$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: s2Cx/S2nVX/Ln85kXqrLf+JjSdlkRUljidSLn5NsyJw= Subject key identifier: ED:EB:DE:6F:67:9A:31:49:E0:E5:6F:5F:6A:33:A7:11:92:25:56:D5 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: DB Signing time: Thu 07 Aug 2025 06:11:48 +0000 Manifest this update: Thu 07 Aug 2025 06:11:48 +0000 Manifest next update: Thu 14 Aug 2025 06:11:48 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: Xn+lSgnS2VLl8CXtIxLKjjeK04G5YgAUxYYOpZAkkxY=) 2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=) 3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Aug 7 06:11:48 2025 GMT Not After : Aug 14 06:11:48 2025 GMT Subject: CN=689443a4-bd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:be:8f:99:27:89:fe:4e:3f:41:b8:14:f6: d7:38:1a:53:17:04:2d:53:be:61:07:b5:4f:f8:e3: 1c:79:fc:cb:fa:d4:c5:18:66:90:77:73:5d:e2:72: 39:b2:6c:f4:91:8b:93:2f:3b:ee:23:9e:e9:b8:09: b7:f2:79:1a:e9:c1:bd:fe:0b:cb:be:08:ef:14:71: 26:be:13:23:ff:a9:7c:f9:d4:80:f1:d2:ce:59:c8: d4:14:4e:b3:a1:e9:d4:28:64:3d:89:1b:0a:7a:20: 1a:5a:e7:88:82:94:af:8e:ee:9b:bd:cd:98:34:86: e5:64:06:09:c4:58:a8:91:4a:61:1d:14:48:a2:2b: 6f:f0:10:b5:f3:a1:18:b4:8f:9b:18:37:75:c8:52: 38:2b:54:5f:df:a8:b4:39:15:da:08:9f:a2:ec:46: 6b:97:e5:fc:d4:19:89:86:94:fb:ef:37:a0:a6:31: cc:f9:01:a7:2e:1d:20:25:71:09:ac:bf:65:c7:cb: 30:e6:d8:09:a4:38:5f:2b:06:8d:2c:0c:c7:63:d4: 38:4c:1c:0e:9b:b7:b1:53:98:bb:e5:f7:37:be:65: ef:84:c0:ee:cd:ff:61:76:7f:ba:49:2e:34:19:21: 84:a8:3f:9c:85:d9:0e:cd:f3:09:42:b5:22:07:43: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EB:DE:6F:67:9A:31:49:E0:E5:6F:5F:6A:33:A7:11:92:25:56:D5 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8a:04:49:01:65:2a:ec:2e:b5:11:5c:e4:90:04:04:a7:70: 6a:af:61:c1:48:b9:a2:7d:a1:64:d5:a1:a9:cc:db:e9:10:90: 2d:18:24:f0:5b:73:79:c0:a7:dc:fb:25:75:b8:10:2c:06:73: 82:15:07:07:bd:8e:bb:ec:03:b3:60:42:40:c2:d2:5a:e5:c2: 5e:74:58:f1:cf:c0:9e:1b:4f:1a:89:72:b0:f7:a2:23:06:a7: 48:c2:72:d1:bd:8f:58:fb:fa:fb:4f:99:78:db:e4:21:b2:5e: 4a:f9:f0:15:e0:a2:7b:06:08:b8:52:27:ea:4d:41:68:2e:25: ec:2e:75:c4:7e:a3:d4:30:f2:30:6a:44:7d:b5:f1:d2:21:e9: 9f:dd:96:06:4e:2a:9d:30:19:fd:e8:5c:e3:c2:22:23:35:82: 09:85:26:c3:ee:99:1e:8d:52:e9:72:c4:09:a8:47:81:90:7f: 9f:4b:ae:8c:3d:58:25:0d:e2:01:49:50:6d:2e:8c:8f:48:c4: 2a:00:7d:86:a8:0e:a3:19:81:6c:1f:d3:f7:1b:03:92:b6:0e: ad:cf:98:79:01:2f:55:5b:6e:7a:38:72:12:90:cf:9d:59:12: 22:72:7b:7a:fc:0f:21:dd:fb:72:29:a1:0a:db:6b:c0:ed:c9: a6:9d:64:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUwODA3MDYxMTQ4WhcNMjUwODE0MDYxMTQ4WjAYMRYwFAYD VQQDEw02ODk0NDNhNC1iZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6y2+j5knif5OP0G4FPbXOBpTFwQtU75hB7VP+OMcefzL+tTFGGaQd3Nd4nI5 smz0kYuTLzvuI57puAm38nka6cG9/gvLvgjvFHEmvhMj/6l8+dSA8dLOWcjUFE6z oenUKGQ9iRsKeiAaWueIgpSvju6bvc2YNIblZAYJxFiokUphHRRIoitv8BC186EY tI+bGDd1yFI4K1Rf36i0ORXaCJ+i7EZrl+X81BmJhpT77zegpjHM+QGnLh0gJXEJ rL9lx8sw5tgJpDhfKwaNLAzHY9Q4TBwOm7exU5i75fc3vmXvhMDuzf9hdn+6SS40 GSGEqD+chdkOzfMJQrUiB0PmQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3r3m9n mjFJ4OVvX2ozpxGSJVbVMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2 ODZmWEZkNGI4NlllSmNlWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxigRJAWUq7C61EVzkkAQEp3Bqr2HBSLmifaFk1aGpzNvpEJAtGCTw W3N5wKfc+yV1uBAsBnOCFQcHvY677AOzYEJAwtJa5cJedFjxz8CeG08aiXKw96Ij BqdIwnLRvY9Y+/r7T5l42+Qhsl5K+fAV4KJ7Bgi4UifqTUFoLiXsLnXEfqPUMPIw akR9tfHSIemf3ZYGTiqdMBn96FzjwiIjNYIJhSbD7pkejVLpcsQJqEeBkH+fS66M PVglDeIBSVBtLoyPSMQqAH2GqA6jGYFsH9P3GwOStg6tz5h5AS9VW256OHISkM+d WRIicnt6/A8h3ftyKaEK22vA7cmmnWTg -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:53 2025 by rpki-client