$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: 7P7ldiHFzl9tfOtv5O2NfY3M3jn89ox6lO7N/0aEc18= Subject key identifier: 3D:AC:A6:93:82:F0:46:2A:3A:D7:18:5A:7D:22:04:35:C6:FE:D9:EC Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: 0137 Signing time: Wed 05 Nov 2025 04:37:07 +0000 Manifest this update: Wed 05 Nov 2025 04:37:06 +0000 Manifest next update: Wed 12 Nov 2025 04:37:06 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: BYf3tF9m1A6QO2U393l4g6WEJGAt5oAIT+7gPoaD1TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: Nov 5 04:37:06 2025 GMT Not After : Nov 12 04:37:06 2025 GMT Subject: CN=690ad472-63c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:0a:a3:3d:e9:7f:a6:a6:63:ec:5b:69:b2: fb:e6:e6:4b:1a:8f:20:80:47:38:e3:15:98:de:dd: 35:5f:ff:08:8e:f8:31:7a:4f:ee:6d:3b:97:74:79: 7b:5a:a6:77:80:3e:a7:d1:0c:5f:c6:32:1c:25:7e: 6d:ba:77:7b:f7:27:40:27:38:5b:a6:7e:d9:17:79: ac:bd:16:34:cf:6e:b2:bb:df:04:69:b2:0f:af:d4: 56:37:f8:8f:a7:f7:1b:24:2c:c0:09:a1:8d:6d:ea: ba:d7:37:c7:d2:82:92:b4:57:f4:22:ed:a4:45:2a: 8d:42:1d:6a:f2:8c:9b:8c:17:78:4d:9b:28:29:fe: cf:54:06:31:c0:ba:33:7a:32:45:36:68:26:b7:d8: f1:a7:67:a1:53:09:a7:2e:cd:42:b8:b1:de:3c:77: b7:e5:91:53:47:ac:0e:a5:8c:be:d2:5d:a8:c0:5f: 69:84:a1:dd:28:e6:7b:0b:16:bc:ed:9f:18:fd:79: aa:48:99:6d:41:25:21:3c:0d:15:5d:bb:3f:86:43: 4e:08:23:0b:1c:7c:ca:0b:41:9d:e8:0d:8b:9a:28: 1e:37:f4:2c:09:da:ad:58:4c:aa:9a:e7:6e:81:53: 83:0f:37:cb:9d:9c:52:89:ee:1a:45:3d:1d:45:aa: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:A6:93:82:F0:46:2A:3A:D7:18:5A:7D:22:04:35:C6:FE:D9:EC X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d0:e0:41:b3:a6:fc:dd:8f:e8:74:05:1e:a3:5d:cc:8c:03: 0d:e0:fe:a5:99:aa:2b:ca:69:cd:7a:05:14:c2:96:de:9c:04: af:d8:61:0b:01:9c:7a:9d:29:d1:07:ac:03:6c:18:d0:75:cc: 36:0a:31:c3:7f:a2:e7:17:ba:74:0e:c5:f0:ce:23:24:a3:3d: db:05:53:9f:16:12:1c:8e:7b:30:99:3e:b9:ba:5f:2c:6e:50: b5:90:81:0a:1a:4c:05:58:c3:ac:40:7d:d5:c5:2a:3e:34:2a: 32:0e:17:5f:79:9d:5f:a5:47:a9:a9:3f:3b:00:0f:ea:9d:43: 76:ee:f7:d3:fc:74:66:40:c6:0e:4e:3d:80:f9:ef:af:b7:08: 95:14:df:16:ee:2a:16:5a:08:17:8c:94:92:0a:b4:df:20:6c: 48:9b:11:51:cc:ba:6d:6a:84:2d:08:41:fe:4d:60:d0:c7:bb: b1:8a:e2:2a:11:80:8e:8b:15:03:03:17:35:f1:be:38:8d:af: 4b:e2:cc:d7:5d:97:d6:bf:71:d1:75:4a:6f:54:78:58:fe:8a: 4c:7e:bb:18:79:b2:da:c9:11:72:5d:29:24:09:28:54:97:2f: 8b:4f:31:67:4b:76:bd:aa:34:86:6a:c8:09:19:6b:7c:64:b2: 9d:21:0c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjUxMTA1MDQzNzA2WhcNMjUxMTEyMDQzNzA2WjAYMRYwFAYD VQQDEw02OTBhZDQ3Mi02M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LgKoz3pf6amY+xbabL75uZLGo8ggEc44xWY3t01X/8Ijvgxek/ubTuXdHl7 WqZ3gD6n0QxfxjIcJX5tund79ydAJzhbpn7ZF3msvRY0z26yu98EabIPr9RWN/iP p/cbJCzACaGNbeq61zfH0oKStFf0Iu2kRSqNQh1q8oybjBd4TZsoKf7PVAYxwLoz ejJFNmgmt9jxp2ehUwmnLs1CuLHePHe35ZFTR6wOpYy+0l2owF9phKHdKOZ7Cxa8 7Z8Y/XmqSJltQSUhPA0VXbs/hkNOCCMLHHzKC0Gd6A2LmigeN/QsCdqtWEyqmudu gVODDzfLnZxSie4aRT0dRaq87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2sppOC 8EYqOtcYWn0iBDXG/tnsMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT0OBBs6b83Y/odAUeo13MjAMN4P6lmaorymnNegUUwpbenASv2GEL AZx6nSnRB6wDbBjQdcw2CjHDf6LnF7p0DsXwziMkoz3bBVOfFhIcjnswmT65ul8s blC1kIEKGkwFWMOsQH3VxSo+NCoyDhdfeZ1fpUepqT87AA/qnUN27vfT/HRmQMYO Tj2A+e+vtwiVFN8W7ioWWggXjJSSCrTfIGxImxFRzLptaoQtCEH+TWDQx7uxiuIq EYCOixUDAxc18b44ja9L4szXXZfWv3HRdUpvVHhY/opMfrsYebLayRFyXSkkCShU ly+LTzFnS3a9qjSGasgJGWt8ZLKdIQy9 -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:19 2025 by rpki-client