$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json) Hash identifier: AMuZ/nTfmw46fqcj2cupvyk0PpCRYDDnGEsiE0FIRpQ= Subject key identifier: C3:C1:D1:33:B0:FD:00:98:3B:E6:46:65:A5:DA:ED:D4:50:ED:55:FE Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92 Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft Manifest number: 12 Signing time: Sat 23 Aug 2025 08:17:39 +0000 Manifest this update: Sat 23 Aug 2025 08:17:39 +0000 Manifest next update: Sat 30 Aug 2025 08:17:39 +0000 Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: Zr56mkseQ1+oOHolCa8yAnaSZD4+efsQPB2gmDM2O5Y=) 2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: 6eI2hX7+cNDQwr/0gzxm2cvx/HHunNUlrFOX9WFLw2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292 Validity Not Before: Aug 23 08:17:39 2025 GMT Not After : Aug 30 08:17:39 2025 GMT Subject: CN=68a97923-ac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:a1:53:ac:bd:a9:26:5d:60:3c:8d:ce:60: ad:ca:0b:48:2a:97:5f:ea:4e:5e:c2:7f:aa:95:11: 51:15:8c:c5:c3:13:ae:99:32:5b:00:a6:b2:ee:a2: 26:93:f6:9c:1a:52:99:21:fd:cd:ed:39:6d:9b:fd: af:69:e9:29:96:d4:17:75:6c:9c:59:47:a6:34:e4: 4b:f2:65:6f:67:81:3e:ae:2d:09:f8:8b:5b:4e:ee: 9c:93:e8:ea:80:0a:48:c4:35:a2:88:3e:c6:cd:90: 27:79:7a:d0:de:43:c9:c3:c9:33:af:b7:8a:16:d2: 36:12:28:82:18:76:2f:5a:99:2e:29:09:3c:af:bc: b5:af:6a:af:73:99:fa:84:40:d2:96:a9:c7:d5:34: 14:21:ba:dd:91:6f:46:a4:1a:ed:39:bb:ed:91:cd: fe:1d:a9:78:0e:11:e8:89:f2:62:39:7a:a7:d4:f7: a5:c4:b5:9f:d6:41:c1:73:dc:7b:09:98:9a:f8:df: 49:bc:59:05:41:d3:d0:4b:83:0d:10:f5:93:69:e1: 41:ea:a3:bb:b4:bb:2f:ce:12:36:1b:fd:45:06:32: 06:20:a7:7f:1b:da:8d:c3:6c:72:0e:54:b5:77:81: 81:5c:d1:29:da:e3:c4:d2:78:23:82:20:d9:40:8a: 59:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:D1:33:B0:FD:00:98:3B:E6:46:65:A5:DA:ED:D4:50:ED:55:FE X509v3 Authority Key Identifier: keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:08:50:cb:a9:9f:ac:5a:5b:ae:83:4e:49:8c:df:17:6a:a0: 1f:33:14:64:d8:5f:5f:65:6c:a1:96:92:e5:4f:c5:d7:01:cb: f6:b1:4b:b8:80:17:bb:d4:b2:34:87:bf:f9:1e:14:78:65:f9: 7e:5a:2c:bb:b1:bf:ff:70:cd:ee:1c:cb:8a:a9:f4:c4:13:22: f3:1d:2c:bf:26:fe:89:7f:ae:c7:80:50:20:dc:cd:ae:38:2f: 0c:82:6c:ec:37:84:1f:46:3a:ed:92:45:e7:b0:81:6c:30:ff: 45:78:4d:aa:c2:83:94:a1:1b:9f:9b:59:28:77:0f:45:b7:31: ed:14:e4:ae:37:8a:2e:f7:d3:f2:cd:4f:49:dc:36:73:f6:d9: d0:fe:85:65:34:df:80:e1:88:19:d4:d4:00:24:dd:c0:a1:c1: 2d:a5:6d:7a:4d:b3:db:f3:96:c8:a3:26:bf:ad:94:bd:d0:32: ba:c2:0e:5a:e5:72:8f:99:8d:24:2e:0d:31:02:7b:94:2d:89: 2c:af:e4:ed:78:ab:78:38:47:88:7a:55:69:e7:95:57:9f:37: 0f:88:ca:bc:5c:77:21:d8:76:cd:c0:70:9a:5e:bf:0f:92:1c: 3f:1f:d6:66:6d:9f:4f:4e:d3:3b:65:7d:05:b6:69:82:ba:b9: a7:d8:21:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoQzFGMkVBNTZERkJFMEYyRjkyQjc0MURENjhDRjU2NzEx NUIzQjI5MjAeFw0yNTA4MjMwODE3MzlaFw0yNTA4MzAwODE3MzlaMBgxFjAUBgNV BAMTDTY4YTk3OTIzLWFjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyvaFTrL2pJl1gPI3OYK3KC0gql1/qTl7Cf6qVEVEVjMXDE66ZMlsAprLuoiaT 9pwaUpkh/c3tOW2b/a9p6SmW1Bd1bJxZR6Y05EvyZW9ngT6uLQn4i1tO7pyT6OqA CkjENaKIPsbNkCd5etDeQ8nDyTOvt4oW0jYSKIIYdi9amS4pCTyvvLWvaq9zmfqE QNKWqcfVNBQhut2Rb0akGu05u+2Rzf4dqXgOEeiJ8mI5eqfU96XEtZ/WQcFz3HsJ mJr430m8WQVB09BLgw0Q9ZNp4UHqo7u0uy/OEjYb/UUGMgYgp38b2o3DbHIOVLV3 gYFc0Sna48TSeCOCINlAillPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw8HRM7D9 AJg75kZlpdrt1FDtVf4wHwYDVR0jBBgwFoAUwfLqVt++Dy+St0HdaM9WcRWzspIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzA4RUJEQzQ0Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyL3dmTHFWdC0tRHktU3QwSGRhTTlXY1JXenNw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2ZMcVZ0LS1EeS1TdDBIZGFNOVdjUld6c3BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzA4RUJEQzQ0Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyL3dmTHFWdC0tRHkt U3QwSGRhTTlXY1JXenNwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEIIUMupn6xaW66DTkmM3xdqoB8zFGTYX19lbKGWkuVPxdcBy/axS7iA F7vUsjSHv/keFHhl+X5aLLuxv/9wze4cy4qp9MQTIvMdLL8m/ol/rseAUCDcza44 LwyCbOw3hB9GOu2SReewgWww/0V4TarCg5ShG5+bWSh3D0W3Me0U5K43ii730/LN T0ncNnP22dD+hWU034DhiBnU1AAk3cChwS2lbXpNs9vzlsijJr+tlL3QMrrCDlrl co+ZjSQuDTECe5QtiSyv5O14q3g4R4h6VWnnlVefNw+IyrxcdyHYds3AcJpevw+S HD8f1mZtn09O0ztlfQW2aYK6uafYIWk= -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:28 2025 by rpki-client