$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: OIvdWCmoPxBjoqxUM9uZKdLyOYWJjeyKCIgrAJkWqdg= Subject key identifier: 29:6D:1B:00:EA:FC:32:30:CD:E0:3B:C9:AB:D1:A4:E2:0B:91:52:B7 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 05F3 Signing time: Mon 08 Sep 2025 23:00:38 +0000 Manifest this update: Mon 08 Sep 2025 23:00:37 +0000 Manifest next update: Mon 15 Sep 2025 23:00:37 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: wHqvLZReyIdpFedvw0UtJMLPd/n1BXAiupqWjuesT2U=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: W3evTqtE3AeQu/+UCpmY09IhagDrzP1HZj8k+plv7KQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Sep 8 23:00:37 2025 GMT Not After : Sep 15 23:00:37 2025 GMT Subject: CN=68bf6016-db6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:aa:a8:65:86:fb:d5:7f:39:66:f2:47:25: 5d:c5:e4:0d:d4:33:86:2f:1c:b0:48:2d:41:44:e3: 42:fd:89:4a:75:ef:99:9c:8c:a7:25:1d:b3:26:1a: 7d:a8:22:b2:c3:94:b7:94:98:a5:16:dc:85:b2:86: ae:60:5d:5b:a6:03:ae:08:7a:bc:f4:e2:87:6c:fa: 87:1e:60:bd:39:1c:ac:1d:09:c0:e0:c6:56:81:13: 27:a6:79:52:15:0f:53:dd:e7:87:d6:ce:6b:98:44: 69:99:84:26:c0:79:b1:38:ac:4f:bc:8b:4a:cd:c3: 43:cc:81:41:cf:6f:5a:f5:cc:f2:e0:5e:cf:e2:9a: f2:5b:b5:5a:fb:95:50:47:da:63:5d:1d:4b:33:55: 14:95:81:d3:ee:44:18:1b:d8:b4:ad:fc:96:d6:82: cc:95:eb:24:80:cd:46:fb:0b:78:e4:bb:17:7e:d9: b7:72:cc:be:ed:e2:f9:d2:de:4a:07:32:dc:d2:17: b0:21:cf:50:01:02:3c:d6:43:41:9c:e2:68:44:51: 52:68:27:7d:56:8b:f4:c7:6a:f1:64:d5:bc:f5:8b: e9:00:f7:82:05:60:4d:44:fa:0a:98:dc:06:44:aa: b5:ab:6b:1a:91:59:05:d9:e5:1a:df:a3:3b:8a:91: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6D:1B:00:EA:FC:32:30:CD:E0:3B:C9:AB:D1:A4:E2:0B:91:52:B7 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:47:80:25:74:66:eb:b6:e9:54:fe:30:6f:da:30:31:80:49: b4:f7:e1:a6:77:f3:56:bf:28:e2:aa:72:f8:0d:d9:2b:6d:de: e1:9e:8f:94:38:1f:7c:f3:ae:46:fa:4b:d0:fd:cf:09:33:6c: e0:53:82:52:ba:6c:15:de:2b:f4:4f:71:99:7e:cc:b6:75:89: b7:48:c3:21:4a:6b:87:3a:66:d7:c6:bb:68:39:cc:42:91:10: 22:0d:de:93:f7:9b:7b:59:43:5b:bf:c7:e5:ac:33:d2:26:2d: 2f:52:96:9e:90:85:4a:12:36:bc:d0:2e:cd:6e:3c:83:11:82: 8f:f1:cc:2d:e0:2d:04:0b:9c:09:42:4c:36:99:0a:b7:b9:fb: 82:80:36:e6:1d:cd:90:a0:f0:ac:1b:aa:47:c0:cf:34:4e:ea: 3c:f1:bb:e4:e2:e6:8b:a2:d3:0d:04:6e:b1:d5:c1:54:00:bd: 07:9b:99:22:75:56:37:de:47:e5:84:ff:f9:cb:52:7a:c3:1a: 4d:91:66:2b:3a:e9:1c:4c:71:68:62:2c:da:1b:34:bb:0b:fa: 9f:bc:9c:f3:50:f8:bb:c7:64:b5:d4:b9:b0:cb:c1:e9:fb:c6: cb:90:86:74:36:c9:12:12:46:10:3e:f2:de:43:c9:55:5b:e9: df:86:db:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjUwOTA4MjMwMDM3WhcNMjUwOTE1MjMwMDM3WjAYMRYwFAYD VQQDEw02OGJmNjAxNi1kYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstyqqGWG+9V/OWbyRyVdxeQN1DOGLxywSC1BRONC/YlKde+ZnIynJR2zJhp9 qCKyw5S3lJilFtyFsoauYF1bpgOuCHq89OKHbPqHHmC9ORysHQnA4MZWgRMnpnlS FQ9T3eeH1s5rmERpmYQmwHmxOKxPvItKzcNDzIFBz29a9czy4F7P4pryW7Va+5VQ R9pjXR1LM1UUlYHT7kQYG9i0rfyW1oLMleskgM1G+wt45LsXftm3csy+7eL50t5K BzLc0hewIc9QAQI81kNBnOJoRFFSaCd9Vov0x2rxZNW89YvpAPeCBWBNRPoKmNwG RKq1q2sakVkF2eUa36M7ipFk2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCltGwDq /DIwzeA7yavRpOILkVK3MB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUR4AldGbrtulU/jBv2jAxgEm09+Gmd/NWvyjiqnL4Ddkrbd7hno+U OB98865G+kvQ/c8JM2zgU4JSumwV3iv0T3GZfsy2dYm3SMMhSmuHOmbXxrtoOcxC kRAiDd6T95t7WUNbv8flrDPSJi0vUpaekIVKEja80C7NbjyDEYKP8cwt4C0EC5wJ Qkw2mQq3ufuCgDbmHc2QoPCsG6pHwM80Tuo88bvk4uaLotMNBG6x1cFUAL0Hm5ki dVY33kflhP/5y1J6wxpNkWYrOukcTHFoYizaGzS7C/qfvJzzUPi7x2S11Lmwy8Hp +8bLkIZ0NskSEkYQPvLeQ8lVW+nfhtsd -----END CERTIFICATE-----Generated at Tue Sep 9 13:22:48 2025 by rpki-client