$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: f8Y88hT/Lxanpj1iLec5RlVpcmRn7UH5TUz1UVERZA0= Subject key identifier: D1:B4:F8:2D:5A:CB:7D:51:6B:29:9D:C1:E1:58:F0:8F:ED:92:A3:5B Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 047A Signing time: Fri 05 Sep 2025 00:21:36 +0000 Manifest this update: Fri 05 Sep 2025 00:21:36 +0000 Manifest next update: Fri 12 Sep 2025 00:21:36 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: 5OES69Ezq+u9DJha1EuUo46ukvyYzuno2/4aZNsoDxI=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Sep 5 00:21:36 2025 GMT Not After : Sep 12 00:21:36 2025 GMT Subject: CN=68ba2d10-2e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:28:8a:c9:6b:3f:ac:69:b3:bc:c0:be:36: 33:49:f2:00:cf:c0:d4:38:a3:97:02:9a:b5:c9:84: dd:6e:80:1e:44:34:11:5a:9b:a2:b7:0d:b7:5e:53: e1:2c:7b:b6:1d:04:57:6e:d1:ab:0a:80:7f:94:65: ed:9a:02:39:f7:5a:22:0e:6f:79:1b:b9:34:2d:22: cf:b9:8c:a3:df:09:24:48:eb:e4:b2:95:08:20:50: 19:6a:d6:73:4a:4f:1e:fb:fe:37:f1:2b:07:6d:9e: 9f:30:9e:b0:da:70:1d:d0:d8:38:6f:15:35:25:81: a1:1e:9c:5a:00:8e:ca:17:98:cb:13:b0:81:5f:f0: bb:2c:18:ac:bd:d6:e0:ec:68:ab:ac:fd:df:cb:1b: ac:fa:9e:6c:a7:bc:30:b0:31:67:36:d6:17:0c:88: 52:45:8a:48:af:f3:45:e5:83:a2:b7:e7:d2:a5:e2: f4:ba:64:6c:17:51:d4:67:ef:2d:9c:12:d4:1d:d4: 2b:28:82:a3:3b:ec:3b:b1:ee:29:2b:11:b8:a3:ba: 94:e6:d6:15:63:a7:4e:1e:1a:04:ec:6d:28:11:ff: 6b:6a:0f:da:7c:1d:60:a9:ef:90:fb:0d:54:24:83: 43:89:1b:18:e4:cf:28:a9:5b:7f:d6:c2:ed:58:65: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B4:F8:2D:5A:CB:7D:51:6B:29:9D:C1:E1:58:F0:8F:ED:92:A3:5B X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:66:22:22:05:9d:c3:2e:b4:ea:02:ba:bb:12:55:c0:5e:30: 5c:54:e0:fa:6a:db:11:a4:39:49:88:ed:66:74:bf:4b:f2:92: ea:3d:97:0e:ec:9d:8b:1f:9a:16:75:90:79:db:54:f5:80:d0: a0:99:dd:46:c1:da:21:79:18:d5:8b:45:f2:70:e8:48:5f:5d: 6b:a1:67:08:69:dc:e4:76:2e:84:b3:0c:f4:e3:27:46:f3:78: e1:92:c1:4a:36:ac:8d:41:8f:28:46:80:20:23:c0:2e:32:99: 03:ca:1b:26:f4:0b:d3:6c:f7:a1:3c:ec:6d:d4:66:7e:9b:dd: 5d:e8:4c:2c:39:26:90:07:82:da:f2:60:58:e2:d0:9e:98:c3: 81:22:5c:21:46:71:7a:93:91:61:8f:37:dd:cf:50:76:5e:47: d0:d8:c8:ca:f0:00:c3:e9:ea:5e:48:49:6a:aa:e1:be:f5:d1: dd:3e:bd:2e:08:3c:8b:03:5c:58:c6:be:17:d9:67:37:89:d5: 25:c7:de:b7:02:7c:f1:2d:1b:f2:20:d9:79:31:6c:d7:11:e5: 7b:49:bf:fe:1b:ea:bc:6d:28:06:0f:56:41:0c:04:50:20:6d: 5c:bf:ea:16:89:5a:15:17:0c:64:71:f9:08:19:12:db:cf:aa: e4:04:f9:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUwOTA1MDAyMTM2WhcNMjUwOTEyMDAyMTM2WjAYMRYwFAYD VQQDEw02OGJhMmQxMC0yZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gcoislrP6xps7zAvjYzSfIAz8DUOKOXApq1yYTdboAeRDQRWpuitw23XlPh LHu2HQRXbtGrCoB/lGXtmgI591oiDm95G7k0LSLPuYyj3wkkSOvkspUIIFAZatZz Sk8e+/438SsHbZ6fMJ6w2nAd0Ng4bxU1JYGhHpxaAI7KF5jLE7CBX/C7LBisvdbg 7GirrP3fyxus+p5sp7wwsDFnNtYXDIhSRYpIr/NF5YOit+fSpeL0umRsF1HUZ+8t nBLUHdQrKIKjO+w7se4pKxG4o7qU5tYVY6dOHhoE7G0oEf9rag/afB1gqe+Q+w1U JINDiRsY5M8oqVt/1sLtWGWA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG0+C1a y31RaymdweFY8I/tkqNbMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALZiIiBZ3DLrTqArq7ElXAXjBcVOD6atsRpDlJiO1mdL9L8pLqPZcO 7J2LH5oWdZB521T1gNCgmd1GwdoheRjVi0XycOhIX11roWcIadzkdi6Eswz04ydG 83jhksFKNqyNQY8oRoAgI8AuMpkDyhsm9AvTbPehPOxt1GZ+m91d6EwsOSaQB4La 8mBY4tCemMOBIlwhRnF6k5Fhjzfdz1B2XkfQ2MjK8ADD6epeSElqquG+9dHdPr0u CDyLA1xYxr4X2Wc3idUlx963AnzxLRvyINl5MWzXEeV7Sb/+G+q8bSgGD1ZBDARQ IG1cv+oWiVoVFwxkcfkIGRLbz6rkBPkY -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:32 2025 by rpki-client