$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft File: W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft (raw, json) Hash identifier: SDpLIg1dW3eHzZjX5W9tWvoZJIE/bs3dvyusv+B3roU= Subject key identifier: 17:1C:3B:0E:4E:76:93:FF:10:CE:E0:13:58:26:93:BA:D6:79:B6:EB Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB Certificate issuer: /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft Manifest number: 03 Signing time: Wed 17 Sep 2025 08:56:21 +0000 Manifest this update: Wed 17 Sep 2025 08:56:21 +0000 Manifest next update: Wed 24 Sep 2025 08:56:21 +0000 Files and hashes: 1: W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl (hash: rxGBNaiwgjgsP9QbReWQk0UwLJqeCX0IanbWQD2ogNk=) 2: D65EFE0A91F711F087341C45C4F9AE02.roa (hash: kAhTjUWVZV9wMTU00Q644BmyUxt0di+mCyDgFqmBb/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB Validity Not Before: Sep 17 08:56:21 2025 GMT Not After : Sep 24 08:56:21 2025 GMT Subject: CN=68ca77b5-15ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:41:dc:10:e8:c4:cc:43:81:2d:c1:52:30: 36:c6:8e:34:99:34:09:23:1b:7c:c5:3c:9f:fd:95: 3e:c4:ac:cc:3a:e4:8a:e5:46:6f:67:18:8f:73:e3: 1f:48:69:fa:0d:47:57:06:2e:39:c9:71:43:de:07: 3d:6e:50:fe:59:56:54:ff:46:7a:61:70:52:80:0c: 94:c9:cc:b1:17:12:40:8a:7b:8c:f9:1f:c6:9e:01: b8:59:64:7c:55:76:1f:44:0a:38:ad:ea:07:d9:d2: 79:3f:d5:4d:1a:b2:27:55:e9:ae:29:ad:5a:7f:aa: 4f:71:50:52:91:79:61:f0:4d:96:2a:fd:12:14:94: 01:6c:97:d6:74:09:51:f5:2b:b6:b1:34:c9:dd:29: 44:04:28:18:3a:27:92:f8:ae:e9:7a:55:ae:e4:b7: f1:3b:a5:e0:58:04:37:c6:b9:d9:26:9f:a6:8f:32: fe:da:3d:2d:f2:3b:ad:03:14:45:de:c6:32:7b:40: 71:41:08:47:22:9b:11:66:42:27:18:bc:09:1a:13: 5d:81:06:65:35:91:9d:1a:98:74:24:c8:d8:b2:ad: 65:54:20:75:a6:2c:96:81:6e:c0:95:9f:53:6b:4f: 60:98:cf:93:54:fc:29:fd:70:4b:9e:ee:63:8d:e9: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1C:3B:0E:4E:76:93:FF:10:CE:E0:13:58:26:93:BA:D6:79:B6:EB X509v3 Authority Key Identifier: keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b6:e8:63:4e:49:f8:d5:26:31:0a:0b:01:a0:80:7a:6d:53: 0c:09:d5:4f:84:f7:75:b9:c6:93:fd:7c:5c:60:0f:f2:6b:7c: 54:9d:d2:62:70:8f:76:70:e4:ab:22:65:0c:d6:ce:01:75:21: a4:0f:a6:1d:9d:17:c0:f7:6c:59:0d:29:a5:0f:ac:bf:be:8b: aa:16:d8:26:ae:f2:68:ad:db:7b:19:53:43:03:75:e8:1f:4e: a1:3b:a9:0d:e7:9d:66:e3:9e:4d:23:0a:cf:63:be:3e:9a:4b: c9:d3:70:2d:a0:67:9f:31:db:12:f0:4a:e1:73:63:0c:45:b3: f2:a9:12:40:c6:a2:f0:42:e9:a3:4b:99:9f:95:13:f6:94:4e: 01:e6:47:04:6a:15:a2:28:f2:b2:91:6a:53:3a:74:bd:cd:66: 46:61:63:6d:1e:39:7e:cf:bd:e2:cf:c6:56:64:78:59:41:ee: da:3d:bc:52:90:e5:16:6c:e9:46:4c:57:56:39:eb:77:85:f1: 78:be:18:ad:d7:d4:94:4f:40:ca:9a:d2:12:cb:0d:2b:d8:21: a0:6b:5e:55:ec:76:d3:29:70:56:26:ac:ea:64:80:b8:5f:4e: 46:21:9b:a6:12:9c:4c:33:f5:af:f0:29:c5:44:7d:1d:65:9f: f6:3e:68:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoNUJGMDAwMTQ3MzRBRDFCNTY1QjEwODZEMTJGRkNBQjU5 MENDQjhCQjAeFw0yNTA5MTcwODU2MjFaFw0yNTA5MjQwODU2MjFaMBgxFjAUBgNV BAMTDTY4Y2E3N2I1LTE1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9cEHcEOjEzEOBLcFSMDbGjjSZNAkjG3zFPJ/9lT7ErMw65IrlRm9nGI9z4x9I afoNR1cGLjnJcUPeBz1uUP5ZVlT/RnphcFKADJTJzLEXEkCKe4z5H8aeAbhZZHxV dh9ECjit6gfZ0nk/1U0asidV6a4prVp/qk9xUFKReWHwTZYq/RIUlAFsl9Z0CVH1 K7axNMndKUQEKBg6J5L4rul6Va7kt/E7peBYBDfGudkmn6aPMv7aPS3yO60DFEXe xjJ7QHFBCEcimxFmQicYvAkaE12BBmU1kZ0amHQkyNiyrWVUIHWmLJaBbsCVn1Nr T2CYz5NU/Cn9cEue7mON6R5hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFxw7Dk52 k/8QzuATWCaTutZ5tuswHwYDVR0jBBgwFoAUW/AAFHNK0bVlsQhtEv/KtZDMuLsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzE0MDA2NjJBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJWbHNRaHRFdl9LdFpETXVM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV19BQUZITkswYlZsc1FodEV2X0t0WkRNdUxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzE0MDA2NjJBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL1dfQUFGSE5LMGJW bHNRaHRFdl9LdFpETXVMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIC26GNOSfjVJjEKCwGggHptUwwJ1U+E93W5xpP9fFxgD/JrfFSd0mJw j3Zw5KsiZQzWzgF1IaQPph2dF8D3bFkNKaUPrL++i6oW2Cau8mit23sZU0MDdegf TqE7qQ3nnWbjnk0jCs9jvj6aS8nTcC2gZ58x2xLwSuFzYwxFs/KpEkDGovBC6aNL mZ+VE/aUTgHmRwRqFaIo8rKRalM6dL3NZkZhY20eOX7PveLPxlZkeFlB7to9vFKQ 5RZs6UZMV1Y563eF8Xi+GK3X1JRPQMqa0hLLDSvYIaBrXlXsdtMpcFYmrOpkgLhf TkYhm6YSnEwz9a/wKcVEfR1ln/Y+aNU= -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:43 2025 by rpki-client