$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: pRnfUJYWY2IFzSo/HD8Wt4fnDKqYlR6k9QZsYqLTNXE= Subject key identifier: 67:8A:07:8D:C0:B6:0D:92:B3:75:CB:A7:2E:EF:5E:E2:37:0D:59:AB Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 041D Signing time: Sat 23 Aug 2025 01:30:16 +0000 Manifest this update: Sat 23 Aug 2025 01:30:16 +0000 Manifest next update: Sat 30 Aug 2025 01:30:16 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: +e7cnjas19MwUnznAs+Q7bpfwZLnOv+fkKAZRmfCpUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Aug 23 01:30:16 2025 GMT Not After : Aug 30 01:30:16 2025 GMT Subject: CN=68a919a8-b30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1d:50:8c:23:fb:6b:dc:12:33:27:2c:50:20: bc:e4:ec:fa:50:8e:97:02:7b:8a:0f:43:5e:50:4d: 93:21:be:6a:da:f0:b7:98:b8:bd:1c:42:6a:54:a1: 52:5b:1e:c2:e1:76:26:96:c8:1d:c7:31:0a:55:46: a7:88:ea:17:9c:b0:4b:6d:ed:03:fd:a5:0a:ef:0f: 0a:74:f3:9e:fb:1b:60:52:5c:cb:38:bc:65:b3:ed: 7f:a7:8b:09:b5:b9:2c:4d:da:f9:27:14:a6:38:b7: 93:97:ac:a6:38:9f:58:1d:d9:a7:c7:3f:c2:14:ab: 56:92:1e:35:fc:21:05:89:74:b4:7f:00:d2:71:5d: a4:40:f2:3e:12:c4:5d:06:b9:90:a2:ed:a9:be:7d: ff:54:c3:18:e5:0f:2e:b8:67:77:ab:3f:6f:40:d9: 67:73:90:4a:fe:06:29:4b:e7:82:77:f6:8c:be:7c: c0:40:0d:8e:fe:47:0f:ab:4b:a1:f1:da:5c:68:e6: a8:43:62:4c:5d:b8:6b:fc:b9:6f:11:3f:21:4b:25: 8e:44:2c:55:2d:fd:43:e6:f8:f5:f8:38:6c:ee:89: 8e:2c:a4:57:fd:78:89:4f:69:85:2d:8d:dc:5d:a0: ef:bc:c3:ee:85:6d:17:12:ba:46:5a:d0:77:58:c7: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8A:07:8D:C0:B6:0D:92:B3:75:CB:A7:2E:EF:5E:E2:37:0D:59:AB X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0b:34:af:ec:ac:eb:9a:da:30:cd:d5:23:47:0f:43:99:97: fe:a0:e9:1b:37:6a:ac:98:59:cf:e2:71:f7:7d:ed:c0:fc:97: 19:ca:89:cf:1e:9b:40:fd:74:33:98:07:78:36:40:af:7a:e6: fc:a5:2e:44:9e:26:47:2f:43:1b:83:71:3e:8e:5e:06:9d:53: fa:ba:56:66:22:a7:f3:38:de:f3:75:96:8d:28:2e:83:08:78: 9c:40:f2:f6:1f:f2:2a:4e:64:23:1a:90:69:b3:6f:88:e4:1b: 75:9d:37:0b:1a:81:51:21:b8:53:06:af:fa:60:c7:76:c7:88: 10:c5:e8:3a:ea:1c:c9:41:76:09:a5:db:0a:62:5f:b6:3c:08: 3e:00:db:ac:99:6e:35:22:d4:af:d7:04:27:6e:4b:dc:dc:36: 10:0e:84:29:1e:02:de:fb:b6:af:2f:26:3a:cb:67:56:09:bf: 2e:e0:05:02:52:fc:88:8b:80:2f:97:d7:44:c8:a5:c5:30:8c: e4:ff:d9:b5:d1:d9:a7:00:94:36:8c:37:22:af:ea:38:4d:67: 94:e0:48:ab:a8:bc:b1:df:87:c5:0d:fc:e1:87:1e:94:85:6d: 04:ee:46:f9:1c:e2:8b:69:5e:05:25:89:88:e5:d0:c7:f5:26: 40:07:9b:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjUwODIzMDEzMDE2WhcNMjUwODMwMDEzMDE2WjAYMRYwFAYD VQQDEw02OGE5MTlhOC1iMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8h1QjCP7a9wSMycsUCC85Oz6UI6XAnuKD0NeUE2TIb5q2vC3mLi9HEJqVKFS Wx7C4XYmlsgdxzEKVUaniOoXnLBLbe0D/aUK7w8KdPOe+xtgUlzLOLxls+1/p4sJ tbksTdr5JxSmOLeTl6ymOJ9YHdmnxz/CFKtWkh41/CEFiXS0fwDScV2kQPI+EsRd BrmQou2pvn3/VMMY5Q8uuGd3qz9vQNlnc5BK/gYpS+eCd/aMvnzAQA2O/kcPq0uh 8dpcaOaoQ2JMXbhr/LlvET8hSyWORCxVLf1D5vj1+Dhs7omOLKRX/XiJT2mFLY3c XaDvvMPuhW0XErpGWtB3WMeh9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeKB43A tg2Ss3XLpy7vXuI3DVmrMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaCzSv7KzrmtowzdUjRw9DmZf+oOkbN2qsmFnP4nH3fe3A/JcZyonP HptA/XQzmAd4NkCveub8pS5EniZHL0Mbg3E+jl4GnVP6ulZmIqfzON7zdZaNKC6D CHicQPL2H/IqTmQjGpBps2+I5Bt1nTcLGoFRIbhTBq/6YMd2x4gQxeg66hzJQXYJ pdsKYl+2PAg+ANusmW41ItSv1wQnbkvc3DYQDoQpHgLe+7avLyY6y2dWCb8u4AUC UvyIi4Avl9dEyKXFMIzk/9m10dmnAJQ2jDcir+o4TWeU4EirqLyx34fFDfzhhx6U hW0E7kb5HOKLaV4FJYmI5dDH9SZAB5vb -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:38 2025 by rpki-client