$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft File: WYYa7M8NRdskqH6ohHvxmZH--vY.mft (raw, json) Hash identifier: vfQkH7Zils6/SGSUMBoDU9VaCGaqQwyd+8QMA9zg5F0= Subject key identifier: 25:1D:8E:56:74:47:6C:16:3C:08:1A:D0:23:BA:C7:3D:00:ED:0B:3D Authority key identifier: 59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6 Certificate issuer: /CN=A913A7CB/serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6 Certificate serial: 0990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft Manifest number: 0989 Signing time: Tue 04 Nov 2025 20:09:37 +0000 Manifest this update: Tue 04 Nov 2025 20:09:37 +0000 Manifest next update: Tue 11 Nov 2025 20:09:37 +0000 Files and hashes: 1: WYYa7M8NRdskqH6ohHvxmZH--vY.crl (hash: k5cYtvo1ioLjU/Jc8tfsAb90evKbvQxcOvqecDzFgvA=) 2: 0D7DDD3A9D0B11EAAD024D44C4F9AE02.roa (hash: /SULS2LlTq1Mk/GpibPOoterpHPYahPoFF8fj6LRRMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7CB, serialNumber=59861AECCF0D45DB24A87EA8847BF19991FEFAF6 Validity Not Before: Nov 4 20:09:37 2025 GMT Not After : Nov 11 20:09:37 2025 GMT Subject: CN=690a5d81-3ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:8f:d7:48:e3:34:5b:a6:c7:52:99:1f:ff: f1:47:f5:6a:bd:27:b7:ba:12:4b:be:ca:13:86:27: 55:ed:e9:7e:25:59:bc:61:3e:6a:c0:a1:6f:90:05: 7b:32:f6:0a:ab:ef:98:98:29:26:3b:8f:77:1e:8a: 10:06:87:7d:e3:c9:e7:4e:c5:52:e7:f4:b5:5e:88: 5b:ba:2b:49:3a:d2:33:bb:73:a1:5d:41:a9:f5:22: 8d:aa:76:ac:c2:4d:05:64:5d:4d:17:1b:07:fd:a0: 96:06:a8:ad:85:47:23:19:ef:93:0b:c6:76:19:35: 17:10:8d:7d:37:8d:1d:52:48:56:92:9f:bd:a3:dc: 11:8c:f9:b7:df:c6:a8:a1:62:0b:3a:9c:3b:40:e2: 8e:93:cd:df:1d:4b:33:27:e3:4d:fc:6e:13:e9:20: 01:99:2c:da:4b:cc:74:d3:f3:79:e9:d4:42:54:55: d4:6f:0b:9c:42:1a:7d:f3:90:97:c1:c0:78:96:ac: 8a:6d:dc:67:53:05:53:c2:ef:50:6e:77:b8:75:1d: 41:22:07:a4:a0:a4:21:25:48:53:fa:ed:23:4a:2f: 9f:b2:21:68:c4:c0:bc:ce:fc:6c:1c:06:c6:fc:9b: 63:3c:6b:49:dc:04:13:f2:6c:bc:79:c2:5e:31:70: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1D:8E:56:74:47:6C:16:3C:08:1A:D0:23:BA:C7:3D:00:ED:0B:3D X509v3 Authority Key Identifier: keyid:59:86:1A:EC:CF:0D:45:DB:24:A8:7E:A8:84:7B:F1:99:91:FE:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYYa7M8NRdskqH6ohHvxmZH--vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7CB/062482B09D0A11EA801CB243C4F9AE02/WYYa7M8NRdskqH6ohHvxmZH--vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bf:5e:02:5f:87:a9:c3:ea:7a:5a:c7:44:64:a8:dc:68:24: 76:83:38:9a:11:71:2e:dc:91:60:20:18:43:f3:64:93:ef:83: 28:5c:53:cf:f0:7b:cc:96:80:8c:17:11:08:41:13:e0:57:b2: ff:81:9d:f2:88:d8:dc:13:80:1d:86:28:9d:bb:b3:34:d8:b4: 94:2a:6a:eb:15:6c:f3:c0:80:f2:10:f3:e9:84:87:d2:f7:f8: a7:ea:f7:1d:b4:3e:38:7f:e9:ce:7d:40:77:51:8c:56:0a:35: 3c:54:43:69:ff:99:4c:d6:c6:61:bf:01:70:a7:ff:d3:28:26: db:bd:75:21:0b:12:7a:24:93:13:a9:a5:77:4d:03:2a:17:0a: 8f:6f:6e:9a:15:a8:14:8d:5d:eb:a8:d3:77:ef:3d:8a:71:b1: 08:00:5b:14:8c:72:d6:af:64:b0:6c:6d:cd:55:7f:7b:8d:fe: f9:8d:16:06:20:e2:74:a6:8e:3a:3f:e4:b4:8a:a9:97:eb:31: 45:67:06:c7:f1:e4:96:11:3c:ee:25:ea:ff:2d:c0:8e:2d:ab: 03:ac:5c:0e:ae:bc:fc:44:88:7b:ff:50:f8:8c:0d:14:ff:1c: 04:e5:a0:22:66:c8:eb:36:14:b6:fa:7e:14:a6:65:c3:d3:56: 25:dc:00:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3Q0IxMTAvBgNVBAUTKDU5ODYxQUVDQ0YwRDQ1REIyNEE4N0VBODg0N0JGMTk5 OTFGRUZBRjYwHhcNMjUxMTA0MjAwOTM3WhcNMjUxMTExMjAwOTM3WjAYMRYwFAYD VQQDEw02OTBhNWQ4MS0zZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC6P10jjNFumx1KZH//xR/VqvSe3uhJLvsoThidV7el+JVm8YT5qwKFvkAV7 MvYKq++YmCkmO493HooQBod948nnTsVS5/S1XohbuitJOtIzu3OhXUGp9SKNqnas wk0FZF1NFxsH/aCWBqithUcjGe+TC8Z2GTUXEI19N40dUkhWkp+9o9wRjPm338ao oWILOpw7QOKOk83fHUszJ+NN/G4T6SABmSzaS8x00/N56dRCVFXUbwucQhp985CX wcB4lqyKbdxnUwVTwu9Qbne4dR1BIgekoKQhJUhT+u0jSi+fsiFoxMC8zvxsHAbG /JtjPGtJ3AQT8my8ecJeMXAi7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUdjlZ0 R2wWPAga0CO6xz0A7Qs9MB8GA1UdIwQYMBaAFFmGGuzPDUXbJKh+qIR78ZmR/vr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdDQi8wNjI0ODJCMDlE MEExMUVBODAxQ0IyNDNDNEY5QUUwMi9XWVlhN004TlJkc2txSDZvaEh2eG1aSC0t dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZWWE3TThOUmRza3FINm9oSHZ4bVpILS12WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdDQi8wNjI0ODJCMDlEMEExMUVBODAxQ0IyNDNDNEY5QUUwMi9XWVlhN004TlJk c2txSDZvaEh2eG1aSC0tdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyv14CX4epw+p6WsdEZKjcaCR2gziaEXEu3JFgIBhD82ST74MoXFPP 8HvMloCMFxEIQRPgV7L/gZ3yiNjcE4Adhiidu7M02LSUKmrrFWzzwIDyEPPphIfS 9/in6vcdtD44f+nOfUB3UYxWCjU8VENp/5lM1sZhvwFwp//TKCbbvXUhCxJ6JJMT qaV3TQMqFwqPb26aFagUjV3rqNN37z2KcbEIAFsUjHLWr2SwbG3NVX97jf75jRYG IOJ0po46P+S0iqmX6zFFZwbH8eSWETzuJer/LcCOLasDrFwOrrz8RIh7/1D4jA0U /xwE5aAiZsjrNhS2+n4UpmXD01Yl3AA5 -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:43 2025 by rpki-client