$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json) Hash identifier: DyaZuTHG/Hf1xBquA5teKgEjdjL4+ywUB8S6FkBAiWs= Subject key identifier: D9:22:19:98:69:2F:20:20:BE:4A:48:E9:A3:98:97:E3:E6:50:03:E6 Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft Manifest number: 04A6 Signing time: Sun 02 Nov 2025 23:55:15 +0000 Manifest this update: Sun 02 Nov 2025 23:55:14 +0000 Manifest next update: Sun 09 Nov 2025 23:55:14 +0000 Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: jfB35W88GmFL3XQsK1AQmta9NzGYaRVF/+MgMSMN3uc=) 2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Validity Not Before: Nov 2 23:55:14 2025 GMT Not After : Nov 9 23:55:14 2025 GMT Subject: CN=6907ef62-6d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5e:6a:1d:db:b9:1e:63:e6:5d:40:f9:5b:dc: 04:94:18:f1:fa:cd:b1:34:cb:95:3d:58:e7:ea:0b: d4:47:aa:1b:ae:1c:8b:5d:e5:54:27:1d:74:0b:67: 42:ad:7a:5f:39:1a:d7:c7:b4:74:b3:59:72:93:d4: 5a:7f:b4:c3:39:fa:48:6f:60:3e:cb:da:aa:02:e3: 85:25:32:53:e0:b7:2c:1a:ab:e1:48:12:c6:fe:8e: 6b:ad:75:49:ea:eb:85:ed:f8:ca:8e:86:4f:1d:8a: 76:ec:09:fc:3d:b1:26:df:9b:88:b7:f3:af:0e:4a: 3d:96:57:64:24:ea:16:77:a6:3a:d4:f4:c9:d4:94: fc:6c:aa:71:f8:72:6d:59:99:a3:cc:22:93:39:85: ba:9f:32:3d:e0:bc:44:5c:ca:8d:20:21:96:61:25: 66:23:92:c9:e6:f8:75:84:99:85:cf:9f:7e:1c:4b: 9d:28:3b:f4:a9:bc:60:55:65:d1:4d:30:e6:75:ee: de:0d:7b:66:e6:21:59:c3:0f:6d:6c:d2:c3:85:e7: 3a:52:7d:fe:42:90:4b:3a:ff:b7:87:76:67:a7:80: f5:91:9f:a4:31:ef:47:1a:30:17:0b:35:40:06:04: 23:9d:79:73:2e:6c:db:a4:bf:b2:17:7c:74:ad:0a: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:19:98:69:2F:20:20:BE:4A:48:E9:A3:98:97:E3:E6:50:03:E6 X509v3 Authority Key Identifier: keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d5:86:39:e7:ae:75:82:88:e5:dd:ec:d3:86:b0:1c:6c:f9: db:c9:e5:2c:ae:29:4b:8b:7f:d1:c7:68:1f:e1:2a:b6:37:03: 85:c8:b0:98:2b:41:8c:df:f4:ea:cd:76:8c:03:eb:d5:6a:71: 35:b1:f5:ca:93:f0:8f:28:42:7a:71:82:a8:b1:96:92:fc:1a: db:32:fd:1c:42:50:4f:90:3a:22:1b:4c:af:20:f5:9d:54:f8: d1:65:a8:ed:d2:48:53:b5:25:39:7c:59:48:d2:e4:3e:0f:79: a7:47:2f:78:05:1a:ef:5e:80:78:4a:e2:23:8c:fd:25:5d:dd: b1:29:ca:2b:58:5c:ac:b5:11:ae:5c:30:76:8f:04:b0:94:3d: 56:b4:5b:70:55:a5:e5:3c:25:7f:c4:b3:d7:fd:65:34:8f:67: ea:a7:17:73:28:65:de:cd:9e:0e:86:aa:b4:50:7f:9e:4d:25: c9:6b:76:82:50:8c:b2:c3:12:be:0d:7f:37:38:36:77:5b:8e: 57:9e:58:a0:cd:f3:ec:35:80:af:98:d4:a8:8f:74:94:95:86: fa:24:3d:8f:c3:e0:50:6a:fc:f7:e0:c1:a0:5e:9a:e0:e7:4a: 95:5e:b2:85:66:72:6f:1d:00:b4:a6:ad:27:1e:0b:90:72:28: f4:ea:1d:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF NjgyNDlERUIwHhcNMjUxMTAyMjM1NTE0WhcNMjUxMTA5MjM1NTE0WjAYMRYwFAYD VQQDEw02OTA3ZWY2Mi02ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArF5qHdu5HmPmXUD5W9wElBjx+s2xNMuVPVjn6gvUR6obrhyLXeVUJx10C2dC rXpfORrXx7R0s1lyk9Raf7TDOfpIb2A+y9qqAuOFJTJT4LcsGqvhSBLG/o5rrXVJ 6uuF7fjKjoZPHYp27An8PbEm35uIt/OvDko9lldkJOoWd6Y61PTJ1JT8bKpx+HJt WZmjzCKTOYW6nzI94LxEXMqNICGWYSVmI5LJ5vh1hJmFz59+HEudKDv0qbxgVWXR TTDmde7eDXtm5iFZww9tbNLDhec6Un3+QpBLOv+3h3Znp4D1kZ+kMe9HGjAXCzVA BgQjnXlzLmzbpL+yF3x0rQoOZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkiGZhp LyAgvkpI6aOYl+PmUAPmMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4 UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO1YY55651gojl3ezThrAcbPnbyeUsrilLi3/Rx2gf4Sq2NwOFyLCY K0GM3/TqzXaMA+vVanE1sfXKk/CPKEJ6cYKosZaS/BrbMv0cQlBPkDoiG0yvIPWd VPjRZajt0khTtSU5fFlI0uQ+D3mnRy94BRrvXoB4SuIjjP0lXd2xKcorWFystRGu XDB2jwSwlD1WtFtwVaXlPCV/xLPX/WU0j2fqpxdzKGXezZ4Ohqq0UH+eTSXJa3aC UIyywxK+DX83ODZ3W45XnligzfPsNYCvmNSoj3SUlYb6JD2Pw+BQavz34MGgXprg 50qVXrKFZnJvHQC0pq0nHguQcij06h1z -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:02 2025 by rpki-client