$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: 8ey0shNqx67VE6YwIQpPtvGgZpa+bLIyc6tv2lJSBd4= Subject key identifier: AB:3E:11:56:FD:7C:28:EC:81:9A:F3:6E:E9:B7:A9:97:D0:68:58:EE Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 91 Signing time: Sat 23 Aug 2025 06:43:44 +0000 Manifest this update: Sat 23 Aug 2025 06:43:43 +0000 Manifest next update: Sat 30 Aug 2025 06:43:43 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: zqEKJMn6mAj7fLir23gZL2kLpVcZia6zL8J0d7IuXoo=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Validity Not Before: Aug 23 06:43:43 2025 GMT Not After : Aug 30 06:43:43 2025 GMT Subject: CN=68a9631f-c88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:84:9e:38:58:4a:aa:7b:5f:3e:49:00:5b: a7:bd:70:1d:ea:f2:45:aa:48:2e:6f:ce:a9:d9:59: 4d:68:f9:71:0a:c9:91:b4:2f:84:23:c1:44:80:3d: 55:32:e5:ba:e0:2e:83:a6:40:f1:79:d3:f0:58:40: 8c:6f:da:d7:12:4f:0d:1a:39:32:e0:a6:e3:30:34: 4d:38:4a:21:7b:6d:f6:e3:1e:5c:15:f5:f7:36:10: fc:48:26:30:d3:9b:3b:de:2f:11:fc:39:a4:21:97: 54:69:35:33:59:55:46:1d:60:cd:7e:0b:90:8b:53: 2c:14:35:97:6c:bd:ad:10:41:bb:d6:f0:5e:d3:48: bc:5a:58:75:b8:a7:f4:c3:0a:7a:80:ab:09:76:be: 84:79:c5:21:5e:bf:5d:ef:43:a0:66:eb:29:11:f4: 12:b8:88:53:72:ff:48:ea:5a:4f:39:de:ed:70:de: 38:c7:e8:3a:76:e4:33:62:1b:29:35:dd:2a:ed:c5: 67:62:9e:e3:ff:1e:6d:a4:2a:bb:c6:9b:ba:f8:40: 98:eb:ac:ec:46:bb:a3:49:f5:c7:27:ed:27:97:59: 35:30:98:34:b7:75:66:8e:49:95:31:4a:b7:99:c7: 35:8d:d4:aa:b8:6e:cf:99:5e:59:98:0b:87:5f:bf: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3E:11:56:FD:7C:28:EC:81:9A:F3:6E:E9:B7:A9:97:D0:68:58:EE X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a2:06:9b:74:ef:5c:bd:b5:f4:e4:c8:c5:f6:53:c8:7c:fc: 62:00:40:a1:87:10:6b:b6:5a:0e:b8:7c:1f:08:27:70:99:78: 17:a0:a6:8d:fa:14:f0:07:09:a5:54:74:6e:9d:ef:dc:8c:f1: 6b:9a:cb:b1:c0:9e:4a:c5:ec:2b:24:4b:66:c9:72:6d:5b:84: 55:13:48:07:ca:f5:3b:fe:ed:f7:7c:69:92:8a:ae:c4:8b:ba: c8:24:62:5b:3b:7c:b4:21:7f:73:64:67:bf:67:4f:cb:69:9c: d2:21:d8:84:c2:e0:c9:1a:03:c9:47:a2:e9:f7:5a:92:bd:6f: 08:27:a8:2c:a3:92:3b:73:d5:80:22:9a:28:b6:2c:38:30:81: 40:19:96:f8:c4:d5:0f:9f:44:d8:1f:a8:14:e5:eb:e0:44:9e: 14:02:2a:98:36:af:c9:17:5c:37:f6:2b:90:42:4e:3f:1d:e4: ab:8d:9e:88:39:87:1f:96:a6:fc:1f:50:c1:82:0d:e5:ca:61: fa:4f:ab:2f:2b:40:99:3a:3f:af:e1:df:ca:58:ab:40:12:73: 78:dd:96:8f:ff:10:4e:1b:0c:ca:33:ae:0e:4c:53:15:b0:85: 40:ba:08:05:ca:7b:88:2f:61:68:07:7c:40:ac:8c:d2:43:c3: 8d:47:65:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0RkQxMTAvBgNVBAUTKDU5OTBGNEMzQkIyMzQzNkM5NTEwMEI0ODQ4REM5MTg2 QUE0OTUzMTkwHhcNMjUwODIzMDY0MzQzWhcNMjUwODMwMDY0MzQzWjAYMRYwFAYD VQQDEw02OGE5NjMxZi1jODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9OEnjhYSqp7Xz5JAFunvXAd6vJFqkgub86p2VlNaPlxCsmRtC+EI8FEgD1V MuW64C6DpkDxedPwWECMb9rXEk8NGjky4KbjMDRNOEohe2324x5cFfX3NhD8SCYw 05s73i8R/DmkIZdUaTUzWVVGHWDNfguQi1MsFDWXbL2tEEG71vBe00i8Wlh1uKf0 wwp6gKsJdr6EecUhXr9d70OgZuspEfQSuIhTcv9I6lpPOd7tcN44x+g6duQzYhsp Nd0q7cVnYp7j/x5tpCq7xpu6+ECY66zsRrujSfXHJ+0nl1k1MJg0t3VmjkmVMUq3 mcc1jdSquG7PmV5ZmAuHX7968QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs+EVb9 fCjsgZrzbum3qZfQaFjuMB8GA1UdIwQYMBaAFFmQ9MO7I0NslRALSEjckYaqSVMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzRGRC9BNTdDQUJFQ0E1 NTQxMUVGOEE5NzUyNDdDNEY5QUUwMi9XWkQwdzdzalEyeVZFQXRJU055UmhxcEpV eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzRGRC9BNTdDQUJFQ0E1NTQxMUVGOEE5NzUyNDdDNEY5QUUwMi9XWkQwdzdzalEy eVZFQXRJU055UmhxcEpVeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9ogabdO9cvbX05MjF9lPIfPxiAEChhxBrtloOuHwfCCdwmXgXoKaN +hTwBwmlVHRune/cjPFrmsuxwJ5KxewrJEtmyXJtW4RVE0gHyvU7/u33fGmSiq7E i7rIJGJbO3y0IX9zZGe/Z0/LaZzSIdiEwuDJGgPJR6Lp91qSvW8IJ6gso5I7c9WA Ipootiw4MIFAGZb4xNUPn0TYH6gU5evgRJ4UAiqYNq/JF1w39iuQQk4/HeSrjZ6I OYcflqb8H1DBgg3lymH6T6svK0CZOj+v4d/KWKtAEnN43ZaP/xBOGwzKM64OTFMV sIVAuggFynuIL2FoB3xArIzSQ8ONR2VT -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:08 2025 by rpki-client