$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: 8HEMU+WLwHN70WOvOVYRc/uHSkbXLmvzV1ICFD5LEpg= Subject key identifier: 3A:AD:EB:53:A3:86:0A:7A:82:2A:DA:8A:18:E8:76:DD:A5:9C:CA:19 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 0148 Signing time: Sat 23 Aug 2025 04:43:18 +0000 Manifest this update: Sat 23 Aug 2025 04:43:17 +0000 Manifest next update: Sat 30 Aug 2025 04:43:17 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: Czf7BgzRnSAnacF3X4ffGtFQKZVi8rr00CQ7Axe+//c=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: Ha1RED7wj5vvuljsqQyxT/3es50bYuYX2UgeIHA9Bqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Aug 23 04:43:17 2025 GMT Not After : Aug 30 04:43:17 2025 GMT Subject: CN=68a946e5-b1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:13:b1:7b:4f:ef:11:1a:0c:f6:94:54:54:0b: 17:ae:a6:65:ac:c0:67:d9:7a:8c:10:2a:b5:66:cc: bf:ab:c5:d2:05:e1:10:cd:ab:cf:6a:19:18:bf:fd: bb:bf:9f:9d:c9:e5:08:39:6a:3c:d1:f9:c1:9a:75: 34:82:c7:bb:12:76:3e:42:63:50:c1:bc:4a:98:ac: 4a:95:e0:3c:43:c0:16:61:66:07:1f:18:53:e7:82: d0:86:b5:95:27:b7:8c:b2:ad:a8:d2:39:15:82:ef: 58:81:f9:a1:34:48:3e:43:03:ee:ba:0e:48:50:68: b7:6c:06:cd:20:6f:24:ab:eb:64:8e:ef:51:bb:05: 55:c0:26:59:39:96:90:4f:13:93:33:c9:52:50:b5: a9:7f:a0:f7:26:e0:01:7d:48:de:6f:48:a9:f9:de: 76:d9:ef:12:c7:09:43:78:81:2a:e2:05:e9:9e:2e: 6c:af:c6:7d:ef:e5:f0:13:86:97:86:90:3e:ce:d4: 5c:d2:fe:d4:34:f2:b2:f9:b3:9f:fd:a3:4a:f5:57: 92:17:a3:80:96:45:68:b4:bd:39:1a:99:cb:4f:19: 1e:a7:b2:22:10:7e:6d:ab:2c:de:17:58:3d:19:35: c8:a8:e1:d0:18:b3:05:da:78:e0:02:22:6b:61:a6: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AD:EB:53:A3:86:0A:7A:82:2A:DA:8A:18:E8:76:DD:A5:9C:CA:19 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e3:c9:c0:fa:77:d9:9c:0d:a1:f3:18:1c:10:58:c1:7b:b9: 75:c5:f2:27:4f:06:75:b1:76:98:fb:10:1f:62:70:0c:38:e4: 83:7b:37:ae:01:b4:5a:16:73:78:f0:aa:a5:c8:95:e4:1a:f6: 05:3a:bf:09:4f:01:f8:37:41:3e:23:8f:fd:f0:3a:34:6b:16: 19:16:bb:6f:e7:a6:d6:42:36:84:9f:23:b2:3d:ee:48:ad:9f: 8b:28:2a:fd:2f:1d:4a:d2:6c:50:92:29:63:27:92:ce:d5:cb: 41:f4:f3:cd:f4:ea:74:65:d2:b3:4a:d7:08:2e:26:96:87:ea: 91:89:35:01:bd:ea:14:4a:8d:cd:c3:23:c8:b3:3c:7c:ff:70: db:59:88:2c:27:96:1e:b3:99:21:49:fc:a2:61:ce:4b:de:61: ed:6a:4f:d6:27:aa:80:b3:d9:ff:1a:4a:aa:4a:fe:12:7a:3a: f3:9b:e2:a8:96:80:fc:67:86:22:d9:1d:65:e5:e8:e7:04:63: ca:69:ef:25:a7:7e:91:bd:42:60:e9:18:4d:89:e8:21:24:02: c0:65:7e:0d:81:3e:fd:ab:34:1f:1a:56:ed:96:7b:b8:0a:a1: 59:ca:a8:6a:27:7a:75:75:79:de:07:82:31:b8:36:dd:44:23: cd:cf:da:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwODIzMDQ0MzE3WhcNMjUwODMwMDQ0MzE3WjAYMRYwFAYD VQQDEw02OGE5NDZlNS1iMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hOxe0/vERoM9pRUVAsXrqZlrMBn2XqMECq1Zsy/q8XSBeEQzavPahkYv/27 v5+dyeUIOWo80fnBmnU0gse7EnY+QmNQwbxKmKxKleA8Q8AWYWYHHxhT54LQhrWV J7eMsq2o0jkVgu9YgfmhNEg+QwPuug5IUGi3bAbNIG8kq+tkju9RuwVVwCZZOZaQ TxOTM8lSULWpf6D3JuABfUjeb0ip+d522e8SxwlDeIEq4gXpni5sr8Z97+XwE4aX hpA+ztRc0v7UNPKy+bOf/aNK9VeSF6OAlkVotL05GpnLTxkep7IiEH5tqyzeF1g9 GTXIqOHQGLMF2njgAiJrYaYz9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDqt61Oj hgp6giraihjodt2lnMoZMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk48nA+nfZnA2h8xgcEFjBe7l1xfInTwZ1sXaY+xAfYnAMOOSDezeu AbRaFnN48KqlyJXkGvYFOr8JTwH4N0E+I4/98Do0axYZFrtv56bWQjaEnyOyPe5I rZ+LKCr9Lx1K0mxQkiljJ5LO1ctB9PPN9Op0ZdKzStcILiaWh+qRiTUBveoUSo3N wyPIszx8/3DbWYgsJ5Yes5khSfyiYc5L3mHtak/WJ6qAs9n/GkqqSv4Sejrzm+Ko loD8Z4Yi2R1l5ejnBGPKae8lp36RvUJg6RhNieghJALAZX4NgT79qzQfGlbtlnu4 CqFZyqhqJ3p1dXneB4IxuDbdRCPNz9pn -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:34 2025 by rpki-client