$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: qYUJKwqR7o9gZSXnojIw+MID92ah9gzgFQLU6/lHA3Y= Subject key identifier: 43:BE:58:F4:39:78:15:29:B9:22:F4:8D:1B:10:B5:40:64:09:D9:D2 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 9E Signing time: Mon 03 Nov 2025 06:18:46 +0000 Manifest this update: Mon 03 Nov 2025 06:18:46 +0000 Manifest next update: Mon 10 Nov 2025 06:18:46 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: hd5/k07YRmFgPdzR8ALwt/GUVDJ1X3Ke4MSrPBY7yVA=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Nov 3 06:18:46 2025 GMT Not After : Nov 10 06:18:46 2025 GMT Subject: CN=69084946-08b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:2c:af:f8:e1:ac:3d:31:29:30:b4:c5:93: ff:15:e5:30:23:3f:a5:b9:f6:11:e8:35:f2:ed:78: 7b:24:04:42:84:51:ba:45:44:df:89:fc:a3:33:cb: 8e:b1:20:66:44:b1:c7:8f:43:57:1f:03:1e:20:41: cd:61:36:77:03:9f:89:29:4e:6e:07:7c:06:d8:30: 02:ca:cf:9b:8d:1e:ab:ef:b7:24:9c:7c:cc:9d:78: 3a:00:26:2a:33:7f:98:9e:ea:3d:4f:18:a6:2d:36: 1e:ec:33:51:04:2b:b6:2e:9f:e5:2d:a5:0e:98:10: 40:66:7f:f2:40:c9:3b:c6:c6:c0:a5:ff:4d:a5:3a: 02:36:13:9f:09:0d:13:af:b4:d0:00:99:d9:9a:30: c8:5b:0c:1b:ea:d4:04:2e:7f:b3:90:94:c6:b9:f4: d2:96:ff:99:41:cf:78:34:a5:a2:51:1c:a2:c5:1c: d9:77:18:ee:e6:f3:d9:04:9a:69:e4:82:36:84:d9: 8c:e1:f9:8a:16:07:91:13:e2:ce:25:f6:2d:d3:15: 0e:8a:69:dc:30:44:34:be:d6:ff:c8:95:57:ce:2c: 9a:8d:a2:d5:82:0e:43:a4:e5:64:5f:e1:5e:4b:b3: 2c:80:e7:dd:1b:84:60:34:d6:24:54:6a:20:2f:73: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BE:58:F4:39:78:15:29:B9:22:F4:8D:1B:10:B5:40:64:09:D9:D2 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:49:0c:bd:53:ac:c9:10:0c:14:d3:fe:bb:a4:75:a1:73:ef: 0c:f2:79:c5:ac:47:30:0a:ff:0e:87:d6:77:cc:f6:d7:ca:da: 89:e8:31:0a:72:06:78:3c:4e:6f:d7:c0:10:bd:b0:59:58:e5: eb:fe:1c:7f:cd:5a:25:97:30:62:d7:47:98:23:ed:4a:4a:0f: 2f:27:1d:79:51:da:0c:13:8d:75:8b:42:7b:75:ac:a0:fe:ec: a5:11:81:a2:ea:37:d6:ca:20:bd:09:5a:f0:20:c0:f5:2c:a4: 1b:23:8d:2e:f8:5b:35:41:80:af:2d:0d:cd:89:62:06:7c:47: 79:e4:fa:bc:bb:a3:ce:52:af:d7:ba:da:b5:ad:cf:49:19:8c: 7a:87:7a:3e:ed:b0:e8:25:f3:59:2b:ea:13:8c:8a:c4:f6:6f: 3b:80:95:26:ae:39:47:3b:81:88:af:bf:2c:94:f6:e4:9a:71: 38:7c:ae:9f:a1:6b:1b:23:b0:6f:de:72:8d:0b:25:ad:e5:06: 3e:04:99:a6:c4:8e:54:cc:44:43:ae:66:33:ab:7a:24:28:0c: 15:62:28:44:5b:e0:e9:49:a4:9e:eb:89:14:2b:2c:7b:a7:95: e4:09:a3:68:14:8f:b9:ae:d3:2a:2b:cf:bb:e4:9d:6f:1e:34: a1:9d:e8:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0 NTQ0NEQ2MTUwHhcNMjUxMTAzMDYxODQ2WhcNMjUxMTEwMDYxODQ2WjAYMRYwFAYD VQQDEw02OTA4NDk0Ni0wOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVksr/jhrD0xKTC0xZP/FeUwIz+lufYR6DXy7Xh7JARChFG6RUTfifyjM8uO sSBmRLHHj0NXHwMeIEHNYTZ3A5+JKU5uB3wG2DACys+bjR6r77cknHzMnXg6ACYq M3+Ynuo9TximLTYe7DNRBCu2Lp/lLaUOmBBAZn/yQMk7xsbApf9NpToCNhOfCQ0T r7TQAJnZmjDIWwwb6tQELn+zkJTGufTSlv+ZQc94NKWiURyixRzZdxju5vPZBJpp 5II2hNmM4fmKFgeRE+LOJfYt0xUOimncMEQ0vtb/yJVXziyajaLVgg5DpOVkX+Fe S7MsgOfdG4RgNNYkVGogL3MjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEO+WPQ5 eBUpuSL0jRsQtUBkCdnSMB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xQUY3REY2QUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtU M2ZwY3pyQ3VRcGRGUkUxaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3SQy9U6zJEAwU0/67pHWhc+8M8nnFrEcwCv8Oh9Z3zPbXytqJ6DEK cgZ4PE5v18AQvbBZWOXr/hx/zVollzBi10eYI+1KSg8vJx15UdoME411i0J7dayg /uylEYGi6jfWyiC9CVrwIMD1LKQbI40u+Fs1QYCvLQ3NiWIGfEd55Pq8u6POUq/X utq1rc9JGYx6h3o+7bDoJfNZK+oTjIrE9m87gJUmrjlHO4GIr78slPbkmnE4fK6f oWsbI7Bv3nKNCyWt5QY+BJmmxI5UzERDrmYzq3okKAwVYihEW+DpSaSe64kUKyx7 p5XkCaNoFI+5rtMqK8+75J1vHjShnehh -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:44 2025 by rpki-client