$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft File: WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json) Hash identifier: OvMflDLDc9OaByCquhNt8qfYOIoPsaOT+UtCzyQsqZY= Subject key identifier: 60:11:D2:E3:66:E8:E6:3F:C8:EB:D0:19:F4:94:3C:8D:31:68:D9:6F Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB Certificate issuer: /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft Manifest number: 07C7 Signing time: Tue 04 Nov 2025 21:21:20 +0000 Manifest this update: Tue 04 Nov 2025 21:21:19 +0000 Manifest next update: Tue 11 Nov 2025 21:21:19 +0000 Files and hashes: 1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: zKmkxOTy+AvNieInpuaQUKgfQaX8Cd4EXqG2gLv8y/4=) 2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Validity Not Before: Nov 4 21:21:19 2025 GMT Not After : Nov 11 21:21:19 2025 GMT Subject: CN=690a6e50-078c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:16:ff:b7:64:8d:0b:d0:61:05:5b:af:0c: 28:26:7c:9a:db:9b:16:1f:f6:71:d6:86:fb:1c:cc: fd:80:dd:c2:b9:81:2f:ad:2c:50:43:71:5b:3e:29: 91:69:bd:a3:9c:5e:72:93:01:5a:07:c3:2e:74:f7: fb:69:11:16:6a:2c:d0:12:9f:78:48:24:87:d3:97: b6:cb:bc:0f:ef:d0:ea:74:f6:af:be:e5:88:83:2e: ee:60:e3:1f:15:44:5c:1d:bc:64:60:4d:d1:b8:fc: cd:73:62:37:5a:29:5e:e7:6d:27:8b:33:4d:02:dc: b9:20:c2:a1:84:bb:78:43:9a:a1:2c:ad:41:ee:a6: 97:d0:eb:66:00:e9:6e:7e:63:13:66:42:55:13:54: 27:81:db:5c:60:1d:b9:00:61:13:d0:44:f6:13:c1: 7a:a6:0f:ff:f3:22:b3:1d:4d:f3:b8:9c:5d:2c:dd: 45:12:0a:d5:0e:fb:70:a1:96:30:29:4c:33:83:af: b2:3a:eb:1e:f1:f0:f2:43:b0:d5:6d:0e:72:6a:e9: 39:b4:ef:08:13:f7:67:c2:c7:55:22:5f:96:13:6d: 15:29:f2:b6:ac:41:10:c5:6d:5e:de:9f:11:2a:08: 69:07:de:d7:0e:9c:95:3a:ac:a4:d6:85:08:fd:68: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:11:D2:E3:66:E8:E6:3F:C8:EB:D0:19:F4:94:3C:8D:31:68:D9:6F X509v3 Authority Key Identifier: keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:06:4e:0b:0f:ca:93:d1:5c:da:e8:73:04:d5:ca:09:fa:11: af:37:ed:65:c3:38:05:16:7c:af:aa:74:85:43:07:e4:57:0f: 6c:fa:e3:16:e9:b0:f3:62:9a:4d:c9:7d:15:9c:5f:49:73:c3: 45:71:d6:dc:38:17:c5:e2:90:3f:50:c7:a5:b3:50:72:54:e6: ee:c7:16:33:c6:cd:fa:32:3e:70:f7:0a:ae:8f:a3:60:70:2e: 77:34:bf:80:b5:ed:7f:ce:5b:9d:07:60:b3:9d:b2:16:a7:81: 52:d5:6c:e9:05:11:4b:4b:25:01:de:41:67:20:60:25:df:fa: b5:cf:9d:13:f5:25:f3:3a:ff:e0:da:4b:a0:1e:91:ef:51:88: 7d:80:75:17:03:01:a8:13:37:35:21:48:a6:09:32:24:ff:4b: 0a:56:9b:1a:a3:3f:08:12:90:6f:94:e8:b2:4f:c8:42:75:c2: ee:54:45:2d:76:46:ac:d0:b9:b7:47:98:68:31:f5:73:02:c8: 21:5a:9a:58:bd:e9:b6:b7:56:69:5b:8e:9f:1f:db:eb:74:eb: 24:eb:f9:4e:b5:12:ac:41:cf:0c:33:b5:0c:91:4d:63:a5:38: 14:cf:99:5e:04:8d:17:e7:2b:90:c3:0c:c4:da:3b:2f:41:bd: d4:1d:62:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTkxMTAvBgNVBAUTKDVBOThFQTUxRjgwNzBENjcwMTg0MjEwMTQ1M0EyRDg1 NjRGQ0QyREIwHhcNMjUxMTA0MjEyMTE5WhcNMjUxMTExMjEyMTE5WjAYMRYwFAYD VQQDEw02OTBhNmU1MC0wNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PcW/7dkjQvQYQVbrwwoJnya25sWH/Zx1ob7HMz9gN3CuYEvrSxQQ3FbPimR ab2jnF5ykwFaB8MudPf7aREWaizQEp94SCSH05e2y7wP79DqdPavvuWIgy7uYOMf FURcHbxkYE3RuPzNc2I3Wile520nizNNAty5IMKhhLt4Q5qhLK1B7qaX0OtmAOlu fmMTZkJVE1QngdtcYB25AGET0ET2E8F6pg//8yKzHU3zuJxdLN1FEgrVDvtwoZYw KUwzg6+yOuse8fDyQ7DVbQ5yauk5tO8IE/dnwsdVIl+WE20VKfK2rEEQxW1e3p8R KghpB97XDpyVOqyk1oUI/WjDawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAR0uNm 6OY/yOvQGfSUPI0xaNlvMB8GA1UdIwQYMBaAFFqY6lH4Bw1nAYQhAUU6LYVk/NLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFOS83Q0U1MjJBNjE1 MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERXY0JoQ0VCUlRvdGhXVDgw dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwanFVZmdIRFdjQmhDRUJSVG90aFdUODB0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFOS83Q0U1MjJBNjE1MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERX Y0JoQ0VCUlRvdGhXVDgwdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4Bk4LD8qT0Vza6HME1coJ+hGvN+1lwzgFFnyvqnSFQwfkVw9s+uMW 6bDzYppNyX0VnF9Jc8NFcdbcOBfF4pA/UMels1ByVObuxxYzxs36Mj5w9wquj6Ng cC53NL+Ate1/zludB2CznbIWp4FS1WzpBRFLSyUB3kFnIGAl3/q1z50T9SXzOv/g 2kugHpHvUYh9gHUXAwGoEzc1IUimCTIk/0sKVpsaoz8IEpBvlOiyT8hCdcLuVEUt dkas0Lm3R5hoMfVzAsghWppYvem2t1ZpW46fH9vrdOsk6/lOtRKsQc8MM7UMkU1j pTgUz5leBI0X5yuQwwzE2jsvQb3UHWLP -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:09 2025 by rpki-client