$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: hKCfZc6c/nV8wkd2eky7r7VHl7vmfwT+fiFC9bifb34= Subject key identifier: 6E:E5:B8:06:24:72:70:4E:97:58:C0:1D:66:39:33:68:92:38:DA:FD Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0F11 Signing time: Sun 02 Nov 2025 17:39:24 +0000 Manifest this update: Sun 02 Nov 2025 17:39:24 +0000 Manifest next update: Sun 09 Nov 2025 17:39:24 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: cuQGuLQr6Tl6g9C9LJvUZNxD808xxVodTujNiI8yhW0=) 2: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: MCZ4hWeiAmt9KhYesLRixKufRw6yQV6zNqKued4Xvos=) 3: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=) 4: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: VEZ7s8au88OcCIFniLaU9jr2DOkZYlGYw2X2o/OxHCE=) 5: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=) 6: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=) 7: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=) 8: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: 10DFF7xCpxy47ECiljTuKfUMmTINmM368KgsuVpPV2A=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3987 (0xf93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Nov 2 17:39:24 2025 GMT Not After : Nov 9 17:39:24 2025 GMT Subject: CN=6907974c-6241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:8e:1e:1e:e7:2f:01:a0:f3:26:68:a8:a5: 44:4b:06:5a:a2:23:63:a0:f7:d2:40:8f:2a:2a:2d: 36:85:06:a6:9f:11:c4:a8:47:29:ef:6c:f2:2e:03: 1c:32:67:0d:b5:1e:5b:4a:2a:d1:60:8d:83:14:07: 32:24:ae:41:1f:55:0a:f8:66:c2:42:a0:57:18:4d: 86:ca:ec:07:fe:92:aa:11:42:9f:2b:6e:72:d7:d3: 5e:0b:8c:da:ee:91:ee:0f:06:f5:3f:5b:4a:5a:b3: 23:a4:c2:b8:b0:a6:3c:5c:77:9c:04:df:11:be:e4: ef:f7:19:e2:6b:b7:03:79:ce:78:5f:9b:06:36:1c: 78:9a:95:e7:4c:42:d1:e9:f4:26:75:5a:0b:14:c4: 42:ee:85:38:3b:a7:f7:65:23:d0:c4:a7:f7:49:6d: 51:b8:7d:62:d0:2f:98:72:89:3d:ad:05:f6:56:28: 4e:33:30:ed:18:30:52:ff:dc:09:e9:62:c1:03:5c: e3:42:22:79:cb:a4:75:32:9f:3f:3d:84:f9:c1:fa: c7:60:61:29:ad:24:aa:0a:53:95:10:85:0c:ee:16: 90:fb:64:b4:88:34:92:de:f8:b4:76:99:53:ea:6d: 0d:c4:d4:45:ed:de:87:16:46:2b:e6:1e:31:2b:b3: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E5:B8:06:24:72:70:4E:97:58:C0:1D:66:39:33:68:92:38:DA:FD X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8e:78:f1:45:b6:09:e4:ac:be:25:85:f9:6a:5f:1f:ef:11: 38:63:e8:5a:7f:cd:7c:95:fa:cd:db:b2:7e:6a:a2:e6:47:35: 8d:fd:0e:28:2b:10:51:54:ba:da:e3:f4:09:c5:d9:89:cf:2c: b6:74:89:19:6f:5f:b3:c3:cd:51:46:2b:94:34:23:fc:cd:8e: b5:ba:61:3b:74:c6:6f:e6:82:bd:c4:72:ac:13:13:e5:68:73: f6:c8:59:d2:27:3b:61:4d:fb:94:92:45:8e:40:f0:22:39:c0: a6:84:a3:df:81:96:35:9a:47:38:60:ba:66:4c:3f:b8:eb:a6: 11:ef:0f:a8:37:16:76:c8:19:e4:45:a0:0a:48:e6:43:0f:a7: 9d:2f:ee:50:d2:e5:6a:b6:da:a1:49:c7:3e:6e:80:78:69:91: 42:66:b7:23:73:6d:9e:f7:e2:1b:43:f7:bd:bc:5c:18:ab:51: ca:d3:fb:69:0f:b8:56:0f:87:7b:15:f0:b9:bc:37:5e:3a:b9: e1:28:42:4a:50:b2:d7:75:66:7f:51:6b:9f:80:c2:32:67:4a: 20:dd:c0:4b:77:83:d9:69:52:73:cb:d5:bf:1c:32:3b:fd:3d: 1b:15:39:5b:20:5d:df:f2:bb:58:98:ff:f0:e7:8d:f9:da:c2: 06:b7:81:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUxMTAyMTczOTI0WhcNMjUxMTA5MTczOTI0WjAYMRYwFAYD VQQDEw02OTA3OTc0Yy02MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1POOHh7nLwGg8yZoqKVESwZaoiNjoPfSQI8qKi02hQamnxHEqEcp72zyLgMc MmcNtR5bSirRYI2DFAcyJK5BH1UK+GbCQqBXGE2GyuwH/pKqEUKfK25y19NeC4za 7pHuDwb1P1tKWrMjpMK4sKY8XHecBN8RvuTv9xnia7cDec54X5sGNhx4mpXnTELR 6fQmdVoLFMRC7oU4O6f3ZSPQxKf3SW1RuH1i0C+Ycok9rQX2VihOMzDtGDBS/9wJ 6WLBA1zjQiJ5y6R1Mp8/PYT5wfrHYGEprSSqClOVEIUM7haQ+2S0iDSS3vi0dplT 6m0NxNRF7d6HFkYr5h4xK7PykQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7luAYk cnBOl1jAHWY5M2iSONr9MB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVjnjxRbYJ5Ky+JYX5al8f7xE4Y+haf818lfrN27J+aqLmRzWN/Q4o KxBRVLra4/QJxdmJzyy2dIkZb1+zw81RRiuUNCP8zY61umE7dMZv5oK9xHKsExPl aHP2yFnSJzthTfuUkkWOQPAiOcCmhKPfgZY1mkc4YLpmTD+466YR7w+oNxZ2yBnk RaAKSOZDD6edL+5Q0uVqttqhScc+boB4aZFCZrcjc22e9+IbQ/e9vFwYq1HK0/tp D7hWD4d7FfC5vDdeOrnhKEJKULLXdWZ/UWufgMIyZ0og3cBLd4PZaVJzy9W/HDI7 /T0bFTlbIF3f8rtYmP/w54352sIGt4H4 -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:59 2025 by rpki-client