$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: yr2Sk0IyxY7xMWs64CjLuspoJ2uyuFe5tjw40EB2HFo= Subject key identifier: 28:8A:55:7D:D6:2E:7C:A0:1C:45:21:44:AA:49:4D:E4:2D:31:5F:10 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: D1 Signing time: Sat 19 Jul 2025 05:57:42 +0000 Manifest this update: Sat 19 Jul 2025 05:57:41 +0000 Manifest next update: Sat 26 Jul 2025 05:57:41 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: hRp9ralPMoS1p8qvDQ7th6SJdwwizo0DWEeO1Y8gf+g=) 2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 6J9kztjsMZWsG1YwYpd9mAhESyWByZnQbhLzb1Wj+fo=) 3: BD956DA243A811F0B2160F4CC4F9AE02.roa (hash: DPMo9JSOcY0Ad4D94vkT1qT0OK/brrqmASVUw6EiS9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Jul 19 05:57:41 2025 GMT Not After : Jul 26 05:57:41 2025 GMT Subject: CN=687b33d6-faaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:77:ea:bf:f5:e6:a1:d7:a8:14:cb:9a:c3: 10:60:c4:aa:7c:09:d0:69:f7:5e:28:4b:3c:78:39: e0:2c:73:28:87:42:df:29:8d:ed:3e:48:e7:d6:79: 71:f7:35:12:e5:b6:54:13:1d:7a:a0:ff:52:d2:5b: 91:3b:0d:99:5a:f7:99:1f:ca:eb:ec:fb:63:65:99: 1a:d1:3b:a5:bd:4d:7d:2e:25:6a:12:f5:06:17:07: 1a:6a:6c:28:03:43:a6:b6:46:52:96:19:85:8c:b2: 03:ac:a9:86:e1:17:25:42:49:31:d3:34:c1:33:ec: ed:d9:46:7b:ff:af:91:a0:21:06:5f:93:5f:0a:03: c4:2e:2b:8e:e0:c9:de:9f:47:b3:7a:d3:a5:75:ed: c3:8b:bb:91:11:5a:4a:64:49:68:26:c5:ae:5e:45: a1:36:8b:5e:75:32:43:d2:6e:33:cd:1f:d6:1e:1b: de:4c:29:7d:4a:8c:9c:9f:97:53:55:0c:aa:87:27: b8:2f:d3:40:93:f8:33:a2:dd:83:89:d5:93:6e:16: 90:93:f8:77:16:70:22:c1:3b:dc:df:e6:4b:97:68: 05:56:81:92:e0:01:05:fc:96:21:20:1f:54:f9:32: 86:fa:5e:04:61:de:d8:27:c2:8e:74:81:96:ac:0d: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8A:55:7D:D6:2E:7C:A0:1C:45:21:44:AA:49:4D:E4:2D:31:5F:10 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d9:8c:f0:57:be:09:1d:5f:65:1e:cd:e6:e2:3d:b8:0a:c4: 9f:f0:42:62:58:a1:da:30:41:32:51:ee:0c:77:70:96:62:9c: d0:51:f7:c6:51:ee:a0:dd:fd:5b:91:48:10:50:b2:68:a7:9d: 74:b5:68:fb:34:c5:36:6f:83:d2:d3:ec:35:46:bd:74:6f:60: 4e:93:e1:55:f4:bd:db:81:6d:5a:6c:70:90:9d:d2:b6:f5:bc: 9c:d8:15:44:77:c8:3a:a1:4f:4a:a5:10:f4:d9:6a:3b:17:6d: 3f:3c:25:cc:3a:4d:b9:68:75:1c:53:bc:cb:86:2f:ab:ee:d1: 9a:49:7c:bc:63:c9:3d:7b:c3:7f:ce:1a:21:1c:2d:74:dc:d7: cf:ee:e9:6f:e1:f2:28:36:8a:20:09:fc:f8:76:21:cc:4a:4c: 1f:54:6e:94:ce:0c:4f:be:26:71:ff:67:e1:52:cb:97:75:2e: d2:62:a0:a4:81:91:89:00:2a:fd:d7:90:33:d8:5a:66:d3:15: 37:75:a4:e6:56:8c:1c:90:72:6c:96:46:02:d3:72:ee:95:40: 85:6e:b2:d6:12:d7:a9:cb:41:6a:2e:6d:ec:bc:e1:a6:32:ff: c1:d4:89:62:7d:5b:fe:65:55:e1:93:b9:f6:72:bf:b6:36:3a: f2:62:41:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUwNzE5MDU1NzQxWhcNMjUwNzI2MDU1NzQxWjAYMRYwFAYD VQQDEw02ODdiMzNkNi1mYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAost36r/15qHXqBTLmsMQYMSqfAnQafdeKEs8eDngLHMoh0LfKY3tPkjn1nlx 9zUS5bZUEx16oP9S0luROw2ZWveZH8rr7PtjZZka0TulvU19LiVqEvUGFwcaamwo A0OmtkZSlhmFjLIDrKmG4RclQkkx0zTBM+zt2UZ7/6+RoCEGX5NfCgPELiuO4Mne n0ezetOlde3Di7uREVpKZEloJsWuXkWhNotedTJD0m4zzR/WHhveTCl9Soycn5dT VQyqhye4L9NAk/gzot2DidWTbhaQk/h3FnAiwTvc3+ZLl2gFVoGS4AEF/JYhIB9U +TKG+l4EYd7YJ8KOdIGWrA16oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiKVX3W LnygHEUhRKpJTeQtMV8QMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2 ODZmWEZkNGI4NlllSmNlWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx2YzwV74JHV9lHs3m4j24CsSf8EJiWKHaMEEyUe4Md3CWYpzQUffG Ue6g3f1bkUgQULJop510tWj7NMU2b4PS0+w1Rr10b2BOk+FV9L3bgW1abHCQndK2 9byc2BVEd8g6oU9KpRD02Wo7F20/PCXMOk25aHUcU7zLhi+r7tGaSXy8Y8k9e8N/ zhohHC103NfP7ulv4fIoNoogCfz4diHMSkwfVG6UzgxPviZx/2fhUsuXdS7SYqCk gZGJACr915Az2Fpm0xU3daTmVowckHJslkYC03LulUCFbrLWEtepy0FqLm3svOGm Mv/B1IlifVv+ZVXhk7n2cr+2NjryYkFd -----END CERTIFICATE-----Generated at Sun Jul 20 18:42:22 2025 by rpki-client