$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json) Hash identifier: hIRWWUZGnClqZxM+Lrs+rlXATrCaJY6uVa2Xfbqwq3k= Subject key identifier: 86:EA:73:F3:A0:89:55:5A:F5:13:04:48:F0:6D:8F:59:16:16:D7:7F Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft Manifest number: 0135 Signing time: Wed 05 Nov 2025 04:38:38 +0000 Manifest this update: Wed 05 Nov 2025 04:38:37 +0000 Manifest next update: Wed 12 Nov 2025 04:38:37 +0000 Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: c7AsUGZTpm8gXV4A1DMs6zwuXyZ/LSx5L33naCp2Ruo=) 2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: SDPNisnSYRGvj5gVjzP5feJ+X0hwI7v9EIoicUEp2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Validity Not Before: Nov 5 04:38:37 2025 GMT Not After : Nov 12 04:38:37 2025 GMT Subject: CN=690ad4ce-840d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:92:3c:34:fa:34:de:b6:48:f4:11:3a:b8: ba:f2:8a:52:c4:37:05:aa:8e:f4:7d:f4:dd:89:d2: f9:ad:f8:da:52:9d:94:9c:82:08:5a:1f:9b:82:59: db:4c:eb:c2:b5:ad:81:34:a7:a9:36:a7:9b:5d:36: 38:d7:cd:7e:20:e4:ae:e9:a5:b0:c8:b4:c5:74:d4: 4b:2d:5e:23:38:59:2e:f1:52:bd:be:65:7a:ab:d7: 4d:d1:a4:fc:55:a0:1b:49:2c:fd:62:1d:b9:1d:93: 41:b3:e3:54:e1:bc:d8:7d:d3:10:34:4d:86:e1:83: 55:cc:64:c5:74:3e:2d:62:f8:f2:ef:5b:db:e8:f4: 9f:31:75:83:d1:e7:73:b9:47:81:27:ac:92:d3:6e: 5c:6d:ea:f1:39:ec:c3:c1:6c:8e:22:25:27:d6:3e: fa:e4:60:51:f5:f8:50:5d:ee:7f:57:d9:6e:55:1e: 93:1e:2c:3d:c8:3e:e0:9d:15:55:be:6f:5d:95:44: c6:54:9b:20:38:20:9c:1a:81:04:fd:d5:d9:7f:66: 97:39:07:b7:e9:a9:6e:7c:e6:79:c2:05:41:ba:aa: 1a:c5:6d:0d:40:e3:c3:8e:a7:69:60:4c:bc:de:f3: 93:31:76:45:4a:88:1f:92:30:e6:3a:f2:25:60:c7: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:73:F3:A0:89:55:5A:F5:13:04:48:F0:6D:8F:59:16:16:D7:7F X509v3 Authority Key Identifier: keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:25:fe:5e:28:cf:0b:a0:10:8b:d5:33:72:4b:39:04:3b: bd:53:c9:2c:85:00:35:a9:24:fe:53:b7:36:2f:ef:18:d3:dc: d6:4d:cb:45:94:c8:75:35:b4:fb:35:12:f4:f9:14:fb:c5:01: a7:a0:70:84:2f:bb:98:07:14:05:4b:09:9f:f3:83:59:97:35: d6:22:94:9c:35:5b:9c:85:69:5d:e1:e3:41:3c:c3:22:0a:a3: f7:3b:d8:36:12:f5:6c:6b:6a:4c:88:34:96:4e:5d:58:c5:ea: 7b:06:2f:28:ff:73:53:ea:ab:94:73:06:23:ed:62:42:7f:f9: 76:f1:e2:f6:02:a3:ae:90:ba:ce:28:a7:66:da:49:f2:1d:ea: ed:ca:7f:97:54:a5:37:ef:0f:53:5b:b3:0a:f7:c1:d2:91:31: f9:da:65:84:88:d2:05:45:97:21:30:da:47:2b:22:8f:d9:53: 21:34:93:fd:4c:a0:65:1b:25:1e:b9:38:7d:34:27:28:bb:6a: ea:7d:59:ef:21:17:3a:3f:62:01:40:97:0c:d4:99:63:71:00: f3:f4:db:8b:e1:9c:fd:03:fb:b4:bb:fb:06:c6:bf:3a:53:9b: ce:80:c9:94:d6:00:ae:88:26:ec:73:84:cf:33:22:f1:57:38: 6f:06:f9:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKEJGRjU4MTUxMThDM0JDREQ4RDVBQzIzMTdEQkJDRkEz OTk3RTM1RjYwHhcNMjUxMTA1MDQzODM3WhcNMjUxMTEyMDQzODM3WjAYMRYwFAYD VQQDEw02OTBhZDRjZS04NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu2SPDT6NN62SPQROri68opSxDcFqo70ffTdidL5rfjaUp2UnIIIWh+bglnb TOvCta2BNKepNqebXTY4181+IOSu6aWwyLTFdNRLLV4jOFku8VK9vmV6q9dN0aT8 VaAbSSz9Yh25HZNBs+NU4bzYfdMQNE2G4YNVzGTFdD4tYvjy71vb6PSfMXWD0edz uUeBJ6yS025cberxOezDwWyOIiUn1j765GBR9fhQXe5/V9luVR6THiw9yD7gnRVV vm9dlUTGVJsgOCCcGoEE/dXZf2aXOQe36alufOZ5wgVBuqoaxW0NQOPDjqdpYEy8 3vOTMXZFSogfkjDmOvIlYMcdKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbqc/Og iVVa9RMESPBtj1kWFtd/MB8GA1UdIwQYMBaAFL/1gVEYw7zdjVrCMX27z6OZfjX2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9EREM5NDJBQURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZOMk5Xc0l4ZmJ2UG81bC1O ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5mWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9EREM5NDJBQURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZO Mk5Xc0l4ZmJ2UG81bC1OZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqCyX+XijPC6AQi9Uzcks5BDu9U8kshQA1qST+U7c2L+8Y09zWTctF lMh1NbT7NRL0+RT7xQGnoHCEL7uYBxQFSwmf84NZlzXWIpScNVuchWld4eNBPMMi CqP3O9g2EvVsa2pMiDSWTl1Yxep7Bi8o/3NT6quUcwYj7WJCf/l28eL2AqOukLrO KKdm2knyHertyn+XVKU37w9TW7MK98HSkTH52mWEiNIFRZchMNpHKyKP2VMhNJP9 TKBlGyUeuTh9NCcou2rqfVnvIRc6P2IBQJcM1JljcQDz9NuL4Zz9A/u0u/sGxr86 U5vOgMmU1gCuiCbsc4TPMyLxVzhvBvkW -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:45 2025 by rpki-client