$ rpki-client -vvf rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft File: WFcZh2wfmiD9644Ew9aTelrKpXw.mft (raw, json) Hash identifier: 5IOj0rBSGPd+kIjMQ+dscyUjtX+plKBGS1loO+aBXbY= Subject key identifier: EF:DE:02:CF:CF:E3:30:E1:2D:5C:D8:0C:C2:42:64:F5:2A:B6:5E:3C Authority key identifier: 58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C Certificate issuer: /CN=A916F1C6/serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft Manifest number: 34AB Signing time: Fri 22 Aug 2025 15:06:50 +0000 Manifest this update: Fri 22 Aug 2025 15:06:49 +0000 Manifest next update: Fri 29 Aug 2025 15:06:49 +0000 Files and hashes: 1: WFcZh2wfmiD9644Ew9aTelrKpXw.crl (hash: fHfPoTMrBsBbslbDOCs1acG7vD+FtRD1LMuUmZ6pyo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F1C6, serialNumber=585719876C1F9A20FDEB8E04C3D6937A5ACAA57C Validity Not Before: Aug 22 15:06:49 2025 GMT Not After : Aug 29 15:06:49 2025 GMT Subject: CN=68a88789-d9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:88:ad:df:c9:22:3d:ee:aa:df:b4:4c:28: c6:5c:1b:dd:2c:dc:0c:2a:09:55:c0:a1:1e:2a:6b: 55:b7:09:f2:d2:91:73:e9:55:e9:87:f1:f2:ad:02: 53:10:6e:53:06:c7:e8:e6:40:58:05:96:4f:a2:c8: 72:32:43:41:ff:58:07:6e:c9:42:4e:72:ce:05:09: c8:40:ed:37:72:1f:13:d8:86:54:6b:e9:e4:61:c5: 43:07:cf:9d:58:b4:b3:3c:9f:14:88:7f:af:da:d7: bc:ab:92:d1:c2:f3:fd:7d:a6:16:c5:55:4d:57:c6: 17:8f:78:8f:7e:95:fc:23:5c:69:c5:58:f8:58:aa: 74:ce:e2:8c:c6:ef:5b:6c:28:00:95:fb:d6:11:f9: a8:dd:55:b2:20:1b:27:41:58:88:ca:e4:d6:92:b8: 47:a7:48:3a:63:f6:f2:e4:26:20:ea:45:f1:ce:69: 99:a2:63:67:15:d3:e4:d7:0d:f5:20:ff:86:aa:b9: 9d:01:a3:b5:8b:42:43:fe:66:63:25:be:f3:5a:23: 9f:ca:4b:57:ab:c8:89:fc:4c:2a:a8:00:cf:45:0b: 97:2d:83:d3:bc:24:03:93:fb:8b:e9:04:1d:4f:9b: b8:69:71:43:b2:7d:09:1e:f3:03:0e:95:c3:b7:68: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DE:02:CF:CF:E3:30:E1:2D:5C:D8:0C:C2:42:64:F5:2A:B6:5E:3C X509v3 Authority Key Identifier: keyid:58:57:19:87:6C:1F:9A:20:FD:EB:8E:04:C3:D6:93:7A:5A:CA:A5:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFcZh2wfmiD9644Ew9aTelrKpXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F1C6/37BDAACC1DA111E2A018339308B02CD2/WFcZh2wfmiD9644Ew9aTelrKpXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b1:b0:a3:8d:bb:f8:a3:76:86:d6:d5:c8:f5:34:91:c2:9c: 69:a4:21:0f:a8:2a:93:f1:71:d6:67:de:8c:ac:8c:0f:7c:0f: ba:09:ca:1c:de:c6:fe:7c:4d:ee:af:6c:87:ff:8a:8a:58:b5: a8:2c:60:74:42:69:de:33:39:d6:6d:02:f0:66:3e:ad:53:44: bd:5e:d3:6e:e9:3c:8c:78:a0:56:9a:3c:f0:47:14:96:bb:eb: df:36:14:85:8d:87:d2:6c:f1:e6:66:bc:4f:19:f4:8c:14:08: 82:76:a1:30:2a:d9:97:a2:86:10:16:21:b2:fa:3b:e4:92:f7: 08:ba:80:e5:bd:e7:ca:9d:2e:0f:b8:e7:fd:58:9f:fd:87:12: 98:bc:ba:a8:0f:8f:ff:52:b9:bb:23:37:fc:fe:35:77:cc:3e: f5:28:60:95:37:20:bc:9a:60:70:44:fa:8b:f8:d2:36:fc:c8: 75:f6:41:2e:2a:e4:52:0b:5c:76:e8:92:76:07:78:da:eb:da: 1f:02:8b:9d:19:da:f6:0d:3a:e7:0d:60:0e:14:aa:13:6a:f9: e6:dd:11:49:6f:29:e9:07:b6:6e:c2:15:8f:4f:75:cc:68:47: bd:54:bd:9d:cf:0c:71:0d:18:32:e8:70:ac:8e:a2:c6:3e:e4: bf:cf:26:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkYxQzYxMTAvBgNVBAUTKDU4NTcxOTg3NkMxRjlBMjBGREVCOEUwNEMzRDY5MzdB NUFDQUE1N0MwHhcNMjUwODIyMTUwNjQ5WhcNMjUwODI5MTUwNjQ5WjAYMRYwFAYD VQQDEw02OGE4ODc4OS1kOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZqIrd/JIj3uqt+0TCjGXBvdLNwMKglVwKEeKmtVtwny0pFz6VXph/HyrQJT EG5TBsfo5kBYBZZPoshyMkNB/1gHbslCTnLOBQnIQO03ch8T2IZUa+nkYcVDB8+d WLSzPJ8UiH+v2te8q5LRwvP9faYWxVVNV8YXj3iPfpX8I1xpxVj4WKp0zuKMxu9b bCgAlfvWEfmo3VWyIBsnQViIyuTWkrhHp0g6Y/by5CYg6kXxzmmZomNnFdPk1w31 IP+GqrmdAaO1i0JD/mZjJb7zWiOfyktXq8iJ/EwqqADPRQuXLYPTvCQDk/uL6QQd T5u4aXFDsn0JHvMDDpXDt2jhbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/eAs/P 4zDhLVzYDMJCZPUqtl48MB8GA1UdIwQYMBaAFFhXGYdsH5og/euOBMPWk3payqV8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjFDNi8zN0JEQUFDQzFE QTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1pRDk2NDRFdzlhVGVscktw WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGY1poMndmbWlEOTY0NEV3OWFUZWxyS3BYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjFDNi8zN0JEQUFDQzFEQTExMUUyQTAxODMzOTMwOEIwMkNEMi9XRmNaaDJ3Zm1p RDk2NDRFdzlhVGVscktwWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEsbCjjbv4o3aG1tXI9TSRwpxppCEPqCqT8XHWZ96MrIwPfA+6Ccoc 3sb+fE3ur2yH/4qKWLWoLGB0QmneMznWbQLwZj6tU0S9XtNu6TyMeKBWmjzwRxSW u+vfNhSFjYfSbPHmZrxPGfSMFAiCdqEwKtmXooYQFiGy+jvkkvcIuoDlvefKnS4P uOf9WJ/9hxKYvLqoD4//Urm7Izf8/jV3zD71KGCVNyC8mmBwRPqL+NI2/Mh19kEu KuRSC1x26JJ2B3ja69ofAoudGdr2DTrnDWAOFKoTavnm3RFJbynpB7ZuwhWPT3XM aEe9VL2dzwxxDRgy6HCsjqLGPuS/zyZ7 -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:22 2025 by rpki-client