$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft File: wlVOkccHDswx5jeOpDvPrzyCE8A.mft (raw, json) Hash identifier: NGThbVquzYyM7fKJbPZzJm6V7GboptOeP8jxiA9DSBs= Subject key identifier: 62:1D:D8:D5:93:3C:D6:FA:33:11:6A:0A:DB:63:1B:CE:A4:3F:AA:0D Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 Certificate issuer: /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft Manifest number: 90 Signing time: Sun 19 Oct 2025 09:46:46 +0000 Manifest this update: Sun 19 Oct 2025 09:46:46 +0000 Manifest next update: Sun 26 Oct 2025 09:46:46 +0000 Files and hashes: 1: wlVOkccHDswx5jeOpDvPrzyCE8A.crl (hash: jIffqSSULPh8aLMVjEZyAfqAotJm7XsURcPyZKFVLGw=) 2: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (hash: KHoPbgNVtZT0OwKjaJvVWJ02MeB3Fx2ZKzMa6yBJHMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Validity Not Before: Oct 19 09:46:46 2025 GMT Not After : Oct 26 09:46:46 2025 GMT Subject: CN=68f4b386-7059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:e9:07:fd:b7:52:a6:e3:56:0d:34:41:e1: bf:c7:08:48:06:4b:58:ea:26:12:41:7a:0c:89:59: 3f:cf:d3:af:52:21:1c:0f:e2:78:7d:df:ab:b3:a4: 52:c3:86:52:16:c1:2d:ca:1e:fc:6c:e0:ea:9d:6e: a1:39:34:28:fb:59:eb:c2:c3:c1:54:d9:ad:f8:cf: 53:fa:a0:34:24:bc:de:c4:5e:1f:b1:76:8d:f8:a4: 28:10:54:aa:4e:37:4b:8b:56:35:de:4d:68:25:a8: 48:49:34:fa:39:bd:16:43:3d:5a:12:1f:15:25:24: 9d:61:13:8e:aa:d5:38:f2:0d:7d:6d:de:5c:e7:b1: bc:50:ae:f5:0b:d4:5b:a7:bc:b0:5d:92:13:e7:0f: ee:56:cf:bc:8a:90:79:36:45:a8:26:99:84:85:9c: 46:d1:3c:4f:79:3e:34:b5:2c:85:50:d5:c3:11:44: b5:c8:dd:67:3e:c0:ca:ce:7b:cd:bf:3b:ff:19:f3: 1d:0f:8e:63:a4:b2:e8:f9:fb:35:e6:54:30:e9:8b: f3:3d:fb:cf:27:75:d0:58:76:ca:ac:ee:02:4a:a6: e4:4f:2c:3d:a7:c7:45:d4:0f:2a:86:14:22:ef:83: 42:d6:10:a3:0b:21:58:36:52:ea:c8:52:15:93:be: dd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1D:D8:D5:93:3C:D6:FA:33:11:6A:0A:DB:63:1B:CE:A4:3F:AA:0D X509v3 Authority Key Identifier: keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:2f:97:d7:24:a2:b3:09:e3:6f:a7:23:2d:1a:d0:6e:05: e1:bc:39:6f:59:bd:20:f2:34:f4:5a:8d:96:29:bb:78:78:5f: 0e:fe:d5:83:4e:8f:b7:df:60:8e:78:3d:e4:bc:9d:20:e6:d0: 18:97:6c:74:2f:3b:3b:5d:31:a8:e3:0b:9d:0f:57:3d:3b:4b: f4:87:1f:ea:cb:ff:89:98:31:17:01:4b:dc:1e:62:4a:43:77: 55:4b:f6:3f:f7:13:1f:c1:54:2e:9c:c5:bd:eb:36:5c:1d:ac: 04:09:1f:b1:25:9b:6e:e5:fd:28:0a:17:e8:62:db:aa:c1:f5: 71:b2:6b:5b:c6:13:48:4e:0d:85:b9:d9:81:8d:fd:9d:94:48: b3:55:20:8a:06:15:fb:f1:f4:4c:cd:a5:5f:f6:0c:ab:9c:ec: cd:12:4d:92:f4:35:90:fa:31:f4:cf:c0:1a:dd:91:0d:11:4d: 7a:10:87:e5:45:e6:d5:f6:48:e4:1b:a4:7c:63:3e:77:96:a7: 9c:b1:9b:d3:88:2a:ca:d0:e5:08:8c:4e:88:5f:8d:32:da:26: 6a:80:c4:74:21:7a:b3:8d:70:1d:24:14:ab:e2:f7:21:62:0a: 1f:78:ee:1b:a2:d8:78:2d:3e:a0:0b:db:c0:9c:6a:20:9c:fd: e0:ed:ee:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKEMyNTU0RTkxQzcwNzBFQ0MzMUU2Mzc4RUE0M0JDRkFG M0M4MjEzQzAwHhcNMjUxMDE5MDk0NjQ2WhcNMjUxMDI2MDk0NjQ2WjAYMRYwFAYD VQQDEw02OGY0YjM4Ni03MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHnpB/23UqbjVg00QeG/xwhIBktY6iYSQXoMiVk/z9OvUiEcD+J4fd+rs6RS w4ZSFsEtyh78bODqnW6hOTQo+1nrwsPBVNmt+M9T+qA0JLzexF4fsXaN+KQoEFSq TjdLi1Y13k1oJahISTT6Ob0WQz1aEh8VJSSdYROOqtU48g19bd5c57G8UK71C9Rb p7ywXZIT5w/uVs+8ipB5NkWoJpmEhZxG0TxPeT40tSyFUNXDEUS1yN1nPsDKznvN vzv/GfMdD45jpLLo+fs15lQw6YvzPfvPJ3XQWHbKrO4CSqbkTyw9p8dF1A8qhhQi 74NC1hCjCyFYNlLqyFIVk77dCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGId2NWT PNb6MxFqCttjG86kP6oNMB8GA1UdIwQYMBaAFMJVTpHHBw7MMeY3jqQ7z688ghPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BRTkyREMxQ0Qy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi93bFZPa2NjSERzd3g1amVPcER2UHJ6eUNF OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dsVk9rY2NIRHN3eDVqZU9wRHZQcnp5Q0U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BRTkyREMxQ0QyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi93bFZPa2NjSERz d3g1amVPcER2UHJ6eUNFOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNsC+X1ySiswnjb6cjLRrQbgXhvDlvWb0g8jT0Wo2WKbt4eF8O/tWD To+332COeD3kvJ0g5tAYl2x0Lzs7XTGo4wudD1c9O0v0hx/qy/+JmDEXAUvcHmJK Q3dVS/Y/9xMfwVQunMW96zZcHawECR+xJZtu5f0oChfoYtuqwfVxsmtbxhNITg2F udmBjf2dlEizVSCKBhX78fRMzaVf9gyrnOzNEk2S9DWQ+jH0z8Aa3ZENEU16EIfl RebV9kjkG6R8Yz53lqecsZvTiCrK0OUIjE6IX40y2iZqgMR0IXqzjXAdJBSr4vch YgofeO4both4LT6gC9vAnGognP3g7e5H -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:50 2025 by rpki-client