$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: xAeO+1e+ipWDjtNp/eK7YFLR7OwOw2RniHE/W1eDi+M= Subject key identifier: 4F:C2:88:7C:12:CF:60:34:B4:23:34:86:FF:3F:03:61:77:6E:80:3F Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0473 Signing time: Sat 23 Aug 2025 00:18:29 +0000 Manifest this update: Sat 23 Aug 2025 00:18:29 +0000 Manifest next update: Sat 30 Aug 2025 00:18:29 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: OSkq57FNEtPY5DGmpf+JfPe5oPsY5BxVUnKFwglNffY=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Aug 23 00:18:29 2025 GMT Not After : Aug 30 00:18:29 2025 GMT Subject: CN=68a908d5-cda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:58:92:57:6c:f7:97:9c:97:b6:75:81:12: 37:a9:0a:84:0c:09:3d:7c:d9:a4:f6:90:2a:86:5b: 2b:21:9c:36:e6:43:e9:a1:7f:9b:28:5e:dd:4b:3c: 8f:10:fe:d3:9d:13:d9:2e:9d:05:cb:71:e1:d5:e4: aa:ec:b8:d6:9a:ad:ca:55:2a:14:d6:b8:3e:16:42: 05:21:61:7f:00:79:e3:37:c9:67:5e:05:a8:c1:30: 04:a8:56:b4:3e:05:cc:8f:ed:95:6e:6f:a1:75:56: b6:73:b2:a4:62:b4:1d:fb:1c:76:37:10:e6:52:93: 0b:27:05:ca:94:dd:8a:df:8d:62:cd:47:8e:d6:8f: 44:86:a7:03:94:c9:58:11:c3:43:cf:7b:fd:69:7d: 2b:f4:a0:44:8a:fc:3f:2e:76:f2:37:e7:68:4c:66: 11:cd:7b:97:92:d4:5d:88:00:7b:93:98:92:d7:10: 1c:e8:cc:88:88:07:7b:30:d1:24:64:6c:2c:dd:45: 30:f0:3d:2a:1c:30:95:fb:57:6c:e1:15:5b:71:f0: 8b:6a:3f:cc:f9:54:dd:f5:24:58:f7:49:40:79:af: 14:88:03:1d:ba:ae:a1:23:6f:b0:27:6c:d4:32:ec: f1:2b:41:2c:5c:75:3e:46:1a:08:1c:26:f5:b5:a4: 35:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C2:88:7C:12:CF:60:34:B4:23:34:86:FF:3F:03:61:77:6E:80:3F X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1b:8e:71:f4:31:e3:55:30:6d:92:fd:37:aa:1f:b4:e0:9c: 3f:48:0e:83:ba:2b:be:e6:0e:72:e5:08:2e:fc:fc:d6:e5:a0: 68:91:b4:5a:07:d6:14:54:1f:ba:2e:4c:b7:be:8a:ae:ba:4e: 20:34:ef:42:a4:83:c8:f0:d7:30:59:67:ca:77:25:eb:21:91: af:80:e1:16:90:bc:fb:0c:30:a3:a0:74:6b:95:85:f4:02:77: fa:d2:29:6a:85:80:60:a2:f1:f9:87:8a:48:38:c8:94:80:c6: dc:62:7c:3d:10:5b:0d:e4:6e:cd:3f:1c:90:10:94:46:d7:02: 81:e4:08:a3:d7:65:50:c8:42:2f:7e:b5:85:32:33:ff:73:ed: 06:65:b4:59:6b:4e:50:fb:2f:d0:e6:a3:61:3b:ec:84:32:cf: 08:b7:d4:53:f4:4d:89:64:38:15:3f:93:fa:83:18:62:7f:c5: 42:57:21:fa:5b:61:be:92:b7:fa:88:01:08:e7:b0:21:6f:da: 24:ab:a3:86:76:68:e3:eb:9d:49:cc:f9:da:76:63:6d:43:7e: d5:2a:44:19:2a:65:0b:2d:16:df:56:a9:92:e2:8e:69:9e:c2: 9b:14:a9:b3:1f:88:d5:d1:28:06:6d:7a:45:97:dd:0f:a1:0d: 51:6f:5d:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUwODIzMDAxODI5WhcNMjUwODMwMDAxODI5WjAYMRYwFAYD VQQDEw02OGE5MDhkNS1jZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVRYklds95ecl7Z1gRI3qQqEDAk9fNmk9pAqhlsrIZw25kPpoX+bKF7dSzyP EP7TnRPZLp0Fy3Hh1eSq7LjWmq3KVSoU1rg+FkIFIWF/AHnjN8lnXgWowTAEqFa0 PgXMj+2Vbm+hdVa2c7KkYrQd+xx2NxDmUpMLJwXKlN2K341izUeO1o9EhqcDlMlY EcNDz3v9aX0r9KBEivw/LnbyN+doTGYRzXuXktRdiAB7k5iS1xAc6MyIiAd7MNEk ZGws3UUw8D0qHDCV+1ds4RVbcfCLaj/M+VTd9SRY90lAea8UiAMduq6hI2+wJ2zU MuzxK0EsXHU+RhoIHCb1taQ1wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/CiHwS z2A0tCM0hv8/A2F3boA/MB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGG45x9DHjVTBtkv03qh+04Jw/SA6Duiu+5g5y5Qgu/PzW5aBokbRa B9YUVB+6Lky3voquuk4gNO9CpIPI8NcwWWfKdyXrIZGvgOEWkLz7DDCjoHRrlYX0 Anf60ilqhYBgovH5h4pIOMiUgMbcYnw9EFsN5G7NPxyQEJRG1wKB5Aij12VQyEIv frWFMjP/c+0GZbRZa05Q+y/Q5qNhO+yEMs8It9RT9E2JZDgVP5P6gxhif8VCVyH6 W2G+krf6iAEI57Ahb9okq6OGdmjj651JzPnadmNtQ37VKkQZKmULLRbfVqmS4o5p nsKbFKmzH4jV0SgGbXpFl90PoQ1Rb11o -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:56 2025 by rpki-client