$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: FxCAFEfoawSiB5WWFOeEMBApL79Riq2e4PAtAvSOGVo= Subject key identifier: 10:60:86:61:D2:31:F7:00:61:65:C6:99:03:9E:50:79:47:0D:E8:02 Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: 0129 Signing time: Wed 05 Nov 2025 04:46:57 +0000 Manifest this update: Wed 05 Nov 2025 04:46:56 +0000 Manifest next update: Wed 12 Nov 2025 04:46:56 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: A8pLBRuRCTdQL/gxnmfmkbjw1GsAdlKWoAixzNWlSD4=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Nov 5 04:46:56 2025 GMT Not After : Nov 12 04:46:56 2025 GMT Subject: CN=690ad6c1-a53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:c4:c1:3a:1d:2e:b2:9b:1f:c3:94:94:26: ec:63:31:f2:8d:e4:cf:e1:1c:68:19:ac:e3:67:77: a9:1b:c7:44:ad:07:75:dd:6f:f2:ca:d7:b7:d5:c1: 9c:28:8f:ff:e5:0d:56:39:20:62:2f:11:7d:13:ea: 3e:f5:88:b0:91:c6:5a:e9:fe:60:c0:c7:b6:21:6a: 3f:5c:ff:16:97:ad:9d:b7:ae:8b:6d:8b:59:7d:d5: d0:38:96:59:8c:a5:bd:6d:26:e3:fc:2b:93:01:fe: 96:4c:44:d4:a8:f7:a8:94:d9:64:e0:09:2a:9b:4d: d4:b2:a4:8a:86:c6:09:95:90:b8:2d:3c:56:2d:2f: bd:7b:03:da:f7:95:55:e2:41:99:b9:bd:44:cd:b3: f3:8f:11:21:cf:af:ae:f0:43:4c:00:55:c8:ae:33: 85:1b:20:59:6c:32:67:f5:a7:aa:77:c4:82:20:13: 71:69:fc:d9:f8:ee:00:b3:21:15:c7:17:3c:e1:75: a0:ba:69:ca:2a:21:92:f9:5f:41:01:59:1e:6e:ff: c6:9e:3b:b9:d7:a7:9f:7b:96:33:3b:97:8f:ef:2c: d3:7a:eb:d7:ee:f0:98:f1:6a:69:79:0b:e1:15:07: 66:ab:ca:6a:0d:c1:61:bf:f0:26:8d:80:9a:0b:f0: f1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:86:61:D2:31:F7:00:61:65:C6:99:03:9E:50:79:47:0D:E8:02 X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a9:0a:8e:0f:59:8e:1a:6b:35:1e:c4:f7:58:2b:0f:97:a8: b4:e1:62:25:be:7b:2a:3d:ed:94:6a:35:3e:93:1c:e3:07:94: 51:72:26:2e:e3:aa:e1:a6:bf:72:31:ff:80:18:e8:04:f7:f8: be:75:61:d9:5e:0b:cf:12:30:e4:85:9d:79:e4:46:16:17:85: 04:97:83:1a:62:e9:d5:17:62:9e:2a:ae:68:f6:45:e1:0a:05: b8:0d:fa:4f:67:4b:28:e0:5d:8e:51:fe:bd:91:43:50:9e:ea: 59:f1:8c:1a:00:d0:12:70:9a:0c:78:94:62:41:56:08:09:bc: a0:04:10:1a:99:e9:98:c0:04:8a:2e:72:2c:5b:e8:8d:f9:1d: 8e:01:7a:f1:69:1a:5f:4a:04:1e:54:c0:72:4f:c9:0c:68:88: 37:b4:48:bf:d5:22:92:f6:1a:67:8e:e0:5e:3f:e9:61:0f:41: cf:eb:9e:2d:ca:2f:c0:1e:df:32:50:2a:62:ca:5f:a1:2a:0e: da:94:10:36:97:de:7a:45:02:87:bd:bb:d8:c2:ee:74:3b:c9: eb:81:a3:5e:a6:0e:75:a3:83:4d:ee:38:bf:db:a8:b8:64:3a: 9d:5b:63:48:91:c1:e3:bc:63:b6:1c:48:07:07:89:4e:2d:63: 83:73:c0:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUxMTA1MDQ0NjU2WhcNMjUxMTEyMDQ0NjU2WjAYMRYwFAYD VQQDEw02OTBhZDZjMS1hNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4rEwTodLrKbH8OUlCbsYzHyjeTP4RxoGazjZ3epG8dErQd13W/yyte31cGc KI//5Q1WOSBiLxF9E+o+9YiwkcZa6f5gwMe2IWo/XP8Wl62dt66LbYtZfdXQOJZZ jKW9bSbj/CuTAf6WTETUqPeolNlk4Akqm03UsqSKhsYJlZC4LTxWLS+9ewPa95VV 4kGZub1EzbPzjxEhz6+u8ENMAFXIrjOFGyBZbDJn9aeqd8SCIBNxafzZ+O4AsyEV xxc84XWgumnKKiGS+V9BAVkebv/Gnju516efe5YzO5eP7yzTeuvX7vCY8WppeQvh FQdmq8pqDcFhv/AmjYCaC/DxeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBghmHS MfcAYWXGmQOeUHlHDegCMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPqQqOD1mOGms1HsT3WCsPl6i04WIlvnsqPe2UajU+kxzjB5RRciYu 46rhpr9yMf+AGOgE9/i+dWHZXgvPEjDkhZ155EYWF4UEl4MaYunVF2KeKq5o9kXh CgW4DfpPZ0so4F2OUf69kUNQnupZ8YwaANAScJoMeJRiQVYICbygBBAamemYwASK LnIsW+iN+R2OAXrxaRpfSgQeVMByT8kMaIg3tEi/1SKS9hpnjuBeP+lhD0HP654t yi/AHt8yUCpiyl+hKg7alBA2l956RQKHvbvYwu50O8nrgaNepg51o4NN7ji/26i4 ZDqdW2NIkcHjvGO2HEgHB4lOLWODc8Ds -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:16 2025 by rpki-client