$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: WnNHg5xvq2BWOskYK05kO6ypkD+VZLJbaCNjJG6d5OM= Subject key identifier: 64:49:14:88:B2:4F:2B:56:69:8B:78:AA:88:58:68:4C:8E:89:32:DD Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 0558 Signing time: Tue 02 Sep 2025 23:49:37 +0000 Manifest this update: Tue 02 Sep 2025 23:49:37 +0000 Manifest next update: Tue 09 Sep 2025 23:49:37 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: wZQo6k8hTqxQse5njh5oMOTaA4WrI1vvoEJoZy/A9kU=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: 9qQVMGcPhTFLqGN6w5hpebTs92VIq7KmqEVaikgxWXo=) 4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: iEgI1+eELzSv9harMun/B8PcGTONk7OUyJu4K2OeKeo=) 5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: 918uflqRaxL4teDIN56OfUziBRRQmbbgHsTgJ3UnMS8=) 7: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: 6UFCXsHGkBs9mNJ/P0P2x3t8KMswz8UkcFEG5pRtYR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Sep 2 23:49:37 2025 GMT Not After : Sep 9 23:49:37 2025 GMT Subject: CN=68b78291-f32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:77:aa:4e:e8:2b:27:32:78:97:74:5b:99:3f: 75:2e:c1:a3:67:51:98:2e:cf:e5:31:ad:36:89:c1: 42:43:fd:50:ec:cf:24:b2:ca:23:30:e1:9f:e3:05: ef:d6:d1:37:bc:d1:49:93:45:91:6f:16:75:ed:b8: 09:1e:db:58:ed:59:20:8a:f9:f5:47:7d:4a:79:23: 35:4e:00:ac:68:62:1b:99:41:b6:1a:fb:0e:18:56: 11:8f:f1:9f:de:d8:4a:ca:04:a9:9f:55:73:ca:e9: 39:0d:5b:f2:5a:1d:8d:1d:5c:77:45:c8:45:94:76: 3a:a9:49:59:e9:4a:7a:dc:47:75:0a:15:25:27:bd: 29:cb:d0:0e:f5:3c:6a:ce:ba:bd:ac:db:4f:86:e4: 76:ce:4a:b0:a5:74:a7:8f:0b:7a:d7:dd:c2:a9:09: 53:7c:0f:3c:7b:18:fa:e5:34:6d:13:fc:6e:d3:23: 33:28:82:47:05:17:4f:f1:bd:b7:a8:53:1a:69:5b: 88:60:d9:0d:26:b6:9d:b7:d0:1e:0a:ad:30:06:d5: e0:4c:59:b3:63:54:de:ab:c4:3e:07:fc:c0:41:f5: aa:5a:fb:9b:73:d4:b3:5e:40:ee:29:30:99:8a:7a: 34:75:3b:df:7a:53:5d:8b:e7:f0:26:81:7e:79:99: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:49:14:88:B2:4F:2B:56:69:8B:78:AA:88:58:68:4C:8E:89:32:DD X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:28:83:f1:d8:31:d3:2e:8b:ad:b3:c5:33:f1:9d:19:15: 6f:ac:1d:6f:75:9c:30:5b:7b:f9:12:09:06:b4:70:e0:59:74: 7d:c3:ab:c1:35:ea:7f:5c:26:e0:52:df:f8:97:cb:a7:c6:eb: d7:43:b2:e3:73:ec:51:fc:e9:b1:38:ef:de:74:db:06:c9:99: 80:e4:1f:89:e6:b1:34:65:81:86:8f:24:c2:0c:bc:3f:71:a2: 6a:25:e7:b3:b4:61:14:e5:ee:9c:11:41:18:f8:14:ad:5c:ea: 20:86:5b:10:fe:49:39:c6:d9:b0:3d:47:b5:c5:a6:b9:c8:bf: a2:03:e6:7e:ad:5b:61:e6:5c:c4:2c:fb:0f:35:a3:df:b4:18: b1:02:7d:30:8f:5f:9c:4d:ca:6a:87:e8:57:b8:64:3f:5e:ba: 2f:29:fe:0f:9e:4b:d5:4a:9c:e3:d5:fb:fc:8b:94:16:bc:77: 59:31:1c:a0:a8:cf:c8:76:8b:df:81:ea:ac:4b:bf:a8:cd:bd: d5:4f:e1:bd:70:52:60:40:49:d0:58:6a:86:d7:57:a2:84:ae: e2:66:74:88:44:39:ad:74:00:73:77:d2:e5:4b:69:15:f6:70: 1d:9e:3c:61:c9:ed:e5:20:70:0f:6c:d0:04:8f:03:ce:84:47: 72:56:c9:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwOTAyMjM0OTM3WhcNMjUwOTA5MjM0OTM3WjAYMRYwFAYD VQQDEw02OGI3ODI5MS1mMzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1neqTugrJzJ4l3RbmT91LsGjZ1GYLs/lMa02icFCQ/1Q7M8kssojMOGf4wXv 1tE3vNFJk0WRbxZ17bgJHttY7Vkgivn1R31KeSM1TgCsaGIbmUG2GvsOGFYRj/Gf 3thKygSpn1Vzyuk5DVvyWh2NHVx3RchFlHY6qUlZ6Up63Ed1ChUlJ70py9AO9Txq zrq9rNtPhuR2zkqwpXSnjwt6193CqQlTfA88exj65TRtE/xu0yMzKIJHBRdP8b23 qFMaaVuIYNkNJradt9AeCq0wBtXgTFmzY1Teq8Q+B/zAQfWqWvubc9SzXkDuKTCZ ino0dTvfelNdi+fwJoF+eZkLxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRJFIiy TytWaYt4qohYaEyOiTLdMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP9yiD8dgx0y6LrbPFM/GdGRVvrB1vdZwwW3v5EgkGtHDgWXR9w6vB Nep/XCbgUt/4l8unxuvXQ7Ljc+xR/OmxOO/edNsGyZmA5B+J5rE0ZYGGjyTCDLw/ caJqJeeztGEU5e6cEUEY+BStXOoghlsQ/kk5xtmwPUe1xaa5yL+iA+Z+rVth5lzE LPsPNaPftBixAn0wj1+cTcpqh+hXuGQ/XrovKf4PnkvVSpzj1fv8i5QWvHdZMRyg qM/IdovfgeqsS7+ozb3VT+G9cFJgQEnQWGqG11eihK7iZnSIRDmtdABzd9LlS2kV 9nAdnjxhye3lIHAPbNAEjwPOhEdyVsmG -----END CERTIFICATE-----Generated at Wed Sep 3 16:07:30 2025 by rpki-client