:f9:c2:84:11:99:40:30:27:ba:97:26:84:a9:f6: 46:0e:44:0a:b5:8f:47:2e:c8:75:52:98:46:84:66:11:a8:18: 0e:85:ad:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUxMDE5MDc1OTU2WhcNMjUxMDI2MDc1OTU2WjAYMRYwFAYD VQQDEw02OGY0OWE3Yy04YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsEdElN7crXsuOTRM3eF7P6NNrIdUj84PAA3A5xBcvHEa5zYAJ/HVeJuN1ew ISUHNjadBXA2TIGRdQYq7IE74BEju8a2+dKQ1R23k6AFf1eP16SjW1Fnsa/KI3si 5xarcMn+gmseCA4IZmxb3fElVIJZdeElnZ9M376+U9xu+h83w5gtg4pVFndsEfxL BibUKiDDJQH5sKipyaj4ucbETdMnMvyuy5UPOBhQ7/gVdENmWoDYmkgLzHdPyn4Q 8U+orNxjpyp72+gOLyauq598vww2BTbF94jdenPR80QobXX/AxELcFjyKJbEY7Le CByeusFSm7ASAsDSZlZGKDie4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3mDKg8 AsMLlYNCMuXSRhr8qyIUMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrMa/aCRjcpv13Nma7xnRpbZye8MPTblFdq6mQIWgB3Rw8L1U88+dR et2niydmkU1zGwkSN9+wwrh2lp/R71XifCExOUYfPCXyMwZMTt0l4cVWkrGeoqCj qJD5RfVecjIjtpFU5GBkrYUnTDbFNoFYeYqPLL3uefVegy3cNr34rWcNrEZIS6Xd N1L9jgmuW1cikZ2Cw8fSIdrBv70CS2czZXdb7xPyb+Uj5MHneyyHSxiIjjsS4hRr hAiWlvk5JAHgqwV/WBlibsOA//fGIXqPqFtu1Hp/e+1fS3xp+cKEEZlAMCe6lyaE qfZGDkQKtY9HLsh1UphGhGYRqBgOha1N -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:14 2025 by rpki-client