$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft File: wlVOkccHDswx5jeOpDvPrzyCE8A.mft (raw, json) Hash identifier: Mqnv+qJtys8yWRvKaOo8YDfcUVU00GhpwHJ96X5bfFk= Subject key identifier: 05:B6:3F:2F:9B:E7:A5:03:B1:16:67:06:22:BD:89:7C:38:FA:FD:D7 Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 Certificate issuer: /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft Manifest number: 97 Signing time: Mon 03 Nov 2025 06:26:40 +0000 Manifest this update: Mon 03 Nov 2025 06:26:39 +0000 Manifest next update: Mon 10 Nov 2025 06:26:39 +0000 Files and hashes: 1: wlVOkccHDswx5jeOpDvPrzyCE8A.crl (hash: OVTqbpXbZidr2NMKXv797SODINCmsO9WlKx9qIoA60Y=) 2: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (hash: KHoPbgNVtZT0OwKjaJvVWJ02MeB3Fx2ZKzMa6yBJHMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Validity Not Before: Nov 3 06:26:39 2025 GMT Not After : Nov 10 06:26:39 2025 GMT Subject: CN=69084b20-36f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:6a:ee:2c:88:88:cd:79:73:00:84:3b:f7: fc:ef:ab:17:a2:44:75:a0:d3:e8:1a:66:fc:31:94: e7:f2:e3:d9:83:4f:f2:d4:41:6e:f4:2e:26:98:e6: 32:09:b7:7c:d4:5f:2a:93:65:d3:c6:83:ab:40:0d: 7a:ba:e9:b4:11:c1:0b:48:a5:e7:2c:a8:3f:3e:62: a8:57:a5:97:38:97:60:1f:e3:c5:59:f6:0b:3f:20: 6a:82:2a:84:a7:01:42:88:75:0f:a3:12:d3:b5:82: 05:5a:47:9d:2c:4a:62:32:70:13:3d:6c:d1:06:15: 11:86:00:7f:23:61:e4:b1:79:37:cd:cc:90:91:dd: 1b:11:82:79:aa:94:0a:40:cf:0c:4c:5d:91:58:ea: 84:cc:7f:23:ef:68:1e:b7:04:0a:aa:00:db:65:22: 73:fb:be:97:fb:76:a9:c0:17:75:14:ee:6b:b6:16: ca:ef:fc:31:7b:69:be:2f:f1:2f:17:be:15:51:a3: 52:fe:df:50:2d:37:65:05:9f:6c:98:fb:20:f3:b1: 00:c0:41:6d:ae:28:38:d5:69:f6:c0:72:fb:54:8c: eb:bc:08:d8:d3:2b:ba:c5:9b:67:4f:a9:59:df:9e: 5e:da:3f:22:7b:47:e6:81:74:7a:03:d5:58:58:d2: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:3F:2F:9B:E7:A5:03:B1:16:67:06:22:BD:89:7C:38:FA:FD:D7 X509v3 Authority Key Identifier: keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:9f:06:6d:e0:02:12:72:6b:37:84:05:cf:d0:4c:14:41:bd: 7c:cd:77:86:55:8b:69:2c:e6:92:d6:b0:ce:b1:ca:11:68:df: d4:e3:e9:0a:ed:c6:45:58:7b:f8:cc:c4:f2:0a:e6:92:86:fe: ad:ad:bc:c5:89:23:f0:35:91:5e:75:bb:2d:56:6c:b0:06:21: dc:b7:70:66:15:45:9d:73:3d:db:e9:eb:00:4f:7e:af:c3:2d: 33:4a:db:bd:44:df:0c:e9:09:9c:06:4d:3c:2f:9b:95:f0:3b: 82:b3:7c:94:eb:1c:66:c1:93:72:37:0b:d3:70:4b:d8:d9:74: f3:5f:24:fa:8c:e7:59:d5:83:04:34:d2:e1:88:80:67:3a:e2: 18:31:b3:37:88:22:54:2a:3a:e1:8b:94:b7:91:36:85:c3:5c: d0:6e:56:c5:b1:61:51:23:d3:e0:3b:0b:4d:34:1d:ac:66:fe: 40:ba:18:4c:47:ec:2f:d0:d8:7e:13:a8:16:94:e8:0c:a2:7a: 9f:7a:20:55:5d:6d:f7:2e:7b:be:f6:dd:f4:67:4a:24:27:ca: 99:8a:2b:d4:7c:28:e5:d8:34:41:ed:27:1b:10:bd:39:a2:cb: 91:e6:1c:ee:3c:d3:0d:9b:70:a0:e2:58:74:35:46:53:f0:59: e1:cf:9b:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKEMyNTU0RTkxQzcwNzBFQ0MzMUU2Mzc4RUE0M0JDRkFG M0M4MjEzQzAwHhcNMjUxMTAzMDYyNjM5WhcNMjUxMTEwMDYyNjM5WjAYMRYwFAYD VQQDEw02OTA4NGIyMC0zNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyytq7iyIiM15cwCEO/f876sXokR1oNPoGmb8MZTn8uPZg0/y1EFu9C4mmOYy Cbd81F8qk2XTxoOrQA16uum0EcELSKXnLKg/PmKoV6WXOJdgH+PFWfYLPyBqgiqE pwFCiHUPoxLTtYIFWkedLEpiMnATPWzRBhURhgB/I2HksXk3zcyQkd0bEYJ5qpQK QM8MTF2RWOqEzH8j72getwQKqgDbZSJz+76X+3apwBd1FO5rthbK7/wxe2m+L/Ev F74VUaNS/t9QLTdlBZ9smPsg87EAwEFtrig41Wn2wHL7VIzrvAjY0yu6xZtnT6lZ 355e2j8ie0fmgXR6A9VYWNJ0XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW2Py+b 56UDsRZnBiK9iXw4+v3XMB8GA1UdIwQYMBaAFMJVTpHHBw7MMeY3jqQ7z688ghPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BRTkyREMxQ0Qy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi93bFZPa2NjSERzd3g1amVPcER2UHJ6eUNF OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dsVk9rY2NIRHN3eDVqZU9wRHZQcnp5Q0U4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BRTkyREMxQ0QyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi93bFZPa2NjSERz d3g1amVPcER2UHJ6eUNFOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJnwZt4AIScms3hAXP0EwUQb18zXeGVYtpLOaS1rDOscoRaN/U4+kK 7cZFWHv4zMTyCuaShv6trbzFiSPwNZFedbstVmywBiHct3BmFUWdcz3b6esAT36v wy0zStu9RN8M6QmcBk08L5uV8DuCs3yU6xxmwZNyNwvTcEvY2XTzXyT6jOdZ1YME NNLhiIBnOuIYMbM3iCJUKjrhi5S3kTaFw1zQblbFsWFRI9PgOwtNNB2sZv5AuhhM R+wv0Nh+E6gWlOgMonqfeiBVXW33Lnu+9t30Z0okJ8qZiivUfCjl2DRB7ScbEL05 osuR5hzuPNMNm3Cg4lh0NUZT8Fnhz5vQ -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:35 2025 by rpki-client