$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: 7AHFCFXTKRGeLU+tFrw5eAYwhaffg7PbgP3WEJtHwKE= Subject key identifier: C6:39:67:61:2C:52:0C:48:9C:A8:1F:37:3D:E1:4D:14:13:64:DB:AE Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 0310 Signing time: Mon 03 Nov 2025 01:06:28 +0000 Manifest this update: Mon 03 Nov 2025 01:06:28 +0000 Manifest next update: Mon 10 Nov 2025 01:06:28 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: DA7VsDxtAy8XnhdFXC5DsiVjnqCgZSCSf1cgxgxjrNQ=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Nov 3 01:06:28 2025 GMT Not After : Nov 10 01:06:28 2025 GMT Subject: CN=69080014-3058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:35:11:ea:44:a6:4e:2f:0e:6e:06:66:32: 29:b7:36:1c:bf:30:8a:7d:60:6c:4d:70:30:64:4a: 49:28:f7:30:64:e4:e9:d1:29:d6:8a:00:91:3f:56: 8d:89:70:52:02:50:46:4e:8b:2c:9b:ab:81:73:90: e7:00:aa:14:b2:61:4c:ab:a2:d2:69:3f:2b:ba:a8: 35:1e:6f:e3:8a:a1:81:ca:a4:27:58:94:05:35:73: c2:0a:b5:db:25:55:e3:99:43:b3:c9:f2:af:60:00: da:7b:15:21:d1:07:6f:3a:c2:26:e7:b0:4c:2b:92: bb:1d:97:c2:bf:6c:d6:0f:81:c4:89:e5:eb:44:8e: f0:b3:c1:3c:92:7d:68:f9:f8:bb:d4:7e:0e:82:37: 28:50:b5:9a:e9:43:55:26:bd:83:83:7b:6b:b6:b1: c4:ef:7f:a3:cd:51:46:f5:f0:30:86:ce:c5:a9:c2: b4:39:c7:ec:f4:e4:14:87:4e:44:25:c3:43:ce:b4: 73:30:7d:f0:a0:0d:76:88:d3:e6:c8:3f:93:f6:69: ef:34:52:89:15:b7:76:29:52:23:98:f2:a8:9c:0b: 84:32:08:d6:dc:64:b1:ec:b5:44:29:9a:45:8d:b7: 86:bd:86:d5:71:24:c2:71:3a:1f:37:0a:d0:a9:d5: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:67:61:2C:52:0C:48:9C:A8:1F:37:3D:E1:4D:14:13:64:DB:AE X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f9:8e:32:35:a1:8b:49:ea:f0:a0:cb:c5:ca:68:10:f9:91: 4d:bb:f9:84:c4:47:43:ca:e2:8b:84:58:c4:36:b5:43:9c:ed: eb:54:d5:9b:32:a3:8b:f8:57:f1:a0:e5:23:99:94:39:d6:40: c2:ac:13:b5:aa:87:c4:b5:f6:1d:bb:70:dc:11:5a:c3:41:cf: 64:f2:90:59:8b:16:9b:60:d3:7f:7c:3a:a4:48:9c:7b:09:f8: 1e:50:89:a5:1d:d6:cf:4e:b2:af:38:d3:4e:e3:4c:cf:e4:93: 55:a8:3f:e4:f7:f7:71:02:7e:35:dd:54:4f:09:4e:bf:40:b0: 22:e8:68:a4:72:94:c3:37:00:58:8a:10:4b:11:0d:59:cd:27: 01:19:05:14:09:e3:83:83:4d:5b:09:9c:06:dd:d7:a8:86:08: 4a:89:3e:e3:c8:9e:21:7e:7a:9d:19:07:39:05:80:c2:06:92: 66:85:38:9a:85:de:f1:ab:f1:81:19:0e:3f:90:b7:b5:ef:94: 77:b1:92:7f:bd:3b:4d:af:e2:3e:67:7a:06:60:f5:7c:91:25: e8:b1:55:f5:40:0c:4b:4e:15:5d:b2:c5:c2:d8:5e:7e:aa:32: 7a:83:ab:cb:1a:5b:a2:c3:87:70:16:60:84:c4:e5:3c:08:30: 01:18:a1:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUxMTAzMDEwNjI4WhcNMjUxMTEwMDEwNjI4WjAYMRYwFAYD VQQDEw02OTA4MDAxNC0zMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3J41EepEpk4vDm4GZjIptzYcvzCKfWBsTXAwZEpJKPcwZOTp0SnWigCRP1aN iXBSAlBGTossm6uBc5DnAKoUsmFMq6LSaT8ruqg1Hm/jiqGByqQnWJQFNXPCCrXb JVXjmUOzyfKvYADaexUh0QdvOsIm57BMK5K7HZfCv2zWD4HEieXrRI7ws8E8kn1o +fi71H4OgjcoULWa6UNVJr2Dg3trtrHE73+jzVFG9fAwhs7FqcK0Ocfs9OQUh05E JcNDzrRzMH3woA12iNPmyD+T9mnvNFKJFbd2KVIjmPKonAuEMgjW3GSx7LVEKZpF jbeGvYbVcSTCcTofNwrQqdXNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY5Z2Es UgxInKgfNz3hTRQTZNuuMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw+Y4yNaGLSerwoMvFymgQ+ZFNu/mExEdDyuKLhFjENrVDnO3rVNWb MqOL+FfxoOUjmZQ51kDCrBO1qofEtfYdu3DcEVrDQc9k8pBZixabYNN/fDqkSJx7 CfgeUImlHdbPTrKvONNO40zP5JNVqD/k9/dxAn413VRPCU6/QLAi6GikcpTDNwBY ihBLEQ1ZzScBGQUUCeODg01bCZwG3deohghKiT7jyJ4hfnqdGQc5BYDCBpJmhTia hd7xq/GBGQ4/kLe175R3sZJ/vTtNr+I+Z3oGYPV8kSXosVX1QAxLThVdssXC2F5+ qjJ6g6vLGluiw4dwFmCExOU8CDABGKFH -----END CERTIFICATE-----Generated at Tue Nov 4 18:41:58 2025 by rpki-client