$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: Pwhnap2ukf4Ajm7+4ZaMjiZ9fzavvgCF22isWtFjWWo= Subject key identifier: 3F:71:3D:3F:77:88:81:EA:7D:FF:9E:5E:B3:32:A3:93:DB:6C:41:7A Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 0152 Signing time: Sat 23 Aug 2025 04:19:01 +0000 Manifest this update: Sat 23 Aug 2025 04:19:01 +0000 Manifest next update: Sat 30 Aug 2025 04:19:01 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: urVNtFoVFfJA6wcbnhhCVwccocF8xFVl6hPzCFINlJ0=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: /QiKgn5sBz0ONRYcM1JvQlCWVa4Jvc9ROw/bHMNmg2o=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: 4PWxSJvGPsYEjGtgHYM8obqb8f7X6eyOT+IKt9t0/2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: Aug 23 04:19:01 2025 GMT Not After : Aug 30 04:19:01 2025 GMT Subject: CN=68a94135-6192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cf:45:3b:d1:6e:8d:46:3d:a9:33:41:29:d7: 83:d4:e1:fa:96:35:3e:1d:c9:62:6e:93:63:d5:84: 97:f3:21:a9:56:02:97:60:57:b3:82:d2:4c:fa:85: d6:52:f1:0b:4c:c0:39:de:bd:d1:77:c9:dc:09:9a: 92:23:dc:d0:76:27:6c:12:f6:10:fb:10:36:78:5a: 34:6e:b8:14:ba:28:3a:8c:95:a2:43:3d:e5:fc:29: f3:e1:e2:d6:7e:00:b9:01:cf:d9:c8:96:3f:35:4e: 94:4f:2f:b4:87:25:27:d9:47:35:72:a4:85:7a:12: 1f:b4:34:f9:17:be:ec:a7:65:85:97:5f:56:53:53: 92:41:fd:e6:cb:b3:79:19:56:e2:7a:a0:d8:d6:f3: df:9b:84:50:34:28:6f:09:11:72:74:89:65:b2:78: 2d:5b:52:b0:db:9f:c4:4d:41:45:d9:36:c9:8d:3f: dc:f9:8d:f0:e5:e5:8d:c6:9e:4a:3e:3e:e0:a4:0e: 54:bb:f2:6f:eb:2f:8e:d1:44:94:85:54:65:2c:84: c5:45:81:48:01:41:af:7e:2e:84:ed:8f:26:ea:9c: 93:d4:62:ee:80:a9:86:b2:08:2d:61:89:db:11:ed: 08:7c:e9:b4:02:75:8c:b0:0e:88:ad:1a:54:a2:2c: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:71:3D:3F:77:88:81:EA:7D:FF:9E:5E:B3:32:A3:93:DB:6C:41:7A X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:37:86:ab:4b:b1:b9:49:53:26:ed:ea:cc:f9:64:96:67:1e: be:da:f0:3e:c3:e4:af:02:d7:f2:a7:10:b8:23:65:78:6b:61: 39:b5:d9:55:62:be:5f:90:81:27:14:95:bd:d1:68:15:3a:76: fe:b3:3a:60:05:51:3d:74:0b:05:9f:6a:70:f2:18:2c:f5:be: a9:5f:40:bf:35:f6:79:a9:8f:04:51:3a:36:6c:4c:cc:a5:7b: b9:9f:f4:e5:b8:f8:5f:7c:e7:10:7b:00:e2:c2:cd:93:23:95: c4:62:3e:4b:6a:b9:87:eb:83:59:2f:08:f6:00:e2:bd:43:a7: c2:75:72:73:59:38:f6:da:32:1a:f1:5b:65:0a:da:63:36:46: 1b:1e:cb:61:e9:32:79:d5:9e:bd:9d:97:dc:f5:f2:de:5f:b1: f1:3b:65:d3:61:69:73:ca:75:f9:08:fb:a1:d5:71:cc:22:49: 47:da:ed:1b:0e:bf:be:0b:73:94:14:f5:89:3d:8f:02:d8:34: 1d:ed:0f:a9:42:6e:a4:d1:81:0e:b5:1b:70:89:66:b7:5a:66: 44:7a:38:03:c0:3b:36:bb:81:23:da:b0:f1:cc:e9:70:0a:31: f1:75:b2:a9:bd:12:24:7d:83:93:9a:a6:2b:4f:0b:81:e2:0e: ef:d7:48:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjUwODIzMDQxOTAxWhcNMjUwODMwMDQxOTAxWjAYMRYwFAYD VQQDEw02OGE5NDEzNS02MTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8M9FO9FujUY9qTNBKdeD1OH6ljU+HclibpNj1YSX8yGpVgKXYFezgtJM+oXW UvELTMA53r3Rd8ncCZqSI9zQdidsEvYQ+xA2eFo0brgUuig6jJWiQz3l/Cnz4eLW fgC5Ac/ZyJY/NU6UTy+0hyUn2Uc1cqSFehIftDT5F77sp2WFl19WU1OSQf3my7N5 GVbieqDY1vPfm4RQNChvCRFydIllsngtW1Kw25/ETUFF2TbJjT/c+Y3w5eWNxp5K Pj7gpA5Uu/Jv6y+O0USUhVRlLITFRYFIAUGvfi6E7Y8m6pyT1GLugKmGsggtYYnb Ee0IfOm0AnWMsA6IrRpUoiyZQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9xPT93 iIHqff+eXrMyo5PbbEF6MB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArN4arS7G5SVMm7erM+WSWZx6+2vA+w+SvAtfypxC4I2V4a2E5tdlV Yr5fkIEnFJW90WgVOnb+szpgBVE9dAsFn2pw8hgs9b6pX0C/NfZ5qY8EUTo2bEzM pXu5n/TluPhffOcQewDiws2TI5XEYj5LarmH64NZLwj2AOK9Q6fCdXJzWTj22jIa 8VtlCtpjNkYbHsth6TJ51Z69nZfc9fLeX7HxO2XTYWlzynX5CPuh1XHMIklH2u0b Dr++C3OUFPWJPY8C2DQd7Q+pQm6k0YEOtRtwiWa3WmZEejgDwDs2u4Ej2rDxzOlw CjHxdbKpvRIkfYOTmqYrTwuB4g7v10jx -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:29 2025 by rpki-client