$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: ZAk6L4IxuJMIRwyAnZWjo8rPtKXf8y/U0LpkrX+D86c= Subject key identifier: A7:A4:AB:DF:F3:62:46:6B:D8:99:02:1B:CF:23:DF:EF:28:DF:6C:0A Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0DDD Signing time: Tue 04 Nov 2025 17:57:13 +0000 Manifest this update: Tue 04 Nov 2025 17:57:13 +0000 Manifest next update: Tue 11 Nov 2025 17:57:13 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: Kb10Uvg+faW4yIAdBz8qmtp6tjL7TciyMi5v7jxs0Ik=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: 7fP+JRoC8BLIz3dypzljentRpLc6i2GDCzDHkh90QUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3558 (0xde6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Nov 4 17:57:13 2025 GMT Not After : Nov 11 17:57:13 2025 GMT Subject: CN=690a3e79-17ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:94:4e:75:71:f6:1f:90:30:84:e0:3f:3e: 58:8a:ea:7e:be:d8:d8:26:78:5a:1a:ba:d9:a3:11: e5:68:e4:23:d2:5d:fb:51:80:cc:eb:7b:6a:42:2b: c0:de:63:1a:c8:a9:12:40:e3:d8:3a:f9:e7:e8:f0: 4b:2d:bf:2d:39:47:97:be:e7:48:97:1d:a9:d4:e3: 31:a3:03:f4:43:67:33:7f:dc:eb:c0:81:5c:39:9d: f6:7b:aa:51:9d:70:a8:10:fc:29:b9:73:d7:20:b3: b8:6c:58:d9:1d:cb:5f:a3:39:56:3c:29:76:eb:50: 40:72:0c:70:86:ed:d4:5d:a9:74:c0:62:b8:11:cc: 75:20:b0:07:a9:81:ad:0f:86:29:8d:ed:11:08:81: c8:11:6d:11:ea:68:85:9d:49:d1:de:d0:32:c3:fd: 9a:15:c9:02:89:dc:7d:72:69:c8:61:59:02:84:25: 34:30:22:2f:79:ec:b5:40:a5:f1:12:83:dd:86:92: 16:f5:78:80:fa:da:8e:26:75:65:ae:2f:9e:59:2b: 0d:b3:70:90:fd:5b:f7:6c:e0:ef:fb:31:76:31:ea: f6:45:3a:fc:70:42:d4:59:78:c6:3e:b6:62:45:49: f8:4a:34:37:60:31:6e:2a:8c:b7:40:3a:f4:4a:3a: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A4:AB:DF:F3:62:46:6B:D8:99:02:1B:CF:23:DF:EF:28:DF:6C:0A X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1f:fa:08:31:70:af:f5:93:47:52:cf:b1:a0:e2:c5:7e:0b: 47:29:34:4b:57:3f:dc:d7:bc:cc:0d:01:5f:c8:fa:59:35:5b: 0e:a9:70:54:a3:93:7e:e2:3b:8f:0d:7a:b6:ff:7a:d4:9a:31: 2c:5c:aa:6f:a5:2f:10:89:49:c6:59:6c:d5:e7:b1:27:c4:ef: 0c:29:18:a9:d1:5e:ca:e1:59:48:09:2e:55:b5:70:85:98:0b: 41:0e:b6:4b:99:53:45:5a:4b:1e:65:60:3b:9d:79:d2:0a:72: 3c:76:a5:25:5a:69:09:09:43:e4:1a:00:00:3b:a4:5b:c5:3d: 1a:25:e3:2d:15:7b:34:dc:ed:28:d9:8b:66:6e:85:03:c5:1a: 84:4f:40:d3:ec:a1:74:af:c6:82:87:c4:1d:ea:3c:50:f7:bc: 4a:1e:18:ad:eb:fc:27:c1:a9:da:91:1b:e2:7f:98:19:35:22: 79:02:d2:57:06:ae:e2:f0:30:66:b9:18:54:61:26:bc:f0:b6: 2f:b8:2b:a2:b8:cf:a8:46:23:d4:ab:e6:df:24:16:34:fa:7c: f1:57:ad:d6:aa:2a:bd:de:9d:80:4c:61:3d:a1:a3:3d:65:38: 0a:e4:a9:70:66:e3:f4:6a:9a:61:ce:53:02:9a:32:df:82:ce: 2e:57:b1:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUxMTA0MTc1NzEzWhcNMjUxMTExMTc1NzEzWjAYMRYwFAYD VQQDEw02OTBhM2U3OS0xN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5V6UTnVx9h+QMITgPz5Yiup+vtjYJnhaGrrZoxHlaOQj0l37UYDM63tqQivA 3mMayKkSQOPYOvnn6PBLLb8tOUeXvudIlx2p1OMxowP0Q2czf9zrwIFcOZ32e6pR nXCoEPwpuXPXILO4bFjZHctfozlWPCl261BAcgxwhu3UXal0wGK4Ecx1ILAHqYGt D4Ypje0RCIHIEW0R6miFnUnR3tAyw/2aFckCidx9cmnIYVkChCU0MCIveey1QKXx EoPdhpIW9XiA+tqOJnVlri+eWSsNs3CQ/Vv3bODv+zF2Mer2RTr8cELUWXjGPrZi RUn4SjQ3YDFuKoy3QDr0Sjqh7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKekq9/z YkZr2JkCG88j3+8o32wKMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANH/oIMXCv9ZNHUs+xoOLFfgtHKTRLVz/c17zMDQFfyPpZNVsOqXBU o5N+4juPDXq2/3rUmjEsXKpvpS8QiUnGWWzV57EnxO8MKRip0V7K4VlICS5VtXCF mAtBDrZLmVNFWkseZWA7nXnSCnI8dqUlWmkJCUPkGgAAO6RbxT0aJeMtFXs03O0o 2YtmboUDxRqET0DT7KF0r8aCh8Qd6jxQ97xKHhit6/wnwanakRvif5gZNSJ5AtJX Bq7i8DBmuRhUYSa88LYvuCuiuM+oRiPUq+bfJBY0+nzxV63Wqiq93p2ATGE9oaM9 ZTgK5KlwZuP0apphzlMCmjLfgs4uV7G8 -----END CERTIFICATE-----Generated at Wed Nov 5 22:47:01 2025 by rpki-client