$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: KliqqpOa79HXqeMh8e1J+KAw2kz7ahPD/j5un0sFvtc= Subject key identifier: 67:D2:0F:FE:1C:01:13:67:13:61:41:1B:7B:0A:F9:6B:91:8B:47:10 Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 019B Signing time: Sat 23 Aug 2025 03:36:34 +0000 Manifest this update: Sat 23 Aug 2025 03:36:33 +0000 Manifest next update: Sat 30 Aug 2025 03:36:33 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: eUR4tKuQmwamVuaVk4rJ0BVD43SELWihWitKcf30LsE=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: iYf3jZc2jKBrmv31rxXM38VJ1nI1w/3LYJauL+zzxXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Aug 23 03:36:33 2025 GMT Not After : Aug 30 03:36:33 2025 GMT Subject: CN=68a93742-4682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:7f:c1:db:95:13:d4:47:c1:49:f7:2b:84: d2:f3:e0:80:3c:ef:85:44:d1:a2:20:32:b0:fc:23: a3:72:d8:2c:79:aa:eb:19:20:7b:45:c8:ee:13:97: 5e:c1:d8:ab:3a:d8:35:d7:13:14:f4:af:e1:9e:8f: 9b:72:56:d1:01:a2:bc:9d:f0:e6:d8:23:cf:0e:41: a2:0e:20:7c:72:3f:64:bc:e5:c1:46:f3:60:99:40: f0:2f:d2:51:ac:97:29:b5:3d:19:cb:c9:19:50:16: 45:10:1f:77:67:da:8e:19:2f:64:f8:bc:a0:4b:db: 45:26:91:66:9b:4a:7a:96:45:2b:35:8c:71:ba:99: 3b:ae:7f:e2:36:42:a8:d7:72:d3:fa:f6:6a:c7:87: 3c:6f:47:9c:08:b0:05:9f:9a:de:ac:c4:3e:df:db: df:ec:af:de:e1:52:7c:14:0d:25:4b:da:79:e5:2f: e7:89:b2:4e:9f:6a:bc:68:b9:d6:ea:13:a3:92:a3: 11:0e:cc:17:81:98:a7:d5:85:e0:16:cd:5c:20:aa: 13:9f:bc:7f:10:b8:a9:14:0f:87:76:9c:0f:07:ba: 93:8a:4c:7c:02:58:80:5c:c1:f0:62:de:a6:c9:44: 42:0e:af:fa:00:d7:04:f1:9a:4b:50:42:08:55:1e: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:0F:FE:1C:01:13:67:13:61:41:1B:7B:0A:F9:6B:91:8B:47:10 X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:87:18:02:20:63:6a:ea:86:f4:14:93:b0:2c:db:22:72: 77:a1:59:93:d3:f4:42:ac:81:85:6d:5a:55:d3:29:4c:dd:a3: aa:33:c7:5f:43:a9:00:df:a4:0e:a0:4f:a3:dc:c1:f3:49:8d: 7e:11:7a:37:5e:5f:78:77:ef:32:22:73:f7:07:aa:2f:8a:d0: 70:74:05:0d:c7:bc:9e:03:62:6a:23:ce:b0:3f:f2:c2:82:23: e4:36:3a:eb:f2:3e:28:16:f4:d9:6d:01:dc:3c:27:b3:22:ec: 63:33:04:0d:92:86:74:d6:40:ab:db:c6:62:2a:a1:ae:e7:bc: 7f:55:09:e7:15:a2:ab:72:b6:d5:6b:67:32:3a:3d:70:91:0e: f4:3c:35:bf:45:e4:e3:e5:58:cc:a5:3d:70:9b:f4:2c:c1:d4: 14:41:5e:b2:11:c2:44:dd:21:b7:90:56:2f:12:7a:06:a0:6a: a8:87:cc:c9:51:6c:5c:ba:ea:7b:da:64:a5:70:77:64:ae:42: d3:c1:11:88:d2:ad:14:91:4b:f7:b5:ca:1a:f6:2b:a7:64:64: dc:37:a6:f0:5c:95:3f:99:62:7b:42:ab:08:b8:85:87:17:bb: 92:e1:6f:27:d6:c9:d7:f6:59:a7:30:60:fd:dd:09:93:bc:ff: c8:31:c7:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUwODIzMDMzNjMzWhcNMjUwODMwMDMzNjMzWjAYMRYwFAYD VQQDEw02OGE5Mzc0Mi00NjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo5/wduVE9RHwUn3K4TS8+CAPO+FRNGiIDKw/COjctgsearrGSB7RcjuE5de wdirOtg11xMU9K/hno+bclbRAaK8nfDm2CPPDkGiDiB8cj9kvOXBRvNgmUDwL9JR rJcptT0Zy8kZUBZFEB93Z9qOGS9k+LygS9tFJpFmm0p6lkUrNYxxupk7rn/iNkKo 13LT+vZqx4c8b0ecCLAFn5rerMQ+39vf7K/e4VJ8FA0lS9p55S/nibJOn2q8aLnW 6hOjkqMRDswXgZin1YXgFs1cIKoTn7x/ELipFA+HdpwPB7qTikx8AliAXMHwYt6m yURCDq/6ANcE8ZpLUEIIVR7F4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfSD/4c ARNnE2FBG3sK+WuRi0cQMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4qIcYAiBjauqG9BSTsCzbInJ3oVmT0/RCrIGFbVpV0ylM3aOqM8df Q6kA36QOoE+j3MHzSY1+EXo3Xl94d+8yInP3B6ovitBwdAUNx7yeA2JqI86wP/LC giPkNjrr8j4oFvTZbQHcPCezIuxjMwQNkoZ01kCr28ZiKqGu57x/VQnnFaKrcrbV a2cyOj1wkQ70PDW/ReTj5VjMpT1wm/QswdQUQV6yEcJE3SG3kFYvEnoGoGqoh8zJ UWxcuup72mSlcHdkrkLTwRGI0q0UkUv3tcoa9iunZGTcN6bwXJU/mWJ7QqsIuIWH F7uS4W8n1snX9lmnMGD93QmTvP/IMcdu -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:17 2025 by rpki-client