$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: OpMTVG/OPhvfyLWSinyPCdcYN7loB9izuiZ3ZE2qvrc= Subject key identifier: A4:17:A2:46:BE:B0:62:71:10:EB:A3:2E:31:2D:F0:CE:79:02:BB:1D Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04FF Signing time: Sun 19 Oct 2025 01:26:09 +0000 Manifest this update: Sun 19 Oct 2025 01:26:08 +0000 Manifest next update: Sun 26 Oct 2025 01:26:08 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: eZDz0eEml4i3q2PUa6I41rDDLjjL/VDeZGPFi6vfK2g=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Oct 19 01:26:08 2025 GMT Not After : Oct 26 01:26:08 2025 GMT Subject: CN=68f43e31-51c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:b7:50:68:01:d0:a2:89:0e:e8:5a:48:d2: b9:73:a1:94:3a:36:76:f8:ce:d7:ef:00:d6:f0:d0: e6:14:c4:47:09:ac:f6:83:95:63:a7:32:bf:01:33: 02:f7:04:08:a4:24:94:b1:a4:44:21:ed:27:75:88: 9b:15:57:4b:48:f9:fb:f2:24:94:b1:fc:43:04:87: ca:55:13:07:3f:b2:f8:4b:f0:8e:27:37:43:b0:b5: c7:f8:7a:9e:4e:94:53:73:08:22:bb:9d:52:8f:5b: 7d:6b:e5:84:e1:0f:8b:15:c1:3e:64:c3:43:2b:12: 62:49:80:40:b6:c4:7c:b3:00:69:61:3c:21:13:4f: 42:04:3b:0d:56:76:10:86:5e:d9:17:4b:67:23:02: 07:64:2e:69:0b:c3:28:2c:cd:d2:4c:30:6a:f8:6a: e9:0f:29:e0:d3:9e:b6:f6:28:2b:05:98:81:74:15: eb:11:38:0f:7a:97:05:1b:6b:98:63:be:53:01:80: 9e:ad:3e:4d:8c:7b:0e:9a:46:31:9c:2c:75:35:19: 43:80:4a:90:7c:91:c7:1c:93:da:5b:9c:9f:f5:67: 09:00:24:97:d3:20:83:d0:cd:18:80:a5:1d:06:09: fd:ed:26:68:72:84:34:42:f1:35:b6:d0:d1:3d:eb: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:17:A2:46:BE:B0:62:71:10:EB:A3:2E:31:2D:F0:CE:79:02:BB:1D X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d2:a3:23:bb:58:c0:5c:f8:3f:db:eb:59:18:03:26:a2:72: a7:be:12:9c:c5:4f:a5:72:3c:a2:ee:ec:b5:76:9b:ae:d1:03: e8:6f:9d:a4:68:40:b5:10:9b:c1:16:2e:e4:03:3d:a1:c4:17: 19:eb:71:33:ce:ef:56:d3:01:6a:0d:bd:a2:d3:e7:77:25:73: de:6f:8c:5d:02:a5:8e:5d:8f:8e:33:bc:77:70:d1:b4:03:32: 9a:a2:ef:c4:b4:8a:1c:1d:90:ef:d1:42:ef:f7:de:6d:5e:da: 31:a5:33:4a:22:69:2c:ad:73:73:27:e1:b6:93:fd:ce:8a:9a: c6:ad:6a:55:72:49:d3:6a:79:46:cd:72:1d:13:c7:dd:3d:9a: d7:36:06:be:11:ac:05:a9:85:69:b8:b2:87:a1:d0:26:23:0d: 2e:0c:14:46:c4:58:3a:e3:e7:03:f9:7b:79:12:89:90:01:a8: 48:da:ca:d6:df:eb:65:18:b9:4c:ed:97:8d:54:21:d8:e5:d0: c2:6c:f8:b1:76:80:00:a4:8e:83:71:1f:a7:bd:70:2d:6a:fd: 97:6e:74:6c:f0:e9:a0:22:6c:ac:83:5a:2e:76:3d:bd:69:4f: 66:b8:d1:65:88:da:0a:f3:76:6e:33:8c:a2:58:5e:bf:8f:9c: 6b:04:be:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUxMDE5MDEyNjA4WhcNMjUxMDI2MDEyNjA4WjAYMRYwFAYD VQQDEw02OGY0M2UzMS01MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTW3UGgB0KKJDuhaSNK5c6GUOjZ2+M7X7wDW8NDmFMRHCaz2g5VjpzK/ATMC 9wQIpCSUsaREIe0ndYibFVdLSPn78iSUsfxDBIfKVRMHP7L4S/COJzdDsLXH+Hqe TpRTcwgiu51Sj1t9a+WE4Q+LFcE+ZMNDKxJiSYBAtsR8swBpYTwhE09CBDsNVnYQ hl7ZF0tnIwIHZC5pC8MoLM3STDBq+GrpDyng05629igrBZiBdBXrETgPepcFG2uY Y75TAYCerT5NjHsOmkYxnCx1NRlDgEqQfJHHHJPaW5yf9WcJACSX0yCD0M0YgKUd Bgn97SZocoQ0QvE1ttDRPevmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQXoka+ sGJxEOujLjEt8M55ArsdMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj0qMju1jAXPg/2+tZGAMmonKnvhKcxU+lcjyi7uy1dpuu0QPob52k aEC1EJvBFi7kAz2hxBcZ63Ezzu9W0wFqDb2i0+d3JXPeb4xdAqWOXY+OM7x3cNG0 AzKaou/EtIocHZDv0ULv995tXtoxpTNKImksrXNzJ+G2k/3OiprGrWpVcknTanlG zXIdE8fdPZrXNga+EawFqYVpuLKHodAmIw0uDBRGxFg64+cD+Xt5EomQAahI2srW 3+tlGLlM7ZeNVCHY5dDCbPixdoAApI6DcR+nvXAtav2XbnRs8OmgImysg1oudj29 aU9muNFliNoK83ZuM4yiWF6/j5xrBL5K -----END CERTIFICATE-----Generated at Mon Oct 20 00:21:27 2025 by rpki-client