$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft File: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json) Hash identifier: 0AEI/t1FmuKwcQ9eVNWGxjPR+8Unk5QFF8KJzm/O9sY= Subject key identifier: FB:F1:47:49:AC:9B:D2:C8:5A:B0:D4:B2:1C:64:17:71:F5:24:69:7D Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 Certificate issuer: /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 07:24:05 +0000 Manifest this update: Sun 19 Oct 2025 07:24:04 +0000 Manifest next update: Sun 26 Oct 2025 07:24:04 +0000 Files and hashes: 1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: Hjmp/L1ecKMhN30xwUSXEvjf/ZZ5v23G/wje2DnVE4k=) 2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: 9yKuVeku78GalBmu1IDdWmb+Ncr/r5STqW93UMJtxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158322, serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Validity Not Before: Oct 19 07:24:04 2025 GMT Not After : Oct 26 07:24:04 2025 GMT Subject: CN=68f49215-c989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:c4:0a:4c:4d:5f:dd:2c:8f:44:61:c7:0b: 0e:0f:ec:dd:79:b7:64:1c:3e:a4:74:d4:d5:e7:46: 75:56:73:30:30:ce:a6:e7:31:19:a2:ee:e7:d0:a4: 5e:f4:f7:74:31:90:0d:19:2b:ae:eb:27:7f:28:5a: 24:69:03:e8:23:7e:6c:47:e9:43:40:45:e0:82:a1: ec:15:dc:ab:b0:33:4a:f2:02:a8:3a:4f:67:77:e9: 01:85:cb:4a:c0:01:bb:2a:56:8e:a0:c5:28:2e:84: a2:2b:44:4f:a2:4a:eb:57:80:07:3c:7f:7f:34:d4: b7:ed:7d:45:03:a8:9a:83:a3:69:b6:93:c2:82:03: 35:36:c7:ed:2c:95:ee:04:d5:4a:5c:c7:5c:f4:a5: c0:13:62:00:e1:b2:25:d0:9a:4c:a7:72:8a:c6:a4: bf:0d:66:2b:d3:ef:18:6e:6f:7a:3f:fb:d8:8f:98: 6c:ae:fb:98:a6:ff:05:18:39:63:17:22:c9:0a:bb: 26:dd:c4:d8:d4:a8:3b:66:3a:9a:26:9d:16:38:09: 9b:5a:2e:c2:21:2b:87:e9:0b:56:02:ef:6d:10:62: 69:86:9a:f3:a8:0e:bc:61:12:17:1b:d2:04:0a:ee: 71:d2:85:a1:dc:c9:a4:69:9c:27:0a:a7:b1:7e:02: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F1:47:49:AC:9B:D2:C8:5A:B0:D4:B2:1C:64:17:71:F5:24:69:7D X509v3 Authority Key Identifier: keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:30:b6:72:3b:05:14:fc:c8:51:5c:8e:68:42:56:cc:2f: 71:53:b4:5c:ad:0e:94:71:70:7b:1d:ae:74:c2:cf:9d:ca:69: 34:cd:12:29:46:d9:ef:7f:07:e3:53:ef:cc:84:e5:cf:78:2b: 3e:cf:12:89:37:d1:24:3d:74:aa:d0:2a:52:b7:af:56:18:e4: 0b:d1:57:46:a1:58:cd:b0:ad:a7:5a:93:15:6c:33:e3:f0:dc: cc:74:e6:27:73:eb:ab:4c:40:f1:62:4c:3b:7d:f3:7e:aa:f7: c4:cf:a6:0f:39:b8:71:64:55:ad:f2:80:8b:20:33:09:4e:42: 09:49:9e:c6:7f:1f:c8:55:60:9b:58:37:7b:b8:55:91:32:8d: 61:dc:65:14:c2:e0:9d:16:dc:5d:53:ca:0e:03:8a:fd:98:f5: 3f:9b:9a:2f:11:74:61:94:b0:9f:e9:dc:90:00:92:6a:7e:3f: f5:96:77:0e:54:b7:c3:20:b9:7a:4e:f3:4e:c7:92:4c:11:b2: 5f:e9:ee:cd:56:63:9a:6b:d3:05:b3:05:cc:24:72:be:9a:3c: 63:fc:04:0d:eb:86:77:80:f9:4f:ab:51:c5:69:11:6c:95:0f: 45:53:0f:24:11:ed:99:f4:7b:f7:71:57:b7:98:26:4b:22:48: c5:9f:bb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzMjIxMTAvBgNVBAUTKDVBRjM0NUMyMjJCMDlBNTU1QzdFNkFBNUE1NzM2MTAz MEI5MzE3QTYwHhcNMjUxMDE5MDcyNDA0WhcNMjUxMDI2MDcyNDA0WjAYMRYwFAYD VQQDEw02OGY0OTIxNS1jOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ3ECkxNX90sj0RhxwsOD+zdebdkHD6kdNTV50Z1VnMwMM6m5zEZou7n0KRe 9Pd0MZANGSuu6yd/KFokaQPoI35sR+lDQEXggqHsFdyrsDNK8gKoOk9nd+kBhctK wAG7KlaOoMUoLoSiK0RPokrrV4AHPH9/NNS37X1FA6iag6NptpPCggM1NsftLJXu BNVKXMdc9KXAE2IA4bIl0JpMp3KKxqS/DWYr0+8Ybm96P/vYj5hsrvuYpv8FGDlj FyLJCrsm3cTY1Kg7ZjqaJp0WOAmbWi7CISuH6QtWAu9tEGJphprzqA68YRIXG9IE Cu5x0oWh3MmkaZwnCqexfgLkzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvxR0ms m9LIWrDUshxkF3H1JGl9MB8GA1UdIwQYMBaAFFrzRcIisJpVXH5qpaVzYQMLkxem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODMyMi81NUFDMDY2NkRG NTgxMUVFOUY0Q0NGNUVDNEY5QUUwMi9Xdk5Gd2lLd21sVmNmbXFscFhOaEF3dVRG NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d2TkZ3aUt3bWxWY2ZtcWxwWE5oQXd1VEY2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODMyMi81NUFDMDY2NkRGNTgxMUVFOUY0Q0NGNUVDNEY5QUUwMi9Xdk5Gd2lLd21s VmNmbXFscFhOaEF3dVRGNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJUDC2cjsFFPzIUVyOaEJWzC9xU7RcrQ6UcXB7Ha50ws+dymk0zRIp RtnvfwfjU+/MhOXPeCs+zxKJN9EkPXSq0CpSt69WGOQL0VdGoVjNsK2nWpMVbDPj 8NzMdOYnc+urTEDxYkw7ffN+qvfEz6YPObhxZFWt8oCLIDMJTkIJSZ7Gfx/IVWCb WDd7uFWRMo1h3GUUwuCdFtxdU8oOA4r9mPU/m5ovEXRhlLCf6dyQAJJqfj/1lncO VLfDILl6TvNOx5JMEbJf6e7NVmOaa9MFswXMJHK+mjxj/AQN64Z3gPlPq1HFaRFs lQ9FUw8kEe2Z9Hv3cVe3mCZLIkjFn7tH -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:56 2025 by rpki-client