$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: kvfe+ifFBDceNusNPf/2FnTDI/iZphXvXW8DPey68C4= Subject key identifier: BC:06:A2:37:09:46:BB:74:56:58:2E:08:E9:2B:80:C0:62:17:54:56 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: A4 Signing time: Sun 19 Oct 2025 09:35:27 +0000 Manifest this update: Sun 19 Oct 2025 09:35:26 +0000 Manifest next update: Sun 26 Oct 2025 09:35:26 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: +qYJdFiQlZNevIuMymENxn2SOxJH6S09YVSoox9RY/0=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: OeFUJInFH4cNkqvMFV8k9Dy5HiypZ14/pThp2DVW2AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Oct 19 09:35:26 2025 GMT Not After : Oct 26 09:35:26 2025 GMT Subject: CN=68f4b0de-15a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:0b:9c:60:a7:c8:9f:50:51:0c:4b:b6:33: 0f:af:5c:b2:a9:e4:d7:73:90:39:59:65:4e:99:6c: 18:b4:ca:4e:c8:12:44:dc:3e:8b:b5:2e:b4:2b:30: af:37:0e:6f:ce:f4:02:f4:15:7a:d4:5b:62:a3:5c: 2c:54:b0:31:41:9f:f9:da:e1:ad:e1:2f:50:67:e8: 75:14:a2:8a:6e:31:4a:7a:6a:20:1d:62:27:f9:e3: 53:b8:43:1f:a3:be:05:11:e5:45:db:b6:05:85:3e: 27:c7:56:0c:b6:87:2c:aa:42:56:11:72:b8:35:7f: 0d:fe:6b:c0:e4:c2:78:55:ef:2f:dc:e3:d4:19:9c: ae:12:fe:8e:ae:bd:d5:be:72:a1:4f:9b:4a:ee:4b: 1e:ab:81:69:36:cd:19:3c:1b:6d:56:c5:25:26:31: ae:7d:5a:53:0a:7d:d0:b5:27:8b:5f:9b:ff:01:b2: 69:1b:4c:20:b1:cf:e8:27:7f:4b:1d:48:5c:d2:ff: a4:29:a1:f0:73:92:2d:22:02:21:27:2b:17:a0:2c: f1:2e:10:cf:c5:7d:e3:ac:bc:20:8e:5f:7a:19:c8: 71:b1:5b:48:10:e1:ca:38:20:a7:ab:7f:05:b6:fa: cd:7b:9f:23:05:89:7b:fd:3b:ca:93:44:99:bb:cb: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:06:A2:37:09:46:BB:74:56:58:2E:08:E9:2B:80:C0:62:17:54:56 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:0e:f5:0d:34:14:fc:f7:39:be:1f:74:77:a1:51:02:2b: e8:4e:32:59:83:43:52:9b:16:56:f9:cf:99:c9:01:41:05:59: 5a:73:1a:e5:6b:54:67:78:15:ec:11:39:d2:88:dd:b6:62:23: a0:8c:2d:c3:84:f6:09:c8:41:58:d6:7c:08:79:82:42:4e:69: ae:8d:ec:0e:c7:68:1f:9c:12:83:48:01:77:47:f3:32:da:70: 1d:3a:96:ec:29:a1:47:66:4f:e1:6d:ae:0e:bd:e1:eb:2f:5f: 60:f9:e0:97:b7:ac:0e:e5:18:a6:ac:12:95:73:fd:14:5b:4c: b9:d1:d8:e0:b7:ab:16:84:29:fc:08:0c:c6:57:79:79:6f:1c: 20:e9:31:c0:b8:b6:bb:4b:6c:58:0e:91:21:cb:6b:c0:20:58: 0f:78:ce:2d:14:b7:78:45:0a:73:bd:5a:86:ab:09:4d:61:a6: 0f:5e:26:a5:e4:49:51:8c:18:71:9a:c9:58:3a:78:3c:0a:02: e8:27:d2:2b:72:31:28:9c:dc:1b:26:0c:82:74:2b:92:98:12: 3f:10:6c:b1:86:9e:7a:82:3c:dd:c2:7e:2f:c1:36:08:a4:0f: 38:12:89:24:64:8e:9c:ae:b9:80:bb:c1:40:9f:58:41:6b:d8: 2f:4d:1c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjUxMDE5MDkzNTI2WhcNMjUxMDI2MDkzNTI2WjAYMRYwFAYD VQQDEw02OGY0YjBkZS0xNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FsLnGCnyJ9QUQxLtjMPr1yyqeTXc5A5WWVOmWwYtMpOyBJE3D6LtS60KzCv Nw5vzvQC9BV61Ftio1wsVLAxQZ/52uGt4S9QZ+h1FKKKbjFKemogHWIn+eNTuEMf o74FEeVF27YFhT4nx1YMtocsqkJWEXK4NX8N/mvA5MJ4Ve8v3OPUGZyuEv6Orr3V vnKhT5tK7kseq4FpNs0ZPBttVsUlJjGufVpTCn3QtSeLX5v/AbJpG0wgsc/oJ39L HUhc0v+kKaHwc5ItIgIhJysXoCzxLhDPxX3jrLwgjl96GchxsVtIEOHKOCCnq38F tvrNe58jBYl7/TvKk0SZu8sbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwGojcJ Rrt0VlguCOkrgMBiF1RWMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFPw71DTQU/Pc5vh90d6FRAivoTjJZg0NSmxZW+c+ZyQFBBVlacxrl a1RneBXsETnSiN22YiOgjC3DhPYJyEFY1nwIeYJCTmmujewOx2gfnBKDSAF3R/My 2nAdOpbsKaFHZk/hba4OveHrL19g+eCXt6wO5RimrBKVc/0UW0y50djgt6sWhCn8 CAzGV3l5bxwg6THAuLa7S2xYDpEhy2vAIFgPeM4tFLd4RQpzvVqGqwlNYaYPXial 5ElRjBhxmslYOng8CgLoJ9IrcjEonNwbJgyCdCuSmBI/EGyxhp56gjzdwn4vwTYI pA84EokkZI6crrmAu8FAn1hBa9gvTRx6 -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:41 2025 by rpki-client