$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: acwSyqep7S7wwXWgCyfsY87nLC2v+DFEAikhpg455ro= Subject key identifier: FA:25:52:34:08:69:04:44:27:81:AB:2A:36:40:3A:68:BD:2D:13:98 Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0BE8 Signing time: Sat 18 Oct 2025 19:42:04 +0000 Manifest this update: Sat 18 Oct 2025 19:42:04 +0000 Manifest next update: Sat 25 Oct 2025 19:42:04 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: 4/rZClzUiqS/5Z3AaQihwH9wS/5ZqPpWArtIsjoAfbg=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: btAEE/pkl4wmPNldzruMY4vHJi6hWI5mqNY02pzTWwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: Oct 18 19:42:04 2025 GMT Not After : Oct 25 19:42:04 2025 GMT Subject: CN=68f3ed8c-0d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:06:63:f7:10:ff:91:4d:9a:46:5e:f8:c6:b3: cd:36:ea:8d:5d:a0:63:68:ab:55:58:4b:b4:9e:4e: 2d:59:1b:92:5c:fd:e8:9a:5b:59:dd:48:6e:da:0d: fd:a5:5d:1f:cb:e3:7a:ea:0d:8e:96:ef:e6:22:7f: 00:31:2c:19:ef:35:3d:d4:f4:72:95:27:96:94:da: f7:79:3d:38:a8:68:c9:f2:c6:6e:a5:7d:df:8a:d9: 87:f1:7c:d6:4f:ca:55:bb:55:0b:53:42:11:7a:56: 47:7c:79:fa:e9:6c:8d:59:cc:45:61:7d:fc:43:36: e1:32:a5:f0:21:dc:a4:bf:78:c4:88:b5:8e:74:cd: 08:01:a6:a7:9e:f9:80:e3:78:19:b1:d4:d5:cb:bb: db:be:c0:62:b3:f3:9f:40:2b:44:b7:0e:cb:db:5f: b8:2c:c9:ec:3a:22:d9:eb:b9:9e:82:bd:51:3b:1e: 3c:36:49:3c:69:d1:63:03:ff:63:9f:01:09:8d:9e: 9d:7e:83:bf:db:ae:c5:a4:64:db:a3:f8:3b:88:18: 3f:63:d9:34:b7:f0:6f:a3:b9:33:13:a2:c6:76:80: 56:87:86:e3:05:b0:e9:f8:3e:16:8a:39:28:1b:bc: 54:e2:b5:59:a6:25:6e:6c:87:d4:f7:8a:15:1c:1a: 8d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:25:52:34:08:69:04:44:27:81:AB:2A:36:40:3A:68:BD:2D:13:98 X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:22:a0:cd:f2:42:b2:a3:6c:fd:6e:75:f2:ad:7f:04:d3:ac: ac:f2:9a:22:22:3b:ce:ca:4b:85:1f:62:88:2e:59:be:6a:da: 44:5d:bf:41:29:08:f3:4e:10:83:fb:c5:8b:85:f3:6b:ed:66: 1d:b0:16:7d:86:f4:c8:ef:03:61:19:6d:ef:6e:5c:06:5a:3e: be:55:7c:ec:0a:b6:06:20:d2:81:9f:a0:d7:7e:b1:10:ea:7e: 5f:a7:07:98:66:48:be:71:24:cc:79:cc:d5:3e:19:61:2a:1f: ad:76:89:8d:d9:34:8c:42:51:d3:81:01:e2:e0:5d:b6:e7:98: 68:5f:90:df:a5:6b:32:cf:ea:8e:e8:f8:6a:86:13:3f:f7:09: f9:eb:db:78:fe:4b:6e:b1:e0:a2:5b:14:c0:9c:11:fb:2d:7f: d8:1d:47:fc:01:e2:c1:1c:c4:a7:59:44:51:96:27:73:39:d3: 00:32:1f:de:7e:73:33:f3:cb:22:26:11:a6:1e:21:5f:83:5b: 61:8a:04:f2:da:18:70:1c:ac:05:9c:d6:30:dd:8b:45:5d:e0: e4:d2:32:b4:02:bd:29:db:fa:f4:a3:24:16:0e:6a:88:18:c2: 9f:98:16:65:b1:35:0f:c3:30:b9:68:b0:a5:f0:d4:8b:fc:3f: d7:9f:ff:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjUxMDE4MTk0MjA0WhcNMjUxMDI1MTk0MjA0WjAYMRYwFAYD VQQDEw02OGYzZWQ4Yy0wZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywZj9xD/kU2aRl74xrPNNuqNXaBjaKtVWEu0nk4tWRuSXP3omltZ3Uhu2g39 pV0fy+N66g2Olu/mIn8AMSwZ7zU91PRylSeWlNr3eT04qGjJ8sZupX3fitmH8XzW T8pVu1ULU0IRelZHfHn66WyNWcxFYX38QzbhMqXwIdykv3jEiLWOdM0IAaannvmA 43gZsdTVy7vbvsBis/OfQCtEtw7L21+4LMnsOiLZ67megr1ROx48Nkk8adFjA/9j nwEJjZ6dfoO/267FpGTbo/g7iBg/Y9k0t/Bvo7kzE6LGdoBWh4bjBbDp+D4Wijko G7xU4rVZpiVubIfU94oVHBqNfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPolUjQI aQREJ4GrKjZAOmi9LROYMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJIqDN8kKyo2z9bnXyrX8E06ys8poiIjvOykuFH2KILlm+atpEXb9B KQjzThCD+8WLhfNr7WYdsBZ9hvTI7wNhGW3vblwGWj6+VXzsCrYGINKBn6DXfrEQ 6n5fpweYZki+cSTMeczVPhlhKh+tdomN2TSMQlHTgQHi4F2255hoX5DfpWsyz+qO 6PhqhhM/9wn569t4/ktuseCiWxTAnBH7LX/YHUf8AeLBHMSnWURRlidzOdMAMh/e fnMz88siJhGmHiFfg1thigTy2hhwHKwFnNYw3YtFXeDk0jK0Ar0p2/r0oyQWDmqI GMKfmBZlsTUPwzC5aLCl8NSL/D/Xn//8 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:06 2025 by rpki-client