$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json) Hash identifier: /PWT4xFMDMUeF91gIXHDJC/hlizZmXWRKDt9fY2Y/hM= Subject key identifier: D3:CA:3D:56:6E:5E:DF:FC:BF:96:73:3F:F0:CF:08:F3:D1:6E:2E:05 Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft Manifest number: 0147 Signing time: Wed 17 Sep 2025 04:53:56 +0000 Manifest this update: Wed 17 Sep 2025 04:53:56 +0000 Manifest next update: Wed 24 Sep 2025 04:53:56 +0000 Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: 9Tm3MEPTfm+hFGsrwEvKcbrP++3RUUc4QTvB2CsKtHE=) 2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Sep 17 04:53:56 2025 GMT Not After : Sep 24 04:53:56 2025 GMT Subject: CN=68ca3ee4-2a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ff:5d:15:59:48:fc:08:e7:61:72:ef:d1:10: 4e:8c:7a:96:0a:94:b5:62:cf:26:48:aa:80:77:f3: 50:d2:e5:1e:6d:e7:aa:c9:67:5e:f8:88:72:09:f1: aa:5d:d5:2f:3f:33:9d:f6:40:73:85:29:14:69:49: 72:d4:6b:b3:b7:00:f3:58:10:d3:c4:55:db:4d:39: 8d:6b:62:b6:82:72:5a:93:df:7c:20:36:d1:84:c0: 6f:50:4b:79:5a:d1:28:61:ec:56:b6:c4:93:8a:24: f3:96:49:c8:bf:b2:25:a6:fe:38:86:18:6f:e7:50: 26:e3:da:06:3a:21:93:81:0f:6c:21:a4:3c:30:78: e0:b6:d5:c3:d4:ee:35:af:d9:fa:05:38:3e:7a:11: 4d:7d:1d:8e:d9:34:28:90:ad:fc:e3:a3:05:06:7e: c3:77:7d:ec:2d:94:d0:88:67:b3:71:89:c5:77:91: 45:7f:aa:58:69:b0:01:b0:82:23:b6:18:58:a9:81: 29:f9:ed:1b:5e:87:14:6d:99:84:c0:54:e5:d4:8e: 3c:b5:62:df:0f:d1:97:f1:cc:78:d2:6e:22:4d:21: ea:14:14:1c:af:63:7f:57:12:a7:e1:bb:bf:8b:09: 77:42:06:89:71:1c:14:bd:97:38:73:89:aa:80:66: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CA:3D:56:6E:5E:DF:FC:BF:96:73:3F:F0:CF:08:F3:D1:6E:2E:05 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:87:45:f9:4f:9d:9c:42:2f:3d:da:8c:76:1f:86:81:dc:89: 74:44:02:b0:b0:bb:db:1e:51:c2:bb:36:fe:a1:68:07:b9:c7: ff:1c:37:70:4d:18:b5:dc:76:d9:22:f5:e0:a5:fe:4a:14:37: 0f:ad:26:c4:08:b7:79:b3:cc:d4:58:92:4b:8e:dc:db:57:37: 30:17:48:cf:71:c5:72:7b:e3:ce:f9:93:0f:3d:b3:bc:5c:db: 46:b8:bb:02:82:fc:0d:c3:c0:8a:e4:69:6f:b7:18:5b:7a:14: 04:f5:51:71:22:39:8f:fc:5f:8d:e7:12:34:87:93:b8:03:ee: 69:28:63:4d:70:be:2c:50:2b:3e:1c:85:5d:d4:e1:72:f3:7d: 30:22:28:29:14:ae:96:95:bc:08:04:5e:4c:a0:29:1b:61:0f: d3:16:6a:41:09:61:6f:ef:e4:b7:5c:20:48:79:97:69:77:92: 7a:32:d0:f9:ed:03:f9:4a:dd:3e:1e:53:60:7e:4c:8d:17:08: 45:2d:db:c7:86:3c:73:ed:44:e7:f4:63:9d:be:61:77:78:ed: a9:77:aa:1a:c9:6c:89:b7:8f:2b:2a:43:c4:40:21:d6:9e:c8: 65:91:2b:7d:55:e4:f1:86:e5:68:a5:e8:57:39:ec:f6:31:ad: c1:59:2a:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjUwOTE3MDQ1MzU2WhcNMjUwOTI0MDQ1MzU2WjAYMRYwFAYD VQQDEw02OGNhM2VlNC0yYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/9dFVlI/AjnYXLv0RBOjHqWCpS1Ys8mSKqAd/NQ0uUebeeqyWde+IhyCfGq XdUvPzOd9kBzhSkUaUly1GuztwDzWBDTxFXbTTmNa2K2gnJak998IDbRhMBvUEt5 WtEoYexWtsSTiiTzlknIv7Ilpv44hhhv51Am49oGOiGTgQ9sIaQ8MHjgttXD1O41 r9n6BTg+ehFNfR2O2TQokK3846MFBn7Dd33sLZTQiGezcYnFd5FFf6pYabABsIIj thhYqYEp+e0bXocUbZmEwFTl1I48tWLfD9GX8cx40m4iTSHqFBQcr2N/VxKn4bu/ iwl3QgaJcRwUvZc4c4mqgGZWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPKPVZu Xt/8v5ZzP/DPCPPRbi4FMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEQzMC9DRDgwQUFFNjlGRDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEds ekIwMWlHZHNWMDNpTFZkUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+h0X5T52cQi892ox2H4aB3Il0RAKwsLvbHlHCuzb+oWgHucf/HDdw TRi13HbZIvXgpf5KFDcPrSbECLd5s8zUWJJLjtzbVzcwF0jPccVye+PO+ZMPPbO8 XNtGuLsCgvwNw8CK5GlvtxhbehQE9VFxIjmP/F+N5xI0h5O4A+5pKGNNcL4sUCs+ HIVd1OFy830wIigpFK6WlbwIBF5MoCkbYQ/TFmpBCWFv7+S3XCBIeZdpd5J6MtD5 7QP5St0+HlNgfkyNFwhFLdvHhjxz7UTn9GOdvmF3eO2pd6oayWyJt48rKkPEQCHW nshlkSt9VeTxhuVopehXOez2Ma3BWSre -----END CERTIFICATE-----Generated at Fri Sep 19 02:30:09 2025 by rpki-client