$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft File: v_WBURjDvN2NWsIxfbvPo5l-NfY.mft (raw, json) Hash identifier: AbFrShzoSKUKA8ep+/V9SBZ9G+H5DHpUSKf9LJLN+xU= Subject key identifier: EE:9C:2D:8B:77:77:4F:B4:FF:41:CD:A3:B9:30:50:A8:9E:78:5E:2D Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft Manifest number: 0117 Signing time: Fri 05 Sep 2025 05:12:39 +0000 Manifest this update: Fri 05 Sep 2025 05:12:38 +0000 Manifest next update: Fri 12 Sep 2025 05:12:38 +0000 Files and hashes: 1: v_WBURjDvN2NWsIxfbvPo5l-NfY.crl (hash: t04hB8iM0IBUq9lhoEOnbqCyRzfFfn5qnNfmvZfqLMI=) 2: 489B8430DE8911EEB21B9B45C4F9AE02.roa (hash: SDPNisnSYRGvj5gVjzP5feJ+X0hwI7v9EIoicUEp2e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6 Validity Not Before: Sep 5 05:12:38 2025 GMT Not After : Sep 12 05:12:38 2025 GMT Subject: CN=68ba7147-3b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:4e:1d:5c:fe:f4:8a:4a:b1:e6:65:01:a6: 3c:79:64:e6:53:b4:72:40:7e:d3:c9:77:7d:6b:4d: 48:00:25:96:4d:c5:56:29:e1:ed:2e:36:06:5b:cb: 73:5a:8b:cb:54:1a:e2:f1:f3:3b:5c:c8:c5:cf:e5: c8:14:6f:a5:e8:8f:b7:4a:8f:37:f8:2a:6d:c8:02: a1:00:05:02:cc:b9:7f:83:d4:df:bb:0a:d8:5f:cf: 28:3e:ef:5c:de:72:b8:9b:fd:e1:c1:27:9c:e2:ac: 7b:7b:90:6d:ed:27:bf:8c:3b:4e:e6:ee:a4:6e:0d: 3c:5e:cd:dc:70:db:b3:d8:8d:8b:04:1e:55:6d:87: 10:61:27:35:91:b0:22:ae:0d:83:42:b9:56:21:93: 3d:54:4e:13:c6:67:4c:05:65:ff:83:79:c0:a9:b7: 24:2d:87:0d:d1:3e:3f:39:f7:44:52:70:15:1e:d2: 17:79:ae:4c:36:4c:e2:24:dd:ca:3d:31:7c:ba:1e: 8f:7a:f5:93:b6:b4:77:55:ff:be:96:89:41:88:11: 33:a6:3d:1e:43:62:3f:7f:7b:3e:d1:be:41:1e:f6: b5:13:95:04:a7:31:ca:e2:7a:5a:bb:ef:f7:f8:ea: dd:3f:19:89:2e:ca:1d:64:a8:b0:ef:2f:a7:43:ac: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9C:2D:8B:77:77:4F:B4:FF:41:CD:A3:B9:30:50:A8:9E:78:5E:2D X509v3 Authority Key Identifier: keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:86:7e:aa:94:bb:2f:0a:a4:62:18:a0:53:5a:11:20:14:43: ad:66:13:44:88:5c:c3:d5:08:e1:e7:31:17:f1:7c:cb:67:7c: 1a:e9:47:3a:98:7c:6b:7c:ba:c6:ac:6e:15:49:89:82:4e:69: 80:70:3a:d9:e9:e1:e0:88:35:51:8a:b2:17:aa:f5:d6:e2:4d: 9a:7f:68:a6:7b:a7:bf:a5:47:8d:17:a6:8f:95:fb:90:be:19: 1e:00:49:57:20:06:7a:a8:e8:59:b9:57:58:36:10:9f:1f:6a: 5e:53:b3:28:10:eb:0f:bf:1a:c1:89:1a:c4:0f:96:e2:8a:43: 6c:59:e7:6e:44:b2:79:fd:ba:2e:e0:3b:e5:ad:71:8f:b1:6a: c8:c9:e2:03:35:ec:f3:d8:0e:4b:f4:27:9c:7c:e2:f8:1c:32: 6d:66:b8:d3:78:57:33:fe:69:17:12:e4:93:2f:c1:fa:5a:e7: 69:a0:a4:7b:9a:4b:91:43:a9:10:3d:41:f4:9c:15:d0:62:31: fb:ca:d1:2a:04:94:41:3b:88:1e:2d:ac:b8:9c:c8:82:99:e7: d0:78:b2:cf:bb:92:c5:82:4b:2d:3d:32:6c:06:8b:21:22:34: b9:a1:ae:31:71:24:36:f8:e1:18:22:65:05:9c:c5:7d:ac:88: 80:20:44:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRBQzAxMTAvBgNVBAUTKEJGRjU4MTUxMThDM0JDREQ4RDVBQzIzMTdEQkJDRkEz OTk3RTM1RjYwHhcNMjUwOTA1MDUxMjM4WhcNMjUwOTEyMDUxMjM4WjAYMRYwFAYD VQQDEw02OGJhNzE0Ny0zYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTBOHVz+9IpKseZlAaY8eWTmU7RyQH7TyXd9a01IACWWTcVWKeHtLjYGW8tz WovLVBri8fM7XMjFz+XIFG+l6I+3So83+CptyAKhAAUCzLl/g9TfuwrYX88oPu9c 3nK4m/3hwSec4qx7e5Bt7Se/jDtO5u6kbg08Xs3ccNuz2I2LBB5VbYcQYSc1kbAi rg2DQrlWIZM9VE4TxmdMBWX/g3nAqbckLYcN0T4/OfdEUnAVHtIXea5MNkziJN3K PTF8uh6PevWTtrR3Vf++lolBiBEzpj0eQ2I/f3s+0b5BHva1E5UEpzHK4npau+/3 +OrdPxmJLsodZKiw7y+nQ6wNqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6cLYt3 d0+0/0HNo7kwUKieeF4tMB8GA1UdIwQYMBaAFL/1gVEYw7zdjVrCMX27z6OZfjX2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9EREM5NDJBQURF ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZOMk5Xc0l4ZmJ2UG81bC1O ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5mWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REFDMC9EREM5NDJBQURFODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZO Mk5Xc0l4ZmJ2UG81bC1OZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7hn6qlLsvCqRiGKBTWhEgFEOtZhNEiFzD1Qjh5zEX8XzLZ3wa6Uc6 mHxrfLrGrG4VSYmCTmmAcDrZ6eHgiDVRirIXqvXW4k2af2ime6e/pUeNF6aPlfuQ vhkeAElXIAZ6qOhZuVdYNhCfH2peU7MoEOsPvxrBiRrED5biikNsWeduRLJ5/bou 4DvlrXGPsWrIyeIDNezz2A5L9CecfOL4HDJtZrjTeFcz/mkXEuSTL8H6WudpoKR7 mkuRQ6kQPUH0nBXQYjH7ytEqBJRBO4geLay4nMiCmefQeLLPu5LFgkstPTJsBosh IjS5oa4xcSQ2+OEYImUFnMV9rIiAIETX -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:51 2025 by rpki-client