$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: 9FBk5vUBWflxrGtgaB21OGCs2ZK0VOglEucc3EOq5Ok= Subject key identifier: 75:71:CC:30:ED:A7:31:CA:95:89:58:25:05:80:D0:D2:E6:11:50:BE Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C57 Signing time: Sat 18 Oct 2025 19:20:44 +0000 Manifest this update: Sat 18 Oct 2025 19:20:43 +0000 Manifest next update: Sat 25 Oct 2025 19:20:43 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: qSeTFuj0RJuQZodXsnfOyk0nWh61gzAgwXiDYXFatwA=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Oct 18 19:20:43 2025 GMT Not After : Oct 25 19:20:43 2025 GMT Subject: CN=68f3e88b-91df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:ea:40:37:5b:b4:08:c2:59:81:ac:ad:6a: fe:d7:24:3e:75:82:90:12:b0:79:8e:3e:d6:a7:6d: bf:cf:87:3a:c3:88:90:9d:45:8e:aa:85:3f:3a:6d: 8f:b8:01:7c:75:8e:d9:f1:84:c4:7c:5e:ae:33:6d: 12:d7:9c:03:45:c3:d5:94:36:d1:56:9a:3d:90:6c: de:56:3c:87:b8:cc:cd:af:c1:5c:13:eb:8d:75:1f: 2c:53:e6:3d:6d:34:ac:ab:fa:cf:00:11:60:2f:98: 32:78:a7:af:81:52:e4:82:2c:7d:a0:ab:54:79:8b: 8b:cc:67:0a:dd:1a:51:16:9d:38:2d:01:62:e2:a4: 72:c5:61:45:46:94:5a:e3:bc:e5:0b:fb:a1:4a:00: f0:bc:27:da:0b:de:ee:15:b1:7f:a8:39:01:32:c0: ca:30:9f:b8:52:2a:db:8a:e8:0c:45:e6:d3:5a:e1: bc:ec:48:a1:26:c6:01:4d:38:b3:26:60:5a:c7:ee: 31:e5:f1:c9:ab:be:dd:d3:38:bc:c3:56:d9:64:3e: 89:3e:69:6c:d2:7d:e3:62:0a:bf:5a:da:9f:ca:3d: 0f:3b:d3:0d:d7:4d:25:6b:92:2f:ed:95:de:74:57: e9:52:28:5c:62:7b:54:f5:0f:83:f8:30:b1:b5:8f: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:71:CC:30:ED:A7:31:CA:95:89:58:25:05:80:D0:D2:E6:11:50:BE X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:d1:26:4e:5c:0c:dd:ff:98:e5:a3:9c:0c:79:de:d2:37:77: cd:e6:de:6b:9c:af:d9:fb:06:d0:06:45:66:f6:e3:64:cc:0b: 96:16:b0:8d:fe:04:b4:86:fe:ac:5c:db:fc:98:8c:62:71:96: 59:4a:c5:0a:08:bd:1c:e5:aa:e1:e3:8c:0b:89:96:66:9f:bf: 59:a2:32:d5:75:2f:48:c1:0e:aa:16:02:6e:e8:61:18:34:ac: f5:69:59:42:6e:e5:05:65:89:fb:dd:e8:16:f3:73:b0:08:92: 5a:4c:4e:14:4a:3a:53:66:53:ad:09:a3:11:e7:64:6e:29:e1: 65:79:5b:2c:5a:c2:ab:7a:96:c4:58:89:6d:0e:1d:3e:48:77: eb:ef:3f:7c:53:24:a9:f7:73:a2:42:da:0d:03:d6:82:ef:6b: f3:ab:90:f8:68:55:75:e1:5d:f9:9d:b6:b0:78:79:03:02:a9: a8:16:94:f5:77:c1:40:b0:c5:bd:9f:19:b4:33:c1:2c:93:8b: bd:25:b3:4e:b7:81:b8:81:da:20:05:0e:ac:5b:6c:83:96:f5: 71:be:25:65:b8:4d:33:98:48:00:01:6c:01:33:fb:7b:68:a2: ba:c7:44:73:d8:0b:e7:c5:81:22:cb:3b:32:d0:dc:cc:f9:d5: 48:fe:b6:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMDE4MTkyMDQzWhcNMjUxMDI1MTkyMDQzWjAYMRYwFAYD VQQDEw02OGYzZTg4Yi05MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnfqQDdbtAjCWYGsrWr+1yQ+dYKQErB5jj7Wp22/z4c6w4iQnUWOqoU/Om2P uAF8dY7Z8YTEfF6uM20S15wDRcPVlDbRVpo9kGzeVjyHuMzNr8FcE+uNdR8sU+Y9 bTSsq/rPABFgL5gyeKevgVLkgix9oKtUeYuLzGcK3RpRFp04LQFi4qRyxWFFRpRa 47zlC/uhSgDwvCfaC97uFbF/qDkBMsDKMJ+4UirbiugMRebTWuG87EihJsYBTTiz JmBax+4x5fHJq77d0zi8w1bZZD6JPmls0n3jYgq/Wtqfyj0PO9MN100la5Iv7ZXe dFfpUihcYntU9Q+D+DCxtY/DOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVxzDDt pzHKlYlYJQWA0NLmEVC+MB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDi0SZOXAzd/5jlo5wMed7SN3fN5t5rnK/Z+wbQBkVm9uNkzAuWFrCN /gS0hv6sXNv8mIxicZZZSsUKCL0c5arh44wLiZZmn79ZojLVdS9IwQ6qFgJu6GEY NKz1aVlCbuUFZYn73egW83OwCJJaTE4USjpTZlOtCaMR52RuKeFleVssWsKrepbE WIltDh0+SHfr7z98UySp93OiQtoNA9aC72vzq5D4aFV14V35nbaweHkDAqmoFpT1 d8FAsMW9nxm0M8Esk4u9JbNOt4G4gdogBQ6sW2yDlvVxviVluE0zmEgAAWwBM/t7 aKK6x0Rz2AvnxYEiyzsy0NzM+dVI/rbl -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:23 2025 by rpki-client