$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: vs4tYPEpAlQUhF0+mXoc+hKqPHNB4rpPoT/0CGMbnGI= Subject key identifier: B2:B8:8C:50:83:58:74:69:50:6D:BF:AA:41:68:FA:38:F7:26:B0:71 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0DDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0DD4 Signing time: Sat 18 Oct 2025 18:32:40 +0000 Manifest this update: Sat 18 Oct 2025 18:32:40 +0000 Manifest next update: Sat 25 Oct 2025 18:32:40 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: 3KGyiKMT25EXbUVO9Pl/NFNIK5z2LCBW1sn32jwuS14=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: 7fP+JRoC8BLIz3dypzljentRpLc6i2GDCzDHkh90QUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3549 (0xddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Oct 18 18:32:40 2025 GMT Not After : Oct 25 18:32:40 2025 GMT Subject: CN=68f3dd48-92c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:14:ff:14:a0:6b:ee:5b:df:6a:ee:d2:d6: 98:50:1c:8d:35:0e:9d:98:f0:4c:f4:cd:e5:0c:bb: c0:9c:9c:2f:1d:73:e4:58:97:a7:b9:a6:0f:34:06: ec:ca:20:b4:e1:f8:ec:2e:94:62:8e:3a:c9:c9:3b: be:ec:fb:a5:1b:50:f9:c8:aa:21:e3:e9:97:74:ad: a4:9f:76:17:8b:d7:d1:ae:53:b3:84:28:c9:88:ae: bb:15:0c:3d:1a:33:5f:a0:46:69:21:e2:f5:d8:80: 4f:09:c9:26:a6:4b:06:6b:aa:d2:85:19:34:ed:f8: c2:78:37:b6:8c:15:29:60:76:bd:de:ab:b3:bd:5e: d8:2c:77:58:38:a5:0a:a6:de:c1:51:a0:d8:34:6a: b3:51:ad:76:f6:b8:09:77:5f:98:32:d1:de:ee:86: 8f:c7:cc:71:7a:61:e7:05:5a:43:fc:a8:b2:32:63: 00:18:b5:9f:5c:62:7c:c5:86:d1:7d:96:b3:cd:94: c3:d6:a0:73:90:59:62:6f:fe:c9:59:fe:a5:9e:78: a3:b9:0b:8e:3b:64:8d:51:d9:83:c5:23:96:43:06: 73:7c:9c:2a:01:60:86:13:26:80:7b:3c:a3:20:20: 30:cb:b3:a6:1d:7e:f5:f1:19:b6:e2:b5:63:d4:a6: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:8C:50:83:58:74:69:50:6D:BF:AA:41:68:FA:38:F7:26:B0:71 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:52:2a:13:bb:2c:4d:f4:d5:49:03:99:f8:b2:72:70:c8:e7: ff:1f:fa:23:65:75:4f:ee:3c:50:88:58:4a:56:5d:51:49:6a: 58:74:f7:87:42:b1:ad:5c:9b:77:81:fa:af:a6:3d:8b:5a:f2: 7a:03:d8:46:9f:d9:5a:5f:e3:26:f0:2f:e5:36:b2:c5:7c:02: ad:8e:e8:be:95:63:af:f9:76:48:41:41:b3:12:1c:36:f8:f6: cd:b8:cd:bb:33:8e:3a:59:0f:b1:8f:e2:01:92:20:dc:e0:c0: d8:a5:12:38:97:df:f7:9c:8b:a0:95:7f:a3:61:42:6a:bc:e9: f8:db:81:2c:90:bf:64:53:1f:24:57:20:ca:b7:1f:24:6d:66: 45:24:d5:ac:0d:e4:fe:5a:80:43:f2:4c:12:9f:1d:6a:2b:c0: b7:65:a6:2a:1a:12:1d:ab:ae:88:d0:a8:b5:74:16:27:e3:f6: fa:82:4a:5a:bd:43:d5:4e:d7:3b:a3:cf:97:e8:a3:d7:98:48: b9:1c:a3:10:b4:18:0b:7e:d9:23:54:ee:d2:75:d4:48:f0:f1: 5e:fd:f0:04:d5:d0:e4:62:55:11:ce:4e:07:e2:b3:08:a9:7d: 77:b2:f9:00:f3:16:c4:10:36:a2:15:62:12:33:66:98:a0:10: 91:fe:3b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUxMDE4MTgzMjQwWhcNMjUxMDI1MTgzMjQwWjAYMRYwFAYD VQQDEw02OGYzZGQ0OC05MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM0U/xSga+5b32ru0taYUByNNQ6dmPBM9M3lDLvAnJwvHXPkWJenuaYPNAbs yiC04fjsLpRijjrJyTu+7PulG1D5yKoh4+mXdK2kn3YXi9fRrlOzhCjJiK67FQw9 GjNfoEZpIeL12IBPCckmpksGa6rShRk07fjCeDe2jBUpYHa93quzvV7YLHdYOKUK pt7BUaDYNGqzUa129rgJd1+YMtHe7oaPx8xxemHnBVpD/KiyMmMAGLWfXGJ8xYbR fZazzZTD1qBzkFlib/7JWf6lnnijuQuOO2SNUdmDxSOWQwZzfJwqAWCGEyaAezyj ICAwy7OmHX718Rm24rVj1KYVnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK4jFCD WHRpUG2/qkFo+jj3JrBxMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtUioTuyxN9NVJA5n4snJwyOf/H/ojZXVP7jxQiFhKVl1RSWpYdPeH QrGtXJt3gfqvpj2LWvJ6A9hGn9laX+Mm8C/lNrLFfAKtjui+lWOv+XZIQUGzEhw2 +PbNuM27M446WQ+xj+IBkiDc4MDYpRI4l9/3nIuglX+jYUJqvOn424EskL9kUx8k VyDKtx8kbWZFJNWsDeT+WoBD8kwSnx1qK8C3ZaYqGhIdq66I0Ki1dBYn4/b6gkpa vUPVTtc7o8+X6KPXmEi5HKMQtBgLftkjVO7SddRI8PFe/fAE1dDkYlURzk4H4rMI qX13svkA8xbEEDaiFWISM2aYoBCR/jvH -----END CERTIFICATE-----Generated at Mon Oct 20 16:34:54 2025 by rpki-client