$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: KvE/TBQhr/rxveL4eWsYzRDexwTamqmGm8N7JntuGfk= Subject key identifier: 31:8C:09:07:08:47:E8:1E:C3:5A:14:59:6A:33:27:8C:FF:B2:99:47 Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0B1F Signing time: Sat 18 Oct 2025 20:12:36 +0000 Manifest this update: Sat 18 Oct 2025 20:12:35 +0000 Manifest next update: Sat 25 Oct 2025 20:12:35 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: aIwHdISer1OY1X0fXHFeqAgMfpnOpWUFgQicHrpYotQ=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2857 (0xb29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Oct 18 20:12:35 2025 GMT Not After : Oct 25 20:12:35 2025 GMT Subject: CN=68f3f4b4-5524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:04:01:22:7a:a1:b3:a3:68:37:a9:8f:1f: 81:00:c9:5f:bd:b0:30:d2:2c:49:97:d3:5f:f0:e5: 1a:56:7a:95:45:e9:b4:b1:3c:76:4c:59:19:71:33: 60:72:dd:b5:7d:97:d4:3e:ef:33:f0:1f:99:3b:b8: c1:53:c4:4b:50:f8:7c:c9:d4:4c:94:86:da:8b:35: 6c:11:e5:72:35:ff:38:c1:32:0c:4b:d1:c0:ee:60: 82:75:9b:81:08:6b:5b:f0:b7:fe:1a:a6:d9:14:6a: 8c:23:17:b8:3f:53:4d:d3:73:26:0e:f7:53:83:74: 99:7f:72:b0:7d:9c:8c:ff:f2:ff:24:c4:61:74:c7: 1d:a5:31:82:a6:81:5a:ce:b0:15:f7:6f:a2:6c:f4: f5:a7:39:8d:70:50:c7:05:92:7f:48:c2:aa:31:f0: f5:73:9c:2d:c0:5f:3d:14:84:c9:b7:63:86:24:5a: 01:75:b7:68:3b:dd:c3:a2:f5:6f:bd:ea:82:3a:ff: 4b:56:50:89:4b:c8:90:6a:ab:db:4a:1a:0c:a4:02: e2:43:31:5c:6e:19:05:25:52:08:7d:6e:36:f3:0d: 4c:74:de:f6:5d:5d:43:72:3f:a7:f6:2f:84:cc:d1: 2e:df:79:52:32:73:e5:5d:f6:52:12:2c:f1:b9:43: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8C:09:07:08:47:E8:1E:C3:5A:14:59:6A:33:27:8C:FF:B2:99:47 X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ca:f3:2f:53:50:99:b5:df:ef:33:6f:11:a5:bb:b9:13:34: a8:8c:8c:17:6c:00:86:59:78:0b:9d:c2:64:10:a8:28:91:25: ec:5e:ec:0c:07:b0:e5:be:ec:5e:f8:56:7b:2b:14:a3:28:e0: 0d:29:61:72:7a:fd:3a:39:1d:86:63:bf:ae:9a:8a:ae:47:49: 34:92:71:06:c3:02:12:a8:91:ce:47:ff:e8:0f:6b:f0:b8:55: 6d:3d:4f:41:ae:ae:0d:a0:2d:ec:f8:8b:ff:ae:24:3b:21:0a: ea:41:5b:62:27:59:d1:8e:ec:9e:6a:48:d9:8b:80:33:2a:2f: a4:b6:41:c0:f3:f3:ac:12:7e:7c:f0:82:64:0d:d6:52:9c:b6: 8f:60:31:76:52:3b:9d:f5:56:0f:1f:6e:a2:67:d8:96:ed:27: 98:3e:ae:58:8e:e0:28:c2:64:32:e3:95:c7:d1:14:1b:48:da: ab:8d:5c:3c:bc:c1:f5:8b:3e:09:b3:dc:d8:c4:41:0f:b0:c3: a4:a4:11:22:d2:a3:fa:90:c3:0e:ad:88:e1:44:c8:5a:2f:d7: 33:2f:ab:ad:b6:7b:54:2d:16:fa:d5:ff:84:0d:58:27:76:b4: 91:cd:ac:1d:d6:d7:82:31:69:d9:ff:c6:59:6b:32:89:35:2d: 0a:67:c8:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUxMDE4MjAxMjM1WhcNMjUxMDI1MjAxMjM1WjAYMRYwFAYD VQQDEw02OGYzZjRiNC01NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l4EASJ6obOjaDepjx+BAMlfvbAw0ixJl9Nf8OUaVnqVRem0sTx2TFkZcTNg ct21fZfUPu8z8B+ZO7jBU8RLUPh8ydRMlIbaizVsEeVyNf84wTIMS9HA7mCCdZuB CGtb8Lf+GqbZFGqMIxe4P1NN03MmDvdTg3SZf3KwfZyM//L/JMRhdMcdpTGCpoFa zrAV92+ibPT1pzmNcFDHBZJ/SMKqMfD1c5wtwF89FITJt2OGJFoBdbdoO93DovVv veqCOv9LVlCJS8iQaqvbShoMpALiQzFcbhkFJVIIfW428w1MdN72XV1Dcj+n9i+E zNEu33lSMnPlXfZSEizxuUPHKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGMCQcI R+gew1oUWWozJ4z/splHMB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXyvMvU1CZtd/vM28Rpbu5EzSojIwXbACGWXgLncJkEKgokSXsXuwM B7Dlvuxe+FZ7KxSjKOANKWFyev06OR2GY7+umoquR0k0knEGwwISqJHOR//oD2vw uFVtPU9Brq4NoC3s+Iv/riQ7IQrqQVtiJ1nRjuyeakjZi4AzKi+ktkHA8/OsEn58 8IJkDdZSnLaPYDF2Ujud9VYPH26iZ9iW7SeYPq5YjuAowmQy45XH0RQbSNqrjVw8 vMH1iz4Js9zYxEEPsMOkpBEi0qP6kMMOrYjhRMhaL9czL6uttntULRb61f+EDVgn drSRzawd1teCMWnZ/8ZZazKJNS0KZ8im -----END CERTIFICATE-----Generated at Mon Oct 20 19:30:11 2025 by rpki-client