$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: ceKhFD2f6ri06Li1Qm3OBCBPqcwrmLe1xg9umH0lMJo= Subject key identifier: 34:E3:01:24:08:12:07:C7:36:CB:56:F5:04:C9:93:67:E2:FF:8A:34 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 0769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 075A Signing time: Tue 04 Nov 2025 21:46:32 +0000 Manifest this update: Tue 04 Nov 2025 21:46:31 +0000 Manifest next update: Tue 11 Nov 2025 21:46:31 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: HjjcNWEThgVuNZrdhNPTpgBba5zxQmQ8Jyht0+TOlRI=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: Ze9P8zUvpUUuNDb2f6jUuTz0IuEk5HXo9HL8O2n8v1w=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: cENNW/nbgAC9wITEnAsu2/v6Nt+Sg/6ucMETk/SBbPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: Nov 4 21:46:31 2025 GMT Not After : Nov 11 21:46:31 2025 GMT Subject: CN=690a7437-a37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:96:f6:bb:d5:ea:32:e3:f3:26:8f:5b:c2: 98:8b:6d:ff:47:95:d9:19:d8:ea:e2:ef:1a:c3:fb: 27:49:a5:ab:3c:f5:15:29:91:2f:35:ab:a7:1d:b4: d1:94:67:3c:99:29:3a:6f:cb:45:26:e7:cd:16:95: e6:97:f2:9e:37:53:3c:60:b4:72:cf:01:4b:53:37: 82:93:1d:a6:4c:ee:bb:fd:a5:97:ec:a5:a5:b4:c5: 67:66:e7:93:2f:eb:55:97:7d:a6:4e:a8:bb:04:32: 56:2a:e5:d2:5c:e1:ac:6c:66:b2:29:9b:54:4f:76: 06:7f:d2:a0:04:b0:fe:27:28:5c:07:ed:69:3c:ab: f7:48:9b:0e:d4:32:d8:90:28:11:ca:5f:bd:92:76: 38:3d:e0:87:8b:08:6b:bc:bb:8d:52:ec:d8:81:b9: 07:d3:6b:87:eb:12:13:1a:a4:fc:74:8f:d6:1b:8f: 0f:69:7e:22:50:46:3b:6f:9b:5b:de:1a:51:64:8b: 94:c7:f7:7f:d1:a8:88:10:1e:4d:72:6f:dc:10:6e: 19:07:2c:dd:0e:a5:e7:8d:ee:65:af:9d:6f:cd:51: e5:44:e1:14:5e:f9:b3:23:b6:cc:9a:ba:1c:9c:34: d7:28:f0:f8:9b:30:5a:3c:89:c1:3c:43:7f:ac:a7: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:01:24:08:12:07:C7:36:CB:56:F5:04:C9:93:67:E2:FF:8A:34 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d1:26:0d:c9:5e:bc:7b:23:9a:0c:4c:c1:aa:10:69:36:65: 62:a3:36:fc:6b:5a:cc:1d:67:1b:5a:c8:79:ba:d0:0a:50:a4: ac:89:40:33:70:e8:92:be:c8:0a:cd:16:a6:68:dc:b7:3a:a7: 8f:17:57:8f:62:61:f2:1b:fb:9b:41:c3:f9:5b:86:e8:53:6e: fb:a4:88:d8:c9:5a:7b:76:da:87:27:e7:d6:eb:a7:54:e9:bf: d8:9c:37:02:4c:4f:60:3a:00:58:c7:c2:80:3a:6d:10:01:a2: 85:93:ad:77:29:7b:95:44:86:a2:90:5d:a6:fb:c7:db:d0:1b: 9f:b6:26:7b:ea:db:58:b5:e2:0b:d3:4a:c4:69:bc:bb:26:d1: 54:b0:d4:58:aa:4c:cb:2e:aa:06:db:47:c3:80:ba:c2:81:97: a1:31:d7:e6:7f:6a:56:42:6a:b7:db:7d:78:b9:ec:af:c7:7f: 07:14:2f:d6:a0:45:8e:13:a9:b4:82:35:e5:3f:70:a9:ad:f6: 79:81:1b:b0:bf:2f:12:24:96:0c:69:85:de:a9:3f:6c:6c:d1: d0:e7:a0:52:eb:32:e9:d4:cd:bc:8e:11:09:16:b9:af:0c:0c: 91:00:e5:af:ef:29:f7:1e:e2:00:23:36:95:99:e9:a4:cf:ab: b3:81:2d:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjUxMTA0MjE0NjMxWhcNMjUxMTExMjE0NjMxWjAYMRYwFAYD VQQDEw02OTBhNzQzNy1hMzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbuW9rvV6jLj8yaPW8KYi23/R5XZGdjq4u8aw/snSaWrPPUVKZEvNaunHbTR lGc8mSk6b8tFJufNFpXml/KeN1M8YLRyzwFLUzeCkx2mTO67/aWX7KWltMVnZueT L+tVl32mTqi7BDJWKuXSXOGsbGayKZtUT3YGf9KgBLD+JyhcB+1pPKv3SJsO1DLY kCgRyl+9knY4PeCHiwhrvLuNUuzYgbkH02uH6xITGqT8dI/WG48PaX4iUEY7b5tb 3hpRZIuUx/d/0aiIEB5Ncm/cEG4ZByzdDqXnje5lr51vzVHlROEUXvmzI7bMmroc nDTXKPD4mzBaPInBPEN/rKeZfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTjASQI EgfHNstW9QTJk2fi/4o0MB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe0SYNyV68eyOaDEzBqhBpNmViozb8a1rMHWcbWsh5utAKUKSsiUAz cOiSvsgKzRamaNy3OqePF1ePYmHyG/ubQcP5W4boU277pIjYyVp7dtqHJ+fW66dU 6b/YnDcCTE9gOgBYx8KAOm0QAaKFk613KXuVRIaikF2m+8fb0BuftiZ76ttYteIL 00rEaby7JtFUsNRYqkzLLqoG20fDgLrCgZehMdfmf2pWQmq32314ueyvx38HFC/W oEWOE6m0gjXlP3CprfZ5gRuwvy8SJJYMaYXeqT9sbNHQ56BS6zLp1M28jhEJFrmv DAyRAOWv7yn3HuIAIzaVmemkz6uzgS3N -----END CERTIFICATE-----Generated at Wed Nov 5 19:50:17 2025 by rpki-client