$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: Vksw2cIgFBNLeB5Q2hYBVUb7b62nq0p1YH6Dk3zD30E= Subject key identifier: C2:CF:93:8D:64:DA:A4:5F:7A:DB:5B:4D:26:65:64:60:8B:73:DD:71 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 014C Signing time: Wed 17 Sep 2025 04:50:27 +0000 Manifest this update: Wed 17 Sep 2025 04:50:26 +0000 Manifest next update: Wed 24 Sep 2025 04:50:26 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: iihWn9wuYqgYZDH0W3hWjAu4ZkoQgKsQHsiz1uXruxY=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Sep 17 04:50:26 2025 GMT Not After : Sep 24 04:50:26 2025 GMT Subject: CN=68ca3e13-07d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:4e:b8:f6:5f:66:87:bf:68:57:9b:dd:85: 18:79:09:04:8f:57:d4:bb:cc:bd:30:7c:67:67:5f: f1:3d:72:92:ed:e9:19:48:24:0a:07:d4:76:73:b0: fc:a4:a3:ea:bb:fb:47:d6:b8:40:6f:8e:8f:b3:7c: 20:45:aa:fb:cc:04:e8:d6:ac:a2:fc:28:00:f7:34: 02:97:7e:6f:68:ba:5b:9e:d8:46:03:97:25:8b:25: f6:47:f9:d4:a3:63:90:1a:f9:ff:6e:bb:7f:93:61: ff:31:17:03:15:76:c3:48:47:f5:13:b1:a6:b4:9e: 8d:fa:28:58:48:2e:4a:f5:51:d3:27:45:23:0e:9c: bf:36:9d:7c:3f:0f:31:1e:28:4b:54:3a:a9:fb:31: 5c:df:08:43:c0:fd:8d:96:41:f3:5a:ec:94:25:50: 24:49:6f:34:d8:e4:a2:35:bc:3c:dd:5b:a3:ae:7c: b0:ca:30:0e:4b:39:fe:23:32:25:d0:fd:c1:a2:41: 88:ac:09:49:c0:b5:9c:b7:c8:dc:3b:a7:9f:df:6d: e9:82:66:f8:ef:e2:18:a5:e9:8f:c5:e5:94:bb:ac: 0b:f6:06:27:cd:e1:63:83:5e:d1:be:38:15:29:93: 28:f5:65:fc:39:1e:b8:e3:2b:02:32:9e:5b:77:6f: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:93:8D:64:DA:A4:5F:7A:DB:5B:4D:26:65:64:60:8B:73:DD:71 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ee:ce:f8:58:98:94:74:b1:80:9e:60:b8:16:f2:8f:25:e8: 04:ea:dc:d8:94:f8:6e:30:d0:d1:18:16:b2:aa:2a:ab:4c:b4: fc:b6:66:5d:0a:cf:8d:8e:5b:4f:a5:a2:07:72:c4:f5:9b:b8: 23:b2:61:46:7e:d2:2d:0c:39:86:06:99:c6:2b:d1:e3:d5:0d: 0f:87:bd:5b:4c:20:d9:ca:7c:92:ad:60:30:b5:4f:16:f4:3e: b8:d5:89:a6:d3:10:98:f0:36:c5:26:08:cc:07:01:c9:e9:11: 94:74:6a:46:19:7e:49:90:da:b8:e2:8e:22:28:33:4f:16:c8: e7:0c:97:9a:5f:91:63:42:56:1f:24:0f:93:51:b6:c3:ce:e8: 72:12:e5:4c:38:97:19:0b:c6:2f:c3:89:b1:d6:dd:5d:6c:8c: 31:b4:c3:20:c3:74:97:e4:42:3b:59:89:c9:d5:35:d4:00:97: f5:d9:6b:fb:84:16:3f:b3:8b:c1:4f:ea:fc:82:23:ea:da:24: 92:19:16:b2:10:76:70:e9:c3:a8:8b:3e:21:16:57:b1:2a:ac: 81:0d:6f:60:c1:18:89:d3:f1:0e:e0:55:c4:e6:f2:58:57:e6: 14:d1:fa:50:bf:ac:4e:39:c8:92:0a:84:e1:c0:4f:f7:18:42: 4a:7e:7f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwOTE3MDQ1MDI2WhcNMjUwOTI0MDQ1MDI2WjAYMRYwFAYD VQQDEw02OGNhM2UxMy0wN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmBOuPZfZoe/aFeb3YUYeQkEj1fUu8y9MHxnZ1/xPXKS7ekZSCQKB9R2c7D8 pKPqu/tH1rhAb46Ps3wgRar7zATo1qyi/CgA9zQCl35vaLpbnthGA5cliyX2R/nU o2OQGvn/brt/k2H/MRcDFXbDSEf1E7GmtJ6N+ihYSC5K9VHTJ0UjDpy/Np18Pw8x HihLVDqp+zFc3whDwP2NlkHzWuyUJVAkSW802OSiNbw83VujrnywyjAOSzn+IzIl 0P3BokGIrAlJwLWct8jcO6ef323pgmb47+IYpemPxeWUu6wL9gYnzeFjg17RvjgV KZMo9WX8OR644ysCMp5bd2+ztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLPk41k 2qRfettbTSZlZGCLc91xMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB7s74WJiUdLGAnmC4FvKPJegE6tzYlPhuMNDRGBayqiqrTLT8tmZd Cs+NjltPpaIHcsT1m7gjsmFGftItDDmGBpnGK9Hj1Q0Ph71bTCDZynySrWAwtU8W 9D641Ymm0xCY8DbFJgjMBwHJ6RGUdGpGGX5JkNq44o4iKDNPFsjnDJeaX5FjQlYf JA+TUbbDzuhyEuVMOJcZC8Yvw4mx1t1dbIwxtMMgw3SX5EI7WYnJ1TXUAJf12Wv7 hBY/s4vBT+r8giPq2iSSGRayEHZw6cOoiz4hFlexKqyBDW9gwRiJ0/EO4FXE5vJY V+YU0fpQv6xOOciSCoThwE/3GEJKfn9c -----END CERTIFICATE-----Generated at Thu Sep 18 22:11:24 2025 by rpki-client