$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft File: wfLqVt--Dy-St0HdaM9WcRWzspI.mft (raw, json) Hash identifier: yhCHg1dBK7kysPrhHLi5n8UcPRlVYRVmC/R1YRSVSH8= Subject key identifier: 6F:C4:0E:98:49:34:A1:FA:F0:79:82:1E:83:C0:5C:E6:52:05:3E:17 Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92 Certificate issuer: /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft Manifest number: 19 Signing time: Fri 05 Sep 2025 08:28:57 +0000 Manifest this update: Fri 05 Sep 2025 08:28:57 +0000 Manifest next update: Fri 12 Sep 2025 08:28:57 +0000 Files and hashes: 1: wfLqVt--Dy-St0HdaM9WcRWzspI.crl (hash: D7xZyFGSD3vbaTxjupykzCjxqUM+CpQp/+HYYePrrng=) 2: EB6E0EE8677811F08B1EA154C4F9AE02.roa (hash: 6eI2hX7+cNDQwr/0gzxm2cvx/HHunNUlrFOX9WFLw2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292 Validity Not Before: Sep 5 08:28:57 2025 GMT Not After : Sep 12 08:28:57 2025 GMT Subject: CN=68ba9f49-02b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:3b:7a:88:33:26:d2:2c:43:f9:4f:80:ea: 29:d6:6a:01:98:a6:fe:6c:63:8f:77:5e:3b:a5:15: e5:e5:26:a0:d5:84:46:a2:40:10:f7:a3:4e:11:63: 41:69:e3:ee:a8:f0:da:35:e9:f2:2b:52:35:17:e3: ab:0b:e9:7f:e2:fb:e7:58:c0:14:91:2e:e9:9e:64: 6b:76:f0:ba:43:a4:89:17:aa:1a:c3:54:1b:e1:57: 5a:3d:69:2d:a4:f5:41:ff:a6:02:bd:c1:c3:92:24: 69:81:fe:e3:7a:b9:6c:99:a0:9e:c3:11:e3:e0:e2: bd:c9:ec:ea:33:13:29:8e:89:9b:0e:3d:4a:c1:df: 7a:4a:0a:0f:22:3e:9b:25:87:a6:6e:40:f7:9b:8d: c5:e1:d9:e5:05:51:dd:88:f8:f8:1c:1a:7f:6b:7d: 44:aa:70:fc:8e:ba:66:09:48:b8:b4:f2:8b:63:7a: f2:5b:5a:3f:18:02:0a:54:df:8c:4c:70:12:8d:66: 46:71:95:4a:e3:12:61:6d:aa:27:f9:b3:b4:1c:b0: f7:6a:61:26:15:1e:0f:15:65:19:9f:22:90:80:90: 70:6d:3b:ff:66:be:92:0a:48:c1:2c:20:69:f3:ae: fa:96:33:01:5c:d5:2e:04:4a:38:25:d0:b7:8e:a7: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C4:0E:98:49:34:A1:FA:F0:79:82:1E:83:C0:5C:E6:52:05:3E:17 X509v3 Authority Key Identifier: keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:35:35:d0:ac:9a:5a:dc:2c:72:7f:7e:f5:9b:e5:23:cd: 7d:25:fd:eb:c9:b2:76:47:b1:88:52:a1:ea:e9:96:70:25:bc: 7f:0e:06:02:31:02:94:5b:05:93:46:bc:0d:27:42:61:29:31: 25:9b:55:b6:bf:d5:b9:f5:eb:22:1f:35:b9:c8:26:a3:a8:85: 6e:a3:2d:b6:67:0b:2b:b0:29:06:06:74:69:63:1f:10:37:fb: fa:e8:5e:49:90:90:22:22:82:28:ff:f5:71:82:b4:70:93:15: cd:f3:54:cf:4f:cf:63:f7:76:f8:63:78:e8:89:94:ff:23:56: 3a:6b:fc:7e:ce:d8:c6:35:b8:e1:fd:eb:b3:8b:e1:40:18:44: 6a:86:18:d6:e4:de:51:88:e2:89:42:aa:fb:a4:1c:0d:88:2d: 14:a5:22:75:04:00:91:0b:5c:20:b2:14:d9:89:33:8e:84:cf: 02:bf:c3:78:9e:30:1e:e1:9e:a4:a6:e8:96:c4:be:d4:50:33: 15:61:a3:d3:ba:88:81:ab:34:ea:25:17:05:3d:63:df:71:fc: e0:dc:54:15:91:dd:d9:1a:b7:2f:39:ee:82:8d:c4:f6:74:e0: 02:f0:76:f7:9c:c2:a4:8d:ad:b4:b3:ce:b0:42:22:e4:7c:86: fa:32:71:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzE1MDExMC8GA1UEBRMoQzFGMkVBNTZERkJFMEYyRjkyQjc0MURENjhDRjU2NzEx NUIzQjI5MjAeFw0yNTA5MDUwODI4NTdaFw0yNTA5MTIwODI4NTdaMBgxFjAUBgNV BAMTDTY4YmE5ZjQ5LTAyYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPwDt6iDMm0ixD+U+A6inWagGYpv5sY493XjulFeXlJqDVhEaiQBD3o04RY0Fp 4+6o8No16fIrUjUX46sL6X/i++dYwBSRLumeZGt28LpDpIkXqhrDVBvhV1o9aS2k 9UH/pgK9wcOSJGmB/uN6uWyZoJ7DEePg4r3J7OozEymOiZsOPUrB33pKCg8iPpsl h6ZuQPebjcXh2eUFUd2I+PgcGn9rfUSqcPyOumYJSLi08otjevJbWj8YAgpU34xM cBKNZkZxlUrjEmFtqif5s7QcsPdqYSYVHg8VZRmfIpCAkHBtO/9mvpIKSMEsIGnz rvqWMwFc1S4ESjgl0LeOpwipAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb8QOmEk0 ofrweYIeg8Bc5lIFPhcwHwYDVR0jBBgwFoAUwfLqVt++Dy+St0HdaM9WcRWzspIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MTUwLzA4RUJEQzQ0Njc3 ODExRjBCMEQwRjY0RkM0RjlBRTAyL3dmTHFWdC0tRHktU3QwSGRhTTlXY1JXenNw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2ZMcVZ0LS1EeS1TdDBIZGFNOVdjUld6c3BJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MTUwLzA4RUJEQzQ0Njc3ODExRjBCMEQwRjY0RkM0RjlBRTAyL3dmTHFWdC0tRHkt U3QwSGRhTTlXY1JXenNwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABonNTXQrJpa3Cxyf371m+UjzX0l/evJsnZHsYhSoerplnAlvH8OBgIx ApRbBZNGvA0nQmEpMSWbVba/1bn16yIfNbnIJqOohW6jLbZnCyuwKQYGdGljHxA3 +/roXkmQkCIigij/9XGCtHCTFc3zVM9Pz2P3dvhjeOiJlP8jVjpr/H7O2MY1uOH9 67OL4UAYRGqGGNbk3lGI4olCqvukHA2ILRSlInUEAJELXCCyFNmJM46EzwK/w3ie MB7hnqSm6JbEvtRQMxVho9O6iIGrNOolFwU9Y99x/ODcVBWR3dkaty857oKNxPZ0 4ALwdvecwqSNrbSzzrBCIuR8hvoycQQ= -----END CERTIFICATE-----Generated at Sat Sep 6 15:59:06 2025 by rpki-client