$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: xQRShGhEoJOYrprnxHoJNindteCWDHVPrS/D9xDoQQI= Subject key identifier: D1:99:6A:7B:40:A9:08:A3:08:FF:DD:E3:F9:0C:D5:C3:AC:47:F8:A9 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 066F Signing time: Tue 04 Nov 2025 22:38:55 +0000 Manifest this update: Tue 04 Nov 2025 22:38:55 +0000 Manifest next update: Tue 11 Nov 2025 22:38:55 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: ZSFwWj2qYVCPOIuWZdevJKmWA7ts7TRGbR7oDtmeQOs=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: /cj0RGnam1KCeb071udMdtYeVjNS+MGC0Nq9zxgjO8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Nov 4 22:38:55 2025 GMT Not After : Nov 11 22:38:55 2025 GMT Subject: CN=690a807f-6e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:1d:70:8f:5a:cb:28:2e:11:b4:54:cd:ea: b4:c8:d7:d6:25:bc:25:a9:b9:a2:1a:d5:ef:9a:de: 6b:f7:4c:58:ae:38:b8:b3:e0:9b:2a:f5:9e:fb:d1: f5:5b:36:ec:48:40:9a:88:0d:2f:aa:9d:4e:02:07: 24:67:e4:9b:ed:78:f3:97:6f:3d:c8:a5:a7:39:d8: da:b6:88:a2:ed:18:c7:b4:7b:b9:40:35:49:02:dd: 3a:19:2e:a8:60:77:00:c0:5c:7d:04:aa:23:ef:13: 8f:c4:af:44:ba:bc:f9:c0:38:74:21:46:01:09:47: 27:32:6e:e5:db:ab:b4:f3:f3:ec:57:39:47:03:fe: c2:fe:75:a9:6d:72:aa:0f:8f:4f:88:a8:1e:d5:1e: 56:b8:ca:0f:ed:7e:ac:92:b7:d7:26:26:17:85:49: 78:e8:ac:4e:88:19:1e:8e:2f:09:63:3e:bd:4a:ff: e7:70:01:ed:3e:29:43:d5:14:ac:44:07:c6:1b:1d: 36:c4:59:e5:4d:b0:76:2a:70:97:23:4d:0c:44:40: 91:36:96:e6:62:7e:3e:1d:c9:35:f9:d3:9b:2d:3f: 38:55:ef:36:b3:d9:97:0e:5c:68:ec:72:ce:c1:74: 3a:dc:92:a7:37:f4:25:d7:b9:3f:85:e1:3a:8a:89: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:6A:7B:40:A9:08:A3:08:FF:DD:E3:F9:0C:D5:C3:AC:47:F8:A9 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:ec:49:c0:57:37:e2:c2:5a:55:c5:22:86:63:15:76:d5: 84:69:14:19:da:28:f4:e7:5c:6d:a0:64:b2:37:ba:19:70:6c: 81:cc:74:7b:f1:f2:a7:8f:f5:a0:a0:5a:a7:52:4b:bd:61:ee: ca:75:70:ee:73:23:a4:0b:6a:d2:6d:b0:44:03:ce:97:60:ee: fb:ac:5a:7c:42:5c:a0:6c:9a:33:33:84:b1:15:b4:b4:08:fb: 29:c5:37:53:f3:ac:fc:92:5d:c2:9e:9b:63:0c:18:8d:43:43: 84:6b:f5:57:6a:1e:90:40:a1:55:5a:91:66:9f:f2:07:19:47: a0:07:95:76:bd:fe:e5:a4:ec:b4:e1:16:ef:97:56:ec:03:d5: 40:8c:75:45:2c:05:4a:73:a7:59:70:8b:b6:62:eb:58:ab:3d: 08:a2:ae:f2:af:4d:fc:fa:96:79:31:66:53:6e:a1:79:6f:8a: 6e:1b:e1:08:7a:3d:a7:74:b5:49:74:6c:d8:73:26:b1:75:e9: 4b:16:a2:d5:79:7c:e0:2c:34:5d:ef:66:a9:f3:a2:7b:58:c8: e8:3a:10:33:c1:75:bc:a7:ed:17:50:21:87:a0:1a:8a:fd:91: ec:42:73:db:5f:fa:c1:91:7b:9a:5d:71:64:4d:3e:0a:eb:3b: 24:12:3e:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUxMTA0MjIzODU1WhcNMjUxMTExMjIzODU1WjAYMRYwFAYD VQQDEw02OTBhODA3Zi02ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhEdcI9ayyguEbRUzeq0yNfWJbwlqbmiGtXvmt5r90xYrji4s+CbKvWe+9H1 WzbsSECaiA0vqp1OAgckZ+Sb7Xjzl289yKWnOdjatoii7RjHtHu5QDVJAt06GS6o YHcAwFx9BKoj7xOPxK9Eurz5wDh0IUYBCUcnMm7l26u08/PsVzlHA/7C/nWpbXKq D49PiKge1R5WuMoP7X6skrfXJiYXhUl46KxOiBkeji8JYz69Sv/ncAHtPilD1RSs RAfGGx02xFnlTbB2KnCXI00MRECRNpbmYn4+Hck1+dObLT84Ve82s9mXDlxo7HLO wXQ63JKnN/Ql17k/heE6iolW6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGZantA qQijCP/d4/kM1cOsR/ipMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcpOxJwFc34sJaVcUihmMVdtWEaRQZ2ij051xtoGSyN7oZcGyBzHR7 8fKnj/WgoFqnUku9Ye7KdXDucyOkC2rSbbBEA86XYO77rFp8QlygbJozM4SxFbS0 CPspxTdT86z8kl3CnptjDBiNQ0OEa/VXah6QQKFVWpFmn/IHGUegB5V2vf7lpOy0 4Rbvl1bsA9VAjHVFLAVKc6dZcIu2YutYqz0Ioq7yr038+pZ5MWZTbqF5b4puG+EI ej2ndLVJdGzYcyaxdelLFqLVeXzgLDRd72ap86J7WMjoOhAzwXW8p+0XUCGHoBqK /ZHsQnPbX/rBkXuaXXFkTT4K6zskEj61 -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:15 2025 by rpki-client