$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: ckCQM0kLYXbi8JtGAVNyZ9FOp4M//qSu+nWaV4Idn7M= Subject key identifier: 4D:8F:C3:63:79:2E:D7:20:6E:DF:22:A9:73:F8:35:E9:29:0C:AA:1F Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: E9 Signing time: Wed 05 Nov 2025 05:37:06 +0000 Manifest this update: Wed 05 Nov 2025 05:37:06 +0000 Manifest next update: Wed 12 Nov 2025 05:37:06 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: FDganjYWrZjoepSwc/R/9ypSQv3mEFgVckQF+Pz1eIo=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: +1ovp2NN4rcx7JakHr8vwRXXsKphyunMjKUMuwNMqnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Nov 5 05:37:06 2025 GMT Not After : Nov 12 05:37:06 2025 GMT Subject: CN=690ae282-e9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:6f:0e:2b:7a:e3:45:51:e3:70:43:a3:c8: 51:46:23:5e:ad:16:ec:57:4c:ef:de:f7:c4:3e:29: 56:65:6c:fd:d7:48:33:dc:67:98:cb:67:fb:34:4b: db:64:db:8a:46:e8:ab:d8:fc:bb:8b:20:00:0c:8f: a7:18:38:b1:a1:85:51:47:91:6e:56:c5:66:68:ee: 90:7f:39:64:b4:ee:ec:1e:40:7b:a6:6a:a5:84:78: 62:e2:e6:c4:fe:28:86:2a:e0:64:d0:f4:df:d2:46: b9:d1:c6:cc:95:2e:25:f8:47:c3:ee:c2:1e:08:89: 66:97:2a:2d:48:fc:90:44:fa:18:aa:3b:46:46:07: 5c:2b:11:52:bd:12:47:2a:fa:1b:28:cb:11:20:2c: e9:f5:82:54:c8:6c:b8:18:b7:05:a0:01:1c:98:df: 30:56:0c:d0:28:87:8b:34:f4:6e:b2:c6:62:a5:eb: 4e:c4:22:fa:a1:f8:db:8a:0d:3b:d3:09:88:0b:59: bb:36:c4:91:fc:4f:71:92:4c:1d:4d:bc:7d:20:6b: 65:29:9d:23:1e:d5:1c:74:4b:0f:05:dd:b0:56:e6: fb:3f:d2:36:e1:dd:09:39:95:06:60:63:32:c9:20: 31:00:91:ea:79:04:48:de:88:83:09:7e:ba:42:b8: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:C3:63:79:2E:D7:20:6E:DF:22:A9:73:F8:35:E9:29:0C:AA:1F X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0c:11:95:dd:03:c9:28:44:08:93:35:b7:82:cc:52:58:7d: 77:21:bc:0c:f7:2d:c1:74:f9:ba:35:ad:7c:95:56:dd:bf:c7: eb:77:54:7b:9d:31:9f:cb:88:77:6b:7d:3e:f3:97:bd:57:45: f1:8c:f0:55:36:56:0a:c7:ab:1a:53:d2:2e:32:08:0d:d9:f9: db:85:93:8a:4c:38:a5:52:fe:b5:a4:9b:e8:cf:24:58:49:ae: 21:d1:31:9f:e0:74:49:b7:78:c2:00:5f:70:1d:30:ea:93:51: a3:30:01:17:55:93:43:57:a9:6b:ef:e2:26:72:ad:e9:3b:99: 9e:27:23:e1:42:ee:ee:57:3b:ac:a1:de:42:cf:74:10:24:b5: b8:28:66:c8:06:c5:20:03:49:b6:a2:00:84:1f:3a:e4:d5:f0: 6c:96:8f:b9:ea:fa:fc:ea:a1:2d:4f:3c:b7:04:8c:1d:b3:ea: ef:79:b1:13:3e:d9:d9:a6:97:88:98:06:f9:45:9a:78:51:b4: 46:a9:35:5a:99:b6:8a:58:99:9c:9e:3b:d2:70:b9:5e:c3:15: b6:fe:9a:cc:15:89:0b:bc:2c:7a:54:bb:9b:de:73:10:72:12: 4a:70:7a:09:ec:dd:c8:ec:a5:98:bd:56:3e:73:ea:f2:2c:71: 3f:fc:5a:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUxMTA1MDUzNzA2WhcNMjUxMTEyMDUzNzA2WjAYMRYwFAYD VQQDEw02OTBhZTI4Mi1lOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt81vDit640VR43BDo8hRRiNerRbsV0zv3vfEPilWZWz910gz3GeYy2f7NEvb ZNuKRuir2Py7iyAADI+nGDixoYVRR5FuVsVmaO6QfzlktO7sHkB7pmqlhHhi4ubE /iiGKuBk0PTf0ka50cbMlS4l+EfD7sIeCIlmlyotSPyQRPoYqjtGRgdcKxFSvRJH KvobKMsRICzp9YJUyGy4GLcFoAEcmN8wVgzQKIeLNPRussZipetOxCL6ofjbig07 0wmIC1m7NsSR/E9xkkwdTbx9IGtlKZ0jHtUcdEsPBd2wVub7P9I24d0JOZUGYGMy ySAxAJHqeQRI3oiDCX66QriU0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2Pw2N5 Ltcgbt8iqXP4NekpDKofMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwDBGV3QPJKEQIkzW3gsxSWH13IbwM9y3BdPm6Na18lVbdv8frd1R7 nTGfy4h3a30+85e9V0XxjPBVNlYKx6saU9IuMggN2fnbhZOKTDilUv61pJvozyRY Sa4h0TGf4HRJt3jCAF9wHTDqk1GjMAEXVZNDV6lr7+Imcq3pO5meJyPhQu7uVzus od5Cz3QQJLW4KGbIBsUgA0m2ogCEHzrk1fBslo+56vr86qEtTzy3BIwds+rvebET PtnZppeImAb5RZp4UbRGqTVambaKWJmcnjvScLlewxW2/prMFYkLvCx6VLub3nMQ chJKcHoJ7N3I7KWYvVY+c+ryLHE//FrO -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:51 2025 by rpki-client