$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json) Hash identifier: rW1c6QHPsZCZuTnnXlN5w4/EACCXd/FphFnU97pPWGM= Subject key identifier: 45:86:07:47:96:55:AA:3B:D8:43:38:B4:C8:99:C3:2C:A5:74:BB:40 Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft Manifest number: AE Signing time: Mon 03 Nov 2025 06:08:34 +0000 Manifest this update: Mon 03 Nov 2025 06:08:34 +0000 Manifest next update: Mon 10 Nov 2025 06:08:34 +0000 Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: vPX0LKrH6V6jcZ36hpEvtEq0qoPIMp3SF+IdDJzX7Qk=) 2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Validity Not Before: Nov 3 06:08:34 2025 GMT Not After : Nov 10 06:08:34 2025 GMT Subject: CN=690846e2-2895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:6e:e3:16:e8:17:3b:2c:dc:55:11:21:05: 36:c3:09:d4:c8:7a:e7:77:b2:ab:d8:e4:64:33:1f: 55:7d:0f:24:aa:08:28:b1:7a:23:8d:bb:11:06:66: 05:10:e0:13:d6:27:d3:11:17:e4:a7:04:51:1e:34: fc:2c:06:f6:f1:ce:66:a9:58:bf:36:7e:f7:de:01: 88:71:0b:fd:99:91:92:01:83:f0:ab:81:c6:8b:40: 05:a8:93:f8:88:87:5f:59:2f:20:d4:c7:85:b8:65: a7:f2:d8:7a:70:c1:2f:e9:24:bd:cc:06:77:88:1c: 47:fe:31:73:1c:75:5d:3d:2c:91:27:6e:f3:1a:ec: 04:6e:30:94:00:44:04:82:af:65:81:99:69:41:e3: a0:45:7c:42:e3:1e:a1:0f:70:71:11:32:6b:05:3e: 9f:9c:32:e2:0f:98:1c:ec:2c:bf:2a:4b:b5:f7:1e: 91:ce:75:74:e1:36:44:a6:92:ed:d8:fd:e4:54:87: b5:db:3c:a9:be:75:1f:83:e9:14:48:df:27:4b:d3: 0d:96:32:1b:49:ab:c8:10:1e:60:a4:d0:35:4d:2a: 99:10:15:00:8c:09:ec:8e:82:03:42:e1:23:31:da: 34:14:14:22:3d:b7:dd:ed:13:82:b1:3b:b2:6d:6e: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:86:07:47:96:55:AA:3B:D8:43:38:B4:C8:99:C3:2C:A5:74:BB:40 X509v3 Authority Key Identifier: keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5d:26:d2:c0:64:dd:f3:8d:52:61:6b:7f:bc:0b:18:1d:29: bf:fa:2e:53:41:c3:a6:cc:29:94:45:62:98:74:fa:cc:96:8f: 60:f4:b6:9c:1b:bf:52:33:0d:08:3b:d1:3e:92:e8:2e:be:2d: b4:cc:02:7f:4f:4a:2c:6d:9c:19:c0:d8:5c:ef:6e:09:28:e0: e6:b8:91:bb:dc:d8:9d:e3:53:f7:f3:20:6d:d8:12:a9:1d:ef: 21:b5:c2:6f:8b:b3:00:f9:1b:ae:11:e9:6c:c6:df:7d:8f:32: 73:bd:5f:64:dd:6b:bf:b1:9b:c8:7e:1b:ab:74:f5:82:c1:b2: 54:74:7e:31:34:a2:6a:95:26:c6:29:c2:8d:3e:c8:0e:b7:b0: b8:f7:14:ed:e9:44:dd:78:36:c7:8b:63:66:cb:4c:c4:c2:40: 82:fb:15:c0:c0:8b:a6:b5:59:10:ca:ff:1c:d9:b1:b3:c6:38: 0f:39:2a:61:85:7f:3f:2f:f5:d4:4f:b3:f4:bd:0e:e1:14:ea: 45:64:17:23:53:a8:ca:1e:4a:bb:11:60:9c:44:fc:7e:39:54: b2:5e:49:c7:5b:cc:ec:40:bd:41:e7:00:54:02:91:43:25:32: 25:a9:ec:b1:d8:01:e9:2a:04:90:59:cf:02:36:c6:ae:74:fa: 2c:3b:00:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YzQTIxMTAvBgNVBAUTKEMyM0RGQzI2OTczOTQxOEZBNTc5MjFGOEQyOTA1QkEx Njc0MkZDNEQwHhcNMjUxMTAzMDYwODM0WhcNMjUxMTEwMDYwODM0WjAYMRYwFAYD VQQDEw02OTA4NDZlMi0yODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5Bu4xboFzss3FURIQU2wwnUyHrnd7Kr2ORkMx9VfQ8kqggosXojjbsRBmYF EOAT1ifTERfkpwRRHjT8LAb28c5mqVi/Nn733gGIcQv9mZGSAYPwq4HGi0AFqJP4 iIdfWS8g1MeFuGWn8th6cMEv6SS9zAZ3iBxH/jFzHHVdPSyRJ27zGuwEbjCUAEQE gq9lgZlpQeOgRXxC4x6hD3BxETJrBT6fnDLiD5gc7Cy/Kku19x6RznV04TZEppLt 2P3kVIe12zypvnUfg+kUSN8nS9MNljIbSavIEB5gpNA1TSqZEBUAjAnsjoIDQuEj Mdo0FBQiPbfd7ROCsTuybW5VbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWGB0eW Vao72EM4tMiZwyyldLtAMB8GA1UdIwQYMBaAFMI9/CaXOUGPpXkh+NKQW6FnQvxN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjNBMi81Rjg0NUNFQUFF NDkxMUVGOUIyOTUyMzlDNEY5QUUwMi93ajM4SnBjNVFZLWxlU0g0MHBCYm9XZENf RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19FMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjNBMi81Rjg0NUNFQUFFNDkxMUVGOUIyOTUyMzlDNEY5QUUwMi93ajM4SnBjNVFZ LWxlU0g0MHBCYm9XZENfRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvXSbSwGTd841SYWt/vAsYHSm/+i5TQcOmzCmURWKYdPrMlo9g9Lac G79SMw0IO9E+kuguvi20zAJ/T0osbZwZwNhc724JKODmuJG73Nid41P38yBt2BKp He8htcJvi7MA+RuuEelsxt99jzJzvV9k3Wu/sZvIfhurdPWCwbJUdH4xNKJqlSbG KcKNPsgOt7C49xTt6UTdeDbHi2Nmy0zEwkCC+xXAwIumtVkQyv8c2bGzxjgPOSph hX8/L/XUT7P0vQ7hFOpFZBcjU6jKHkq7EWCcRPx+OVSyXknHW8zsQL1B5wBUApFD JTIlqeyx2AHpKgSQWc8CNsaudPosOwDD -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:58 2025 by rpki-client