$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft File: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft (raw, json) Hash identifier: dtByd/9C+e3fXH5vqojQ01qVO11mBdZYYNToLzQiyGQ= Subject key identifier: 3E:91:80:90:3C:86:23:96:B4:A5:B8:01:FC:1D:BB:D0:18:8C:77:5E Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF Certificate issuer: /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft Manifest number: 025A Signing time: Sat 23 Aug 2025 02:02:14 +0000 Manifest this update: Sat 23 Aug 2025 02:02:13 +0000 Manifest next update: Sat 30 Aug 2025 02:02:13 +0000 Files and hashes: 1: Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl (hash: 9fTZm8Nubh6T8i5LUh6f1RHQ61DMrFhTWXrySC33+k0=) 2: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (hash: 3j5PRrDY98r3uDB/NRxNOqJcUUYPq2wYxKOeqHbmCZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91136B5, serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Validity Not Before: Aug 23 02:02:13 2025 GMT Not After : Aug 30 02:02:13 2025 GMT Subject: CN=68a92126-bb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:b7:e2:9f:5e:0a:db:11:c1:52:2b:ec:b3: c4:66:df:4c:13:03:43:4b:f5:d4:8a:78:76:22:74: d2:70:b1:96:d0:76:50:7b:f9:62:26:c2:b3:a2:70: 0b:c8:28:31:f4:3c:be:36:12:d3:23:95:a5:ce:63: 51:a2:cd:ae:ad:64:d4:77:9f:cf:62:d1:81:e8:0d: 17:2e:2a:75:75:ad:37:a3:9a:e6:d7:49:07:6a:30: 8f:d1:4f:d8:e8:6c:3b:66:43:7b:97:90:6e:a9:09: f8:e7:61:86:f6:0a:8a:f9:f3:51:4a:16:d2:fe:4c: 8a:14:1e:eb:58:87:6a:6d:6c:b0:52:98:67:35:00: f5:da:7b:62:92:00:62:ce:e5:eb:88:03:cc:68:b8: 7e:88:7a:63:42:65:13:3b:54:47:38:42:65:28:f9: b4:19:24:65:f3:94:3c:42:0d:60:ec:b6:05:85:bf: 36:90:a6:70:79:78:53:fe:cd:fa:b3:3e:c2:a6:57: 21:82:94:f5:cf:97:65:d3:52:f2:87:45:f6:c7:35: 46:cc:48:93:77:d4:41:09:23:b9:02:9a:fb:64:fc: 50:77:8b:78:88:a8:29:3b:92:f4:11:79:50:97:ac: fa:32:8e:9e:e5:28:4e:02:aa:be:50:8a:1b:ee:17: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:80:90:3C:86:23:96:B4:A5:B8:01:FC:1D:BB:D0:18:8C:77:5E X509v3 Authority Key Identifier: keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3d:04:03:80:9f:21:29:3c:6b:a1:e7:e6:45:0e:c5:b3:f5: b7:2a:8c:f0:8e:e0:18:ac:be:c0:83:86:a1:38:bb:ee:ae:e8: aa:a7:72:4c:93:b9:a2:d0:0d:e5:c6:cb:86:84:bc:30:d7:ed: 85:e6:ce:07:8f:c4:a1:3b:07:b8:1b:f6:1d:c9:ab:29:6d:21: 1d:6b:f1:95:2a:1b:72:61:0d:a0:82:b0:31:f2:ed:e0:98:ec: e3:6a:23:b0:41:30:a4:c2:2b:2c:e8:8e:01:51:79:af:aa:bf: d6:96:36:ed:11:de:59:de:b1:ea:5a:32:55:7e:89:45:ec:70: 91:b5:1e:a5:b3:49:8d:55:cf:13:f0:2d:e1:14:d7:0c:67:03: 0e:e4:72:ea:a3:f8:2b:71:17:4f:0f:bf:7e:57:a3:88:15:1d: df:ef:1e:3b:3a:48:3c:1c:b8:20:e3:49:09:30:6c:dd:a0:86: 1d:86:97:96:d9:9e:a9:76:d9:94:01:c1:4f:e7:e6:e3:b8:15: 4a:34:a6:24:b5:4e:75:6a:31:df:28:85:29:4f:c5:3f:48:01: bf:81:15:33:21:de:3d:6a:9e:a5:31:bd:6e:72:8d:a0:3e:a8: c5:e5:38:68:0e:83:42:ba:96:b0:35:5d:d8:9f:7a:df:a0:80: ba:dc:69:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2QjUxMTAvBgNVBAUTKDVBRUNFQUQ1NENCMzZDQkYxQjRBMDBDNENENDEwODQ2 RDIzMTQxRUYwHhcNMjUwODIzMDIwMjEzWhcNMjUwODMwMDIwMjEzWjAYMRYwFAYD VQQDEw02OGE5MjEyNi1iYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZO34p9eCtsRwVIr7LPEZt9MEwNDS/XUinh2InTScLGW0HZQe/liJsKzonAL yCgx9Dy+NhLTI5WlzmNRos2urWTUd5/PYtGB6A0XLip1da03o5rm10kHajCP0U/Y 6Gw7ZkN7l5BuqQn452GG9gqK+fNRShbS/kyKFB7rWIdqbWywUphnNQD12ntikgBi zuXriAPMaLh+iHpjQmUTO1RHOEJlKPm0GSRl85Q8Qg1g7LYFhb82kKZweXhT/s36 sz7CplchgpT1z5dl01Lyh0X2xzVGzEiTd9RBCSO5Apr7ZPxQd4t4iKgpO5L0EXlQ l6z6Mo6e5ShOAqq+UIob7he2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6RgJA8 hiOWtKW4Afwdu9AYjHdeMB8GA1UdIwQYMBaAFFrs6tVMs2y/G0oAxM1BCEbSMUHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzZCNS9GNDExNURCQzJC QUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJMOGJTZ0RFelVFSVJ0SXhR ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1enExVXl6Ykw4YlNnREV6VUVJUnRJeFFlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzZCNS9GNDExNURCQzJCQUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJM OGJTZ0RFelVFSVJ0SXhRZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxPQQDgJ8hKTxroefmRQ7Fs/W3KozwjuAYrL7Ag4ahOLvuruiqp3JM k7mi0A3lxsuGhLww1+2F5s4Hj8ShOwe4G/YdyaspbSEda/GVKhtyYQ2ggrAx8u3g mOzjaiOwQTCkwiss6I4BUXmvqr/WljbtEd5Z3rHqWjJVfolF7HCRtR6ls0mNVc8T 8C3hFNcMZwMO5HLqo/grcRdPD79+V6OIFR3f7x47Okg8HLgg40kJMGzdoIYdhpeW 2Z6pdtmUAcFP5+bjuBVKNKYktU51ajHfKIUpT8U/SAG/gRUzId49ap6lMb1uco2g PqjF5ThoDoNCupawNV3Yn3rfoIC63GmQ -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:28 2025 by rpki-client