$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft File: wtbHmmd8l-xwBjE76RZ-DeZspFI.mft (raw, json) Hash identifier: fdUQm4+qx/xm3gRrHYPzJN1pDWpLpQL5qFjp0OpNoTc= Subject key identifier: 7D:EA:22:B8:FF:D4:BE:83:86:C6:D7:87:DA:EF:B0:C9:49:37:0F:CA Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52 Certificate issuer: /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft Manifest number: 06 Signing time: Wed 05 Nov 2025 08:16:12 +0000 Manifest this update: Wed 05 Nov 2025 08:16:11 +0000 Manifest next update: Wed 12 Nov 2025 08:16:11 +0000 Files and hashes: 1: wtbHmmd8l-xwBjE76RZ-DeZspFI.crl (hash: jeSqQ3m6HCODxMN0u9SseIa1RmU87BXSpXkPZDxtjdQ=) 2: B3DF86F0B4B211F08EEFDF43C4F9AE02.roa (hash: 9BgHHX+tZSg5UrBQAvKkyv4nk9+XnQQVbjiVq6USYrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452 Validity Not Before: Nov 5 08:16:11 2025 GMT Not After : Nov 12 08:16:11 2025 GMT Subject: CN=690b07cb-e4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:e3:95:3e:9b:15:c6:2c:99:90:cf:52:62: 16:d7:95:11:d2:35:1f:33:83:04:4b:a2:dd:c9:c6: 27:41:e1:6f:49:bb:dc:a0:35:9c:c6:04:2a:b3:76: dc:39:d8:98:5f:d1:29:e4:b8:fd:0e:b0:cf:a2:08: c8:7e:4d:4d:e6:de:6e:2a:c7:76:9b:2b:a7:30:2b: 73:da:aa:c0:5f:05:be:92:40:2a:ca:b2:47:eb:08: 40:3a:c8:90:f9:28:1e:b4:78:99:a4:bc:56:ef:fe: 67:60:10:b9:52:75:0e:f3:43:b5:14:d2:23:99:04: b4:13:94:cb:68:50:f1:0f:f5:bf:7c:6a:fb:e5:3a: d9:66:5b:34:68:66:ff:d3:21:72:cd:36:cd:79:71: c6:95:bd:49:1a:d3:56:46:8e:6f:c7:db:56:31:7d: 0c:7c:16:cd:9b:53:39:a9:15:2f:4a:16:ce:57:bb: a6:9b:cf:3e:c4:95:9b:3b:1a:00:3e:41:b8:73:ae: cc:be:0f:c0:d3:93:fb:67:5a:f0:e7:39:2d:cd:91: 77:88:c8:6c:7d:ee:ec:87:7a:00:5a:2e:4d:1a:3f: d9:9b:8c:96:75:bb:4e:b8:e1:b0:92:b7:ae:30:52: ce:f3:6e:89:d2:a1:36:7f:0e:d3:2f:84:84:26:9a: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:22:B8:FF:D4:BE:83:86:C6:D7:87:DA:EF:B0:C9:49:37:0F:CA X509v3 Authority Key Identifier: keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5a:db:9e:32:5f:c8:ab:8e:b4:9c:6a:89:b8:5a:63:42:ca: d8:cf:51:ce:fe:55:c4:49:f9:de:a4:b1:e5:09:f0:fd:07:3c: e7:a7:08:24:ca:58:b4:aa:a3:5c:76:c1:31:05:5f:de:34:3c: 03:a6:da:f1:34:ae:6a:16:f4:b3:bc:cb:1f:c8:0f:46:27:00: 2e:3d:fd:ba:a9:c4:68:dd:5b:3d:85:7e:dc:e2:1b:d0:de:7e: f7:85:75:33:98:e3:a6:a7:a2:03:2c:fa:ef:95:3f:b1:72:38: 44:ee:9f:f2:fc:00:6b:c4:ce:5b:5c:d5:55:8a:b8:e4:8e:e9: c3:17:e3:c4:34:6f:9e:05:f0:67:d3:48:61:d3:f4:24:61:ad: 56:66:e6:37:04:d1:41:d1:85:e7:07:16:54:2c:71:15:9d:9a: bf:03:0e:13:82:b2:31:03:1a:08:25:c8:9f:55:08:8f:67:e0: 9e:b4:bc:31:ba:e7:91:bb:87:84:06:20:d2:6f:2b:14:30:df: 3d:d3:11:34:90:0f:99:55:86:dd:48:f9:bb:15:4c:8e:7a:cd: 98:12:95:65:6e:ab:4d:fc:14:ba:f8:b8:7b:52:7f:f3:5d:96: 2c:30:e9:2a:86:31:47:72:da:0d:ad:3c:0d:1d:68:52:05:e5: 44:1f:a2:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkY1QjExMC8GA1UEBRMoQzJENkM3OUE2NzdDOTdFQzcwMDYzMTNCRTkxNjdFMERF NjZDQTQ1MjAeFw0yNTExMDUwODE2MTFaFw0yNTExMTIwODE2MTFaMBgxFjAUBgNV BAMTDTY5MGIwN2NiLWU0YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuYOOVPpsVxiyZkM9SYhbXlRHSNR8zgwRLot3JxidB4W9Ju9ygNZzGBCqzdtw5 2Jhf0SnkuP0OsM+iCMh+TU3m3m4qx3abK6cwK3PaqsBfBb6SQCrKskfrCEA6yJD5 KB60eJmkvFbv/mdgELlSdQ7zQ7UU0iOZBLQTlMtoUPEP9b98avvlOtlmWzRoZv/T IXLNNs15ccaVvUka01ZGjm/H21YxfQx8Fs2bUzmpFS9KFs5Xu6abzz7ElZs7GgA+ Qbhzrsy+D8DTk/tnWvDnOS3NkXeIyGx97uyHegBaLk0aP9mbjJZ1u0644bCSt64w Us7zbonSoTZ/DtMvhIQmmoxtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfeoiuP/U voOGxteH2u+wyUk3D8owHwYDVR0jBBgwFoAUwtbHmmd8l+xwBjE76RZ+DeZspFIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyRjVCL0NEQUJGMTgyQjRC MTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14d0JqRTc2UlotRGVac3BG SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd3RiSG1tZDhsLXh3QmpFNzZSWi1EZVpzcEZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky RjVCL0NEQUJGMTgyQjRCMTExRjBBREMyQjExRkM0RjlBRTAyL3d0YkhtbWQ4bC14 d0JqRTc2UlotRGVac3BGSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACBa254yX8irjrScaom4WmNCytjPUc7+VcRJ+d6kseUJ8P0HPOenCCTK WLSqo1x2wTEFX940PAOm2vE0rmoW9LO8yx/ID0YnAC49/bqpxGjdWz2FftziG9De fveFdTOY46anogMs+u+VP7FyOETun/L8AGvEzltc1VWKuOSO6cMX48Q0b54F8GfT SGHT9CRhrVZm5jcE0UHRhecHFlQscRWdmr8DDhOCsjEDGgglyJ9VCI9n4J60vDG6 55G7h4QGINJvKxQw3z3TETSQD5lVht1I+bsVTI56zZgSlWVuq038FLr4uHtSf/Nd liww6SqGMUdy2g2tPA0daFIF5UQfonY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:08:57 2025 by rpki-client