$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft File: wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft (raw, json) Hash identifier: 7vGZ1TGJah60teb9baR+a5Gr63ys5Vj3FzvhwDEVe/o= Subject key identifier: CC:10:C1:6C:DE:D9:EB:57:BC:B5:8E:91:F6:63:1A:5C:08:11:31:7D Authority key identifier: C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94 Certificate issuer: /CN=A914CC0F/serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94 Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft Manifest number: 0984 Signing time: Fri 22 Aug 2025 20:14:24 +0000 Manifest this update: Fri 22 Aug 2025 20:14:23 +0000 Manifest next update: Fri 29 Aug 2025 20:14:23 +0000 Files and hashes: 1: wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl (hash: Uc6RgKKpvzBfiTUpgvcynR2Zz2VAlJCfjef7e3u4YTM=) 2: 170BFAA6995211EA9CF98C52C4F9AE02.roa (hash: EL9+YDLeW1dfYW9FtCHbupSHr1vCnqD1Nb1zNlJNZRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=C0BA1DFB35996FCE9A7E4859E8AF8791FAF0EC94 Validity Not Before: Aug 22 20:14:23 2025 GMT Not After : Aug 29 20:14:23 2025 GMT Subject: CN=68a8cf9f-7802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:e3:4d:02:44:b5:7a:f6:28:f2:0b:69:11: 16:8a:8c:68:51:e2:cc:45:3a:0e:d2:3b:d8:35:4c: ed:10:3b:1e:67:52:e8:0d:8a:79:b2:3a:20:b9:a5: af:4b:6f:7a:f8:b1:eb:b4:f9:1c:b1:9a:d5:27:66: bc:3f:58:79:dc:04:71:cd:93:83:50:a6:29:84:4a: 44:af:7f:fe:8c:9b:59:46:d8:e3:18:f6:80:a3:40: 67:78:09:3b:3a:cc:82:ec:ba:0e:40:86:a3:3d:51: 16:f4:7b:5d:38:04:c6:72:ff:6f:60:a6:d0:6c:cc: 0b:94:d8:89:fa:52:07:12:34:c5:a6:67:d4:bc:fc: ec:be:9a:b9:42:17:38:6e:95:f4:5e:ad:f0:62:5f: 77:de:c4:28:b3:2a:06:50:8a:91:52:75:af:49:29: a1:23:14:31:f0:d2:25:f3:67:f1:5c:b7:11:85:b2: 4f:15:44:7b:7c:80:7c:ca:8c:60:82:d8:60:be:e2: a8:1e:91:66:83:db:f2:b2:73:d6:4f:53:42:33:60: 69:ed:b8:bb:26:be:65:8a:15:db:dd:c3:d0:d1:37: b4:7a:0b:08:3b:16:94:8c:6b:e0:d4:ed:4e:51:11: f0:32:fe:5c:b0:7d:2d:bc:8a:07:d4:15:d3:f9:2a: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:C1:6C:DE:D9:EB:57:BC:B5:8E:91:F6:63:1A:5C:08:11:31:7D X509v3 Authority Key Identifier: keyid:C0:BA:1D:FB:35:99:6F:CE:9A:7E:48:59:E8:AF:87:91:FA:F0:EC:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLod-zWZb86afkhZ6K-Hkfrw7JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/34F6798C966511EAB68B4467C4F9AE02/wLod-zWZb86afkhZ6K-Hkfrw7JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a8:c0:bc:ce:bb:99:14:15:03:77:5d:a4:c6:f3:b6:dc:93: a7:a7:f6:86:ad:4c:5a:5c:a8:45:5c:76:ee:af:5f:3f:dc:e9: a9:be:6c:20:3c:87:54:fa:8b:14:dd:43:ab:62:d1:be:8f:d3: 60:e8:73:70:d1:fc:b1:40:20:07:aa:61:1e:b3:b8:49:91:8e: f1:a8:82:47:c4:10:14:96:51:3b:52:f5:be:43:56:c1:53:94: f4:6e:bb:a3:36:c9:48:ab:66:e4:8b:1c:e3:b7:74:2c:a4:13: e0:0a:5d:c9:87:4e:49:9a:72:32:3f:dd:ca:84:ef:15:7c:36: 1d:b7:a6:da:4e:f4:3a:3b:48:47:a4:ac:9e:4b:d3:82:23:b0: 88:eb:9f:22:d9:26:a9:f7:2c:f1:60:ec:9e:aa:49:f8:06:ac: b1:46:79:0f:4a:3c:6e:cb:dc:a4:49:cf:57:06:08:82:5f:e1: d0:ee:72:78:8b:9d:97:95:4b:20:ce:41:b1:ae:c2:b1:39:c3: 0a:fd:5a:27:90:9c:5a:24:2a:0c:b7:54:54:86:8c:26:30:d5: 56:66:2d:e1:5d:7a:36:41:2a:81:64:de:82:dc:f5:42:2d:01: 1f:aa:69:32:72:c9:40:4f:6b:70:52:1c:97:f9:44:59:27:b2: be:69:1c:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMEYxMTAvBgNVBAUTKEMwQkExREZCMzU5OTZGQ0U5QTdFNDg1OUU4QUY4Nzkx RkFGMEVDOTQwHhcNMjUwODIyMjAxNDIzWhcNMjUwODI5MjAxNDIzWjAYMRYwFAYD VQQDEw02OGE4Y2Y5Zi03ODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12DjTQJEtXr2KPILaREWioxoUeLMRToO0jvYNUztEDseZ1LoDYp5sjoguaWv S296+LHrtPkcsZrVJ2a8P1h53ARxzZODUKYphEpEr3/+jJtZRtjjGPaAo0BneAk7 OsyC7LoOQIajPVEW9HtdOATGcv9vYKbQbMwLlNiJ+lIHEjTFpmfUvPzsvpq5Qhc4 bpX0Xq3wYl933sQosyoGUIqRUnWvSSmhIxQx8NIl82fxXLcRhbJPFUR7fIB8yoxg gthgvuKoHpFmg9vysnPWT1NCM2Bp7bi7Jr5lihXb3cPQ0Te0egsIOxaUjGvg1O1O URHwMv5csH0tvIoH1BXT+SrG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwQwWze 2etXvLWOkfZjGlwIETF9MB8GA1UdIwQYMBaAFMC6Hfs1mW/Omn5IWeivh5H68OyU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MwRi8zNEY2Nzk4Qzk2 NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4NmFma2haNkstSGtmcnc3 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMb2QteldaYjg2YWZraFo2Sy1Ia2ZydzdKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MwRi8zNEY2Nzk4Qzk2NjUxMUVBQjY4QjQ0NjdDNEY5QUUwMi93TG9kLXpXWmI4 NmFma2haNkstSGtmcnc3SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeqMC8zruZFBUDd12kxvO23JOnp/aGrUxaXKhFXHbur18/3Ompvmwg PIdU+osU3UOrYtG+j9Ng6HNw0fyxQCAHqmEes7hJkY7xqIJHxBAUllE7UvW+Q1bB U5T0brujNslIq2bkixzjt3QspBPgCl3Jh05JmnIyP93KhO8VfDYdt6baTvQ6O0hH pKyeS9OCI7CI658i2Sap9yzxYOyeqkn4BqyxRnkPSjxuy9ykSc9XBgiCX+HQ7nJ4 i52XlUsgzkGxrsKxOcMK/VonkJxaJCoMt1RUhowmMNVWZi3hXXo2QSqBZN6C3PVC LQEfqmkycslAT2twUhyX+URZJ7K+aRxg -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:44 2025 by rpki-client