$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: 4vtGU4cipHhDCvlqGvFwgQjk1YCTsA6GYAQM9J6Z1X8= Subject key identifier: E8:9F:37:4B:6D:27:67:3A:C1:4A:78:D8:D7:F2:1F:3A:C2:A3:D1:C0 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: E3 Signing time: Sat 23 Aug 2025 05:42:11 +0000 Manifest this update: Sat 23 Aug 2025 05:42:11 +0000 Manifest next update: Sat 30 Aug 2025 05:42:11 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: +YFfQ0ODfnNsB0GCG3cX6OXJKjYtIuWFBsGR4QBpK1E=) 2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=) 3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Aug 23 05:42:11 2025 GMT Not After : Aug 30 05:42:11 2025 GMT Subject: CN=68a954b3-2d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:d9:17:64:00:dc:ab:d1:3f:60:12:67:26: 19:5b:2c:2f:05:77:4e:4b:2c:a0:7a:97:c6:3e:e4: 26:72:cf:f8:ca:a4:2d:ec:78:a6:3f:af:b6:16:3f: 3d:24:bc:c3:5f:2d:b0:5f:39:2c:b6:48:5e:06:f8: 26:3a:12:7b:eb:a1:82:51:d0:5c:57:62:11:4b:76: 37:ef:9a:70:18:25:e4:92:71:26:15:ee:b4:2c:4f: ce:8e:b6:1a:47:1f:c7:5f:a9:b7:7e:2d:0a:ab:38: 5f:d0:7d:cd:3d:cf:e1:cb:fa:8a:42:32:59:66:12: a6:3d:ff:58:bf:37:14:75:69:05:71:31:40:6d:99: 01:8c:14:02:0d:01:59:85:69:e1:41:88:4b:23:0a: bf:8c:61:f3:43:aa:3e:4d:0b:33:f1:e6:41:9d:f7: 91:02:32:7c:aa:6f:7d:18:c6:47:57:2c:94:4b:fa: 75:8b:c6:94:1f:ca:d1:e7:4d:68:a5:7e:93:13:e6: f0:c1:c3:e3:f9:d4:51:e8:2c:24:9d:70:27:84:5d: 12:81:ef:2b:3d:7b:c0:e6:0a:25:49:bb:07:7d:3e: ef:ab:e5:1c:5d:75:b8:ed:68:a7:cc:35:26:4b:b0: 19:bd:1b:ec:70:3a:aa:ec:5b:d8:bd:38:1c:d1:1e: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9F:37:4B:6D:27:67:3A:C1:4A:78:D8:D7:F2:1F:3A:C2:A3:D1:C0 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:80:45:00:59:ad:d9:d4:d6:34:87:53:79:7c:12:40:4d:37: c5:b4:86:e6:56:ec:2d:aa:57:b2:a7:ac:37:54:26:e0:b5:70: ba:99:91:3c:21:8d:2e:a2:d0:5a:6b:b8:d8:aa:2c:29:dd:7d: b1:43:c9:8d:f2:61:ef:a5:2a:74:c9:57:c5:f2:82:dc:95:53: 6b:98:4b:f5:62:47:58:12:4c:03:17:7d:75:a6:24:f4:42:13: 74:6d:50:3b:1d:ed:c0:af:42:f7:1e:2b:47:ae:14:96:f2:ee: 7b:de:e7:3a:21:d0:e9:d2:9f:94:03:9c:c0:b9:f8:e4:0e:00: db:3d:79:42:4e:ad:32:c8:75:57:da:a2:70:f7:29:37:0b:26: ad:50:a7:31:89:0d:bb:fb:3e:c9:be:56:bd:2f:d5:1c:d9:b1: d0:22:d0:59:cf:28:8b:b5:02:d2:a0:54:91:7f:a5:a0:b3:b5: c0:a8:4f:e3:f3:f7:24:32:e8:38:74:e0:aa:c2:0b:b5:35:ae: 5c:00:80:94:68:0b:53:11:0e:65:a9:3d:96:f1:29:63:11:bb: b6:f6:37:cc:79:fa:b4:df:80:60:5d:88:70:53:a3:b8:cb:c6: f5:13:18:b9:62:b8:d5:a0:cd:08:04:f2:cd:6b:a3:c5:ce:e5: 3a:df:3c:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUwODIzMDU0MjExWhcNMjUwODMwMDU0MjExWjAYMRYwFAYD VQQDEw02OGE5NTRiMy0yZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX7ZF2QA3KvRP2ASZyYZWywvBXdOSyygepfGPuQmcs/4yqQt7HimP6+2Fj89 JLzDXy2wXzkstkheBvgmOhJ766GCUdBcV2IRS3Y375pwGCXkknEmFe60LE/OjrYa Rx/HX6m3fi0Kqzhf0H3NPc/hy/qKQjJZZhKmPf9YvzcUdWkFcTFAbZkBjBQCDQFZ hWnhQYhLIwq/jGHzQ6o+TQsz8eZBnfeRAjJ8qm99GMZHVyyUS/p1i8aUH8rR501o pX6TE+bwwcPj+dRR6CwknXAnhF0Sge8rPXvA5golSbsHfT7vq+UcXXW47WinzDUm S7AZvRvscDqq7FvYvTgc0R6MqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOifN0tt J2c6wUp42NfyHzrCo9HAMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2 ODZmWEZkNGI4NlllSmNlWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGgEUAWa3Z1NY0h1N5fBJATTfFtIbmVuwtqleyp6w3VCbgtXC6mZE8 IY0uotBaa7jYqiwp3X2xQ8mN8mHvpSp0yVfF8oLclVNrmEv1YkdYEkwDF311piT0 QhN0bVA7He3Ar0L3HitHrhSW8u573uc6IdDp0p+UA5zAufjkDgDbPXlCTq0yyHVX 2qJw9yk3CyatUKcxiQ27+z7Jvla9L9Uc2bHQItBZzyiLtQLSoFSRf6Wgs7XAqE/j 8/ckMug4dOCqwgu1Na5cAICUaAtTEQ5lqT2W8SljEbu29jfMefq034BgXYhwU6O4 y8b1Exi5YrjVoM0IBPLNa6PFzuU63zwe -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:18 2025 by rpki-client