$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: 5bZeN6VMmF6xAR98LqUgz/EIB7ae7XSaDTq+fsxSLRA= Subject key identifier: 14:C5:E6:CE:D8:E1:91:DE:15:42:26:AF:72:A8:3B:75:F4:A3:DF:21 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 3E Signing time: Sun 07 Sep 2025 08:05:28 +0000 Manifest this update: Sun 07 Sep 2025 08:05:28 +0000 Manifest next update: Sun 14 Sep 2025 08:05:28 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: R4az+sAlsuOsR8U0LkXzqxict4R9rpoenA7vSJEc25g=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Sep 7 08:05:28 2025 GMT Not After : Sep 14 08:05:28 2025 GMT Subject: CN=68bd3cc8-2d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:c4:e9:3c:82:e3:60:86:3e:5f:ff:56:17: 71:5d:39:b4:6a:55:4b:d9:77:0d:9e:bf:45:a3:f6: b4:21:f8:e0:9b:b8:0c:86:aa:a2:cd:37:c2:08:27: 39:6b:d2:ed:bf:40:98:27:38:83:3b:c2:ba:96:11: 41:2a:1f:a7:ae:fd:71:d4:ae:47:6f:e4:38:75:81: 74:c2:27:73:83:99:6b:11:15:e2:16:1d:13:50:2f: 87:bd:40:64:d6:1d:94:0d:ae:82:41:5f:8c:cf:49: a5:19:f8:15:37:ee:6f:a7:09:48:18:c3:97:1a:7f: a2:01:38:76:7c:e6:ef:1f:6a:c5:f8:8f:5c:54:90: b0:09:a5:cf:7c:90:91:f0:f1:90:d1:b3:66:a7:6a: 52:ec:f7:24:7b:f3:91:e1:a2:3d:c2:2f:d3:ba:b8: ba:0d:c5:31:08:fc:86:61:4f:26:88:d5:c0:39:66: 21:cb:26:db:c0:39:f9:db:ae:60:8a:3b:26:ca:35: bd:37:34:62:36:75:af:b8:1f:92:9b:41:4b:44:45: 95:3c:50:fa:7e:f0:c4:5c:a1:b9:2c:82:a4:bd:ab: 98:29:99:5e:4d:fd:4e:de:08:bb:2a:00:d7:cd:c6: c2:a0:4c:4e:c4:0c:cd:17:2d:23:2a:c7:2f:48:3b: 52:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C5:E6:CE:D8:E1:91:DE:15:42:26:AF:72:A8:3B:75:F4:A3:DF:21 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2e:2e:bc:0f:92:a6:e8:3a:26:ec:3c:75:e8:a3:ab:96:74: 39:56:f1:33:cd:3d:f5:61:88:87:f9:a2:c9:d8:cb:ce:de:bc: 75:b6:57:00:d0:01:14:3d:0e:f5:25:52:1e:ef:49:b7:40:f5: f1:39:01:88:dc:45:45:06:92:ce:38:69:5b:83:57:51:12:8b: ed:0d:43:d4:8f:6a:bd:e4:54:c9:fd:88:7b:f2:7b:43:91:79: 8d:b7:6d:11:83:17:dc:b7:aa:d5:b1:0a:79:59:d3:8d:18:ce: 70:24:6f:af:01:4d:28:92:00:6a:1e:e5:f7:5e:c5:55:75:cd: dd:c1:df:26:29:c4:4c:b3:7b:42:b2:e6:38:18:b4:55:45:90: e5:8d:84:bf:c2:7d:0a:15:0e:2f:d2:92:2f:17:bf:d9:8a:41: 46:55:70:bb:b3:be:57:21:93:63:da:ad:3d:f5:52:08:3f:c3: 4b:75:61:02:7f:bc:0b:db:46:f7:31:78:75:bb:4f:ff:91:5c: b1:64:82:7e:41:c5:5b:3f:d5:84:fc:5f:25:54:45:83:4c:91: 05:44:4b:23:8f:c8:42:2a:c1:b1:f9:b7:53:0d:1c:5a:9e:28: 9a:08:bf:ad:b2:69:45:42:64:16:96:e8:04:df:14:7f:7d:d4: 25:17:13:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTA5MDcwODA1MjhaFw0yNTA5MTQwODA1MjhaMBgxFjAUBgNV BAMTDTY4YmQzY2M4LTJkMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwoMTpPILjYIY+X/9WF3FdObRqVUvZdw2ev0Wj9rQh+OCbuAyGqqLNN8IIJzlr 0u2/QJgnOIM7wrqWEUEqH6eu/XHUrkdv5Dh1gXTCJ3ODmWsRFeIWHRNQL4e9QGTW HZQNroJBX4zPSaUZ+BU37m+nCUgYw5caf6IBOHZ85u8fasX4j1xUkLAJpc98kJHw 8ZDRs2analLs9yR785Hhoj3CL9O6uLoNxTEI/IZhTyaI1cA5ZiHLJtvAOfnbrmCK OybKNb03NGI2da+4H5KbQUtERZU8UPp+8MRcobksgqS9q5gpmV5N/U7eCLsqANfN xsKgTE7EDM0XLSMqxy9IO1ITAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFMXmztjh kd4VQiavcqg7dfSj3yEwHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG4uLrwPkqboOibsPHXoo6uWdDlW8TPNPfVhiIf5osnYy87evHW2VwDQ ARQ9DvUlUh7vSbdA9fE5AYjcRUUGks44aVuDV1ESi+0NQ9SPar3kVMn9iHvye0OR eY23bRGDF9y3qtWxCnlZ040YznAkb68BTSiSAGoe5fdexVV1zd3B3yYpxEyze0Ky 5jgYtFVFkOWNhL/CfQoVDi/Ski8Xv9mKQUZVcLuzvlchk2ParT31Ugg/w0t1YQJ/ vAvbRvcxeHW7T/+RXLFkgn5BxVs/1YT8XyVURYNMkQVESyOPyEIqwbH5t1MNHFqe KJoIv62yaUVCZBaW6ATfFH991CUXE7w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:21:12 2025 by rpki-client