$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft File: wFrpU0_TnWSMKEQ8SNURu6moyv4.mft (raw, json) Hash identifier: 32GqHmPU96jtKMGVLiebNNKBj/xQQ+Kdkzv6+LwVpOw= Subject key identifier: E0:2A:B9:94:CC:FD:C0:DA:67:BB:F3:94:88:92:FE:F8:A8:79:F0:EA Authority key identifier: C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE Certificate issuer: /CN=A917C11F/serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft Manifest number: 0645 Signing time: Tue 04 Nov 2025 22:45:03 +0000 Manifest this update: Tue 04 Nov 2025 22:45:02 +0000 Manifest next update: Tue 11 Nov 2025 22:45:02 +0000 Files and hashes: 1: wFrpU0_TnWSMKEQ8SNURu6moyv4.crl (hash: HirK4XkjzoYc9pnNjy3+EQxuE1GYUUGlRRfc9ZaM8KU=) 2: 2E7B4D90ACD411EBA8C2F944C4F9AE02.roa (hash: MwOY3BipT7r/AeBZi7pm11RmpGFzpmYVKaT5s//Pc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11F, serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Validity Not Before: Nov 4 22:45:02 2025 GMT Not After : Nov 11 22:45:02 2025 GMT Subject: CN=690a81ef-531f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:34:f7:cf:45:3c:84:07:fe:6b:29:44:1b:d4: a5:c6:3f:9b:1a:aa:d4:bb:49:26:80:70:9e:af:71: c2:92:bc:80:1e:3d:cf:b1:7c:d6:47:ae:81:7c:94: f3:33:4e:a0:4f:68:cb:5b:4d:33:5b:e2:9d:29:1d: 02:d2:27:0d:ee:78:ff:fb:91:02:8c:9e:23:61:31: 68:1d:83:f9:48:e4:07:10:10:10:f2:64:19:e1:dd: f5:c1:8f:19:f0:c7:77:97:da:18:6f:72:98:e2:42: c3:4a:73:03:4e:a8:4a:e9:8c:15:46:0e:ef:3a:c7: a7:1a:fb:16:fd:fe:dd:3d:24:3b:e1:4d:6f:37:ec: 16:71:a2:1b:3d:56:a2:c8:36:73:ee:65:0a:1e:b8: f4:f8:e1:a3:71:18:d0:ca:35:e2:06:ab:65:7f:b1: 6f:d0:33:a1:82:ab:7a:d2:03:2f:27:96:56:60:9a: f6:ef:16:37:79:b1:5e:68:27:40:dd:c2:e7:41:1a: 85:48:de:a4:d8:c3:4e:16:77:05:17:e5:f3:13:85: 1d:4f:1e:ee:5c:58:6c:14:7f:d8:ef:08:a4:19:79: ff:34:3c:a6:2a:cb:f0:e4:c2:d7:37:2f:18:80:9a: 51:16:f2:41:5f:3d:02:67:ad:99:43:fd:84:97:5e: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2A:B9:94:CC:FD:C0:DA:67:BB:F3:94:88:92:FE:F8:A8:79:F0:EA X509v3 Authority Key Identifier: keyid:C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c7:8d:8b:df:9a:9a:70:bb:40:5f:ef:b4:48:49:26:e4:e7: 9b:55:10:0a:95:f5:58:a0:3f:8d:08:eb:5d:cf:02:58:da:21: a2:9d:fc:a0:2a:77:64:d3:a0:fa:ed:d6:d1:dd:97:24:69:60: fb:cc:6d:0e:fe:92:99:ea:7d:76:a7:0d:8b:38:81:5d:1f:64: 0a:1b:16:5a:8d:f9:a4:b2:e3:0f:c6:67:da:fd:70:23:97:a7: 9a:c6:99:c4:95:46:e0:e8:4e:73:f6:40:ad:00:e2:5a:3b:e7: bc:91:a7:60:e2:c6:20:82:27:1f:6c:8a:67:7b:8c:10:72:e4: e3:83:1e:c7:6b:03:cd:b0:8b:a9:a9:e4:c0:9d:c7:7b:18:27: 06:82:61:78:78:88:8e:87:44:90:aa:21:9c:d8:6d:6a:57:c0: d6:8b:6d:57:4e:28:cc:f0:05:42:e1:ab:b6:49:16:a9:54:fd: 5a:94:1b:49:85:07:c8:02:12:60:43:b1:22:78:f7:e6:25:82: 13:8c:25:00:fd:cb:82:91:c7:ea:7e:e3:c8:da:c5:6d:dc:5d: 49:fc:27:09:33:9e:52:31:ab:e9:3d:44:24:54:d1:c6:bc:72: 35:d5:0a:e1:f3:60:ee:cb:30:ea:9a:a0:13:ab:72:b8:34:be: f7:61:98:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUYxMTAvBgNVBAUTKEMwNUFFOTUzNEZEMzlENjQ4QzI4NDQzQzQ4RDUxMUJC QTlBOENBRkUwHhcNMjUxMTA0MjI0NTAyWhcNMjUxMTExMjI0NTAyWjAYMRYwFAYD VQQDEw02OTBhODFlZi01MzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jT3z0U8hAf+aylEG9Slxj+bGqrUu0kmgHCer3HCkryAHj3PsXzWR66BfJTz M06gT2jLW00zW+KdKR0C0icN7nj/+5ECjJ4jYTFoHYP5SOQHEBAQ8mQZ4d31wY8Z 8Md3l9oYb3KY4kLDSnMDTqhK6YwVRg7vOsenGvsW/f7dPSQ74U1vN+wWcaIbPVai yDZz7mUKHrj0+OGjcRjQyjXiBqtlf7Fv0DOhgqt60gMvJ5ZWYJr27xY3ebFeaCdA 3cLnQRqFSN6k2MNOFncFF+XzE4UdTx7uXFhsFH/Y7wikGXn/NDymKsvw5MLXNy8Y gJpRFvJBXz0CZ62ZQ/2El14/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAquZTM /cDaZ7vzlIiS/vioefDqMB8GA1UdIwQYMBaAFMBa6VNP051kjChEPEjVEbupqMr+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExRi85RTg4QUUxOEFD RDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5XU01LRVE4U05VUnU2bW95 djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGcnBVMF9UbldTTUtFUThTTlVSdTZtb3l2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExRi85RTg4QUUxOEFDRDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5X U01LRVE4U05VUnU2bW95djQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTx42L35qacLtAX++0SEkm5OebVRAKlfVYoD+NCOtdzwJY2iGinfyg Kndk06D67dbR3ZckaWD7zG0O/pKZ6n12pw2LOIFdH2QKGxZajfmksuMPxmfa/XAj l6eaxpnElUbg6E5z9kCtAOJaO+e8kadg4sYggicfbIpne4wQcuTjgx7HawPNsIup qeTAncd7GCcGgmF4eIiOh0SQqiGc2G1qV8DWi21XTijM8AVC4au2SRapVP1alBtJ hQfIAhJgQ7EiePfmJYITjCUA/cuCkcfqfuPI2sVt3F1J/CcJM55SMavpPUQkVNHG vHI11Qrh82DuyzDqmqATq3K4NL73YZgW -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:13 2025 by rpki-client