$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft File: _WrtCj06ctaut_1HjqdiMTiBlKA.mft (raw, json) Hash identifier: /mMJpTUi7hSWhhi49d/AF4rZSjZm+cbOIIvBGsr/9Zw= Subject key identifier: 40:82:6D:CE:BC:4E:6C:6E:7E:FA:7E:78:B9:33:4E:B8:70:BC:52:23 Authority key identifier: FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0 Certificate issuer: /CN=A9189337/serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft Manifest number: 0D Signing time: Mon 03 Nov 2025 07:58:35 +0000 Manifest this update: Mon 03 Nov 2025 07:58:35 +0000 Manifest next update: Mon 10 Nov 2025 07:58:35 +0000 Files and hashes: 1: _WrtCj06ctaut_1HjqdiMTiBlKA.crl (hash: at6CgLUeVxiWayilmlcdAG4NhW/Lrq1f5BRjRlVNCy0=) 2: B4506158A8FB11F09EF52F87C4F9AE02.roa (hash: JYZF5QpkVav3NYfTVAymVynSqwJ/9AekaJzXrDACdEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=FD6AED0A3D3A72D6AEB7FD478EA76231388194A0 Validity Not Before: Nov 3 07:58:35 2025 GMT Not After : Nov 10 07:58:35 2025 GMT Subject: CN=690860ab-a0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:77:16:c3:6d:d5:e3:1d:bf:a0:a8:cd:86: 53:60:06:fe:2a:e4:c0:b3:d2:45:03:6c:57:48:17: 14:2b:e0:4d:07:2d:fb:d3:a3:8e:bb:a2:4b:9a:60: 54:9f:be:1b:3f:11:92:4d:2f:73:52:09:d8:9e:ae: b3:f6:bb:21:8f:13:79:eb:c1:28:51:95:44:4e:07: 6a:79:aa:85:ce:eb:75:51:df:d8:3c:13:82:c2:e9: bb:4c:20:2f:ed:23:14:f2:cf:04:c8:16:5e:f6:ee: ba:75:36:b8:c3:9e:f0:8d:cb:1a:e1:1c:a2:12:f3: 5d:6c:40:b9:ab:3e:78:36:54:55:b2:da:32:87:ef: f4:13:84:7e:52:1a:aa:db:b7:ea:1a:ab:ad:5d:b7: c0:46:af:2c:3a:df:88:fe:af:05:b9:54:99:44:05: da:af:d6:dd:8a:d7:20:d0:c9:08:0e:40:5d:6a:b4: 61:0c:93:06:08:9b:a1:78:76:e9:8d:ff:39:3f:0d: 0c:72:d8:72:05:ed:3b:f8:4e:d8:90:f8:fb:33:39: bb:e4:e6:bf:e7:98:56:57:a1:db:84:1c:88:fb:ea: a2:f0:a1:08:e2:c9:ec:b8:fe:6b:28:f0:76:c3:d9: c4:17:cc:dc:49:c9:57:87:9d:d1:90:2f:1b:c0:c8: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:82:6D:CE:BC:4E:6C:6E:7E:FA:7E:78:B9:33:4E:B8:70:BC:52:23 X509v3 Authority Key Identifier: keyid:FD:6A:ED:0A:3D:3A:72:D6:AE:B7:FD:47:8E:A7:62:31:38:81:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_WrtCj06ctaut_1HjqdiMTiBlKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/4998BE9AA81611F08498AE70C4F9AE02/_WrtCj06ctaut_1HjqdiMTiBlKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b8:88:e2:04:70:eb:05:f8:8d:33:be:d8:c3:71:1b:09:1b: 5d:cb:2e:63:cc:a0:bd:26:7e:72:33:b3:ab:19:86:83:49:92: 7e:4f:4b:92:00:d7:43:c2:28:bc:1c:47:74:68:93:ff:43:99: d6:39:74:2f:5f:e6:e9:8b:4f:3a:e5:a0:c7:e6:8f:82:62:2d: 4d:ae:af:20:56:04:d1:b5:1b:f6:84:e6:3a:ca:ac:e4:1f:78: b6:f3:2e:e8:e4:e6:bf:10:5c:e0:eb:9c:f3:1d:d6:00:4e:5e: 84:93:94:24:f0:5c:42:1d:f6:ef:ad:c3:56:e0:a5:89:27:91: bb:7f:10:40:97:c1:50:8a:c8:dc:e3:12:34:71:66:07:fd:b0: cc:c7:34:3e:6b:9a:62:c3:4d:1c:f8:9a:80:4e:6a:87:78:55: 8e:27:55:6c:fc:e7:b3:17:7a:c9:9b:ed:ba:8f:aa:75:17:21: 9c:80:c0:3e:d9:53:45:d7:b7:0e:5c:69:fd:5e:06:af:9b:8a: d1:b0:3c:d3:a5:73:20:ed:96:db:c6:6c:82:09:a2:c4:77:d1: f4:1d:59:6a:25:3e:0c:96:90:6c:85:47:0c:91:61:78:ad:e0: 8c:27:16:7e:51:e3:7f:d7:a1:71:23:74:c3:ef:6e:85:31:43: 22:f1:50:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoRkQ2QUVEMEEzRDNBNzJENkFFQjdGRDQ3OEVBNzYyMzEz ODgxOTRBMDAeFw0yNTExMDMwNzU4MzVaFw0yNTExMTAwNzU4MzVaMBgxFjAUBgNV BAMTDTY5MDg2MGFiLWEwYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqbXcWw23V4x2/oKjNhlNgBv4q5MCz0kUDbFdIFxQr4E0HLfvTo467okuaYFSf vhs/EZJNL3NSCdierrP2uyGPE3nrwShRlUROB2p5qoXO63VR39g8E4LC6btMIC/t IxTyzwTIFl727rp1NrjDnvCNyxrhHKIS811sQLmrPng2VFWy2jKH7/QThH5SGqrb t+oaq61dt8BGryw634j+rwW5VJlEBdqv1t2K1yDQyQgOQF1qtGEMkwYIm6F4dumN /zk/DQxy2HIF7Tv4TtiQ+PszObvk5r/nmFZXoduEHIj76qLwoQjiyey4/mso8HbD 2cQXzNxJyVeHndGQLxvAyEE7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQIJtzrxO bG5++n54uTNOuHC8UiMwHwYDVR0jBBgwFoAU/WrtCj06ctaut/1HjqdiMTiBlKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzQ5OThCRTlBQTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL19XcnRDajA2Y3RhdXRfMUhqcWRpTVRpQmxL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1dydENqMDZjdGF1dF8xSGpxZGlNVGlCbEtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzQ5OThCRTlBQTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL19XcnRDajA2Y3Rh dXRfMUhqcWRpTVRpQmxLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+4iOIEcOsF+I0zvtjDcRsJG13LLmPMoL0mfnIzs6sZhoNJkn5PS5IA 10PCKLwcR3Rok/9DmdY5dC9f5umLTzrloMfmj4JiLU2uryBWBNG1G/aE5jrKrOQf eLbzLujk5r8QXODrnPMd1gBOXoSTlCTwXEId9u+tw1bgpYknkbt/EECXwVCKyNzj EjRxZgf9sMzHND5rmmLDTRz4moBOaod4VY4nVWz857MXesmb7bqPqnUXIZyAwD7Z U0XXtw5caf1eBq+bitGwPNOlcyDtltvGbIIJosR30fQdWWolPgyWkGyFRwyRYXit 4IwnFn5R43/XoXEjdMPvboUxQyLxUKg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:16 2025 by rpki-client