$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: cJiN80lt171OmfHPpl3Ws/m1VzcvnF2BPyQf/Q1iiVs= Subject key identifier: 25:76:75:B3:41:21:26:7D:BB:E9:80:B9:E1:76:72:04:33:16:4E:5F Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04E2 Signing time: Fri 22 Aug 2025 23:57:26 +0000 Manifest this update: Fri 22 Aug 2025 23:57:25 +0000 Manifest next update: Fri 29 Aug 2025 23:57:25 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: lG4s7PSOVW/2J/gCEnWCRvykvQSQPx89Cff+hecNLnA=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Aug 22 23:57:25 2025 GMT Not After : Aug 29 23:57:25 2025 GMT Subject: CN=68a903e6-79c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:db:76:5d:2c:d9:46:f6:c3:b7:f2:6c:51: 57:55:cc:8a:0a:13:cd:35:00:6f:c8:af:bf:51:5a: e1:11:9a:84:47:06:5d:db:09:76:24:8b:9f:39:2e: dd:42:2e:81:6e:bc:00:da:68:52:f7:b1:17:48:6d: bd:e2:6b:f1:06:e2:fe:31:54:e3:0f:3c:c4:d9:65: 2f:0b:83:a7:69:7b:a0:53:6e:50:70:de:1e:4a:09: ac:39:93:ad:8d:10:43:06:b7:e3:02:1e:f7:ad:e4: 36:18:1f:33:e7:df:0b:fc:79:d5:0d:3a:9c:73:af: 4c:4c:3d:e6:92:d6:89:3d:ba:ca:a6:bd:8a:a2:9a: cd:83:c2:b9:3e:0d:74:09:9b:67:da:89:a1:45:78: ed:b8:d4:2e:da:3d:21:bf:ff:5c:26:ad:0b:ec:aa: d1:74:ef:72:9c:b0:45:40:59:07:a3:df:fc:f4:28: 86:a6:d1:35:ab:b0:de:64:5a:78:89:d7:7b:1f:04: ff:66:e0:54:4c:cd:5c:77:06:5f:dc:d6:a8:94:77: f2:04:ff:a8:6d:2d:de:94:86:c5:17:0a:8c:81:f3: ad:9b:35:d7:50:41:c7:0c:b0:57:f8:38:2e:1c:5c: 49:1a:ed:92:fc:db:4a:c4:38:6d:7d:70:9a:96:d1: af:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:76:75:B3:41:21:26:7D:BB:E9:80:B9:E1:76:72:04:33:16:4E:5F X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:25:f5:2e:cf:dc:9e:06:a5:60:ae:af:49:c6:86:27:5d:d2: c5:aa:7c:91:27:b6:07:2a:27:82:6a:3c:c0:a9:ae:0e:6c:d0: 7a:43:49:67:ca:e6:c6:64:92:99:1f:f3:78:b7:86:c9:db:ef: 6a:4a:b1:b5:4d:c6:28:c2:2c:23:84:4a:15:24:c1:fb:a4:f0: 0e:12:82:e1:13:97:e4:74:6a:1a:ee:e3:20:31:b5:b9:80:5c: 69:05:41:4c:e3:f3:68:52:75:97:c4:d1:6a:a7:89:44:d9:f1: 35:75:f6:a1:11:79:b2:fa:75:2b:00:f6:33:5d:a1:bf:5f:39: 06:ca:e3:0f:3b:6f:6f:69:a1:f6:3e:c2:a2:a8:79:14:af:5f: e0:7e:e7:0f:af:c2:7c:00:94:43:01:0e:a5:a6:bd:50:d4:8f: 36:a8:f4:1a:df:dd:34:ae:0e:90:d8:31:3d:c1:cb:07:e4:33: a5:4c:b1:a4:dd:9d:d1:3b:b1:23:f8:82:e2:6f:50:c0:36:25: ef:7e:f0:4f:7e:f5:70:b4:ab:a4:52:af:5a:f5:4c:77:08:6f: 65:19:a4:5d:35:68:4d:94:93:36:b7:7e:45:25:2c:28:42:4f: de:8e:0b:a2:5a:bf:9d:79:11:5d:72:83:7d:fe:ff:41:2d:08: 31:54:c9:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUwODIyMjM1NzI1WhcNMjUwODI5MjM1NzI1WjAYMRYwFAYD VQQDEw02OGE5MDNlNi03OWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVzbdl0s2Ub2w7fybFFXVcyKChPNNQBvyK+/UVrhEZqERwZd2wl2JIufOS7d Qi6BbrwA2mhS97EXSG294mvxBuL+MVTjDzzE2WUvC4OnaXugU25QcN4eSgmsOZOt jRBDBrfjAh73reQ2GB8z598L/HnVDTqcc69MTD3mktaJPbrKpr2KoprNg8K5Pg10 CZtn2omhRXjtuNQu2j0hv/9cJq0L7KrRdO9ynLBFQFkHo9/89CiGptE1q7DeZFp4 idd7HwT/ZuBUTM1cdwZf3NaolHfyBP+obS3elIbFFwqMgfOtmzXXUEHHDLBX+Dgu HFxJGu2S/NtKxDhtfXCaltGv8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCV2dbNB ISZ9u+mAueF2cgQzFk5fMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKJfUuz9yeBqVgrq9JxoYnXdLFqnyRJ7YHKieCajzAqa4ObNB6Q0ln yubGZJKZH/N4t4bJ2+9qSrG1TcYowiwjhEoVJMH7pPAOEoLhE5fkdGoa7uMgMbW5 gFxpBUFM4/NoUnWXxNFqp4lE2fE1dfahEXmy+nUrAPYzXaG/XzkGyuMPO29vaaH2 PsKiqHkUr1/gfucPr8J8AJRDAQ6lpr1Q1I82qPQa3900rg6Q2DE9wcsH5DOlTLGk 3Z3RO7Ej+ILib1DANiXvfvBPfvVwtKukUq9a9Ux3CG9lGaRdNWhNlJM2t35FJSwo Qk/ejguiWr+deRFdcoN9/v9BLQgxVMk1 -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:35 2025 by rpki-client