$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: tyvtDkEpgfeM2mlKVlwOdY7AFdzLlU4X9F4iPP+K/AI= Subject key identifier: C1:76:55:83:A7:D5:82:1B:D7:47:D2:7A:E5:94:15:5D:7A:B3:AF:A8 Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 01F3 Signing time: Sat 23 Aug 2025 02:48:37 +0000 Manifest this update: Sat 23 Aug 2025 02:48:36 +0000 Manifest next update: Sat 30 Aug 2025 02:48:36 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: hLaFT94EuFNVzmrph3SsafrYTV9aVfp531sFKzmy+AA=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: Aug 23 02:48:36 2025 GMT Not After : Aug 30 02:48:36 2025 GMT Subject: CN=68a92c04-8cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:59:10:46:d9:7a:b5:1e:d5:86:41:64:c2: cf:6f:65:e4:09:e3:ac:b1:c3:6e:e1:3f:9b:ac:22: 48:6b:7a:5f:75:49:36:70:6b:41:a2:7b:11:c8:39: 18:1b:28:4a:2d:8c:b8:99:fd:74:7b:67:62:5e:d9: c9:01:53:8d:73:2b:7b:74:ca:2e:fd:3f:21:3c:5e: 9d:de:7f:d9:45:87:e0:5b:d0:26:1c:b9:85:ef:d7: b4:54:2e:55:80:f5:db:7c:35:55:7a:76:7b:df:ca: 4b:33:22:ba:41:88:8a:bf:55:c7:76:83:c1:33:4e: 3d:2c:2d:0c:a7:47:08:82:12:48:ea:f5:e2:4d:05: cc:95:4f:21:4f:ea:fd:e1:c0:d6:80:55:24:09:36: 7b:50:44:02:79:ed:45:28:dd:da:7b:1b:73:d3:c9: 02:55:e3:3d:72:03:38:cd:a1:3b:be:de:8d:9a:6b: 2e:43:93:fd:15:66:cb:d0:6c:5f:c9:cd:71:6a:1e: f9:2a:b5:5a:69:24:6d:e3:9f:1f:7d:5b:2f:0f:4d: 60:ca:1a:9e:51:ca:41:5b:cf:d1:d1:9e:3e:98:81: d5:fb:6b:86:be:a7:f0:7a:4f:16:9f:49:13:d3:c0: 2a:3d:0c:f4:7e:3c:b3:e8:65:a4:7d:21:e1:b2:b7: 50:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:76:55:83:A7:D5:82:1B:D7:47:D2:7A:E5:94:15:5D:7A:B3:AF:A8 X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0b:54:4b:8b:bb:86:1e:a0:01:5b:ce:3e:09:b7:cc:0b:78: ac:09:32:35:2a:03:e8:ec:af:dd:db:f8:8f:f5:97:8a:69:f5: f6:a6:01:d0:ca:28:c4:22:b7:f8:9f:0d:28:f4:be:57:0b:ba: da:d9:cf:6d:14:99:0d:3a:62:02:b5:49:09:55:6f:38:ca:54: d6:0f:39:23:35:8d:c4:30:0e:cf:1c:0f:bf:c9:c2:f2:27:40: 44:52:22:62:36:4d:dd:b9:9a:b4:b9:60:d4:e4:90:77:28:1e: 71:30:1d:c2:50:1d:81:4e:d7:55:0e:62:66:40:39:22:6d:eb: 87:c5:16:1d:20:aa:ce:68:58:cd:fa:45:fe:f6:5a:6e:04:ec: a5:45:40:f6:a6:50:9d:88:08:aa:10:f9:e8:6e:f4:f7:d5:3d: 24:11:88:06:e9:ee:48:ff:de:5c:d3:60:be:7b:81:38:bf:56: 84:d2:61:24:73:64:76:92:66:3c:9d:2a:d2:d6:23:37:1c:97: f1:ab:21:2b:bf:b2:07:a6:5e:6d:93:5a:11:ae:3e:69:27:30: a1:97:78:1f:19:6f:55:ab:8a:ee:b6:dc:f2:1a:c8:75:34:49: 8e:21:7d:0b:75:55:8b:5f:91:84:c8:f4:60:02:84:11:c1:ad: 99:b0:07:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUwODIzMDI0ODM2WhcNMjUwODMwMDI0ODM2WjAYMRYwFAYD VQQDEw02OGE5MmMwNC04Y2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TVZEEbZerUe1YZBZMLPb2XkCeOsscNu4T+brCJIa3pfdUk2cGtBonsRyDkY GyhKLYy4mf10e2diXtnJAVONcyt7dMou/T8hPF6d3n/ZRYfgW9AmHLmF79e0VC5V gPXbfDVVenZ738pLMyK6QYiKv1XHdoPBM049LC0Mp0cIghJI6vXiTQXMlU8hT+r9 4cDWgFUkCTZ7UEQCee1FKN3aextz08kCVeM9cgM4zaE7vt6NmmsuQ5P9FWbL0Gxf yc1xah75KrVaaSRt458ffVsvD01gyhqeUcpBW8/R0Z4+mIHV+2uGvqfwek8Wn0kT 08AqPQz0fjyz6GWkfSHhsrdQUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF2VYOn 1YIb10fSeuWUFV16s6+oMB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLC1RLi7uGHqABW84+CbfMC3isCTI1KgPo7K/d2/iP9ZeKafX2pgHQ yijEIrf4nw0o9L5XC7ra2c9tFJkNOmICtUkJVW84ylTWDzkjNY3EMA7PHA+/ycLy J0BEUiJiNk3duZq0uWDU5JB3KB5xMB3CUB2BTtdVDmJmQDkibeuHxRYdIKrOaFjN +kX+9lpuBOylRUD2plCdiAiqEPnobvT31T0kEYgG6e5I/95c02C+e4E4v1aE0mEk c2R2kmY8nSrS1iM3HJfxqyErv7IHpl5tk1oRrj5pJzChl3gfGW9Vq4ruttzyGsh1 NEmOIX0LdVWLX5GEyPRgAoQRwa2ZsAdm -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:36 2025 by rpki-client