$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: ALr1R5TI+jbbCikhDCKC3PwPB8PBzxqWubIlvQVmz5g= Subject key identifier: 09:7D:2D:C1:B8:CE:FA:8C:15:C8:99:33:59:3A:D3:60:1B:70:FB:17 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: AC Signing time: Wed 05 Nov 2025 06:28:28 +0000 Manifest this update: Wed 05 Nov 2025 06:28:28 +0000 Manifest next update: Wed 12 Nov 2025 06:28:28 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: qpEEkEYAHuwwWjw9xmyVOBtl5eGoqVMoKimw+vmeEtM=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: OeFUJInFH4cNkqvMFV8k9Dy5HiypZ14/pThp2DVW2AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Nov 5 06:28:28 2025 GMT Not After : Nov 12 06:28:28 2025 GMT Subject: CN=690aee8c-0921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:f2:03:20:de:d4:f0:74:c6:b1:a8:ff:e6: 04:73:8f:be:69:e5:b4:5f:cb:ec:f7:39:63:0e:da: 93:0b:5d:1d:62:b0:b6:17:3a:13:78:57:a8:f1:29: f1:93:5b:af:4a:5b:92:61:2e:84:e9:83:42:5f:9a: 98:21:6c:68:98:6b:eb:5c:0a:dd:02:54:6c:0d:f1: 44:41:d7:03:bf:1c:4d:80:9d:1c:df:c3:0c:a7:15: d0:b4:f6:7c:0b:a0:9b:7b:3c:51:d5:a4:66:58:66: dc:59:aa:b8:ec:18:d4:59:20:18:72:06:c1:ed:bc: 56:46:f5:df:7f:07:83:e5:a9:4a:6d:55:27:9d:0a: 52:eb:77:48:8d:4e:97:f4:cb:60:07:f8:7c:fb:e4: ad:f9:a4:27:26:4b:ac:cc:85:de:d8:cd:cf:9a:67: 05:35:cf:64:13:40:89:bc:ca:ba:00:49:3c:80:00: 79:39:52:87:a2:1d:93:b3:a6:3f:bf:38:e3:fc:f1: 65:74:fc:66:1f:4a:17:ae:85:00:30:a4:70:24:0b: 19:06:91:98:1f:93:6e:d0:3b:6f:f7:55:27:a3:af: 3c:8f:fb:47:16:3e:3c:74:76:ac:8a:9e:c7:1e:bc: 28:59:b3:c0:4a:9d:da:56:d7:f7:80:bf:48:d1:ed: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7D:2D:C1:B8:CE:FA:8C:15:C8:99:33:59:3A:D3:60:1B:70:FB:17 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7b:04:c5:e3:80:b2:90:f0:bb:31:fe:42:32:58:55:6e:92: 7a:b3:3b:ae:03:c4:46:8e:96:02:94:4e:98:04:0c:57:18:19: 2a:93:dd:65:24:7f:a1:b9:40:ee:3c:99:fa:71:bd:1f:14:cf: 7a:ee:4d:78:2e:c1:25:b2:31:89:b9:be:41:4e:0c:76:89:2c: 76:03:5d:28:c9:47:73:f5:2c:2b:db:a6:1b:8f:95:82:5f:58: b3:c1:03:7b:fd:10:b1:0e:f7:34:64:3d:b9:da:f4:9e:e6:75: 54:b7:0c:a5:84:84:ca:2f:13:df:74:98:0d:cc:f1:ec:c7:fe: 97:c0:ab:6f:14:7f:13:dd:f9:e2:83:e7:3e:ac:c4:82:b4:73: ac:3d:4b:cc:ca:ab:21:ec:46:21:fc:ee:c5:c8:ce:0f:a1:29: 71:30:1c:44:99:81:36:34:d5:a4:c6:e1:a8:f4:96:64:06:e5: 22:d2:f7:0d:5f:23:bc:95:d4:83:b0:40:a6:6f:ac:78:fa:00: 97:7d:a9:df:bc:cf:80:22:c5:4d:e9:bf:fe:b9:15:b7:47:f2: 18:22:68:5d:42:c3:9c:03:75:b3:1b:ce:67:e5:fa:c2:3f:f0: 15:2b:4b:e2:5b:02:95:e3:84:25:62:10:bc:e6:ed:1a:eb:ab: 2e:55:b6:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjUxMTA1MDYyODI4WhcNMjUxMTEyMDYyODI4WjAYMRYwFAYD VQQDEw02OTBhZWU4Yy0wOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5S3yAyDe1PB0xrGo/+YEc4++aeW0X8vs9zljDtqTC10dYrC2FzoTeFeo8Snx k1uvSluSYS6E6YNCX5qYIWxomGvrXArdAlRsDfFEQdcDvxxNgJ0c38MMpxXQtPZ8 C6CbezxR1aRmWGbcWaq47BjUWSAYcgbB7bxWRvXffweD5alKbVUnnQpS63dIjU6X 9MtgB/h8++St+aQnJkuszIXe2M3PmmcFNc9kE0CJvMq6AEk8gAB5OVKHoh2Ts6Y/ vzjj/PFldPxmH0oXroUAMKRwJAsZBpGYH5Nu0Dtv91Uno688j/tHFj48dHasip7H HrwoWbPASp3aVtf3gL9I0e0NNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl9LcG4 zvqMFciZM1k602AbcPsXMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKewTF44CykPC7Mf5CMlhVbpJ6szuuA8RGjpYClE6YBAxXGBkqk91l JH+huUDuPJn6cb0fFM967k14LsElsjGJub5BTgx2iSx2A10oyUdz9Swr26Ybj5WC X1izwQN7/RCxDvc0ZD252vSe5nVUtwylhITKLxPfdJgNzPHsx/6XwKtvFH8T3fni g+c+rMSCtHOsPUvMyqsh7EYh/O7FyM4PoSlxMBxEmYE2NNWkxuGo9JZkBuUi0vcN XyO8ldSDsECmb6x4+gCXfanfvM+AIsVN6b/+uRW3R/IYImhdQsOcA3WzG85n5frC P/AVK0viWwKV44QlYhC85u0a66suVbbI -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:47 2025 by rpki-client