$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json) Hash identifier: 5dKI7L8gL0QVT6tAGPuNblfLX1wjyvfaW9ecO68ARtQ= Subject key identifier: 45:7B:8A:ED:1B:B1:A2:19:54:63:63:17:3E:CB:37:06:48:AD:B9:77 Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92 Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 07:34:38 +0000 Manifest this update: Mon 03 Nov 2025 07:34:37 +0000 Manifest next update: Mon 10 Nov 2025 07:34:37 +0000 Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: w++YBPtM0CNI602gzE37ARIEhTmjnPZMXU99prTjI+Y=) 2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: 6eI2hX7+cNDQwr/0gzxm2cvx/HHunNUlrFOX9WFLw2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292 Validity Not Before: Nov 3 07:34:37 2025 GMT Not After : Nov 10 07:34:37 2025 GMT Subject: CN=69085b0e-188c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:f9:24:e2:a5:0b:99:22:84:2a:d0:ed:42: 60:b3:0b:92:47:b0:a7:4c:9f:f6:3e:ee:63:6a:d4: 9c:f6:9b:57:71:ef:9e:fe:78:af:c4:f4:7a:8e:98: a4:56:25:e2:54:56:e8:72:5b:83:a1:bf:6e:b8:d2: 55:47:3b:ee:16:21:52:ce:42:21:88:b8:26:2c:33: ff:cf:21:c1:de:2b:66:a2:28:1d:1f:4d:ce:bc:cd: 6c:42:06:b3:c2:62:e3:30:db:af:a5:5e:a8:6b:b2: c8:b1:bc:07:bd:10:62:b6:65:9a:76:bc:a9:7d:c8: b1:37:ae:f6:49:1b:d7:00:f8:d0:15:af:2b:7e:f8: dd:26:ab:c6:ad:55:29:09:38:5d:e3:7c:fd:c3:51: 5f:b3:43:d1:a9:57:50:3d:10:13:92:3a:36:2a:c0: b0:c0:45:c9:e2:9d:93:af:ac:b1:d2:a0:4c:80:f6: 9a:91:39:d1:b0:ac:f2:d9:3b:6c:81:2b:60:2c:62: 0d:b8:9c:e1:b3:fb:7e:a3:92:a1:4b:86:b2:ec:51: 1e:f1:fe:25:75:30:3d:7a:2f:fe:03:41:d4:47:34: b5:43:ad:bb:83:84:97:c6:90:cc:91:cd:46:fc:1d: 31:f5:58:2e:d8:be:56:9a:d0:c1:ad:f1:6f:cf:32: b5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:8A:ED:1B:B1:A2:19:54:63:63:17:3E:CB:37:06:48:AD:B9:77 X509v3 Authority Key Identifier: keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1b:47:16:a4:52:f7:6e:14:bd:82:8b:93:df:32:fe:33:1b: 55:4f:37:95:42:6c:43:b0:53:23:2c:a6:88:89:9f:fc:e8:c7: d2:62:14:28:50:ba:0c:2e:bd:ed:26:76:11:a4:45:00:ce:c6: 59:35:5b:01:b8:ff:73:50:05:14:af:dd:93:ae:aa:ea:a2:95: c0:4d:9e:9d:36:6e:de:57:b0:5e:35:72:48:76:e3:d0:08:0a: b7:4d:3d:1a:f6:43:7c:91:1d:bb:58:ff:5d:20:92:2d:d1:95: 34:2e:05:71:81:4a:03:12:79:da:bb:15:75:09:d4:1a:14:dd: bd:1d:29:92:75:d3:68:7d:e8:a8:7d:2a:cc:cc:97:bf:a0:a8: 1d:77:ec:de:50:d8:13:e9:92:61:37:18:e1:fa:b3:02:9a:8c: 9a:cf:00:5a:31:db:5d:65:15:f8:83:a1:f3:5e:cd:63:d5:cd: 78:3a:23:51:68:3a:f3:e8:1c:99:ce:13:c3:92:ef:a0:af:fd: 33:33:1c:df:dc:a0:32:67:41:7e:39:75:99:ef:b5:4c:b3:23: 2c:9a:9f:34:88:bb:b9:81:70:05:cc:22:53:e0:4f:21:5f:06: 17:56:e9:b5:2c:cb:13:0e:c4:ff:3c:f9:06:85:21:a3:c6:b1: 4a:9c:ba:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoQzFGMkVBNTZERkJFMEYyRjkyQjc0MURENjhDRjU2NzEx NUIzQjI5MjAeFw0yNTExMDMwNzM0MzdaFw0yNTExMTAwNzM0MzdaMBgxFjAUBgNV BAMTDTY5MDg1YjBlLTE4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT/Pkk4qULmSKEKtDtQmCzC5JHsKdMn/Y+7mNq1Jz2m1dx757+eK/E9HqOmKRW JeJUVuhyW4Ohv2640lVHO+4WIVLOQiGIuCYsM//PIcHeK2aiKB0fTc68zWxCBrPC YuMw26+lXqhrssixvAe9EGK2ZZp2vKl9yLE3rvZJG9cA+NAVryt++N0mq8atVSkJ OF3jfP3DUV+zQ9GpV1A9EBOSOjYqwLDARcninZOvrLHSoEyA9pqROdGwrPLZO2yB K2AsYg24nOGz+36jkqFLhrLsUR7x/iV1MD16L/4DQdRHNLVDrbuDhJfGkMyRzUb8 HTH1WC7Yvlaa0MGt8W/PMrVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURXuK7Rux ohlUY2MXPss3BkituXcwHwYDVR0jBBgwFoAUwfLqVt++Dy+St0HdaM9WcRWzspIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzA4RUJEQzQ0Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyL3dmTHFWdC0tRHktU3QwSGRhTTlXY1JXenNw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2ZMcVZ0LS1EeS1TdDBIZGFNOVdjUld6c3BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzA4RUJEQzQ0Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyL3dmTHFWdC0tRHkt U3QwSGRhTTlXY1JXenNwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4bRxakUvduFL2Ci5PfMv4zG1VPN5VCbEOwUyMspoiJn/zox9JiFChQ ugwuve0mdhGkRQDOxlk1WwG4/3NQBRSv3ZOuquqilcBNnp02bt5XsF41ckh249AI CrdNPRr2Q3yRHbtY/10gki3RlTQuBXGBSgMSedq7FXUJ1BoU3b0dKZJ102h96Kh9 KszMl7+gqB137N5Q2BPpkmE3GOH6swKajJrPAFox211lFfiDofNezWPVzXg6I1Fo OvPoHJnOE8OS76Cv/TMzHN/coDJnQX45dZnvtUyzIyyanzSIu7mBcAXMIlPgTyFf BhdW6bUsyxMOxP88+QaFIaPGsUqcuj8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:21 2025 by rpki-client