$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: etyuwOofpIqqRpAi+gl2MVUBeRDnU9dmiLUCq0Jrtuc= Subject key identifier: CB:06:E6:0E:40:F7:9F:7F:25:32:71:78:8C:A0:49:A1:3E:EB:CF:F1 Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 033B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 0336 Signing time: Wed 05 Nov 2025 01:08:38 +0000 Manifest this update: Wed 05 Nov 2025 01:08:37 +0000 Manifest next update: Wed 12 Nov 2025 01:08:37 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: 49wVuuZEw8QntkH3TevxewMwUpUf8Dwy4RC59tCj60M=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: WrNqwpKibajA317uV8R1n49/EqSR3J93tv1ZPGtLnSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: Nov 5 01:08:37 2025 GMT Not After : Nov 12 01:08:37 2025 GMT Subject: CN=690aa395-a422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:f1:33:0f:28:d0:a0:a9:d1:00:38:a2:cc: c6:83:90:2c:c7:37:b4:ba:3a:16:8e:09:65:0d:2f: b1:cf:1d:29:8a:16:c1:ee:26:e5:91:0d:9b:e6:e6: 7d:ce:4b:8c:c9:6a:9c:ab:d6:1b:36:eb:fb:80:80: 26:6d:2b:c4:00:38:47:8a:68:f9:19:ba:2d:db:e7: 6a:13:5f:6f:7b:df:7d:e3:75:6c:b0:61:c1:6f:12: 12:9d:c9:96:de:6b:b1:09:71:3d:db:bc:19:4e:b6: f4:bb:cb:16:df:78:09:db:f7:1d:94:4a:eb:28:7a: 25:2f:0f:2b:81:6b:3b:24:bf:5a:12:a9:04:00:b5: 8a:b4:f1:c2:a2:3c:cc:3f:a1:f9:45:9a:1f:a0:e2: 37:47:b1:04:3a:e5:ec:cc:e5:9b:2c:bf:ba:2b:30: 45:80:fc:19:ee:d7:b8:ce:1e:c4:05:b3:6f:c2:69: 44:83:d6:77:6c:fa:3c:8e:6f:5e:6c:d0:83:21:aa: e7:89:90:88:dd:be:27:c1:36:b8:c9:3a:21:a9:84: 72:6c:7d:f1:d4:16:2e:87:10:5e:0a:e7:df:c1:fa: a6:22:32:1b:de:ea:04:49:89:a5:72:5f:8b:f5:37: 13:33:d5:bb:b8:86:f3:0e:35:1e:ac:1b:53:a6:ec: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:06:E6:0E:40:F7:9F:7F:25:32:71:78:8C:A0:49:A1:3E:EB:CF:F1 X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:e7:01:f4:05:f1:57:cb:d6:ef:bf:86:3c:a1:fc:e3:11:b4: 59:35:32:09:ca:d8:b0:9d:e6:08:66:6d:4c:3e:bf:37:ff:ba: 3b:63:14:be:6c:0c:fd:65:20:79:08:0b:77:9e:23:0a:4c:e4: c5:02:07:63:58:5b:b1:68:35:76:f9:23:4f:77:95:29:65:a0: 18:46:f7:2a:80:ed:23:84:c4:17:01:a3:75:83:13:a0:68:4f: 96:77:d6:e5:ee:50:8c:b5:e6:06:21:b0:95:39:41:29:59:28: 26:c4:b1:14:5f:34:3c:dc:85:4a:92:92:9d:98:50:c4:2e:f6: 7c:5b:ec:39:69:56:bc:18:26:2b:80:5c:d5:9f:00:6e:eb:51: 33:8a:fa:5a:cb:9c:7a:61:91:e2:69:01:33:6d:21:2a:3c:46: 45:0d:6e:dc:d6:f0:d1:8e:55:d5:a9:c6:88:91:27:e4:64:8d: 41:e5:42:49:80:b3:0a:03:bc:7c:5b:9a:8e:f5:82:7c:65:5e: 5c:0c:44:3e:10:97:fe:25:c6:0e:d6:ef:50:f8:dc:5c:a5:af: b4:63:fe:e9:e8:93:b9:50:92:b8:9a:60:42:19:47:f7:13:0d: c0:a5:0b:08:c9:ad:df:38:75:92:bc:8a:69:05:42:a5:e2:06: 07:78:38:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjUxMTA1MDEwODM3WhcNMjUxMTEyMDEwODM3WjAYMRYwFAYD VQQDEw02OTBhYTM5NS1hNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTzxMw8o0KCp0QA4oszGg5Asxze0ujoWjgllDS+xzx0pihbB7iblkQ2b5uZ9 zkuMyWqcq9YbNuv7gIAmbSvEADhHimj5Gbot2+dqE19ve99943VssGHBbxISncmW 3muxCXE927wZTrb0u8sW33gJ2/cdlErrKHolLw8rgWs7JL9aEqkEALWKtPHCojzM P6H5RZofoOI3R7EEOuXszOWbLL+6KzBFgPwZ7te4zh7EBbNvwmlEg9Z3bPo8jm9e bNCDIarniZCI3b4nwTa4yTohqYRybH3x1BYuhxBeCuffwfqmIjIb3uoESYmlcl+L 9TcTM9W7uIbzDjUerBtTpuxfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsG5g5A 959/JTJxeIygSaE+68/xMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz5wH0BfFXy9bvv4Y8ofzjEbRZNTIJytiwneYIZm1MPr83/7o7YxS+ bAz9ZSB5CAt3niMKTOTFAgdjWFuxaDV2+SNPd5UpZaAYRvcqgO0jhMQXAaN1gxOg aE+Wd9bl7lCMteYGIbCVOUEpWSgmxLEUXzQ83IVKkpKdmFDELvZ8W+w5aVa8GCYr gFzVnwBu61Ezivpay5x6YZHiaQEzbSEqPEZFDW7c1vDRjlXVqcaIkSfkZI1B5UJJ gLMKA7x8W5qO9YJ8ZV5cDEQ+EJf+JcYO1u9Q+Nxcpa+0Y/7p6JO5UJK4mmBCGUf3 Ew3ApQsIya3fOHWSvIppBUKl4gYHeDjv -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:40 2025 by rpki-client