$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: qc2TC+XPVMSNZauKU5gnsl+Jq1hzndwlUWvCKPZjlEs= Subject key identifier: C5:32:7D:D1:BC:EB:DB:75:2F:43:29:EA:5D:3A:3A:FA:A0:8E:09:F8 Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 0217 Signing time: Mon 03 Nov 2025 02:20:38 +0000 Manifest this update: Mon 03 Nov 2025 02:20:37 +0000 Manifest next update: Mon 10 Nov 2025 02:20:37 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: ubc1u7TWFPD1VMReN1C0/bS7KcXGv2N6f3LTQojCdBw=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: Nov 3 02:20:37 2025 GMT Not After : Nov 10 02:20:37 2025 GMT Subject: CN=69081175-646b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:d0:c2:e8:40:1b:68:b6:bc:e4:e6:6a:d9: 7e:de:ba:84:04:f8:bc:4d:2e:8b:d7:03:be:53:86: fb:13:c1:0b:8c:31:93:23:6a:7d:99:f4:fb:39:16: 9c:c3:c4:e4:59:8f:25:ee:b4:dc:32:84:d4:04:0d: 3d:f2:2d:fb:c1:2a:17:f3:0f:c2:6b:dc:d1:86:8b: fc:0c:a4:6f:86:19:53:77:05:1d:f0:79:bd:5c:b0: 87:44:33:d4:fa:b6:4f:72:1e:e8:e6:02:3c:ad:0e: cb:ff:49:d9:94:cc:f4:8e:9e:ca:a4:b9:a4:b9:20: 5e:72:6c:d1:c2:07:7a:c5:00:4d:c1:e0:df:16:38: 50:33:4f:ac:01:4f:99:38:32:89:35:04:0d:c8:82: f4:ee:b8:16:ea:94:fe:52:91:e2:ef:bc:68:cd:1d: 40:b9:40:e0:8d:f3:df:1d:45:7e:64:01:3d:a9:d8: 4c:ab:e4:4b:22:79:86:b5:07:b9:8f:4c:9d:65:37: 31:f5:6a:7e:07:99:f2:f7:c1:cf:72:24:f3:c0:b8: bf:f1:50:76:bd:e4:e5:c5:ee:c4:54:6c:65:3b:b8: cd:19:37:cd:f4:0e:1c:bc:3e:8f:ec:02:c3:55:33: be:19:c6:f7:98:83:43:7f:4d:43:b0:91:e5:79:51: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:7D:D1:BC:EB:DB:75:2F:43:29:EA:5D:3A:3A:FA:A0:8E:09:F8 X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:3b:7b:ba:8d:7c:d9:dd:11:1f:b1:1d:ed:23:68:bc:70:2d: 73:23:58:fe:7c:80:ef:36:6c:8e:ac:c1:25:85:c4:6f:47:76: df:79:c8:93:e2:89:11:61:fa:5b:5f:45:23:93:ae:81:ec:2a: 13:62:05:47:60:1b:72:f0:d2:bf:fa:ab:a3:8f:69:7b:da:20: 03:e7:58:b5:7f:b1:5a:58:db:aa:a4:75:66:1f:4a:87:95:3a: 66:86:c4:25:01:c2:33:1e:b5:25:2d:5c:45:7b:77:ce:ba:ba: 36:a0:28:98:9c:a1:d0:1d:7d:6f:61:a1:9e:06:43:a4:81:e4: 90:83:68:a6:71:53:a8:1b:3d:35:8c:d8:bb:82:f1:a3:42:e5: d9:9b:7a:d9:d4:3d:db:20:9f:b2:0f:65:0e:59:35:d6:35:47: 19:e2:fc:01:61:31:bb:d6:96:d3:40:d8:d8:04:30:57:e9:2a: 3b:0d:7b:d3:3f:fc:ae:38:e4:31:7e:df:9d:fc:91:fb:13:3a: ea:c5:e1:62:91:6e:4b:2c:7d:01:dd:3a:bf:59:f8:d2:d5:5a: 78:5f:c3:98:35:74:bb:ee:aa:9a:d2:f7:94:13:99:a1:57:36: a9:b7:d1:4b:a2:cc:cc:9a:46:96:0e:b8:fc:d7:e5:71:95:f3: 3d:91:c3:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUxMTAzMDIyMDM3WhcNMjUxMTEwMDIyMDM3WjAYMRYwFAYD VQQDEw02OTA4MTE3NS02NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W3QwuhAG2i2vOTmatl+3rqEBPi8TS6L1wO+U4b7E8ELjDGTI2p9mfT7ORac w8TkWY8l7rTcMoTUBA098i37wSoX8w/Ca9zRhov8DKRvhhlTdwUd8Hm9XLCHRDPU +rZPch7o5gI8rQ7L/0nZlMz0jp7KpLmkuSBecmzRwgd6xQBNweDfFjhQM0+sAU+Z ODKJNQQNyIL07rgW6pT+UpHi77xozR1AuUDgjfPfHUV+ZAE9qdhMq+RLInmGtQe5 j0ydZTcx9Wp+B5ny98HPciTzwLi/8VB2veTlxe7EVGxlO7jNGTfN9A4cvD6P7ALD VTO+Gcb3mINDf01DsJHleVEYrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUyfdG8 69t1L0Mp6l06Ovqgjgn4MB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCO3u6jXzZ3REfsR3tI2i8cC1zI1j+fIDvNmyOrMElhcRvR3bfeciT 4okRYfpbX0Ujk66B7CoTYgVHYBty8NK/+qujj2l72iAD51i1f7FaWNuqpHVmH0qH lTpmhsQlAcIzHrUlLVxFe3fOuro2oCiYnKHQHX1vYaGeBkOkgeSQg2imcVOoGz01 jNi7gvGjQuXZm3rZ1D3bIJ+yD2UOWTXWNUcZ4vwBYTG71pbTQNjYBDBX6So7DXvT P/yuOOQxft+d/JH7EzrqxeFikW5LLH0B3Tq/WfjS1Vp4X8OYNXS77qqa0veUE5mh Vzapt9FLoszMmkaWDrj81+VxlfM9kcN2 -----END CERTIFICATE-----Generated at Wed Nov 5 00:27:57 2025 by rpki-client