$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: i7kKzspAFUlN0PWDle2A7apT8OzJ5W+J6NgBdGQEwWI= Subject key identifier: E5:E9:4E:97:2B:4E:51:49:AD:BD:EE:F2:AF:A9:6C:6B:27:92:F6:92 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0648 Signing time: Fri 22 Aug 2025 22:50:39 +0000 Manifest this update: Fri 22 Aug 2025 22:50:38 +0000 Manifest next update: Fri 29 Aug 2025 22:50:38 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: KsadBxRyGPiXTYxfAz56O7y44FJ3dnGuxvCEKCOcKMM=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: +9NJjEZlHqkxwGJezaqZvNw38PXtW0zuO81yVZ8rOEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Aug 22 22:50:38 2025 GMT Not After : Aug 29 22:50:38 2025 GMT Subject: CN=68a8f43e-babf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:41:be:c7:ac:c3:91:bb:62:34:20:0b:f1: 63:17:b6:d9:ad:03:23:dc:b4:ac:85:06:00:20:17: d4:ed:2b:24:a1:7f:bc:3e:34:81:23:cd:2a:5a:82: 74:2c:b1:6a:8b:8a:bc:da:d7:3d:3e:24:9a:33:06: 04:be:85:ad:c9:5a:ad:7a:63:94:e2:c3:a3:5d:78: aa:58:4a:f9:b6:46:d2:f9:b1:da:62:12:d2:cd:1d: 02:02:74:8a:48:4a:b2:bb:8b:fb:33:70:82:d7:e3: 33:40:bd:bf:b0:bf:70:61:1c:7a:2e:aa:15:5f:1f: db:38:d9:6e:52:74:c6:e9:76:fa:05:db:2a:e8:14: 39:85:72:29:01:ff:23:66:a0:a7:72:3f:10:c5:5e: 97:7b:1f:0a:db:b2:37:38:58:c4:61:ec:55:f3:4c: a7:39:06:17:c0:56:05:24:7c:ff:ef:d6:12:05:74: 73:3d:22:96:de:d5:c0:38:fa:9e:bd:32:ea:8a:13: 5c:1f:dd:0e:b5:47:16:54:0e:fe:ea:9a:9c:e9:db: 70:d4:ec:02:70:f2:8b:b3:53:3b:90:63:e9:e7:ff: 94:b2:8c:3e:c5:92:78:3c:64:0d:9d:d4:24:a1:a9: 05:75:e8:a8:d5:8e:81:d6:59:d0:15:bf:cc:5b:03: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E9:4E:97:2B:4E:51:49:AD:BD:EE:F2:AF:A9:6C:6B:27:92:F6:92 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:0d:fa:1c:c2:bb:80:ce:42:dd:d7:15:65:3c:e2:70:f5:f5: 47:7d:db:d1:79:b9:83:2b:e6:c2:ad:06:a5:85:07:0f:c2:91: db:3e:90:f1:a0:db:60:a4:06:7a:88:02:b1:57:b9:62:99:3f: 2a:19:f9:8f:50:2f:25:b5:97:d3:b1:d2:0d:af:8a:7c:45:1d: 9f:65:42:5e:34:88:7f:60:76:cb:67:05:22:c8:52:43:93:5f: 62:3c:dd:0b:61:a4:59:80:9b:04:4a:d3:9a:7b:e1:e6:40:e3: 2d:65:d3:e6:1a:09:96:37:7a:1a:53:0f:08:03:fc:12:3f:5c: bf:1e:6f:5e:f8:6c:7f:96:fb:54:92:20:70:fb:05:27:35:0c: 49:16:d6:e7:53:18:00:23:7b:19:f7:f7:38:1b:5e:a0:24:74: 53:d4:63:8a:4e:fe:fc:7e:a8:e6:64:3c:78:eb:c8:0e:56:55: 18:fd:0a:c5:4a:10:d7:4b:f3:14:a6:ae:67:f3:1e:f7:ea:76: 17:5f:2f:aa:eb:e5:d8:00:99:3e:af:56:c8:ca:6b:ee:00:91: b6:3e:2c:61:15:36:ab:ce:28:dd:4e:ec:2a:e3:33:20:44:8b: 8f:ba:4c:57:30:ff:c5:57:e5:bc:1c:2f:f0:75:d0:08:91:94: a5:0a:58:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUwODIyMjI1MDM4WhcNMjUwODI5MjI1MDM4WjAYMRYwFAYD VQQDEw02OGE4ZjQzZS1iYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkRBvsesw5G7YjQgC/FjF7bZrQMj3LSshQYAIBfU7SskoX+8PjSBI80qWoJ0 LLFqi4q82tc9PiSaMwYEvoWtyVqtemOU4sOjXXiqWEr5tkbS+bHaYhLSzR0CAnSK SEqyu4v7M3CC1+MzQL2/sL9wYRx6LqoVXx/bONluUnTG6Xb6Bdsq6BQ5hXIpAf8j ZqCncj8QxV6Xex8K27I3OFjEYexV80ynOQYXwFYFJHz/79YSBXRzPSKW3tXAOPqe vTLqihNcH90OtUcWVA7+6pqc6dtw1OwCcPKLs1M7kGPp5/+Usow+xZJ4PGQNndQk oakFdeio1Y6B1lnQFb/MWwNlpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXpTpcr TlFJrb3u8q+pbGsnkvaSMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWDfocwruAzkLd1xVlPOJw9fVHfdvRebmDK+bCrQalhQcPwpHbPpDx oNtgpAZ6iAKxV7limT8qGfmPUC8ltZfTsdINr4p8RR2fZUJeNIh/YHbLZwUiyFJD k19iPN0LYaRZgJsEStOae+HmQOMtZdPmGgmWN3oaUw8IA/wSP1y/Hm9e+Gx/lvtU kiBw+wUnNQxJFtbnUxgAI3sZ9/c4G16gJHRT1GOKTv78fqjmZDx468gOVlUY/QrF ShDXS/MUpq5n8x736nYXXy+q6+XYAJk+r1bIymvuAJG2PixhFTarzijdTuwq4zMg RIuPukxXMP/FV+W8HC/wddAIkZSlClig -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:16 2025 by rpki-client