$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: vydMJ9RTwg3JXE7fGv/a5QvJdnEyWDTpdEdugaMwaeo= Subject key identifier: 32:2B:3A:84:2E:33:04:9B:D4:12:D6:6A:FD:68:F8:BA:91:A3:8A:D1 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 8E Signing time: Fri 05 Sep 2025 07:06:21 +0000 Manifest this update: Fri 05 Sep 2025 07:06:20 +0000 Manifest next update: Fri 12 Sep 2025 07:06:20 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: laWx3gaFAbJ4/uaTYevNLENplJvKHxEX1tov1FF/wv4=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: OeFUJInFH4cNkqvMFV8k9Dy5HiypZ14/pThp2DVW2AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Sep 5 07:06:20 2025 GMT Not After : Sep 12 07:06:20 2025 GMT Subject: CN=68ba8bed-34c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:16:4f:a0:e6:ab:da:1f:3c:ad:e1:a8:e3: 54:32:ec:fc:c6:b0:d0:a4:dc:1c:2c:61:25:9a:a1: 44:7e:d8:59:df:be:15:a6:4f:0a:5a:0d:3f:db:aa: 3e:24:eb:46:1f:b4:91:1c:41:70:94:1f:74:34:dc: 4f:59:61:30:b2:f3:f7:0d:7b:13:14:89:32:b2:06: 15:0f:9f:ab:87:4e:c9:96:9d:6f:e4:70:fa:b5:3c: 82:fd:60:c9:e5:03:6f:e0:8c:5b:97:e3:9e:4b:6e: 36:21:7d:77:41:e5:e1:56:f5:ac:f8:a9:64:ef:df: e1:d7:bc:af:89:a7:52:07:6e:8a:3a:a1:9e:f2:c6: 0c:44:75:2d:75:1e:96:5c:12:1f:da:ad:c7:2b:4d: 85:6b:bf:c1:c3:e0:06:af:3e:0c:48:6d:84:e9:e7: 99:59:01:c3:c1:51:e0:8e:59:3c:8f:37:fc:47:84: 28:5c:f1:bc:e3:fc:70:56:10:69:f7:6a:02:12:7f: 89:7c:ed:fe:e9:48:27:2a:06:86:23:09:cf:6f:0c: eb:17:cd:41:22:17:e6:af:8a:22:8b:95:0a:51:df: ec:ba:62:52:ee:4f:69:3a:f1:e6:0b:69:4a:00:ca: 9d:68:70:bc:f0:e8:25:b7:99:ab:04:56:00:38:4b: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:3A:84:2E:33:04:9B:D4:12:D6:6A:FD:68:F8:BA:91:A3:8A:D1 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:15:31:36:3e:a6:4c:77:b5:03:ba:c0:c2:6c:88:b2:27:32: 2b:cd:f8:8e:ce:25:86:44:39:94:d4:ba:b8:c8:80:d5:82:f0: 75:6d:f0:ae:6a:b1:5b:07:77:77:7b:47:e3:9e:46:81:0f:a2: 0c:e2:5c:6d:8b:62:53:6b:ff:8f:6d:7d:af:76:8a:b5:8a:61: 13:4f:ab:01:48:ac:8b:91:f7:06:2b:3f:f4:07:b3:3e:d1:33: dd:a9:3a:0e:73:c0:26:5a:82:e3:e1:e3:fb:d2:50:68:2e:5a: 16:92:89:a4:11:fa:3f:50:39:48:93:17:ae:4d:56:70:5f:de: 6c:44:89:a2:13:57:b3:17:1b:f6:5b:b9:e0:b7:f0:d6:5b:d1: 96:db:2b:dd:da:b2:6f:bb:c1:ae:5e:af:75:20:5b:bc:b7:02: 73:c4:ae:c0:3b:7e:d5:48:3a:7d:27:50:cf:6f:db:01:c0:48: 80:fd:66:44:74:6f:a9:e1:a4:91:19:cc:e9:e8:77:0d:07:f2: a5:29:8d:92:f5:99:f1:12:20:b4:f0:77:c2:91:c6:43:38:25: 00:64:0d:a1:d4:83:f7:a5:a2:53:3a:8a:30:7f:8e:86:ef:5b: 27:02:fb:90:98:89:0b:1c:c8:c4:e9:17:fb:60:7b:5e:08:f5: 21:e1:4a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjUwOTA1MDcwNjIwWhcNMjUwOTEyMDcwNjIwWjAYMRYwFAYD VQQDEw02OGJhOGJlZC0zNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDUWT6Dmq9ofPK3hqONUMuz8xrDQpNwcLGElmqFEfthZ374Vpk8KWg0/26o+ JOtGH7SRHEFwlB90NNxPWWEwsvP3DXsTFIkysgYVD5+rh07Jlp1v5HD6tTyC/WDJ 5QNv4Ixbl+OeS242IX13QeXhVvWs+Klk79/h17yviadSB26KOqGe8sYMRHUtdR6W XBIf2q3HK02Fa7/Bw+AGrz4MSG2E6eeZWQHDwVHgjlk8jzf8R4QoXPG84/xwVhBp 92oCEn+JfO3+6UgnKgaGIwnPbwzrF81BIhfmr4oii5UKUd/sumJS7k9pOvHmC2lK AMqdaHC88Oglt5mrBFYAOEs/bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIrOoQu MwSb1BLWav1o+LqRo4rRMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZFTE2PqZMd7UDusDCbIiyJzIrzfiOziWGRDmU1Lq4yIDVgvB1bfCu arFbB3d3e0fjnkaBD6IM4lxti2JTa/+PbX2vdoq1imETT6sBSKyLkfcGKz/0B7M+ 0TPdqToOc8AmWoLj4eP70lBoLloWkomkEfo/UDlIkxeuTVZwX95sRImiE1ezFxv2 W7ngt/DWW9GW2yvd2rJvu8GuXq91IFu8twJzxK7AO37VSDp9J1DPb9sBwEiA/WZE dG+p4aSRGczp6HcNB/KlKY2S9ZnxEiC08HfCkcZDOCUAZA2h1IP3paJTOoowf46G 71snAvuQmIkLHMjE6Rf7YHteCPUh4UrZ -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:51 2025 by rpki-client