$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: d/w4BvYUTs8gs9qKvn1yhtwiGbFImwX28pf3Kiyy6I4= Subject key identifier: DF:AE:F6:70:74:A2:B1:FE:3F:6E:29:52:B2:4B:0B:3F:4D:18:2D:2D Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: E3 Signing time: Sat 23 Aug 2025 05:34:30 +0000 Manifest this update: Sat 23 Aug 2025 05:34:29 +0000 Manifest next update: Sat 30 Aug 2025 05:34:29 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: WZjWZRQ8Ahykb2ig93eoe1cssOOulvBCEVrr884D/sc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Aug 23 05:34:29 2025 GMT Not After : Aug 30 05:34:29 2025 GMT Subject: CN=68a952e6-5c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:d6:1f:40:2e:2c:e0:50:6f:ef:b4:37:fc: 23:4c:e4:7f:1a:9d:db:04:d2:29:22:94:96:e7:ae: 58:cb:93:5c:9a:90:a0:e9:90:b1:6b:8d:f0:20:ef: 69:06:e3:1e:52:ae:4d:81:6b:3c:9a:22:24:19:23: 91:47:fc:28:ac:83:de:29:77:5e:41:68:a3:c1:ff: ff:48:92:e2:cd:cc:77:de:30:fa:fe:ab:a5:82:7a: a4:f8:f5:92:12:36:80:76:da:2b:ad:5b:37:7f:95: 5c:0c:96:b1:bb:1a:bf:ee:7e:af:f5:ee:42:bf:cf: 7c:9f:3c:c8:2d:89:7c:f8:0e:ca:5b:45:0d:f2:95: 62:52:9a:16:91:85:3e:3f:d5:ed:bb:36:e1:ca:bd: 67:3f:f5:57:ad:94:62:ab:2d:98:39:2c:4a:95:04: e8:df:ea:d9:8f:d5:6f:e0:bc:ba:9f:48:a7:57:66: 4a:75:a9:29:78:be:41:0c:6f:d8:a2:79:47:14:3f: 69:ae:ab:3e:36:3f:6c:11:64:eb:99:d8:09:77:5c: a8:88:e8:08:54:f8:2c:29:e3:8d:e5:1a:9f:c9:a0: b9:27:a6:8b:05:b8:0a:a2:83:33:b9:44:43:22:88: 93:e6:42:07:52:cc:92:c5:42:8b:79:ab:a9:87:b1: db:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AE:F6:70:74:A2:B1:FE:3F:6E:29:52:B2:4B:0B:3F:4D:18:2D:2D X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8d:12:75:3b:ee:93:58:58:87:a4:62:ae:09:cf:e9:87:09: a7:a2:e3:57:3a:bb:b3:cf:e6:3e:f3:7d:db:11:e5:d4:a8:10: 65:79:dc:ad:c1:94:ea:20:21:93:85:af:fa:b3:5c:c2:39:21: 71:4b:22:93:1b:34:b1:4d:a5:c2:7e:a2:e4:66:1f:5a:c7:c5: a6:19:b1:99:36:47:15:19:ba:e0:f7:9e:0c:a8:d9:ab:73:7a: 1e:13:1a:10:cd:8e:d0:03:f3:9b:85:f7:88:39:60:1f:65:48: 30:41:48:f2:68:e5:10:c3:f0:3b:b5:55:00:65:00:9d:bf:cb: c8:50:69:7b:59:84:9b:15:06:a2:e0:a6:e2:4b:dc:b1:71:7b: 34:42:ac:46:3e:b9:00:d6:fd:5c:93:93:c4:99:8d:8f:fc:20: a8:c7:78:7d:e9:0a:63:a4:3a:ff:0c:51:8e:53:e2:a8:4f:f4: 61:16:74:7e:7b:57:0a:92:f1:b7:f3:d5:5a:c0:8a:50:72:e2: fe:97:bc:38:bb:27:cc:5e:90:2b:e2:18:25:b8:78:89:07:d4: fd:ba:96:e9:c3:dc:d7:e8:44:48:c6:07:c4:28:01:78:f2:10: 95:37:c3:63:62:85:bb:ad:14:43:8a:6c:98:6e:bb:3a:d4:7b: 7c:01:29:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUwODIzMDUzNDI5WhcNMjUwODMwMDUzNDI5WjAYMRYwFAYD VQQDEw02OGE5NTJlNi01YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfLWH0AuLOBQb++0N/wjTOR/Gp3bBNIpIpSW565Yy5NcmpCg6ZCxa43wIO9p BuMeUq5NgWs8miIkGSORR/worIPeKXdeQWijwf//SJLizcx33jD6/qulgnqk+PWS EjaAdtorrVs3f5VcDJaxuxq/7n6v9e5Cv898nzzILYl8+A7KW0UN8pViUpoWkYU+ P9Xtuzbhyr1nP/VXrZRiqy2YOSxKlQTo3+rZj9Vv4Ly6n0inV2ZKdakpeL5BDG/Y onlHFD9prqs+Nj9sEWTrmdgJd1yoiOgIVPgsKeON5RqfyaC5J6aLBbgKooMzuURD IoiT5kIHUsySxUKLeauph7HbQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+u9nB0 orH+P24pUrJLCz9NGC0tMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAljRJ1O+6TWFiHpGKuCc/phwmnouNXOruzz+Y+833bEeXUqBBledyt wZTqICGTha/6s1zCOSFxSyKTGzSxTaXCfqLkZh9ax8WmGbGZNkcVGbrg954MqNmr c3oeExoQzY7QA/ObhfeIOWAfZUgwQUjyaOUQw/A7tVUAZQCdv8vIUGl7WYSbFQai 4KbiS9yxcXs0QqxGPrkA1v1ck5PEmY2P/CCox3h96QpjpDr/DFGOU+KoT/RhFnR+ e1cKkvG389VawIpQcuL+l7w4uyfMXpAr4hgluHiJB9T9upbpw9zX6ERIxgfEKAF4 8hCVN8NjYoW7rRRDimyYbrs61Ht8ASkn -----END CERTIFICATE-----Generated at Sat Aug 23 10:45:39 2025 by rpki-client