$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft File: WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json) Hash identifier: tlScEII7KSHhEGkfOusAwNriiZPoCE1Jml+twe2FzPM= Subject key identifier: B6:3A:17:68:1F:2F:C0:7C:93:40:BE:FD:70:3A:CD:2B:AE:D6:D4:B7 Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB Certificate issuer: /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft Manifest number: 07A2 Signing time: Fri 22 Aug 2025 21:30:08 +0000 Manifest this update: Fri 22 Aug 2025 21:30:07 +0000 Manifest next update: Fri 29 Aug 2025 21:30:07 +0000 Files and hashes: 1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: F3m+wvvvjbbWdKlbzNL+vdw9puUvqS3g4u64YVceOwQ=) 2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Validity Not Before: Aug 22 21:30:07 2025 GMT Not After : Aug 29 21:30:07 2025 GMT Subject: CN=68a8e15f-d1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:64:70:70:c3:12:61:9b:99:02:86:eb:1f: 73:fa:43:ef:85:0a:1a:ad:d3:9a:f9:d8:41:a9:4d: a4:41:34:7b:ee:69:a2:f1:8f:89:22:f7:a4:6c:48: 0a:21:aa:3e:d2:bb:53:a1:15:37:f1:c1:e1:44:29: ba:b9:48:7b:4c:8b:8f:77:f7:e3:c3:2f:1f:9e:5f: f2:1f:c0:0f:97:1a:51:4d:c7:0f:d1:32:73:22:6d: c7:d3:21:79:a2:5c:23:8f:20:d4:07:1c:2a:9c:a9: 7b:65:ea:44:36:9b:65:0d:75:cd:e6:ff:b0:41:22: 87:6a:3f:6d:50:fc:ce:65:e6:83:72:4c:39:22:1a: 00:cd:10:fa:ae:b0:91:52:cb:4f:5c:da:d8:6a:58: 52:3f:4b:75:ac:52:42:3e:2d:f6:a6:f8:06:1e:fa: 1c:f3:7c:34:85:23:ca:83:26:8d:d4:4a:4b:4a:ff: 87:eb:d1:af:b2:f8:66:6d:26:22:db:6a:7a:52:be: 65:e0:a7:7d:3e:25:3c:71:de:1b:67:94:9f:33:39: 9a:0d:c8:7e:fd:2f:b8:86:44:9d:f0:2b:d0:d4:85: 33:29:71:d5:40:be:72:31:46:de:9e:c4:78:35:e0: 71:5e:84:b1:f0:e9:88:0d:e3:c8:f9:df:ee:de:99: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:17:68:1F:2F:C0:7C:93:40:BE:FD:70:3A:CD:2B:AE:D6:D4:B7 X509v3 Authority Key Identifier: keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:26:68:40:5c:40:60:08:a8:68:81:6c:99:1b:18:69:b4:f0: c1:55:46:c5:12:70:11:d0:b9:6e:6a:e6:c6:e2:09:ed:3b:d0: f3:ed:e9:43:f3:25:a4:6c:79:42:ab:69:48:da:88:bb:a5:06: af:33:52:c2:55:0f:a7:27:06:c6:1e:be:f8:63:d1:87:82:86: a3:fe:62:c0:05:4f:17:4f:61:d6:82:de:c2:ca:45:82:f4:60: 26:1f:4e:64:59:6c:e3:70:54:33:0c:e1:6b:9e:3e:56:01:18: 2b:cc:b8:1b:21:c6:73:37:cc:ad:d8:ea:eb:58:36:aa:13:cd: a0:35:f5:d7:e4:28:51:a6:74:d4:06:1b:8b:69:b2:7c:2c:00: 6f:63:ce:50:4f:05:a8:22:91:d2:91:10:7b:27:f2:4b:95:c8: ba:df:05:ad:13:14:d5:96:53:4a:e4:f3:ec:99:43:4f:67:9b: b5:a6:67:d9:52:ee:9e:f9:92:0f:ec:95:ac:48:13:0a:7e:b3: 42:04:63:d9:a8:2b:d5:2a:a5:db:d5:7b:ba:a8:1f:0a:d5:9f: c9:1f:75:13:51:09:ba:be:44:72:3e:4b:14:86:2e:a0:70:51: 37:7c:dd:c4:b9:45:9b:d8:29:89:96:74:63:d2:d1:0a:64:cf: b9:da:d1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTkxMTAvBgNVBAUTKDVBOThFQTUxRjgwNzBENjcwMTg0MjEwMTQ1M0EyRDg1 NjRGQ0QyREIwHhcNMjUwODIyMjEzMDA3WhcNMjUwODI5MjEzMDA3WjAYMRYwFAYD VQQDEw02OGE4ZTE1Zi1kMWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uhkcHDDEmGbmQKG6x9z+kPvhQoardOa+dhBqU2kQTR77mmi8Y+JIvekbEgK Iao+0rtToRU38cHhRCm6uUh7TIuPd/fjwy8fnl/yH8APlxpRTccP0TJzIm3H0yF5 olwjjyDUBxwqnKl7ZepENptlDXXN5v+wQSKHaj9tUPzOZeaDckw5IhoAzRD6rrCR UstPXNrYalhSP0t1rFJCPi32pvgGHvoc83w0hSPKgyaN1EpLSv+H69GvsvhmbSYi 22p6Ur5l4Kd9PiU8cd4bZ5SfMzmaDch+/S+4hkSd8CvQ1IUzKXHVQL5yMUbensR4 NeBxXoSx8OmIDePI+d/u3pnq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY6F2gf L8B8k0C+/XA6zSuu1tS3MB8GA1UdIwQYMBaAFFqY6lH4Bw1nAYQhAUU6LYVk/NLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFOS83Q0U1MjJBNjE1 MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERXY0JoQ0VCUlRvdGhXVDgw dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwanFVZmdIRFdjQmhDRUJSVG90aFdUODB0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFOS83Q0U1MjJBNjE1MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERX Y0JoQ0VCUlRvdGhXVDgwdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwJmhAXEBgCKhogWyZGxhptPDBVUbFEnAR0LluaubG4gntO9Dz7elD 8yWkbHlCq2lI2oi7pQavM1LCVQ+nJwbGHr74Y9GHgoaj/mLABU8XT2HWgt7CykWC 9GAmH05kWWzjcFQzDOFrnj5WARgrzLgbIcZzN8yt2OrrWDaqE82gNfXX5ChRpnTU BhuLabJ8LABvY85QTwWoIpHSkRB7J/JLlci63wWtExTVllNK5PPsmUNPZ5u1pmfZ Uu6e+ZIP7JWsSBMKfrNCBGPZqCvVKqXb1Xu6qB8K1Z/JH3UTUQm6vkRyPksUhi6g cFE3fN3EuUWb2CmJlnRj0tEKZM+52tGH -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:15 2025 by rpki-client