$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: t31pIy9fSZFvbjkhOD/oppQ5zakIOuMIpLVVop2sCEk= Subject key identifier: D8:95:6E:D5:DF:C5:C3:A8:D2:33:2C:09:A3:B6:F1:00:CD:72:B5:B6 Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 0642 Signing time: Sun 19 Oct 2025 00:14:22 +0000 Manifest this update: Sun 19 Oct 2025 00:14:21 +0000 Manifest next update: Sun 26 Oct 2025 00:14:21 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: kId0LfBEpYefjgm0+nEPd+b1ZnSVMhQQ3Z04AYc0km4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215, serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: Oct 19 00:14:21 2025 GMT Not After : Oct 26 00:14:21 2025 GMT Subject: CN=68f42d5d-4745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:3f:87:9c:8a:d1:1a:be:d3:77:f1:1f:c8: 2f:87:08:0e:98:0a:df:50:87:fb:38:69:b8:4d:ea: 04:ea:8c:d8:3a:75:cb:ec:6c:9d:0d:12:3e:68:4a: b3:32:d1:3b:d1:b7:8a:c2:28:be:06:df:c1:a6:87: 3c:fe:08:3d:f2:22:cd:85:e5:12:c2:e5:a7:f4:75: 5f:84:55:6f:93:3d:22:b5:05:e5:87:e3:c0:db:15: 38:39:38:01:b8:fa:25:60:04:d3:7a:4c:45:93:b4: 68:57:02:9e:99:4d:e4:90:6b:16:a7:a6:2d:2f:45: 65:00:d0:70:17:44:88:ec:d2:e8:47:96:92:85:d0: 87:3d:94:22:f6:04:7e:67:21:9d:34:06:d5:32:aa: 0e:dc:da:e5:8f:ce:0f:d8:f9:1a:0a:cc:59:1f:72: 83:43:66:af:6c:b3:7c:31:b8:44:e6:89:e9:6a:14: 27:7c:ca:86:a1:72:11:56:62:fd:a1:39:23:42:f0: 86:f7:f3:5f:53:4d:e3:f8:b0:08:b9:64:d4:25:1f: d0:93:35:f6:a0:c3:3c:ea:ac:dc:c3:66:12:00:97: f4:ee:4a:bf:16:65:4b:0a:b9:c4:ec:73:c2:37:06: 17:31:01:74:cc:65:6e:e0:cb:85:bd:20:a5:62:5d: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:95:6E:D5:DF:C5:C3:A8:D2:33:2C:09:A3:B6:F1:00:CD:72:B5:B6 X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:50:10:b9:e4:18:bf:24:4c:65:48:25:c9:8b:33:0d:09:b2: 04:74:d7:a2:37:4b:c1:81:69:7b:a0:ac:8e:37:4c:82:69:fa: ce:47:c3:dd:4e:a5:4c:49:14:90:b4:72:b6:a1:06:40:bd:9b: 1e:ff:ef:74:81:2c:f2:0d:2e:c3:d1:e8:93:aa:56:21:a8:94: be:ba:cd:92:eb:ea:7c:e9:6d:fe:bc:75:1d:8f:d8:fb:64:c6: c2:37:4d:5e:da:80:e7:e7:00:9f:60:02:53:2e:89:1b:fc:1d: 81:e0:88:4b:ba:10:a5:44:11:83:7e:39:8c:77:bc:73:06:a7: f9:37:0d:12:b9:85:7e:f6:52:8b:be:13:58:be:98:d4:37:23: 36:0c:73:36:bc:02:0e:92:c1:47:7a:39:54:a4:4e:91:29:e2: 5f:91:6e:5f:14:79:72:81:46:0f:a2:85:41:f4:9e:f3:e0:7e: 30:ec:b6:e2:a5:08:01:fa:2e:d8:61:8e:e8:35:8c:32:0c:c9: ab:8d:f6:65:2f:ac:8c:58:c9:64:9e:5d:2d:8a:31:fd:11:b1: 54:76:85:06:e7:fd:63:8b:fb:2f:af:4e:80:b7:69:85:d6:5b: af:b4:6c:af:e2:4b:23:22:12:a0:78:2a:7b:6e:33:24:7e:e5: bf:99:53:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjUxMDE5MDAxNDIxWhcNMjUxMDI2MDAxNDIxWjAYMRYwFAYD VQQDEw02OGY0MmQ1ZC00NzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjA/h5yK0Rq+03fxH8gvhwgOmArfUIf7OGm4TeoE6ozYOnXL7GydDRI+aEqz MtE70beKwii+Bt/Bpoc8/gg98iLNheUSwuWn9HVfhFVvkz0itQXlh+PA2xU4OTgB uPolYATTekxFk7RoVwKemU3kkGsWp6YtL0VlANBwF0SI7NLoR5aShdCHPZQi9gR+ ZyGdNAbVMqoO3Nrlj84P2PkaCsxZH3KDQ2avbLN8MbhE5onpahQnfMqGoXIRVmL9 oTkjQvCG9/NfU03j+LAIuWTUJR/QkzX2oMM86qzcw2YSAJf07kq/FmVLCrnE7HPC NwYXMQF0zGVu4MuFvSClYl3x9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiVbtXf xcOo0jMsCaO28QDNcrW2MB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuUBC55Bi/JExlSCXJizMNCbIEdNeiN0vBgWl7oKyON0yCafrOR8Pd TqVMSRSQtHK2oQZAvZse/+90gSzyDS7D0eiTqlYhqJS+us2S6+p86W3+vHUdj9j7 ZMbCN01e2oDn5wCfYAJTLokb/B2B4IhLuhClRBGDfjmMd7xzBqf5Nw0SuYV+9lKL vhNYvpjUNyM2DHM2vAIOksFHejlUpE6RKeJfkW5fFHlygUYPooVB9J7z4H4w7Lbi pQgB+i7YYY7oNYwyDMmrjfZlL6yMWMlknl0tijH9EbFUdoUG5/1ji/svr06At2mF 1luvtGyv4ksjIhKgeCp7bjMkfuW/mVOQ -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:42 2025 by rpki-client