$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: WnFp9UpBwvjGfT4ncs3294wig0XXS+0N7TNNWa7Dq7w= Subject key identifier: 10:B7:69:52:40:C0:EA:C3:AA:F1:E4:88:D1:A4:AE:F9:04:03:E3:B7 Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 0625 Signing time: Fri 22 Aug 2025 22:55:45 +0000 Manifest this update: Fri 22 Aug 2025 22:55:44 +0000 Manifest next update: Fri 29 Aug 2025 22:55:44 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: g23moBYjp7yjwWtmtgAduHAoqk7o0Cyk2aCUkC3wKs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215, serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: Aug 22 22:55:44 2025 GMT Not After : Aug 29 22:55:44 2025 GMT Subject: CN=68a8f571-6618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:5e:64:fe:80:a3:27:33:1b:ae:49:e8:e4:24: 77:de:ab:3b:11:d7:62:73:38:84:66:0a:83:a9:fd: d9:40:0e:15:7d:ab:4d:49:9b:16:c4:8c:36:97:c4: 29:fe:84:8e:1c:8e:d4:d7:c9:2d:8f:55:8a:41:46: 09:43:69:fc:83:cc:13:f9:ad:2c:ce:dd:d2:5a:5e: 29:18:ba:de:9d:14:e3:3f:60:20:85:e2:d5:bf:11: 55:b4:74:a8:a4:31:fb:b9:e6:c1:87:ea:0a:46:62: 97:d4:d7:d9:ee:a2:32:16:7e:bc:63:20:f6:23:ef: a3:59:c2:b6:66:5d:82:f7:55:d9:e9:9e:01:d3:a5: b8:03:50:eb:bb:28:13:fa:db:e8:29:50:a7:67:16: 65:7d:17:cb:32:f2:f7:bd:17:df:b1:c4:14:60:d8: 79:02:f5:26:c0:68:28:ad:44:ab:a7:d2:05:81:ab: 0d:62:7b:1d:e6:a5:0a:97:a7:9e:30:83:7c:55:e3: 1f:03:c0:b1:8b:bd:4e:d4:a0:c3:9d:f3:d7:f9:dc: 94:41:af:ec:83:d9:fc:cf:38:b8:38:41:ca:cc:e0: 48:de:2d:18:a6:8c:52:84:39:9f:d0:22:f9:37:45: 8f:12:69:5c:36:b1:f5:65:14:a4:19:4b:c5:33:29: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B7:69:52:40:C0:EA:C3:AA:F1:E4:88:D1:A4:AE:F9:04:03:E3:B7 X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:70:aa:79:5e:c9:df:75:ee:5c:1d:12:10:43:e4:70:81:f9: 33:5d:bb:18:e2:87:95:d6:48:76:77:23:2c:bc:db:7d:96:84: cb:b3:3a:50:eb:2f:a7:75:4a:5b:44:aa:73:5b:f8:e0:6c:8c: 4b:25:08:65:70:c2:c9:75:c4:79:80:5b:42:e9:cb:96:4d:cb: 07:86:94:a0:05:72:a6:b7:9d:58:25:ae:65:d0:3c:c3:bc:3c: 70:23:31:78:eb:6f:f1:00:e8:cb:73:2b:49:9f:29:98:ba:48: 5c:48:cc:13:16:3d:24:72:29:16:e4:48:7e:99:89:db:c3:77: f7:c3:8a:b8:e7:4e:c2:48:e4:77:6c:f3:eb:9d:91:b8:62:bc: b5:ca:ba:4a:1b:a6:ae:a1:0a:3a:59:f6:38:a8:f5:7e:36:dc: da:dc:75:73:07:b7:80:22:73:9f:7f:08:bb:11:45:ae:13:71: e5:8c:1c:42:8e:4e:ad:83:52:c6:6f:a7:36:8a:14:2d:f9:e9: 8c:1d:53:43:62:78:98:c5:73:35:9b:ec:70:ea:5e:4c:4a:16: 4d:e4:96:52:8f:d9:c5:17:92:f3:db:dc:9a:a1:d5:99:22:dd: c6:01:4f:7d:4a:ac:96:fb:a9:87:be:57:cd:36:f9:f2:83:f9: 44:ed:04:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjUwODIyMjI1NTQ0WhcNMjUwODI5MjI1NTQ0WjAYMRYwFAYD VQQDEw02OGE4ZjU3MS02NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/V5k/oCjJzMbrkno5CR33qs7EddicziEZgqDqf3ZQA4VfatNSZsWxIw2l8Qp /oSOHI7U18ktj1WKQUYJQ2n8g8wT+a0szt3SWl4pGLrenRTjP2AgheLVvxFVtHSo pDH7uebBh+oKRmKX1NfZ7qIyFn68YyD2I++jWcK2Zl2C91XZ6Z4B06W4A1DruygT +tvoKVCnZxZlfRfLMvL3vRffscQUYNh5AvUmwGgorUSrp9IFgasNYnsd5qUKl6ee MIN8VeMfA8Cxi71O1KDDnfPX+dyUQa/sg9n8zzi4OEHKzOBI3i0YpoxShDmf0CL5 N0WPEmlcNrH1ZRSkGUvFMymobQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC3aVJA wOrDqvHkiNGkrvkEA+O3MB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABcKp5Xsnfde5cHRIQQ+RwgfkzXbsY4oeV1kh2dyMsvNt9loTLszpQ 6y+ndUpbRKpzW/jgbIxLJQhlcMLJdcR5gFtC6cuWTcsHhpSgBXKmt51YJa5l0DzD vDxwIzF462/xAOjLcytJnymYukhcSMwTFj0kcikW5Eh+mYnbw3f3w4q4507CSOR3 bPPrnZG4Yry1yrpKG6auoQo6WfY4qPV+Ntza3HVzB7eAInOffwi7EUWuE3HljBxC jk6tg1LGb6c2ihQt+emMHVNDYniYxXM1m+xw6l5MShZN5JZSj9nFF5Lz29yaodWZ It3GAU99SqyW+6mHvlfNNvnyg/lE7QQQ -----END CERTIFICATE-----Generated at Sat Aug 23 19:02:13 2025 by rpki-client