$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: wjyQHwBN4ofhtEWjGg4omF4X9lrtHj+TAn5iENObing= Subject key identifier: 4C:B9:D4:4D:B8:53:96:0A:BE:4D:CF:7A:8B:D3:AE:8D:45:EF:4D:44 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0EF4 Signing time: Sat 06 Sep 2025 17:47:03 +0000 Manifest this update: Sat 06 Sep 2025 17:47:03 +0000 Manifest next update: Sat 13 Sep 2025 17:47:03 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 3IJYfFfq1c+AAr6PZpzTq41+HOp+3x7ibFP9+K76AeE=) 2: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: MCZ4hWeiAmt9KhYesLRixKufRw6yQV6zNqKued4Xvos=) 3: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=) 4: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: VEZ7s8au88OcCIFniLaU9jr2DOkZYlGYw2X2o/OxHCE=) 5: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=) 6: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=) 7: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=) 8: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: 10DFF7xCpxy47ECiljTuKfUMmTINmM368KgsuVpPV2A=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3958 (0xf76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Sep 6 17:47:03 2025 GMT Not After : Sep 13 17:47:03 2025 GMT Subject: CN=68bc7397-823b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:13:05:b6:17:16:e1:2f:40:1c:ef:aa:63: ca:13:76:bc:35:f1:42:a2:e1:2b:4c:51:f6:87:ff: d0:47:f1:6f:56:79:71:3e:18:f8:1a:e9:9b:c7:e4: e8:cb:6e:e0:4d:a8:71:3c:44:d3:1e:a2:4c:c5:4d: 81:3e:6f:74:8a:89:e6:db:f8:11:04:28:8e:8a:8f: 8d:65:70:35:b7:45:fb:1e:18:b6:af:5f:fc:08:cf: 49:76:12:66:32:34:73:0d:83:36:10:71:40:76:d0: 19:d6:03:4d:75:dc:b4:70:e8:8a:60:21:24:17:fb: 93:74:24:54:52:d7:ea:d4:33:0a:29:ae:61:f7:8d: a1:06:1d:92:0e:2f:7c:1e:70:24:d5:0c:f3:85:63: 85:b4:34:f1:ad:88:be:ab:d4:2a:ca:83:cc:d7:d2: 5d:b2:ff:fc:02:f0:7f:0c:5b:44:15:df:d4:7d:12: cf:41:f7:ce:7b:cb:ac:b1:cb:fa:83:8d:16:97:2e: ae:bf:ca:35:18:50:64:2a:0d:ee:a3:f4:79:2a:51: 43:06:b0:ea:12:2a:1a:88:63:e6:c3:b5:98:4f:d8: b1:22:70:f2:c1:20:fc:77:df:b8:a4:29:81:93:7a: e6:5e:38:25:15:e4:ed:dc:f6:b5:25:a2:53:90:aa: aa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B9:D4:4D:B8:53:96:0A:BE:4D:CF:7A:8B:D3:AE:8D:45:EF:4D:44 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:41:5b:f5:f6:01:75:8b:ae:df:92:c4:75:e3:3e:cd:1c:9e: 1f:64:59:26:7d:99:e3:04:53:a2:3d:f8:37:c0:bb:da:89:4d: 35:7f:73:f8:99:0b:40:cd:0f:3b:41:e8:f8:98:03:2f:b0:89: f1:eb:9a:0a:e2:ba:1b:75:3e:d8:e4:e2:ac:67:8a:11:8d:e0: 52:9a:6f:23:6c:5e:b2:66:e7:b8:a3:9a:90:7f:b6:49:86:8a: fb:0a:96:dd:3e:67:9e:41:70:b4:ad:d9:2c:2c:c6:ce:82:b9: c5:3c:9c:90:98:dd:dc:b0:a1:f6:4b:f4:ba:0d:39:27:f3:08: 2a:f4:54:d9:e2:cf:11:a6:5e:2b:e8:dd:8d:10:be:7d:a1:c9: 6b:45:20:79:f1:e7:8e:29:5c:82:10:4c:c5:87:e9:f9:ab:a9: 3d:b3:d2:5b:59:70:44:d4:88:62:7d:a9:65:aa:60:53:31:e8: bc:f0:06:19:35:8e:ea:98:70:e4:21:f4:32:67:68:ae:63:f4: 36:33:99:a5:ff:62:92:16:5b:da:10:ca:10:ea:36:77:47:37: fb:b2:76:f5:0e:e7:c0:ae:0e:6f:9f:64:7b:9f:1d:8a:55:be: 94:6c:57:b6:ec:f6:03:11:27:8e:8a:fa:ca:45:70:9c:85:50: 80:03:52:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwOTA2MTc0NzAzWhcNMjUwOTEzMTc0NzAzWjAYMRYwFAYD VQQDEw02OGJjNzM5Ny04MjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPoTBbYXFuEvQBzvqmPKE3a8NfFCouErTFH2h//QR/FvVnlxPhj4Gumbx+To y27gTahxPETTHqJMxU2BPm90ionm2/gRBCiOio+NZXA1t0X7Hhi2r1/8CM9JdhJm MjRzDYM2EHFAdtAZ1gNNddy0cOiKYCEkF/uTdCRUUtfq1DMKKa5h942hBh2SDi98 HnAk1QzzhWOFtDTxrYi+q9QqyoPM19Jdsv/8AvB/DFtEFd/UfRLPQffOe8usscv6 g40Wly6uv8o1GFBkKg3uo/R5KlFDBrDqEioaiGPmw7WYT9ixInDywSD8d9+4pCmB k3rmXjglFeTt3Pa1JaJTkKqqvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEy51E24 U5YKvk3PeovTro1F701EMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHQVv19gF1i67fksR14z7NHJ4fZFkmfZnjBFOiPfg3wLvaiU01f3P4 mQtAzQ87Qej4mAMvsInx65oK4robdT7Y5OKsZ4oRjeBSmm8jbF6yZue4o5qQf7ZJ hor7CpbdPmeeQXC0rdksLMbOgrnFPJyQmN3csKH2S/S6DTkn8wgq9FTZ4s8Rpl4r 6N2NEL59oclrRSB58eeOKVyCEEzFh+n5q6k9s9JbWXBE1IhifallqmBTMei88AYZ NY7qmHDkIfQyZ2iuY/Q2M5ml/2KSFlvaEMoQ6jZ3Rzf7snb1DufArg5vn2R7nx2K Vb6UbFe27PYDESeOivrKRXCchVCAA1Ko -----END CERTIFICATE-----Generated at Mon Sep 8 06:15:08 2025 by rpki-client