$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: vEA6msRlrYvhv7EKHdZSGYR2OaYJXoc7wezQ59eYoe8= Subject key identifier: 68:0E:A5:75:63:49:2B:A8:4D:F6:23:16:7C:97:5F:05:47:B5:77:31 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C5F Signing time: Sun 02 Nov 2025 18:32:33 +0000 Manifest this update: Sun 02 Nov 2025 18:32:32 +0000 Manifest next update: Sun 09 Nov 2025 18:32:32 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: 1Z32ymZRub1hh0+pTf8eMpm5YAANAYMPtklpE8PD9d0=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Nov 2 18:32:32 2025 GMT Not After : Nov 9 18:32:32 2025 GMT Subject: CN=6907a3c1-198e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bc:ce:a1:03:b6:ec:4f:5f:db:aa:7a:2f:80: 46:fc:16:aa:19:ce:ea:ff:aa:69:25:2a:d7:28:1a: 24:dd:7d:67:83:e7:b2:5d:33:e4:96:d3:24:f8:8b: 00:09:33:c4:aa:ea:d3:ba:8c:ac:b6:3c:18:81:52: a8:5f:27:00:44:00:bb:85:14:b9:42:05:8a:77:0c: 8a:22:32:29:bd:d8:07:ad:7d:e9:93:e3:c7:bf:56: 69:aa:46:e8:7f:79:6e:c1:5c:ab:fa:96:e5:97:30: 07:5f:d3:05:85:89:4f:af:a5:b6:7d:86:0d:73:7a: 66:6a:f2:73:98:8e:89:63:3f:c7:55:83:f2:fb:7e: b0:7a:53:e3:27:9c:5d:84:7e:6c:60:37:06:43:bd: b5:d3:c8:23:b6:9d:c5:96:4e:73:1e:47:59:0c:df: db:8f:4c:37:bf:a5:97:cb:da:94:c4:79:3e:d3:26: 7e:ab:0c:9a:0b:e8:39:c2:49:2a:71:c3:06:65:f3: ee:88:d8:b0:5a:a1:ab:79:84:19:1b:03:18:19:29: 1b:e6:3a:3f:b8:31:c0:30:4c:c8:62:78:74:17:33: 97:ae:3e:dd:2c:11:2a:44:69:65:72:8e:4d:79:3b: 9c:0a:0f:54:28:df:b5:9a:6f:cc:fe:15:b7:c7:31: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0E:A5:75:63:49:2B:A8:4D:F6:23:16:7C:97:5F:05:47:B5:77:31 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7b:04:4d:ac:90:ca:24:e2:fe:f5:2a:a6:1c:a4:c3:82:49: ed:59:41:49:f2:d2:1d:e9:94:d7:41:9f:77:eb:71:0f:e0:fa: 8a:8f:4d:b4:06:0b:83:84:1c:1e:b5:b8:0b:72:95:74:e4:68: 08:85:42:d4:73:9d:5f:7f:21:6f:2a:60:d4:97:3c:9c:48:a7: 4d:ec:f9:f0:e5:ae:e6:64:7b:96:43:a4:36:36:d1:0f:80:db: b3:b3:ac:10:16:7b:4d:95:54:8c:38:e1:ef:06:01:f1:c3:d0: 42:85:bb:0b:67:e3:1e:58:fa:78:d1:32:a2:38:00:5d:b8:d6: ab:46:33:96:70:61:8b:2c:48:3d:f4:81:eb:5b:6c:45:ba:3f: e1:ac:6f:a2:9d:27:59:86:27:29:b5:13:a5:7b:72:d1:0d:74: d7:3c:22:13:1a:7f:8d:95:01:10:97:90:1a:c4:f7:7a:9e:4d: ec:f4:9b:9c:d1:76:e7:f1:b2:6f:d5:78:f3:79:fa:b2:54:b2: dc:65:b6:a2:5d:12:a9:b1:e0:2f:42:ea:57:d2:96:6b:66:95: bc:aa:b0:d2:63:f2:13:54:c7:cf:ca:2f:5e:b0:d4:65:ce:4b: 8f:8d:69:ef:f7:44:aa:f5:1e:9c:c4:f7:9e:02:26:74:4c:71: 6a:24:9a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMTAyMTgzMjMyWhcNMjUxMTA5MTgzMjMyWjAYMRYwFAYD VQQDEw02OTA3YTNjMS0xOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47zOoQO27E9f26p6L4BG/BaqGc7q/6ppJSrXKBok3X1ng+eyXTPkltMk+IsA CTPEqurTuoystjwYgVKoXycARAC7hRS5QgWKdwyKIjIpvdgHrX3pk+PHv1Zpqkbo f3luwVyr+pbllzAHX9MFhYlPr6W2fYYNc3pmavJzmI6JYz/HVYPy+36welPjJ5xd hH5sYDcGQ72108gjtp3Flk5zHkdZDN/bj0w3v6WXy9qUxHk+0yZ+qwyaC+g5wkkq ccMGZfPuiNiwWqGreYQZGwMYGSkb5jo/uDHAMEzIYnh0FzOXrj7dLBEqRGllco5N eTucCg9UKN+1mm/M/hW3xzEVGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgOpXVj SSuoTfYjFnyXXwVHtXcxMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHewRNrJDKJOL+9SqmHKTDgkntWUFJ8tId6ZTXQZ9363EP4PqKj020 BguDhBwetbgLcpV05GgIhULUc51ffyFvKmDUlzycSKdN7Pnw5a7mZHuWQ6Q2NtEP gNuzs6wQFntNlVSMOOHvBgHxw9BChbsLZ+MeWPp40TKiOABduNarRjOWcGGLLEg9 9IHrW2xFuj/hrG+inSdZhicptROle3LRDXTXPCITGn+NlQEQl5AaxPd6nk3s9Juc 0Xbn8bJv1XjzefqyVLLcZbaiXRKpseAvQupX0pZrZpW8qrDSY/ITVMfPyi9esNRl zkuPjWnv90Sq9R6cxPeeAiZ0THFqJJoW -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:56 2025 by rpki-client