$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft File: wj3utHnnD2DvynyIRiuVudwiydA.mft (raw, json) Hash identifier: o3Qs8BV9QemAVGzQO6O8e6vWGzkcoFKo/XhBlNJ3Tvo= Subject key identifier: F9:52:25:3A:AF:40:49:97:50:48:58:57:A6:DB:52:1E:71:2A:5B:FD Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0 Certificate issuer: /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft Manifest number: 0D Signing time: Sat 09 Aug 2025 08:39:08 +0000 Manifest this update: Sat 09 Aug 2025 08:39:08 +0000 Manifest next update: Sat 16 Aug 2025 08:39:08 +0000 Files and hashes: 1: wj3utHnnD2DvynyIRiuVudwiydA.crl (hash: Rvy4oNxD5+0yZ8L63VlswI0mU9rDZ+4tkj9pKLwGxG8=) 2: 9EE7FBDA678511F0999A252DC4F9AE02.roa (hash: umzw1geYgK2JVHp9lOr8AEg7GPMGxFuZO79d5M9gQWE=) 3: 9F685E60678511F0999A252DC4F9AE02.roa (hash: MjQWxYcJQvp+bMqSUyyFBxxdvUiMaK5LXbiw/7LMx0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0 Validity Not Before: Aug 9 08:39:08 2025 GMT Not After : Aug 16 08:39:08 2025 GMT Subject: CN=6897092c-743e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:4c:58:99:99:e3:0d:2d:81:b0:68:ae:26: 54:63:43:9b:86:d5:d7:5d:d4:65:0f:0c:8b:1b:cc: 3b:90:6d:98:ca:ad:16:a4:e1:94:d2:92:3e:e5:cd: 92:c2:80:0f:3a:45:1c:51:2d:76:0d:b8:69:c8:d5: f8:86:6a:7b:24:3b:00:ab:e0:26:c9:5a:e1:42:7b: fa:fb:30:42:f4:97:51:dd:16:9f:99:fb:bd:a0:ed: 3d:42:ad:80:3e:14:13:26:e5:f7:14:d3:6c:83:d5: 9d:2d:f3:88:d5:2d:a0:08:f6:a9:76:1d:94:4e:dc: 2e:4c:05:6a:9b:77:e8:97:7d:40:19:35:d4:b6:5e: 6c:6f:9e:82:d1:d5:4f:91:ea:1a:0b:a5:47:7c:db: ed:2a:d5:4c:5d:d2:26:3c:44:de:0a:db:b2:61:10: d5:a5:39:9a:59:5a:61:4b:37:75:1b:96:01:0a:ad: f1:7a:84:2e:42:b2:58:aa:2c:31:fe:09:8b:9b:97: 04:d9:0c:a2:da:6b:41:29:b5:0b:43:eb:95:da:20: b1:18:53:22:15:be:1e:e7:5a:49:2c:59:6d:75:bc: 00:4d:b6:67:5e:a9:db:de:12:5c:ce:01:a1:89:fe: 64:1c:60:2c:01:26:4c:ee:e5:d8:4e:66:cb:ff:8a: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:52:25:3A:AF:40:49:97:50:48:58:57:A6:DB:52:1E:71:2A:5B:FD X509v3 Authority Key Identifier: keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0b:a8:8a:fd:5c:5d:cf:04:7b:1e:16:ee:f5:97:aa:8f:8c: e3:9b:4c:5d:f9:8a:a3:06:cd:5b:a1:83:46:3f:c2:f9:55:6c: 1f:a9:e9:b7:3c:74:df:79:f1:ee:4c:df:26:60:f7:84:ca:ea: 8a:2c:04:74:7b:ff:ab:29:60:8e:5c:8f:98:d5:8f:9e:31:57: 1c:54:1b:0a:56:6c:7e:e2:66:ec:2e:40:c5:f4:ca:0c:5f:96: cd:70:5c:a1:1d:73:6a:ce:f1:03:db:6a:ec:42:ee:70:82:1a: b3:80:9e:f7:15:c5:e5:fc:e6:9e:32:bc:70:8b:ac:59:df:75: ed:26:32:f4:1e:8d:5d:98:4a:e9:33:3c:b5:f5:64:2e:93:ca: 78:47:5c:31:27:39:2b:7c:6a:da:d2:d1:f5:51:27:e0:01:f2: ca:c3:86:49:b7:2c:d6:0d:0c:1a:4a:65:a6:0e:46:3c:5a:36: d6:b3:e6:96:04:b8:45:26:b0:54:7f:26:69:5e:55:f4:0e:b1: 90:f3:cb:19:0e:22:b3:f1:c4:41:8f:41:ac:9a:63:3b:7e:7c: dd:c4:49:98:c8:a2:9b:f3:b9:e3:69:36:51:5a:89:73:3b:0f: ff:1c:80:98:52:15:fd:9b:c1:46:fe:35:f7:b3:93:4c:14:eb: a2:98:b1:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkEyMjExMC8GA1UEBRMoQzIzREVFQjQ3OUU3MEY2MEVGQ0E3Qzg4NDYyQjk1QjlE QzIyQzlEMDAeFw0yNTA4MDkwODM5MDhaFw0yNTA4MTYwODM5MDhaMBgxFjAUBgNV BAMTDTY4OTcwOTJjLTc0M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeXExYmZnjDS2BsGiuJlRjQ5uG1ddd1GUPDIsbzDuQbZjKrRak4ZTSkj7lzZLC gA86RRxRLXYNuGnI1fiGanskOwCr4CbJWuFCe/r7MEL0l1HdFp+Z+72g7T1CrYA+ FBMm5fcU02yD1Z0t84jVLaAI9ql2HZRO3C5MBWqbd+iXfUAZNdS2XmxvnoLR1U+R 6hoLpUd82+0q1Uxd0iY8RN4K27JhENWlOZpZWmFLN3UblgEKrfF6hC5CsliqLDH+ CYublwTZDKLaa0EptQtD65XaILEYUyIVvh7nWkksWW11vABNtmdeqdveElzOAaGJ /mQcYCwBJkzu5dhOZsv/ivzRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+VIlOq9A SZdQSFhXpttSHnEqW/0wHwYDVR0jBBgwFoAUwj3utHnnD2DvynyIRiuVudwiydAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTIyL0ZENURFOUIyNjYw MDExRjA5OTg2QzkxN0M0RjlBRTAyL3dqM3V0SG5uRDJEdnlueUlSaXVWdWR3aXlk QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2ozdXRIbm5EMkR2eW55SVJpdVZ1ZHdpeWRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QTIyL0ZENURFOUIyNjYwMDExRjA5OTg2QzkxN0M0RjlBRTAyL3dqM3V0SG5uRDJE dnlueUlSaXVWdWR3aXlkQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4LqIr9XF3PBHseFu71l6qPjOObTF35iqMGzVuhg0Y/wvlVbB+p6bc8 dN958e5M3yZg94TK6oosBHR7/6spYI5cj5jVj54xVxxUGwpWbH7iZuwuQMX0ygxf ls1wXKEdc2rO8QPbauxC7nCCGrOAnvcVxeX85p4yvHCLrFnfde0mMvQejV2YSukz PLX1ZC6TynhHXDEnOSt8atrS0fVRJ+AB8srDhkm3LNYNDBpKZaYORjxaNtaz5pYE uEUmsFR/JmleVfQOsZDzyxkOIrPxxEGPQayaYzt+fN3ESZjIopvzueNpNlFaiXM7 D/8cgJhSFf2bwUb+Nfezk0wU66KYsds= -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:10 2025 by rpki-client