$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json) Hash identifier: u6RDgb6nwba1tjLFDrwsho4NgZyp6frLqJkmCZAc3lo= Subject key identifier: C9:34:F7:A7:B5:41:D5:FB:1A:FA:60:A9:59:C3:81:61:13:5E:5E:91 Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft Manifest number: 7B Signing time: Mon 03 Nov 2025 06:47:17 +0000 Manifest this update: Mon 03 Nov 2025 06:47:16 +0000 Manifest next update: Mon 10 Nov 2025 06:47:16 +0000 Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: SFxTo53xHEin/W+EDDjpdN5k+5Ad6GLcR1VxLJpwuYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Validity Not Before: Nov 3 06:47:16 2025 GMT Not After : Nov 10 06:47:16 2025 GMT Subject: CN=69084ff4-ef1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:46:64:5f:f9:e5:65:15:8b:1f:ba:61:fe: e3:42:9c:69:19:c9:5f:8f:a2:b2:2f:4f:15:48:b6: 39:dc:67:a5:e6:44:13:f4:43:ea:12:22:2c:1c:4e: 0e:0c:3a:2f:3c:1c:b1:87:6e:a7:fd:9f:84:c6:49: 3a:fb:4d:c8:65:12:0a:cf:31:e0:cb:d1:31:7f:f4: 4e:fd:62:7d:4e:7d:37:8e:4e:23:81:50:9a:d9:d8: 4e:11:69:44:d5:10:8f:ab:5c:04:23:16:ef:7c:a3: 5d:63:c9:0c:a6:5b:df:be:b4:f2:71:e5:1f:f7:08: 89:18:0c:92:3e:dd:52:83:2a:c3:b6:dc:8d:7e:8c: 37:70:51:56:d2:23:fa:c0:e9:b5:2f:4e:d1:27:25: 9f:dd:b1:34:ae:2a:9e:59:f8:74:64:73:4e:45:cc: 9e:58:b1:61:cb:27:96:86:81:83:de:2d:01:1a:af: 2c:71:6b:de:f3:6c:94:d4:2a:84:88:c5:74:5d:a3: 2c:ad:05:4f:df:e2:89:dc:46:90:74:72:88:6e:9c: 60:be:a6:22:d1:13:80:06:c7:c3:85:f2:2a:21:86: c4:6a:89:99:bf:b1:4c:1b:3f:d7:b4:3b:cf:72:59: 1c:1e:11:2b:86:2d:e4:e2:8e:75:8f:72:62:9c:4f: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:F7:A7:B5:41:D5:FB:1A:FA:60:A9:59:C3:81:61:13:5E:5E:91 X509v3 Authority Key Identifier: keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3f:08:91:bc:c4:0c:f7:76:7f:24:09:01:ed:04:f7:b6:be: a7:73:ef:2e:6a:db:8e:23:14:cd:25:4f:06:11:16:71:66:0f: 66:ed:19:79:e2:d3:d1:ac:75:4a:7d:cf:22:c8:ac:93:94:54: b5:f4:b8:c9:e4:03:9f:05:a4:0e:e2:d2:8f:ec:57:9a:89:04: 33:ad:ee:16:17:6f:0b:ff:fa:14:a0:8c:05:7c:58:93:98:6c: c0:bd:11:d7:c1:af:fb:ee:43:87:84:b0:51:2d:dd:7a:ca:c5: f6:ef:23:15:2d:08:b1:a1:3c:de:2d:3f:41:39:bd:aa:c4:81: 78:cb:d0:bd:51:7a:59:27:3a:c1:fe:53:06:f8:75:bd:68:39: fb:68:07:a4:52:93:d0:24:53:55:52:6a:85:c2:2d:09:3e:1d: ab:a5:c1:11:6c:2c:82:fc:fe:19:33:a8:f8:79:ed:23:9c:8a: 9b:f2:fb:d5:78:b3:b5:8a:0a:e3:a5:b9:73:07:71:4f:b4:b1: 85:3a:58:6c:ba:04:2c:bd:5e:ff:ec:fc:6e:db:b8:69:e0:66: 06:6e:2d:42:86:44:fb:a2:16:7b:4f:b8:e2:a8:ec:b9:a4:4e: ff:0d:b6:f9:fd:17:71:8e:4b:c8:4b:ce:a8:7c:40:1d:4d:7b: ca:95:71:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0NERDExMC8GA1UEBRMoNUFCRTMzN0U2NUMwMEJFQTg0N0NFMEQyNTlDODg3RTRG REIzQjkyMTAeFw0yNTExMDMwNjQ3MTZaFw0yNTExMTAwNjQ3MTZaMBgxFjAUBgNV BAMTDTY5MDg0ZmY0LWVmMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuR0ZkX/nlZRWLH7ph/uNCnGkZyV+PorIvTxVItjncZ6XmRBP0Q+oSIiwcTg4M Oi88HLGHbqf9n4TGSTr7TchlEgrPMeDL0TF/9E79Yn1OfTeOTiOBUJrZ2E4RaUTV EI+rXAQjFu98o11jyQymW9++tPJx5R/3CIkYDJI+3VKDKsO23I1+jDdwUVbSI/rA 6bUvTtEnJZ/dsTSuKp5Z+HRkc05FzJ5YsWHLJ5aGgYPeLQEaryxxa97zbJTUKoSI xXRdoyytBU/f4oncRpB0cohunGC+piLRE4AGx8OF8iohhsRqiZm/sUwbP9e0O89y WRweESuGLeTijnWPcmKcTzgVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyTT3p7VB 1fsa+mCpWcOBYRNeXpEwHwYDVR0jBBgwFoAUWr4zfmXAC+qEfODSWciH5P2zuSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQ0RELzM5QjFCMzYyRkRE ODExRUZCNTI1QjY3NEM0RjlBRTAyL1dyNHpmbVhBQy1xRWZPRFNXY2lINVAyenVT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3I0emZtWEFDLXFFZk9EU1djaUg1UDJ6dVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz Q0RELzM5QjFCMzYyRkREODExRUZCNTI1QjY3NEM0RjlBRTAyL1dyNHpmbVhBQy1x RWZPRFNXY2lINVAyenVTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGM/CJG8xAz3dn8kCQHtBPe2vqdz7y5q244jFM0lTwYRFnFmD2btGXni 09GsdUp9zyLIrJOUVLX0uMnkA58FpA7i0o/sV5qJBDOt7hYXbwv/+hSgjAV8WJOY bMC9EdfBr/vuQ4eEsFEt3XrKxfbvIxUtCLGhPN4tP0E5varEgXjL0L1RelknOsH+ Uwb4db1oOftoB6RSk9AkU1VSaoXCLQk+HaulwRFsLIL8/hkzqPh57SOcipvy+9V4 s7WKCuOluXMHcU+0sYU6WGy6BCy9Xv/s/G7buGngZgZuLUKGRPuiFntPuOKo7Lmk Tv8Ntvn9F3GOS8hLzqh8QB1Ne8qVcfg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:15 2025 by rpki-client