$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: +vdW9ayawM+W127m5BVxHy8r99aLqVOH0owitmQFlGc= Subject key identifier: AE:F5:4D:71:CD:73:43:72:D3:9C:2B:B3:B2:82:19:6F:E5:E1:18:5D Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 02EC Signing time: Sat 23 Aug 2025 01:32:36 +0000 Manifest this update: Sat 23 Aug 2025 01:32:36 +0000 Manifest next update: Sat 30 Aug 2025 01:32:36 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: 7ESNu2Hw2ssOfPwZw3CtGunarbZnAzSdSy4nLbUSMWM=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: S2C+VMQaXNDpZ4wrKaK1oLzxt+RZ0aWeTadlNJ8ZR5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Aug 23 01:32:36 2025 GMT Not After : Aug 30 01:32:36 2025 GMT Subject: CN=68a91a34-8b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:c8:a3:29:ae:f1:27:d4:48:88:4b:77:8a: 07:af:95:d9:b1:4d:df:51:b1:f3:15:c7:5f:e2:17: c1:d6:fb:22:ea:56:a5:b2:ae:53:28:7f:75:40:bf: 62:c7:de:83:04:d8:06:ce:29:9c:4f:04:6f:91:55: e5:c0:af:09:70:88:e6:df:1d:7f:31:84:4a:fe:eb: 92:cd:8d:7e:eb:94:7e:85:3d:59:ab:fb:f7:d7:35: 20:6a:d4:d3:3e:51:d3:5e:34:3e:2c:b0:42:2c:0c: e4:9c:07:66:b7:30:ed:6f:26:d0:3d:d8:cc:51:c7: 3f:f3:15:33:3e:34:d1:da:95:c0:ce:68:26:24:e7: c6:3e:3c:78:c9:ee:ad:3e:e5:2a:65:9b:59:2e:40: c0:ab:c7:a8:ba:71:f1:1a:e9:32:35:b7:b3:f9:b0: 87:1c:ab:9f:fc:de:4a:0a:f5:aa:be:62:b3:d7:20: 10:47:2e:09:de:ab:10:fc:6d:6f:f3:56:db:02:81: 72:2e:a7:e2:10:e5:45:eb:48:94:cb:cd:4b:81:52: c4:9e:3a:9c:60:29:ac:be:a9:5b:dc:3e:a7:e0:96: 88:2d:28:1b:8d:51:73:1b:3b:50:83:56:b1:a3:e8: 5c:90:3e:a7:0e:f8:24:37:d0:88:7b:d8:8d:33:d2: 01:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:4D:71:CD:73:43:72:D3:9C:2B:B3:B2:82:19:6F:E5:E1:18:5D X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c4:d0:18:45:23:33:fa:7b:9c:08:1b:a8:af:06:75:a0:cd: 7e:f3:9a:2f:6e:12:f6:a4:b3:11:33:06:f2:28:a7:18:4b:f4: 03:c7:25:5c:a6:be:44:aa:f0:fc:92:03:0b:12:7c:0c:b3:4c: b7:ff:91:95:b6:20:03:fb:bd:dd:b9:f0:98:33:49:94:96:62: f9:43:1a:2f:ae:a7:b0:43:1e:58:6c:b8:b2:c1:e7:0d:a4:9d: 1f:ac:43:a6:10:ba:69:b8:0f:8d:76:a9:36:e1:2a:7c:1f:7e: 79:d6:a0:54:3b:db:e1:ff:32:43:05:83:97:91:09:5f:fb:e5: 62:34:84:21:8f:1f:99:e8:a8:be:4a:75:ad:ed:19:b1:de:97: 12:96:dd:ce:e2:17:34:5a:54:ff:dc:63:14:56:74:a9:22:cb: 79:17:1f:dc:14:44:9f:db:a6:5a:87:8d:26:44:c8:9b:72:ef: d5:4e:5b:05:76:b0:8e:3a:2d:b7:e2:87:8b:eb:bf:fb:c5:89: d5:a9:ef:d2:c2:c7:df:a6:05:ca:58:a4:2c:56:94:e2:12:95: d3:7d:81:fd:de:53:e3:5e:15:c0:9a:b3:f7:6e:ba:67:16:0e: 4e:c0:84:00:82:a3:cf:6d:c0:fc:45:04:ae:6e:53:c2:76:1b: 36:f2:c0:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUwODIzMDEzMjM2WhcNMjUwODMwMDEzMjM2WjAYMRYwFAYD VQQDEw02OGE5MWEzNC04YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5k/Ioymu8SfUSIhLd4oHr5XZsU3fUbHzFcdf4hfB1vsi6lalsq5TKH91QL9i x96DBNgGzimcTwRvkVXlwK8JcIjm3x1/MYRK/uuSzY1+65R+hT1Zq/v31zUgatTT PlHTXjQ+LLBCLAzknAdmtzDtbybQPdjMUcc/8xUzPjTR2pXAzmgmJOfGPjx4ye6t PuUqZZtZLkDAq8eounHxGukyNbez+bCHHKuf/N5KCvWqvmKz1yAQRy4J3qsQ/G1v 81bbAoFyLqfiEOVF60iUy81LgVLEnjqcYCmsvqlb3D6n4JaILSgbjVFzGztQg1ax o+hckD6nDvgkN9CIe9iNM9IB1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK71TXHN c0Ny05wrs7KCGW/l4RhdMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxNAYRSMz+nucCBuorwZ1oM1+85ovbhL2pLMRMwbyKKcYS/QDxyVc pr5EqvD8kgMLEnwMs0y3/5GVtiAD+73dufCYM0mUlmL5QxovrqewQx5YbLiywecN pJ0frEOmELppuA+Ndqk24Sp8H3551qBUO9vh/zJDBYOXkQlf++ViNIQhjx+Z6Ki+ SnWt7Rmx3pcSlt3O4hc0WlT/3GMUVnSpIst5Fx/cFESf26Zah40mRMibcu/VTlsF drCOOi234oeL67/7xYnVqe/SwsffpgXKWKQsVpTiEpXTfYH93lPjXhXAmrP3brpn Fg5OwIQAgqPPbcD8RQSublPCdhs28sD5 -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:06 2025 by rpki-client