$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: wQ2XO9Rx+a4pMWUEsKZje2NG5pd24MD797TaQy9z5u0= Subject key identifier: 27:ED:F3:5A:83:43:4E:AA:E2:8F:EA:69:A8:89:C4:97:A8:8C:0D:5D Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 033C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 0338 Signing time: Wed 05 Nov 2025 01:08:31 +0000 Manifest this update: Wed 05 Nov 2025 01:08:30 +0000 Manifest next update: Wed 12 Nov 2025 01:08:30 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: ksryMIBZFvdK8AIyhgw2ipd3zIGnNZJjNcvv8F10lm8=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: Xrafpe77KwQvstPxSi5BewNbQ3AA268J09ld6Gi8xF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 828 (0x33c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: Nov 5 01:08:30 2025 GMT Not After : Nov 12 01:08:30 2025 GMT Subject: CN=690aa38e-55c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:24:8e:9d:64:06:d0:99:64:60:49:14:63:85: 10:e6:9f:71:8f:e8:ac:52:47:83:cd:08:eb:07:c6: f0:b9:e2:25:68:2c:b3:b8:c8:df:ed:83:56:dc:db: cf:26:d6:b0:4e:c0:28:f9:90:6f:83:6e:0a:d3:fe: 15:85:fe:b6:42:3b:72:ba:9a:df:cf:60:d8:32:2f: d8:ac:4f:0d:df:a1:8e:fd:1d:c7:20:06:25:80:06: c2:86:b1:01:4a:69:2a:a5:a5:21:23:02:80:fa:83: f3:67:c9:70:14:9d:b5:9c:f5:6e:a1:2f:13:57:c5: 16:86:f6:d1:bb:63:d6:12:61:01:27:a4:fb:2e:b8: a7:2a:e8:a7:59:23:ba:69:fc:fc:d3:33:ae:68:fd: 2e:b9:78:e3:15:95:96:ce:c7:64:00:a9:a0:87:37: 2b:7b:03:a9:09:71:3b:ab:e4:4e:5e:be:50:63:c7: c1:a1:d2:f4:da:41:e0:0a:ad:e8:d6:0a:70:ad:48: 6f:4e:5e:40:86:7e:ac:6e:8a:12:03:04:77:a9:01: 43:75:0a:f0:e4:6e:47:29:d0:15:d1:15:ce:8d:83: 1d:f6:74:3e:33:d6:a7:5a:ad:2b:99:f8:b6:bf:96: bf:23:04:1b:9c:97:91:48:2e:2c:b5:fb:42:cd:b6: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:ED:F3:5A:83:43:4E:AA:E2:8F:EA:69:A8:89:C4:97:A8:8C:0D:5D X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:30:b3:fb:ef:c8:89:b8:56:f2:a0:2b:85:86:8b:a3:c8:30: 10:37:23:0c:14:8b:62:46:28:d7:26:33:6b:ef:57:df:c5:5b: 8d:1c:0c:c7:6c:47:bd:dc:68:3a:45:f5:c2:6a:c9:40:be:65: 40:1e:64:83:71:04:35:cd:9a:d8:0b:fa:02:1c:01:78:e1:84: 49:98:59:c0:f8:e8:0e:50:4b:c0:a0:91:39:72:29:98:8f:a3: bf:dd:bb:f8:53:23:48:7f:e1:dc:63:3b:8c:a8:87:93:80:ba: 12:05:ea:ec:0e:92:1d:88:e0:f7:32:02:5c:e6:71:f6:82:66: 8e:e3:ca:c7:87:b4:ac:d7:cc:40:dc:a4:8d:9f:a9:dc:c9:28: 32:ad:b4:dd:78:28:e8:c5:66:a3:b6:18:fc:0e:bd:83:31:37: a6:cf:47:d3:31:c8:39:85:73:91:85:22:4d:87:71:aa:35:9c: df:4a:16:3e:dd:74:c5:94:03:55:34:a7:28:30:95:6b:ae:23: ac:84:f0:8a:e2:82:28:e1:78:b7:89:64:3d:bf:c0:89:b4:7e: 35:bf:09:05:01:24:e0:d8:4b:38:c6:41:84:f5:49:35:4d:f7: bb:98:d8:fc:ae:c0:92:1f:48:dd:b2:0d:c5:dd:f2:2a:a7:46: 91:57:1c:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUxMTA1MDEwODMwWhcNMjUxMTEyMDEwODMwWjAYMRYwFAYD VQQDEw02OTBhYTM4ZS01NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ySOnWQG0JlkYEkUY4UQ5p9xj+isUkeDzQjrB8bwueIlaCyzuMjf7YNW3NvP JtawTsAo+ZBvg24K0/4Vhf62Qjtyuprfz2DYMi/YrE8N36GO/R3HIAYlgAbChrEB SmkqpaUhIwKA+oPzZ8lwFJ21nPVuoS8TV8UWhvbRu2PWEmEBJ6T7LrinKuinWSO6 afz80zOuaP0uuXjjFZWWzsdkAKmghzcrewOpCXE7q+ROXr5QY8fBodL02kHgCq3o 1gpwrUhvTl5Ahn6sbooSAwR3qQFDdQrw5G5HKdAV0RXOjYMd9nQ+M9anWq0rmfi2 v5a/IwQbnJeRSC4stftCzbYJRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCft81qD Q06q4o/qaaiJxJeojA1dMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/MLP778iJuFbyoCuFhoujyDAQNyMMFItiRijXJjNr71ffxVuNHAzH bEe93Gg6RfXCaslAvmVAHmSDcQQ1zZrYC/oCHAF44YRJmFnA+OgOUEvAoJE5cimY j6O/3bv4UyNIf+HcYzuMqIeTgLoSBersDpIdiOD3MgJc5nH2gmaO48rHh7Ss18xA 3KSNn6ncySgyrbTdeCjoxWajthj8Dr2DMTemz0fTMcg5hXORhSJNh3GqNZzfShY+ 3XTFlANVNKcoMJVrriOshPCK4oIo4Xi3iWQ9v8CJtH41vwkFASTg2Es4xkGE9Uk1 Tfe7mNj8rsCSH0jdsg3F3fIqp0aRVxxA -----END CERTIFICATE-----Generated at Wed Nov 5 03:15:28 2025 by rpki-client