$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft File: _WrtCj06ctaut_1HjqdiMTiBlKA.mft (raw, json) Hash identifier: 2EklDXYVTlZ6j9HWN/ZDB9LAbO7aFQKJAl9hNo6wTMU= Subject key identifier: B1:06:1B:CA:30:39:97:1F:60:79:E7:EE:1F:68:04:EE:BB:06:5D:53 Authority key identifier: FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0 Certificate issuer: /CN=A9189337/serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft Manifest number: 06 Signing time: Sun 19 Oct 2025 11:40:34 +0000 Manifest this update: Sun 19 Oct 2025 11:40:33 +0000 Manifest next update: Sun 26 Oct 2025 11:40:33 +0000 Files and hashes: 1: _WrtCj06ctaut_1HjqdiMTiBlKA.crl (hash: FA0fw5zPpm3UtUKJ4baJFiUJR4nCB1GBN3nMUAvQFSs=) 2: B4506158A8FB11F09EF52F87C4F9AE02.roa (hash: JYZF5QpkVav3NYfTVAymVynSqwJ/9AekaJzXrDACdEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0 Validity Not Before: Oct 19 11:40:33 2025 GMT Not After : Oct 26 11:40:33 2025 GMT Subject: CN=68f4ce31-e3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:0e:8a:61:f3:c0:e3:be:0c:78:f7:e3:2c: cf:28:25:6c:84:d1:73:53:ac:4e:6c:1f:5a:37:ec: 01:1d:fb:55:30:6b:f6:ee:d3:e8:1e:2a:f4:de:3c: 7f:58:eb:ff:49:78:b6:fe:08:c4:95:42:01:e4:63: 98:d7:e5:d0:60:14:43:c1:b8:2e:14:6a:26:f2:36: 3d:7a:4e:01:4e:3f:90:0e:d5:4c:d9:30:45:68:51: 51:da:b7:b1:82:b7:83:09:7b:06:eb:ac:69:ac:19: 04:03:15:f5:5b:1a:34:3f:ea:4b:e1:26:3c:2f:04: 25:80:6c:67:28:3a:c5:2b:d4:18:20:5e:9f:33:29: c9:82:13:e8:b4:da:58:38:91:77:5a:ec:21:89:f4: ac:dd:3c:4f:d3:fd:8c:e0:6e:9d:7b:9b:ae:35:28: b1:87:c3:0d:05:8a:06:e1:ad:6e:19:ec:43:25:c0: 00:21:88:ec:cc:0f:99:47:0c:3d:17:0e:75:ea:54: 8e:11:b1:ef:03:58:ec:43:44:ef:44:ec:ce:72:42: ac:7e:12:cb:7d:20:4e:e5:a4:c2:a9:d4:91:9b:af: a1:db:c6:69:c3:fd:aa:56:e6:be:f7:74:ea:d2:98: 1f:54:6a:12:20:1b:a4:34:c3:aa:7a:b8:16:59:9e: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:06:1B:CA:30:39:97:1F:60:79:E7:EE:1F:68:04:EE:BB:06:5D:53 X509v3 Authority Key Identifier: keyid:FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c5:9d:ae:71:e4:9a:3a:a2:c8:df:b5:49:18:c1:7a:ef:0a: 00:c6:64:c2:43:28:4c:78:4f:4b:6d:15:bd:7d:e2:b6:7d:e6: 7e:4d:f6:52:49:59:14:a3:18:ac:14:9c:0f:d1:63:6c:cd:82: 37:e7:25:6b:2e:48:a1:53:3a:a8:a4:ae:3c:1c:ba:dd:ba:7a: 75:87:85:0c:a1:58:0f:52:62:58:5c:5c:7e:b2:a3:a2:14:37: 13:ae:a7:59:27:22:45:1c:67:eb:3d:00:e1:a8:df:73:6a:ce: 99:ef:2b:e4:2f:b5:40:49:e5:ce:6a:55:32:4d:4f:7f:0c:c4: ca:db:2f:d4:ec:d1:0f:0a:cc:17:95:c3:54:bb:b7:d3:41:92: 7d:3b:14:56:0f:1c:ef:0e:95:a4:39:e0:ff:f7:69:6d:57:e5: 59:34:d5:47:6b:ae:19:42:3c:23:91:ff:e7:c5:e3:c8:81:44: dc:7c:0c:7a:38:96:a0:d0:76:2b:61:88:57:c3:69:16:75:74: 29:64:0c:05:d1:7d:0b:75:d0:fb:22:96:a5:6e:21:6f:8e:ca: 60:1c:7f:b4:d9:d2:3d:ec:ed:5d:5e:a4:86:c8:8a:17:59:5d: 16:bf:84:4b:b1:f6:f7:83:99:85:a3:b8:8b:a4:f8:5d:7f:30: 38:4b:2b:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoRkQ2QUVEMEEzRDNBNzJENkFFQjdGRDQ3OEVBNzYyMzEz ODgxOTRBMDAeFw0yNTEwMTkxMTQwMzNaFw0yNTEwMjYxMTQwMzNaMBgxFjAUBgNV BAMTDTY4ZjRjZTMxLWUzYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3OA6KYfPA474MePfjLM8oJWyE0XNTrE5sH1o37AEd+1Uwa/bu0+geKvTePH9Y 6/9JeLb+CMSVQgHkY5jX5dBgFEPBuC4UaibyNj16TgFOP5AO1UzZMEVoUVHat7GC t4MJewbrrGmsGQQDFfVbGjQ/6kvhJjwvBCWAbGcoOsUr1BggXp8zKcmCE+i02lg4 kXda7CGJ9KzdPE/T/Yzgbp17m641KLGHww0FigbhrW4Z7EMlwAAhiOzMD5lHDD0X DnXqVI4Rse8DWOxDRO9E7M5yQqx+Est9IE7lpMKp1JGbr6HbxmnD/apW5r73dOrS mB9UahIgG6Q0w6p6uBZZnlcNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsQYbyjA5 lx9geefuH2gE7rsGXVMwHwYDVR0jBBgwFoAU/WrtCj06ctaut/1HjqdiMTiBlKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzQ5OThCRTlBQTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL19XcnRDajA2Y3RhdXRfMUhqcWRpTVRpQmxL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1dydENqMDZjdGF1dF8xSGpxZGlNVGlCbEtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzQ5OThCRTlBQTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL19XcnRDajA2Y3Rh dXRfMUhqcWRpTVRpQmxLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfFna5x5Jo6osjftUkYwXrvCgDGZMJDKEx4T0ttFb194rZ95n5N9lJJ WRSjGKwUnA/RY2zNgjfnJWsuSKFTOqikrjwcut26enWHhQyhWA9SYlhcXH6yo6IU NxOup1knIkUcZ+s9AOGo33NqzpnvK+QvtUBJ5c5qVTJNT38MxMrbL9Ts0Q8KzBeV w1S7t9NBkn07FFYPHO8OlaQ54P/3aW1X5Vk01UdrrhlCPCOR/+fF48iBRNx8DHo4 lqDQdithiFfDaRZ1dClkDAXRfQt10PsilqVuIW+OymAcf7TZ0j3s7V1epIbIihdZ XRa/hEux9veDmYWjuIuk+F1/MDhLKx4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:22:12 2025 by rpki-client