$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft File: wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft (raw, json) Hash identifier: Ro/Aj5TaGqXnR6k7TDGmGfaLqpm8nKSUdVzsHzy2bY8= Subject key identifier: F1:FB:9E:05:B1:73:5A:85:C0:57:AC:38:0D:11:9C:C9:AE:DC:68:F1 Authority key identifier: C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1 Certificate issuer: /CN=A9134309/serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft Manifest number: 2C Signing time: Sat 23 Aug 2025 07:57:44 +0000 Manifest this update: Sat 23 Aug 2025 07:57:44 +0000 Manifest next update: Sat 30 Aug 2025 07:57:44 +0000 Files and hashes: 1: wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl (hash: HbqG0wWGo9EYWXhdEOfz3dBEH5XQ6VqU963ymGKp00o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=C0B466D999B81BF95D6F95D6C12AB3C9C75B42D1 Validity Not Before: Aug 23 07:57:44 2025 GMT Not After : Aug 30 07:57:44 2025 GMT Subject: CN=68a97478-f46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:d0:d5:0d:9f:46:4c:cc:e2:a7:92:de:1b: f8:46:0d:2c:c4:f2:5b:d8:d5:17:35:55:80:51:67: 80:ad:a9:c9:d8:c6:ca:61:1b:32:eb:89:a7:39:22: 85:e4:d3:25:49:68:45:8f:f9:82:5f:95:a7:4c:c5: 6e:cd:ac:43:fd:8f:a6:6d:6b:3b:8d:1e:1d:6c:c3: e2:09:4b:36:1f:0a:ed:6a:3d:8a:9b:7d:9f:10:c9: 74:ce:50:d3:88:af:a6:50:d5:9a:3b:33:81:01:d1: 1a:a6:9b:76:b3:d8:4f:4b:bf:b8:68:f7:0d:90:4b: d3:69:a1:4c:dc:fb:68:fe:61:b2:b1:ef:1e:ca:74: b7:37:56:24:32:55:eb:97:48:89:6d:21:ff:04:20: 6d:97:4c:8d:5c:1d:ba:ea:25:95:c1:ae:33:0c:6e: 57:f9:8b:eb:e0:bb:eb:fd:59:72:2b:06:24:29:40: 75:7c:ca:1f:1f:9e:54:d9:6a:ff:57:a6:7e:e3:a9: e4:aa:0e:8a:3d:b4:58:60:26:dd:50:05:fd:e1:83: d1:1a:1d:59:bc:90:45:df:b6:a2:b9:e9:c9:3b:d8: e5:10:76:ff:45:b3:85:48:b2:97:62:d6:1b:44:da: 80:72:8b:e8:bd:8a:c3:d4:38:50:6e:53:30:8a:8a: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FB:9E:05:B1:73:5A:85:C0:57:AC:38:0D:11:9C:C9:AE:DC:68:F1 X509v3 Authority Key Identifier: keyid:C0:B4:66:D9:99:B8:1B:F9:5D:6F:95:D6:C1:2A:B3:C9:C7:5B:42:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLRm2Zm4G_ldb5XWwSqzycdbQtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/DE36345C3EE311F0B9398442C4F9AE02/wLRm2Zm4G_ldb5XWwSqzycdbQtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:01:4a:0a:0f:d9:c7:c3:0c:19:f5:21:c2:b1:c9:15:0c:aa: 4f:fe:7f:b6:37:d3:8d:cc:d5:94:d0:b8:46:88:97:fa:a9:b0: e3:cd:92:fb:2c:e3:47:96:cf:2b:f3:d5:11:c1:b3:41:b5:35: 21:80:2e:49:aa:3b:2e:96:b2:cd:85:c2:32:b4:72:d0:7e:66: 29:62:6c:7b:09:f0:5c:65:56:2b:49:fd:33:d5:76:cb:76:2e: a8:d4:f1:72:61:53:6f:20:54:b0:e9:54:fb:8a:66:8b:5e:5b: 26:69:6a:e1:92:d0:ff:0a:c5:2d:e8:0e:17:d0:ee:06:a6:f4: 4d:f6:c6:63:90:89:8c:fc:6a:96:f0:b2:8c:c6:f4:bc:c4:b5: 2b:7c:92:a5:70:41:8f:9a:4b:24:cc:f0:f0:4d:0c:6b:73:56: c9:c2:01:45:a8:a9:cd:a3:bb:66:b1:cd:a5:8b:8f:58:51:32: 7f:90:d7:a4:c7:6c:c0:5c:18:72:5f:57:43:23:67:35:90:18: de:6b:15:eb:3b:06:43:2d:3d:f5:0a:30:df:e9:29:8f:99:2e: 14:f2:86:17:32:ae:5b:a9:03:21:af:f2:dc:d0:d7:9a:fa:5a: eb:19:fc:6c:e7:7c:b3:ff:73:80:72:48:af:6c:2f:40:ab:b1: 85:ee:96:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NDMwOTExMC8GA1UEBRMoQzBCNDY2RDk5OUI4MUJGOTVENkY5NUQ2QzEyQUIzQzlD NzVCNDJEMTAeFw0yNTA4MjMwNzU3NDRaFw0yNTA4MzAwNzU3NDRaMBgxFjAUBgNV BAMTDTY4YTk3NDc4LWY0NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC3tDVDZ9GTMzip5LeG/hGDSzE8lvY1Rc1VYBRZ4CtqcnYxsphGzLriac5IoXk 0yVJaEWP+YJfladMxW7NrEP9j6ZtazuNHh1sw+IJSzYfCu1qPYqbfZ8QyXTOUNOI r6ZQ1Zo7M4EB0Rqmm3az2E9Lv7ho9w2QS9NpoUzc+2j+YbKx7x7KdLc3ViQyVeuX SIltIf8EIG2XTI1cHbrqJZXBrjMMblf5i+vgu+v9WXIrBiQpQHV8yh8fnlTZav9X pn7jqeSqDoo9tFhgJt1QBf3hg9EaHVm8kEXftqK56ck72OUQdv9Fs4VIspdi1htE 2oByi+i9isPUOFBuUzCKiiwbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8fueBbFz WoXAV6w4DRGcya7caPEwHwYDVR0jBBgwFoAUwLRm2Zm4G/ldb5XWwSqzycdbQtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0MzA5L0RFMzYzNDVDM0VF MzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19sZGI1WFd3U3F6eWNkYlF0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0xSbTJabTRHX2xkYjVYV3dTcXp5Y2RiUXRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 MzA5L0RFMzYzNDVDM0VFMzExRjBCOTM5ODQ0MkM0RjlBRTAyL3dMUm0yWm00R19s ZGI1WFd3U3F6eWNkYlF0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYBSgoP2cfDDBn1IcKxyRUMqk/+f7Y3043M1ZTQuEaIl/qpsOPNkvss 40eWzyvz1RHBs0G1NSGALkmqOy6Wss2FwjK0ctB+ZilibHsJ8FxlVitJ/TPVdst2 LqjU8XJhU28gVLDpVPuKZoteWyZpauGS0P8KxS3oDhfQ7gam9E32xmOQiYz8apbw sozG9LzEtSt8kqVwQY+aSyTM8PBNDGtzVsnCAUWoqc2ju2axzaWLj1hRMn+Q16TH bMBcGHJfV0MjZzWQGN5rFes7BkMtPfUKMN/pKY+ZLhTyhhcyrlupAyGv8tzQ15r6 WusZ/GznfLP/c4BySK9sL0CrsYXulhA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:40 2025 by rpki-client