$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft File: wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json) Hash identifier: YuxFXrNe9HISV0T60vApXtfJ4edWBjI5I+29WlT7Pu4= Subject key identifier: 39:A8:4E:59:D4:AA:77:6B:BF:EE:EF:0F:65:D8:1B:0D:2A:A9:96:9E Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 Certificate issuer: /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft Manifest number: 06A8 Signing time: Tue 04 Nov 2025 22:20:09 +0000 Manifest this update: Tue 04 Nov 2025 22:20:08 +0000 Manifest next update: Tue 11 Nov 2025 22:20:08 +0000 Files and hashes: 1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: 9RZPa3DSogg1XvcMjq1IE6jF0TGpMSRc0a1cQyOHRlU=) 2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Validity Not Before: Nov 4 22:20:08 2025 GMT Not After : Nov 11 22:20:08 2025 GMT Subject: CN=690a7c19-90e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:3c:6a:9c:57:4e:00:9c:27:f6:29:62:1d: 92:5b:92:1b:25:0e:51:e9:a5:20:5d:28:b5:70:42: 79:47:0e:4f:93:cf:fd:96:65:1d:20:42:23:75:ee: 7e:44:f1:c6:6f:97:cd:1b:d7:0e:74:4f:62:56:bc: 5d:a2:18:75:27:a0:17:d9:35:d3:8d:ac:54:70:65: 82:fe:1c:3a:00:1d:c2:f6:4a:41:d8:56:22:67:dc: 3c:3a:4e:fc:8f:e3:f8:f3:30:c8:83:4b:de:2b:c1: 91:0c:c8:b5:cc:0c:a1:f3:c9:88:b9:0d:8f:fe:a9: fc:e8:2a:d5:c3:3c:fc:a4:73:b2:71:6a:ce:9c:1f: 8f:1d:b1:51:98:db:67:ea:26:db:e5:39:64:26:0c: 3e:c1:80:9d:e5:43:fd:d8:1e:dc:c4:82:ab:6a:c5: 6f:eb:9e:ca:de:71:c4:81:e5:61:cc:96:98:bf:90: 38:99:84:36:cc:b9:fa:75:30:50:c4:2f:eb:dc:ad: 0f:98:90:f6:cf:34:96:54:e8:5b:c2:6e:64:8c:71: 23:e0:59:97:af:3f:85:3e:ce:1a:e6:41:64:4f:60: 6d:4e:11:63:1e:fa:d5:e7:2e:78:41:47:48:d2:45: d1:e1:e3:1c:e9:20:7b:4b:ee:f7:92:e6:7d:c5:ee: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A8:4E:59:D4:AA:77:6B:BF:EE:EF:0F:65:D8:1B:0D:2A:A9:96:9E X509v3 Authority Key Identifier: keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:90:72:0d:d2:17:cd:14:f9:7a:cb:c7:9f:b0:02:c7:f6:f4: f5:8c:d9:7c:72:8f:a1:c3:dd:1b:0c:32:57:3e:66:ab:e5:b1: dc:71:86:83:02:47:42:68:e8:80:5f:05:47:a8:5f:de:7c:bb: f2:08:df:ef:ba:20:46:ea:10:c0:6c:23:a6:c4:bf:d9:88:b1: 3f:a4:c7:f7:27:0b:9c:4e:c0:9a:d4:ff:2f:5d:6f:85:36:51: 91:ac:68:e8:8b:e2:93:9a:55:e4:c3:e5:ab:17:d0:d2:0e:3c: a4:89:d1:ee:98:d0:bb:a9:95:b2:6e:38:29:44:84:d6:59:91: 47:fa:cf:ce:ff:2d:3a:3d:8b:4d:41:be:ec:14:f5:f4:b2:f3: ee:d4:f8:30:bc:91:91:fe:70:20:6b:5e:39:39:3a:07:2a:5e: f7:b1:40:1d:c2:f2:fa:e0:95:1c:82:01:98:49:4a:3d:fe:7d: 00:4a:cd:e9:0f:63:4b:93:e9:f0:e6:05:17:06:66:ba:c7:c4: 62:5a:bf:c5:38:b4:41:21:9a:71:f5:4e:ae:1f:e6:97:41:ad: f3:a6:cf:fb:ad:1c:01:3e:50:18:cb:c1:27:f6:26:98:21:fe: 95:41:d5:01:3a:72:04:b8:0f:92:29:58:8f:b8:46:51:07:a3: 26:cd:f5:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2 N0JBMUE5ODMwHhcNMjUxMTA0MjIyMDA4WhcNMjUxMTExMjIyMDA4WjAYMRYwFAYD VQQDEw02OTBhN2MxOS05MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYs8apxXTgCcJ/YpYh2SW5IbJQ5R6aUgXSi1cEJ5Rw5Pk8/9lmUdIEIjde5+ RPHGb5fNG9cOdE9iVrxdohh1J6AX2TXTjaxUcGWC/hw6AB3C9kpB2FYiZ9w8Ok78 j+P48zDIg0veK8GRDMi1zAyh88mIuQ2P/qn86CrVwzz8pHOycWrOnB+PHbFRmNtn 6ibb5TlkJgw+wYCd5UP92B7cxIKrasVv657K3nHEgeVhzJaYv5A4mYQ2zLn6dTBQ xC/r3K0PmJD2zzSWVOhbwm5kjHEj4FmXrz+FPs4a5kFkT2BtThFjHvrV5y54QUdI 0kXR4eMc6SB7S+73kuZ9xe7VtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmoTlnU qndrv+7vD2XYGw0qqZaeMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1 MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFGRC8xMkFDRjA3Qzg1MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40 cEJxTktUSHdzclpudWhxWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCikHIN0hfNFPl6y8efsALH9vT1jNl8co+hw90bDDJXPmar5bHccYaD AkdCaOiAXwVHqF/efLvyCN/vuiBG6hDAbCOmxL/ZiLE/pMf3JwucTsCa1P8vXW+F NlGRrGjoi+KTmlXkw+WrF9DSDjykidHumNC7qZWybjgpRITWWZFH+s/O/y06PYtN Qb7sFPX0svPu1PgwvJGR/nAga145OToHKl73sUAdwvL64JUcggGYSUo9/n0ASs3p D2NLk+nw5gUXBma6x8RiWr/FOLRBIZpx9U6uH+aXQa3zps/7rRwBPlAYy8En9iaY If6VQdUBOnIEuA+SKViPuEZRB6MmzfW4 -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:47 2025 by rpki-client