$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: mSoKwlC8SYAFzzIUIeKqCBWQUZwGYrhk8XcJCSQD9KA= Subject key identifier: 70:1D:8C:91:05:46:8D:38:34:2F:D8:D5:8B:BE:67:DF:6D:D4:5E:65 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 056E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 054C Signing time: Fri 22 Aug 2025 23:43:06 +0000 Manifest this update: Fri 22 Aug 2025 23:43:05 +0000 Manifest next update: Fri 29 Aug 2025 23:43:05 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: cO5JkCtC6vXCjgwqfo5nN0S1uR5rBS8EvJ12CjG64ik=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: fJSwaqO5xx9Q9RIgs6JtYncNmKK6M8gTn37HYZrh54Y=) 4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: p2UL6GD3BL6Vbs5hBii2dCX7XInOsF8w0LqpGVSuwTU=) 5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: 918uflqRaxL4teDIN56OfUziBRRQmbbgHsTgJ3UnMS8=) 7: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: 6UFCXsHGkBs9mNJ/P0P2x3t8KMswz8UkcFEG5pRtYR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1390 (0x56e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Aug 22 23:43:05 2025 GMT Not After : Aug 29 23:43:05 2025 GMT Subject: CN=68a9008a-878d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:4d:ec:49:01:5b:05:ff:67:7b:98:c8:ae: a0:9a:82:c6:7d:18:ff:9e:9d:9b:2d:6a:54:e2:46: ec:65:fb:d5:be:81:6f:24:46:3a:c6:96:e0:ac:34: 2f:45:e6:9e:d2:30:6d:28:c8:ae:7d:2d:27:5f:fc: 27:08:f1:90:d2:9d:c6:25:28:23:d5:00:fa:d8:a4: 28:f1:72:de:77:a5:5b:35:0c:be:d7:3c:6a:81:fc: b2:fb:36:11:94:b5:d1:72:22:f0:65:e5:1f:73:6f: 91:96:2e:9d:02:6d:93:6a:26:ad:1d:c0:d9:97:83: 03:a2:75:45:29:10:72:8a:0d:6a:40:15:fb:a6:c1: 34:4d:74:c0:b9:49:f8:46:65:4c:57:81:c6:72:9e: 8e:f5:71:fc:95:63:e3:88:b0:e7:0b:b8:8e:06:4c: 68:04:5d:0f:f0:02:7d:df:f8:08:29:ea:24:09:41: fb:fd:28:4a:b3:ed:cf:e2:dd:2a:48:02:ed:71:8f: a0:7c:5c:07:7b:70:b8:64:f0:15:15:7f:ca:d4:88: 0d:e9:96:15:19:d5:de:a0:e6:29:a2:b0:93:9f:11: ae:0a:f6:38:f6:5f:c8:fc:6f:dc:65:69:06:08:47: d8:0e:5a:d9:4f:fe:12:86:24:cb:98:b7:18:f8:c1: f7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1D:8C:91:05:46:8D:38:34:2F:D8:D5:8B:BE:67:DF:6D:D4:5E:65 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3a:ab:5c:cd:28:c7:e0:04:fb:40:30:32:9d:32:56:c6:56: 83:64:09:3c:3f:02:fb:12:37:d8:fd:d3:c7:7c:19:8a:27:ce: c8:37:3b:4d:2d:0e:15:1a:6a:5f:53:f7:a9:6f:a9:4a:08:e0: b9:6a:00:f2:39:ce:bb:6a:4f:17:d3:06:84:d6:9c:1e:fa:0d: 2b:0e:71:1b:81:52:f1:73:0c:4a:e1:6d:d5:09:9e:bd:e3:14: c8:a0:3d:1b:e0:31:30:3d:c5:42:de:dc:db:09:45:f9:9c:e4: 72:65:a6:12:8a:f3:81:42:bc:41:3b:be:ad:9e:88:c2:f6:1c: 2f:ac:e6:ec:1c:5d:bf:03:81:0e:52:c3:ad:26:04:b4:58:44: 2e:90:70:b0:38:b4:66:ac:fd:36:cb:58:e5:fb:28:f5:82:ab: c0:11:fd:a5:a8:60:32:fc:4f:98:44:e3:01:fc:41:d4:2b:03: f0:4f:e8:56:31:b6:1f:54:7f:c5:7c:87:aa:89:56:7c:e7:35: 2b:bd:19:6c:b6:05:fa:10:c5:f3:3b:32:ff:20:0d:25:98:af: 7f:bf:23:ba:ae:d7:e7:05:d4:df:4c:97:69:3b:45:24:1a:02: 32:76:23:bf:25:e8:66:7b:d4:30:a9:0f:6b:af:fd:cb:be:3f: 53:c4:ed:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwODIyMjM0MzA1WhcNMjUwODI5MjM0MzA1WjAYMRYwFAYD VQQDEw02OGE5MDA4YS04NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40xN7EkBWwX/Z3uYyK6gmoLGfRj/np2bLWpU4kbsZfvVvoFvJEY6xpbgrDQv Reae0jBtKMiufS0nX/wnCPGQ0p3GJSgj1QD62KQo8XLed6VbNQy+1zxqgfyy+zYR lLXRciLwZeUfc2+Rli6dAm2TaiatHcDZl4MDonVFKRByig1qQBX7psE0TXTAuUn4 RmVMV4HGcp6O9XH8lWPjiLDnC7iOBkxoBF0P8AJ93/gIKeokCUH7/ShKs+3P4t0q SALtcY+gfFwHe3C4ZPAVFX/K1IgN6ZYVGdXeoOYporCTnxGuCvY49l/I/G/cZWkG CEfYDlrZT/4ShiTLmLcY+MH3NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAdjJEF Ro04NC/Y1Yu+Z99t1F5lMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApOqtczSjH4AT7QDAynTJWxlaDZAk8PwL7EjfY/dPHfBmKJ87INztN LQ4VGmpfU/epb6lKCOC5agDyOc67ak8X0waE1pwe+g0rDnEbgVLxcwxK4W3VCZ69 4xTIoD0b4DEwPcVC3tzbCUX5nORyZaYSivOBQrxBO76tnojC9hwvrObsHF2/A4EO UsOtJgS0WEQukHCwOLRmrP02y1jl+yj1gqvAEf2lqGAy/E+YROMB/EHUKwPwT+hW MbYfVH/FfIeqiVZ85zUrvRlstgX6EMXzOzL/IA0lmK9/vyO6rtfnBdTfTJdpO0Uk GgIydiO/Jehme9QwqQ9rr/3Lvj9TxO3H -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:19 2025 by rpki-client