$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: g1OlnS+NvvXVlCjaXH2YrLY1c65CfHuK/OzGow64/gM= Subject key identifier: 74:39:E0:1F:39:5E:BE:53:24:28:91:FA:FE:A2:72:CE:4D:7F:F8:A8 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 0317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 0313 Signing time: Sat 23 Aug 2025 01:26:44 +0000 Manifest this update: Sat 23 Aug 2025 01:26:44 +0000 Manifest next update: Sat 30 Aug 2025 01:26:44 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: 4CQHXsDs3QS0U0KworpR6doMu0moEfZv75f+0SphRis=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: Xrafpe77KwQvstPxSi5BewNbQ3AA268J09ld6Gi8xF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 791 (0x317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: Aug 23 01:26:44 2025 GMT Not After : Aug 30 01:26:44 2025 GMT Subject: CN=68a918d4-794f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:37:55:53:47:72:33:28:c7:53:3e:03:b2: 54:69:19:f9:c0:ac:8f:0d:45:62:39:24:3f:42:ba: 5b:e4:12:e1:2b:af:2b:0f:f3:ea:9a:34:fc:1c:0d: 81:4e:7f:b2:b9:9f:59:f4:38:62:e8:52:e8:47:00: 44:a8:86:f0:67:df:42:56:36:75:06:85:30:c4:7f: ff:a2:02:9b:ff:5d:52:11:b6:09:af:d4:1e:28:6f: 5d:55:be:40:01:30:48:30:6c:aa:44:fd:2f:07:a7: 47:c9:f8:02:eb:d6:fb:15:0e:24:e9:76:81:9d:63: ca:66:d6:66:c2:cf:36:56:d8:1e:41:d1:d0:36:93: 09:28:a9:3e:63:5d:24:97:2d:a8:ef:24:0b:81:15: 28:48:1e:42:55:3f:9c:07:d9:a1:43:40:95:48:98: e9:bd:8c:07:50:44:f5:49:75:67:24:f0:34:e4:6b: d9:dd:c7:5d:5a:41:a2:9d:f9:7f:fd:ca:50:a9:cd: a2:72:3a:e5:43:9d:a8:58:3f:b4:7c:81:9e:11:f0: 11:f6:7c:7c:56:9d:36:07:9c:56:e6:2f:bb:b0:41: 4e:25:07:1b:fc:6a:06:53:0c:b7:6d:c1:04:76:eb: 9f:f0:80:af:6f:20:38:12:b3:54:5c:78:1e:56:6c: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:E0:1F:39:5E:BE:53:24:28:91:FA:FE:A2:72:CE:4D:7F:F8:A8 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:82:30:59:89:77:4a:36:fc:23:72:0f:7b:0d:e3:87:4c:6d: 42:5c:98:48:40:80:e8:e9:ef:1e:6e:8a:e1:75:46:b9:fd:d5: 0d:9a:7b:d8:1e:f8:ec:ca:a4:74:b9:07:e4:81:6e:6a:2b:fc: 98:09:30:3b:da:f0:81:af:e7:15:e0:06:41:44:14:a2:0f:d5: 87:4e:29:44:4a:02:8c:19:16:94:72:db:95:d2:99:10:5c:a2: 27:d3:07:c8:e1:9c:12:62:1e:4d:2b:a7:32:ba:a6:cd:8d:e1: 75:6c:56:55:24:49:9a:c3:44:24:cd:38:c5:87:cf:5b:61:73: 46:2d:e5:91:1d:22:62:8a:23:4c:46:20:a3:3d:83:7e:27:3a: 4d:fc:21:f2:e8:23:10:92:97:85:50:b5:b4:f6:2f:89:f7:dd: 34:da:36:37:5a:b6:21:7f:79:42:f7:c0:c9:a9:74:87:17:15: 16:1d:cc:8d:6b:6e:54:fb:d2:e1:40:e2:86:5a:10:28:6d:ec: b6:40:67:8c:0c:e3:2b:ed:20:f8:0e:85:1d:bf:d1:18:01:91: 25:ba:55:b3:6c:ba:0d:e4:2c:36:e4:b5:ad:e6:3f:7d:d2:0f: 2e:86:41:8b:3a:c0:5d:5a:f4:c6:6d:00:ea:40:58:cd:dd:3b: f6:bc:04:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUwODIzMDEyNjQ0WhcNMjUwODMwMDEyNjQ0WjAYMRYwFAYD VQQDEw02OGE5MThkNC03OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ds3VVNHcjMox1M+A7JUaRn5wKyPDUViOSQ/Qrpb5BLhK68rD/PqmjT8HA2B Tn+yuZ9Z9Dhi6FLoRwBEqIbwZ99CVjZ1BoUwxH//ogKb/11SEbYJr9QeKG9dVb5A ATBIMGyqRP0vB6dHyfgC69b7FQ4k6XaBnWPKZtZmws82VtgeQdHQNpMJKKk+Y10k ly2o7yQLgRUoSB5CVT+cB9mhQ0CVSJjpvYwHUET1SXVnJPA05GvZ3cddWkGinfl/ /cpQqc2icjrlQ52oWD+0fIGeEfAR9nx8Vp02B5xW5i+7sEFOJQcb/GoGUwy3bcEE duuf8ICvbyA4ErNUXHgeVmymFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ54B85 Xr5TJCiR+v6ics5Nf/ioMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGgjBZiXdKNvwjcg97DeOHTG1CXJhIQIDo6e8eborhdUa5/dUNmnvY HvjsyqR0uQfkgW5qK/yYCTA72vCBr+cV4AZBRBSiD9WHTilESgKMGRaUctuV0pkQ XKIn0wfI4ZwSYh5NK6cyuqbNjeF1bFZVJEmaw0QkzTjFh89bYXNGLeWRHSJiiiNM RiCjPYN+JzpN/CHy6CMQkpeFULW09i+J99002jY3WrYhf3lC98DJqXSHFxUWHcyN a25U+9LhQOKGWhAobey2QGeMDOMr7SD4DoUdv9EYAZElulWzbLoN5Cw25LWt5j99 0g8uhkGLOsBdWvTGbQDqQFjN3Tv2vASv -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:14 2025 by rpki-client