$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: NxzSFM6oAAnjJ69qrpMcszA1YD7C6uET8MyxtOw1WzE= Subject key identifier: 28:49:A2:B3:0D:4A:7A:61:C9:ED:AC:DD:09:C6:D5:72:A0:5F:D3:CE Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0B28 Signing time: Tue 04 Nov 2025 19:22:44 +0000 Manifest this update: Tue 04 Nov 2025 19:22:43 +0000 Manifest next update: Tue 11 Nov 2025 19:22:43 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: VpEO4NfUS+Kg0ShuikThLmqyHFpkg+YMcADIpVxuHQM=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Nov 4 19:22:43 2025 GMT Not After : Nov 11 19:22:43 2025 GMT Subject: CN=690a5284-3ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:06:5a:96:f0:11:be:31:4c:14:77:52:0e: 81:9f:8a:6c:2c:a0:71:ae:2b:ba:4f:86:24:3c:56: 5a:e1:23:8c:fb:88:9b:90:06:e4:e0:79:d6:67:ec: d6:37:4a:2a:b7:e0:50:2c:55:79:5a:09:39:d8:c1: 98:63:6f:50:d9:9e:1b:2d:a3:a8:17:0c:cb:96:ca: 54:91:f4:ca:22:3c:69:2a:87:69:e1:68:e6:e8:19: 1d:d3:53:9e:44:3f:03:66:9b:6b:98:dd:be:1c:eb: 8c:0c:e8:cc:f4:42:28:51:6b:74:10:89:90:b6:2b: 22:8d:bb:c3:62:03:cd:18:0f:79:58:49:56:59:ac: 37:ba:e4:33:11:75:a4:7c:d6:eb:c8:57:94:68:6c: b7:fa:39:59:e8:a7:0a:d1:8e:47:e9:a1:fb:e0:f5: 88:70:42:81:ad:09:bf:4b:86:5a:b3:6c:3d:b0:70: 03:7a:29:24:ad:ed:64:10:84:da:6f:fa:90:52:ee: b8:10:ee:60:0e:ca:3d:d5:a1:a3:0b:ea:3a:df:62: a8:17:07:ea:50:e8:9d:ac:39:b0:93:b6:52:6c:c0: 6f:00:43:b2:5e:48:b3:c1:7f:08:5c:1b:b7:45:3c: 4d:f6:fb:60:97:68:40:d8:53:9a:1f:33:b0:68:3c: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:49:A2:B3:0D:4A:7A:61:C9:ED:AC:DD:09:C6:D5:72:A0:5F:D3:CE X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f9:d7:59:e0:79:f3:10:7c:a0:1a:d7:65:92:16:3d:12:17: 30:38:4e:11:37:b9:24:93:6c:b5:b9:f9:4f:2c:5c:75:55:7c: c5:04:90:60:f6:b5:5c:e7:07:13:3f:02:a4:3a:fe:a2:d0:89: f4:64:61:a1:86:7b:ec:80:fb:0f:ad:34:77:d3:b5:2d:74:07: 8e:3a:95:49:37:b9:62:94:87:5b:61:85:c1:78:d3:ce:c8:5b: 22:a8:12:d5:3f:49:3f:3e:5e:a7:14:db:6c:29:4d:67:f6:14: 76:f0:d1:96:cc:97:c0:00:47:50:76:bf:79:6d:31:97:27:4b: 6d:58:d9:29:6f:b4:93:07:2e:6b:7b:04:b5:49:df:86:04:a2: a2:68:9e:18:ae:c8:0d:1a:80:bc:51:79:20:ce:5d:f3:e0:d7: 6a:1d:72:21:46:36:6f:4d:ab:07:46:f6:61:55:9c:6b:a6:ff: 53:d2:4a:6a:78:4e:29:cc:10:2a:2a:31:f3:49:56:b9:a7:53: 01:68:a9:15:64:b1:87:9f:78:af:94:fb:cc:73:12:8e:a3:c3: 57:89:a5:6b:4c:f5:0b:22:9e:25:f5:88:aa:c6:da:9b:f6:c4: 9c:51:7a:79:35:ed:f0:81:a6:73:c4:a6:77:73:df:66:09:a6: 27:37:c3:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUxMTA0MTkyMjQzWhcNMjUxMTExMTkyMjQzWjAYMRYwFAYD VQQDEw02OTBhNTI4NC0zY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DYGWpbwEb4xTBR3Ug6Bn4psLKBxriu6T4YkPFZa4SOM+4ibkAbk4HnWZ+zW N0oqt+BQLFV5Wgk52MGYY29Q2Z4bLaOoFwzLlspUkfTKIjxpKodp4Wjm6Bkd01Oe RD8DZptrmN2+HOuMDOjM9EIoUWt0EImQtisijbvDYgPNGA95WElWWaw3uuQzEXWk fNbryFeUaGy3+jlZ6KcK0Y5H6aH74PWIcEKBrQm/S4Zas2w9sHADeikkre1kEITa b/qQUu64EO5gDso91aGjC+o632KoFwfqUOidrDmwk7ZSbMBvAEOyXkizwX8IXBu3 RTxN9vtgl2hA2FOaHzOwaDycEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChJorMN Snphye2s3QnG1XKgX9POMB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA+ddZ4HnzEHygGtdlkhY9EhcwOE4RN7kkk2y1uflPLFx1VXzFBJBg 9rVc5wcTPwKkOv6i0In0ZGGhhnvsgPsPrTR307UtdAeOOpVJN7lilIdbYYXBeNPO yFsiqBLVP0k/Pl6nFNtsKU1n9hR28NGWzJfAAEdQdr95bTGXJ0ttWNkpb7STBy5r ewS1Sd+GBKKiaJ4YrsgNGoC8UXkgzl3z4NdqHXIhRjZvTasHRvZhVZxrpv9T0kpq eE4pzBAqKjHzSVa5p1MBaKkVZLGHn3ivlPvMcxKOo8NXiaVrTPULIp4l9Yiqxtqb 9sScUXp5Ne3wgaZzxKZ3c99mCaYnN8Mt -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:44 2025 by rpki-client