$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: XvmUj6dX9IvwFQlbyUtYb/ovxUzDWyVbwf+Mdhpa1RE= Subject key identifier: 12:3E:FB:64:86:F7:BA:84:F3:EE:AA:6D:FB:00:83:2F:D2:CD:D9:43 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: 010F Signing time: Sat 23 Aug 2025 05:17:32 +0000 Manifest this update: Sat 23 Aug 2025 05:17:32 +0000 Manifest next update: Sat 30 Aug 2025 05:17:32 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: TwzHijnRHjQX1xsj8LVBbV6e0SKcZUyvaYgmpJEoggQ=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Aug 23 05:17:32 2025 GMT Not After : Aug 30 05:17:32 2025 GMT Subject: CN=68a94eec-b2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:90:c0:8e:0a:c6:57:76:7d:e4:91:33:87:63: b2:21:dd:f4:f8:22:a9:51:68:a2:f2:b8:58:39:9d: c7:85:94:ab:0a:38:63:95:0c:37:5f:5e:5c:61:7c: a1:80:7b:1b:4a:0f:b9:50:5b:08:bc:d7:51:69:8c: b6:ac:5b:c8:4b:80:f1:91:1a:4c:40:45:f5:d7:83: 07:21:ac:c3:16:2b:68:72:c5:6a:5a:75:31:63:08: e8:2a:98:3a:ae:a2:e5:54:45:9e:c5:25:bc:d7:7f: 41:ff:70:fa:d2:e0:83:08:e5:b0:78:72:74:ef:f0: ac:45:a1:9a:33:2b:be:10:3f:8d:72:40:54:76:eb: 23:20:f0:6f:a3:83:87:3f:3c:fe:f8:95:2e:1b:23: e9:ff:10:41:94:da:d9:0d:11:49:f6:89:f1:62:48: 56:11:5a:79:e9:21:26:eb:d2:3d:a7:b5:a9:61:b0: d0:35:a3:6f:83:83:b2:26:62:93:e7:81:92:50:95: 33:e9:5c:95:5d:d1:83:d1:e8:12:a1:ff:f5:f4:5b: 30:ec:fa:7c:8f:33:60:09:0b:f2:34:2e:ae:c5:a1: 62:74:9d:f9:9d:4b:71:fa:91:bc:b3:90:49:a8:c5: fd:49:43:e5:9f:d7:14:31:5d:1e:04:e2:69:ac:70: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3E:FB:64:86:F7:BA:84:F3:EE:AA:6D:FB:00:83:2F:D2:CD:D9:43 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fa:28:2f:9d:4d:1f:2c:30:2b:f6:74:2e:63:ee:34:a3:e4: 4b:b4:cc:6e:10:3d:31:88:ce:3d:b6:73:19:f0:1f:d2:f0:1b: 37:88:f4:82:08:0f:88:d1:d3:34:75:7d:93:7d:70:1e:13:85: ac:53:61:a8:9a:bd:7c:2e:c4:c8:ab:a1:1a:45:2f:56:86:69: 1d:b0:66:96:90:e5:cc:be:91:dd:e3:ab:d7:53:54:61:00:c5: b9:21:cc:02:a6:a9:9b:d3:ec:06:59:1b:a6:b1:28:bc:b9:af: ec:78:17:28:4c:7e:64:b5:3b:9f:4d:76:72:4a:64:c6:1d:4f: 27:54:6a:51:2c:c5:e1:13:df:23:d1:14:ab:cc:fa:38:8d:f5: d6:05:1d:6f:4e:e9:5e:85:a8:90:be:6d:f9:fa:22:14:52:0c: 3c:2f:e6:7c:75:d1:b4:3e:19:9c:52:b2:98:c5:36:bd:7b:89: ce:9c:5f:b3:eb:cc:37:98:80:2b:27:67:b1:91:01:14:83:df: 14:00:b1:46:7c:4a:20:d9:6b:24:2e:65:84:19:60:7a:74:84: be:b6:ab:5d:94:75:62:7b:58:b0:55:ec:51:6e:83:19:f3:66: 07:f2:f8:18:7e:cc:a9:f6:98:85:9a:7b:df:f5:fd:f1:f0:55: 59:9a:27:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwODIzMDUxNzMyWhcNMjUwODMwMDUxNzMyWjAYMRYwFAYD VQQDEw02OGE5NGVlYy1iMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJDAjgrGV3Z95JEzh2OyId30+CKpUWii8rhYOZ3HhZSrCjhjlQw3X15cYXyh gHsbSg+5UFsIvNdRaYy2rFvIS4DxkRpMQEX114MHIazDFitocsVqWnUxYwjoKpg6 rqLlVEWexSW8139B/3D60uCDCOWweHJ07/CsRaGaMyu+ED+NckBUdusjIPBvo4OH Pzz++JUuGyPp/xBBlNrZDRFJ9onxYkhWEVp56SEm69I9p7WpYbDQNaNvg4OyJmKT 54GSUJUz6VyVXdGD0egSof/19Fsw7Pp8jzNgCQvyNC6uxaFidJ35nUtx+pG8s5BJ qMX9SUPln9cUMV0eBOJprHCMWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI++2SG 97qE8+6qbfsAgy/SzdlDMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK+igvnU0fLDAr9nQuY+40o+RLtMxuED0xiM49tnMZ8B/S8Bs3iPSC CA+I0dM0dX2TfXAeE4WsU2Gomr18LsTIq6EaRS9WhmkdsGaWkOXMvpHd46vXU1Rh AMW5IcwCpqmb0+wGWRumsSi8ua/seBcoTH5ktTufTXZySmTGHU8nVGpRLMXhE98j 0RSrzPo4jfXWBR1vTulehaiQvm35+iIUUgw8L+Z8ddG0PhmcUrKYxTa9e4nOnF+z 68w3mIArJ2exkQEUg98UALFGfEog2WskLmWEGWB6dIS+tqtdlHVie1iwVexRboMZ 82YH8vgYfsyp9piFmnvf9f3x8FVZmieA -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:41 2025 by rpki-client