$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: ifG/Gp6tG5aWDX+8QT+VZd8QZ6E887qOhmNR+PxZ6dg= Subject key identifier: 2F:F2:AD:CD:A3:F7:D1:F1:E3:F2:23:BD:0F:F3:2A:16:24:D9:9C:C6 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 0151 Signing time: Tue 09 Sep 2025 04:33:24 +0000 Manifest this update: Tue 09 Sep 2025 04:33:23 +0000 Manifest next update: Tue 16 Sep 2025 04:33:23 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: HnCs0Ge7e/yt8q2qA4mlSQFZK15n+TuKKCUPlMB1SuE=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: Ha1RED7wj5vvuljsqQyxT/3es50bYuYX2UgeIHA9Bqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Sep 9 04:33:23 2025 GMT Not After : Sep 16 04:33:23 2025 GMT Subject: CN=68bfae13-557d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:e9:e9:2c:b4:d4:5b:ac:71:54:a4:61:d1: 99:ec:8e:09:1d:28:fe:65:ef:da:49:3d:bf:5b:02: c0:4a:6c:75:77:8d:65:81:4d:0e:50:57:a2:6d:4d: b5:b0:e3:7d:41:49:51:cf:89:5a:e5:9c:17:2a:cc: d7:d6:fd:0b:58:57:30:51:81:60:5c:41:d8:b9:1d: 66:e6:a1:ca:a3:e3:e8:ae:54:a7:c9:b6:86:ae:5e: f5:54:ce:16:fc:0a:e0:3b:af:ee:ab:10:59:9a:ec: 11:f5:be:43:3d:44:8d:0d:9e:c6:f9:0e:58:b9:c4: b7:e6:5e:84:2e:97:1d:d4:14:fe:67:2d:eb:4f:db: 44:4b:1c:c4:83:94:26:cd:e4:62:68:16:2c:6a:4e: 8e:61:4b:3e:fb:8c:91:6b:07:9b:38:1c:f9:e1:c0: 73:63:10:be:d9:3f:d7:82:3a:7b:86:62:fa:8d:26: a6:57:80:99:97:14:e1:24:0a:bd:39:68:6f:c6:eb: 9b:5e:9d:eb:05:05:5d:86:a7:39:bf:11:fb:57:42: 11:c6:da:b0:a7:37:e4:84:5e:6d:ec:e0:16:f0:ca: 27:bc:1c:5b:a4:b2:14:80:0f:f7:2a:75:44:30:02: 69:06:62:aa:7e:03:d7:a3:51:aa:81:9e:9a:4d:40: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:AD:CD:A3:F7:D1:F1:E3:F2:23:BD:0F:F3:2A:16:24:D9:9C:C6 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e2:f0:86:f0:ef:b9:85:d0:e6:7f:8f:1f:28:86:a7:54:e9: 33:f4:29:5f:28:ec:f6:9f:e4:87:fa:ac:bf:ff:fd:e1:02:2f: e9:e3:2f:10:0f:ef:e6:f8:7b:4c:36:12:e6:44:6c:c9:0a:d1: 13:39:c0:3f:68:f5:5f:77:f7:31:30:b4:d3:e4:be:99:a1:c9: a7:af:02:c8:d0:75:9a:48:e5:a9:5b:e7:b7:00:6e:e9:5a:48: d1:48:80:b0:25:c0:ea:9f:96:76:0d:e6:d2:55:30:ff:1d:5e: 53:e2:89:df:65:c0:f6:30:83:96:4e:5e:8d:0d:b2:fa:b3:2c: 97:d4:34:37:bf:3a:75:f2:24:99:28:e9:78:eb:a9:3a:7a:b2: 35:85:2f:1a:ca:ab:48:5e:94:4b:0c:e8:5c:3d:e4:cc:c8:42: 94:84:8e:cf:b9:93:99:7d:5f:83:c6:ae:52:9b:2b:2c:36:fd: 45:6a:f5:61:b8:38:7b:2c:f9:6c:13:4f:9e:1f:bc:6d:f2:9e: 66:5b:52:a4:45:37:4f:38:55:2b:84:32:c3:00:76:aa:f5:09: 84:ed:0a:09:09:c3:02:bb:7c:49:6a:9b:b4:4c:54:92:56:b8: 4a:1a:d8:b4:e4:9e:0b:5e:23:df:cf:b5:5a:9b:7d:b7:8d:5e: 1d:f2:74:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwOTA5MDQzMzIzWhcNMjUwOTE2MDQzMzIzWjAYMRYwFAYD VQQDEw02OGJmYWUxMy01NTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwrp6Sy01FuscVSkYdGZ7I4JHSj+Ze/aST2/WwLASmx1d41lgU0OUFeibU21 sON9QUlRz4la5ZwXKszX1v0LWFcwUYFgXEHYuR1m5qHKo+PorlSnybaGrl71VM4W /ArgO6/uqxBZmuwR9b5DPUSNDZ7G+Q5YucS35l6ELpcd1BT+Zy3rT9tESxzEg5Qm zeRiaBYsak6OYUs++4yRawebOBz54cBzYxC+2T/Xgjp7hmL6jSamV4CZlxThJAq9 OWhvxuubXp3rBQVdhqc5vxH7V0IRxtqwpzfkhF5t7OAW8MonvBxbpLIUgA/3KnVE MAJpBmKqfgPXo1GqgZ6aTUCrhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/yrc2j 99Hx4/IjvQ/zKhYk2ZzGMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB4vCG8O+5hdDmf48fKIanVOkz9ClfKOz2n+SH+qy///3hAi/p4y8Q D+/m+HtMNhLmRGzJCtETOcA/aPVfd/cxMLTT5L6ZocmnrwLI0HWaSOWpW+e3AG7p WkjRSICwJcDqn5Z2DebSVTD/HV5T4onfZcD2MIOWTl6NDbL6syyX1DQ3vzp18iSZ KOl466k6erI1hS8ayqtIXpRLDOhcPeTMyEKUhI7PuZOZfV+Dxq5SmyssNv1FavVh uDh7LPlsE0+eH7xt8p5mW1KkRTdPOFUrhDLDAHaq9QmE7QoJCcMCu3xJapu0TFSS VrhKGti05J4LXiPfz7Vam323jV4d8nQA -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:33 2025 by rpki-client