$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: iL7na4Gy0Sr5+o3CBKqvpBsxXRy2bzCWYn9PWzBL6hc= Subject key identifier: 75:B7:38:3F:BC:B2:4B:A6:43:54:28:05:CE:88:A6:85:15:99:5E:F1 Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0499 Signing time: Wed 05 Nov 2025 00:03:58 +0000 Manifest this update: Wed 05 Nov 2025 00:03:57 +0000 Manifest next update: Wed 12 Nov 2025 00:03:57 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: FI1NzdtHYlMZ6r7Aax0LTI5Re90wzX0itC+jtK4xzh8=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Nov 5 00:03:57 2025 GMT Not After : Nov 12 00:03:57 2025 GMT Subject: CN=690a946d-3744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:26:63:c6:bf:5f:a0:c4:21:5f:d7:13:1e: ff:ce:bf:69:b9:d8:3f:63:49:73:20:eb:76:8f:1d: 71:c2:f9:97:f7:d6:d9:da:a6:19:97:14:78:3b:7c: 71:fc:e9:06:6a:59:32:5c:ad:cf:93:7c:af:7b:f1: a7:3d:89:39:42:15:c2:ab:62:fe:63:84:7e:a5:cb: 6f:92:cf:40:69:11:3b:19:a5:c7:c1:0a:86:84:3d: 25:5c:c3:37:75:fb:c7:1e:75:b0:8b:b5:0f:27:bd: e8:73:fb:19:39:75:84:f6:89:12:f3:6a:72:40:2a: 9c:15:e4:8b:63:b0:21:88:61:da:3e:bd:a5:1f:3e: 86:09:6c:b9:d2:6c:0f:29:21:a4:1c:c1:45:f2:f6: bd:71:bc:2a:29:f1:e7:5b:bf:43:1c:14:99:cb:a0: 1a:46:a3:8b:a6:32:a5:fe:58:75:3f:ac:ef:cd:4e: 27:74:bf:94:ac:53:93:70:79:a1:c2:81:7a:0c:6b: 93:72:1f:c0:57:10:c0:cc:1a:91:bf:72:f6:f4:c6: a6:3e:ef:12:e0:88:84:79:7f:2e:a0:69:1c:9d:d8: f1:58:12:15:9b:3c:5e:53:38:63:81:f2:55:cf:8b: d9:b9:c0:17:1c:1b:bb:da:de:b3:d0:55:ad:5d:85: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:38:3F:BC:B2:4B:A6:43:54:28:05:CE:88:A6:85:15:99:5E:F1 X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:57:c7:df:2e:37:57:ec:1a:25:14:69:ce:cf:4a:e4:4f:a6: ed:bf:6a:89:cc:ca:e2:73:a3:33:88:90:76:09:0f:f0:88:a0: 91:9f:c7:b6:2f:35:f8:95:f3:9e:dc:cf:0b:1b:9f:cc:aa:60: 56:81:ba:e0:bd:83:cb:fa:d0:fe:47:4c:64:8b:b5:86:36:6e: 8a:3c:8f:3a:7d:01:5a:c0:b9:b3:d8:59:d3:ad:d8:a0:30:e2: 4d:2b:71:2b:45:3f:d6:83:20:5f:f6:ce:88:11:cc:24:4a:52: 9b:40:8d:2e:20:85:d5:b5:33:0c:f5:4e:7c:ce:15:6e:60:7f: 61:e7:ff:70:15:c2:3a:01:38:b9:2b:22:bd:ff:0a:cc:e7:97: 39:e7:55:72:52:de:b3:bc:61:a0:4c:3f:99:1e:96:2b:03:c1: d7:01:ce:8d:c9:07:5d:ff:c9:d9:90:69:d9:7a:ce:c7:87:f0: db:2e:47:f3:86:94:13:23:bd:7a:fa:26:a4:7f:3e:12:b1:e4: a4:39:b5:68:d7:62:2e:65:df:88:8f:e9:a4:3e:72:ab:85:d4: d9:40:ff:79:24:4b:a2:8c:b8:01:f0:91:38:2e:1d:b4:35:0f: 9b:38:df:ac:04:05:cd:57:44:fc:77:f2:63:27:d8:18:97:79: 20:93:a9:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUxMTA1MDAwMzU3WhcNMjUxMTEyMDAwMzU3WjAYMRYwFAYD VQQDEw02OTBhOTQ2ZC0zNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunomY8a/X6DEIV/XEx7/zr9pudg/Y0lzIOt2jx1xwvmX99bZ2qYZlxR4O3xx /OkGalkyXK3Pk3yve/GnPYk5QhXCq2L+Y4R+pctvks9AaRE7GaXHwQqGhD0lXMM3 dfvHHnWwi7UPJ73oc/sZOXWE9okS82pyQCqcFeSLY7AhiGHaPr2lHz6GCWy50mwP KSGkHMFF8va9cbwqKfHnW79DHBSZy6AaRqOLpjKl/lh1P6zvzU4ndL+UrFOTcHmh woF6DGuTch/AVxDAzBqRv3L29MamPu8S4IiEeX8uoGkcndjxWBIVmzxeUzhjgfJV z4vZucAXHBu72t6z0FWtXYXJlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW3OD+8 skumQ1QoBc6IpoUVmV7xMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKV8ffLjdX7BolFGnOz0rkT6btv2qJzMric6MziJB2CQ/wiKCRn8e2 LzX4lfOe3M8LG5/MqmBWgbrgvYPL+tD+R0xki7WGNm6KPI86fQFawLmz2FnTrdig MOJNK3ErRT/WgyBf9s6IEcwkSlKbQI0uIIXVtTMM9U58zhVuYH9h5/9wFcI6ATi5 KyK9/wrM55c551VyUt6zvGGgTD+ZHpYrA8HXAc6NyQdd/8nZkGnZes7Hh/DbLkfz hpQTI716+iakfz4SseSkObVo12IuZd+Ij+mkPnKrhdTZQP95JEuijLgB8JE4Lh20 NQ+bON+sBAXNV0T8d/JjJ9gYl3kgk6kq -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:38 2025 by rpki-client