$ rpki-client -vvf rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft File: wcgOWfy7f9nU7PrDVqlXStKdpSY.mft (raw, json) Hash identifier: RYz9jcIfJLtU+DByoRhZvhXj8zGA4sRF8ROlspFoIsc= Subject key identifier: 1C:0D:1F:AB:CA:3F:B8:42:92:48:6E:0D:DC:80:7E:D0:29:CC:98:72 Authority key identifier: C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26 Certificate issuer: /CN=A913239C/serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526 Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft Manifest number: 0641 Signing time: Fri 22 Aug 2025 22:52:40 +0000 Manifest this update: Fri 22 Aug 2025 22:52:39 +0000 Manifest next update: Fri 29 Aug 2025 22:52:39 +0000 Files and hashes: 1: wcgOWfy7f9nU7PrDVqlXStKdpSY.crl (hash: SsuTut1mifsF3Yg/nQZC0M59xVuFIDZff66i7bZQoLY=) 2: 6585F720AD9911EB8E8DCF82C4F9AE02.roa (hash: JLMlK+xZyu/t2L3tag7JEQmHAg6B/5ocxSM2xR10I4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913239C, serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526 Validity Not Before: Aug 22 22:52:39 2025 GMT Not After : Aug 29 22:52:39 2025 GMT Subject: CN=68a8f4b8-29de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:34:65:4d:fb:2f:d6:ad:85:d8:be:12:c3:dd: fd:4d:74:0d:31:c0:bb:3f:ad:72:c4:e8:9a:8d:70: 80:f7:06:b8:13:78:32:99:0a:9a:dd:e1:ff:c9:78: 24:a4:00:40:de:14:f4:ec:e9:99:ec:6f:96:84:ab: 34:de:73:48:79:37:fd:3d:45:91:ca:01:7a:bc:05: e0:1d:24:ee:2b:0c:d9:60:73:58:b6:0f:75:b8:e8: fc:9a:21:a1:56:af:10:db:8e:8c:88:b5:f7:9b:39: 92:c7:b7:b1:45:9b:01:99:e3:3f:6f:a3:59:ea:91: 88:71:be:c2:eb:bf:a8:4a:29:e3:31:f6:3f:30:23: 81:11:cb:13:0c:fe:46:9f:d7:5a:ab:d3:fe:f5:96: 0f:2e:ca:a3:5a:73:ed:34:10:af:b3:50:68:b2:89: 30:f9:33:e7:e9:73:53:97:f8:03:a5:f8:a2:e8:c0: 73:52:a4:b3:5e:de:53:0c:e4:2f:44:4e:6d:a3:a3: b3:b8:3d:0f:a8:18:f5:38:a2:58:a3:2f:b1:20:f5: 45:cf:8e:a3:37:f4:6f:2a:bf:a6:4b:d7:c4:72:ba: fe:0e:b7:1a:66:9f:89:17:82:c8:a5:b1:0b:df:91: fa:ea:53:47:ac:de:56:19:9f:98:ab:ba:e2:94:2e: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0D:1F:AB:CA:3F:B8:42:92:48:6E:0D:DC:80:7E:D0:29:CC:98:72 X509v3 Authority Key Identifier: keyid:C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a7:d6:58:bb:65:2e:15:6c:33:ac:12:8a:ee:20:74:88:b9: 06:bc:ff:eb:f2:d5:2b:ad:77:4d:d0:50:2c:e9:9b:bb:7b:26: 81:4b:95:82:ee:58:ef:40:16:46:bd:f3:c7:fa:62:c7:3e:69: 8c:b9:42:2f:a8:4c:70:56:7b:04:e4:e3:d5:89:7a:3d:39:7f: 73:55:e6:bf:12:22:e7:1c:7b:ae:0e:fb:7c:5d:27:1b:6a:d0: 87:84:d6:e9:99:6d:26:0d:3f:74:7c:61:23:1d:b8:5b:a1:16: 66:3f:a9:b5:c2:bd:a2:67:46:48:26:8b:cc:32:5a:37:13:9d: 9f:7a:eb:be:ec:20:91:0c:a3:07:95:91:9f:60:18:f5:d6:13: 77:35:3b:96:77:be:b8:8b:d7:61:c3:51:17:64:29:08:1e:1b: 0d:81:7a:d5:3e:5e:5d:7c:d3:60:0b:11:0e:4f:c0:4c:22:9b: 00:83:0f:fd:97:08:e3:b2:49:1b:a9:87:1d:56:bf:a4:19:03: 33:d4:99:14:de:51:53:ea:6a:4e:e6:bb:cd:b9:61:18:1c:42: a7:26:bf:2a:e3:33:e7:f2:ab:f5:35:a1:4c:38:e2:63:ad:24: c9:f2:c0:0e:4f:1f:bf:a9:20:3b:f5:db:d5:bd:c4:ab:c6:69: 0e:a0:a5:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIzOUMxMTAvBgNVBAUTKEMxQzgwRTU5RkNCQjdGRDlENEVDRkFDMzU2QTk1NzRB RDI5REE1MjYwHhcNMjUwODIyMjI1MjM5WhcNMjUwODI5MjI1MjM5WjAYMRYwFAYD VQQDEw02OGE4ZjRiOC0yOWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TRlTfsv1q2F2L4Sw939TXQNMcC7P61yxOiajXCA9wa4E3gymQqa3eH/yXgk pABA3hT07OmZ7G+WhKs03nNIeTf9PUWRygF6vAXgHSTuKwzZYHNYtg91uOj8miGh Vq8Q246MiLX3mzmSx7exRZsBmeM/b6NZ6pGIcb7C67+oSinjMfY/MCOBEcsTDP5G n9daq9P+9ZYPLsqjWnPtNBCvs1Bosokw+TPn6XNTl/gDpfii6MBzUqSzXt5TDOQv RE5to6OzuD0PqBj1OKJYoy+xIPVFz46jN/RvKr+mS9fEcrr+DrcaZp+JF4LIpbEL 35H66lNHrN5WGZ+Yq7rilC7NRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwNH6vK P7hCkkhuDdyAftApzJhyMB8GA1UdIwQYMBaAFMHIDln8u3/Z1Oz6w1apV0rSnaUm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjM5Qy9BRUYxOTRDQUEx MjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5blU3UHJEVnFsWFN0S2Rw U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djZ09XZnk3ZjluVTdQckRWcWxYU3RLZHBTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjM5Qy9BRUYxOTRDQUExMjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5 blU3UHJEVnFsWFN0S2RwU1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkp9ZYu2UuFWwzrBKK7iB0iLkGvP/r8tUrrXdN0FAs6Zu7eyaBS5WC 7ljvQBZGvfPH+mLHPmmMuUIvqExwVnsE5OPViXo9OX9zVea/EiLnHHuuDvt8XScb atCHhNbpmW0mDT90fGEjHbhboRZmP6m1wr2iZ0ZIJovMMlo3E52feuu+7CCRDKMH lZGfYBj11hN3NTuWd764i9dhw1EXZCkIHhsNgXrVPl5dfNNgCxEOT8BMIpsAgw/9 lwjjskkbqYcdVr+kGQMz1JkU3lFT6mpO5rvNuWEYHEKnJr8q4zPn8qv1NaFMOOJj rSTJ8sAOTx+/qSA79dvVvcSrxmkOoKUI -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:23 2025 by rpki-client