$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: 89ZlimPU5JJlmBQAUwyeUfV9g0xjPHAWQrKQ9rQV3I8= Subject key identifier: B3:CA:D1:80:7F:3C:3E:0D:C0:87:0E:46:29:89:D7:44:F5:4B:2E:1F Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 013F Signing time: Sat 23 Aug 2025 04:33:08 +0000 Manifest this update: Sat 23 Aug 2025 04:33:07 +0000 Manifest next update: Sat 30 Aug 2025 04:33:07 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: TUHuBFiOceR/JXkvFoPa0knHEXF12wDN85nf6yt2LSo=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Aug 23 04:33:07 2025 GMT Not After : Aug 30 04:33:07 2025 GMT Subject: CN=68a94483-2e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:e5:37:dd:d0:3a:59:b2:f5:3f:1c:6b:03: 44:8b:e3:02:4b:2b:83:9b:41:fe:19:bb:23:00:db: 10:c4:10:7d:13:67:4e:a8:47:7f:ae:64:21:5f:bd: 2f:03:62:57:22:bb:f4:b9:40:32:50:67:84:31:5c: f5:f1:82:2f:01:7f:2d:66:54:b5:eb:83:18:59:d8: e1:f7:a8:1c:4d:12:cd:04:40:59:70:f7:24:d7:11: 13:68:7b:3a:e7:0b:7c:5d:a6:98:a0:ac:bc:21:93: 90:6d:ad:a9:65:1a:05:30:ed:25:e2:0b:20:cb:ce: ba:65:bb:d2:41:a5:9a:51:ff:c3:fb:ee:76:0e:f0: 6a:0f:83:6d:b4:98:cb:f0:ef:c4:38:f7:03:fb:74: 02:84:c9:b3:99:a8:84:0c:9c:28:18:81:3d:07:d5: 63:3f:5a:7f:39:6c:7d:32:3d:8f:96:2f:fa:ee:8f: 8e:51:98:43:34:20:2b:06:ab:26:93:54:dc:48:a0: a9:50:d7:82:84:24:46:e4:f0:92:39:ce:0e:cd:82: 7e:4c:2c:69:36:60:94:e3:17:d2:7a:bd:24:e4:6d: 09:6a:b1:70:e6:53:6f:54:b7:35:ca:ba:c1:0c:b9: 11:7d:bb:e6:89:89:f2:5b:67:ff:7b:56:ea:84:16: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CA:D1:80:7F:3C:3E:0D:C0:87:0E:46:29:89:D7:44:F5:4B:2E:1F X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3c:b8:3c:8b:9a:d9:ab:d4:ac:db:66:8d:96:03:95:8b:f1: d0:81:53:76:37:df:1f:14:61:77:48:18:9f:25:2f:dc:7a:57: d9:29:ba:60:05:b7:b4:00:81:15:d8:16:50:d7:4a:3e:e5:4c: ef:1b:57:70:51:01:7e:42:73:a8:4b:84:76:e2:82:81:73:2a: ea:32:91:a9:8c:06:d5:4b:68:8a:f1:ff:43:7e:93:0d:83:bc: 8b:39:d0:82:e3:de:cd:ba:38:eb:ff:07:16:3a:0b:1f:bb:8a: 52:eb:60:00:15:1a:99:92:58:58:5c:83:53:ed:2d:9c:1a:06: 4d:08:18:62:b1:ed:b9:ce:84:44:de:39:0a:42:af:0a:dd:56: 04:99:8c:38:7a:c0:56:5a:f1:bc:7d:36:16:de:22:63:ea:6c: f0:fa:e1:5c:a3:1d:c5:b4:ee:85:e1:88:78:12:b4:54:fc:fd: 9f:3c:90:67:5f:99:c1:2d:d2:30:e5:9d:45:5d:c3:ae:42:c6: bc:6b:66:6e:78:7b:a6:5e:37:b1:b6:23:05:52:de:08:f2:4f: 13:c1:ac:ad:6c:10:e7:3c:34:f7:42:30:29:64:9a:38:29:fe: b1:01:22:78:e3:52:e8:9a:b9:7c:02:43:7b:ae:27:ee:db:90: ee:6c:1d:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwODIzMDQzMzA3WhcNMjUwODMwMDQzMzA3WjAYMRYwFAYD VQQDEw02OGE5NDQ4My0yZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hjlN93QOlmy9T8cawNEi+MCSyuDm0H+GbsjANsQxBB9E2dOqEd/rmQhX70v A2JXIrv0uUAyUGeEMVz18YIvAX8tZlS164MYWdjh96gcTRLNBEBZcPck1xETaHs6 5wt8XaaYoKy8IZOQba2pZRoFMO0l4gsgy866ZbvSQaWaUf/D++52DvBqD4NttJjL 8O/EOPcD+3QChMmzmaiEDJwoGIE9B9VjP1p/OWx9Mj2Pli/67o+OUZhDNCArBqsm k1TcSKCpUNeChCRG5PCSOc4OzYJ+TCxpNmCU4xfSer0k5G0JarFw5lNvVLc1yrrB DLkRfbvmiYnyW2f/e1bqhBZZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPK0YB/ PD4NwIcORimJ10T1Sy4fMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwPLg8i5rZq9Ss22aNlgOVi/HQgVN2N98fFGF3SBifJS/celfZKbpg Bbe0AIEV2BZQ10o+5UzvG1dwUQF+QnOoS4R24oKBcyrqMpGpjAbVS2iK8f9DfpMN g7yLOdCC497Nujjr/wcWOgsfu4pS62AAFRqZklhYXINT7S2cGgZNCBhise25zoRE 3jkKQq8K3VYEmYw4esBWWvG8fTYW3iJj6mzw+uFcox3FtO6F4Yh4ErRU/P2fPJBn X5nBLdIw5Z1FXcOuQsa8a2ZueHumXjextiMFUt4I8k8TwaytbBDnPDT3QjApZJo4 Kf6xASJ441Lomrl8AkN7rifu25DubB0x -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:05 2025 by rpki-client