$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft File: wuH3Z0PV73o0ajcy6vkNrVgod90.mft (raw, json) Hash identifier: INbqBY/St3veWzBwOXN/fLFZsTd+XZsxOevaIQx3baM= Subject key identifier: E7:C0:1A:3E:A2:65:59:19:5C:86:D3:E0:E4:2C:7F:32:18:FB:70:25 Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD Certificate issuer: /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft Manifest number: 01FD Signing time: Sat 23 Aug 2025 02:33:51 +0000 Manifest this update: Sat 23 Aug 2025 02:33:50 +0000 Manifest next update: Sat 30 Aug 2025 02:33:50 +0000 Files and hashes: 1: wuH3Z0PV73o0ajcy6vkNrVgod90.crl (hash: oeZCqjRdeD/QofLoCcgzA7nomDn90jTHNqQnYmdO5Vw=) 2: 679A3A06D1F211ED8C598E75C4F9AE02.roa (hash: r5ZmLzUZTXiDfxiYIu9oDsZMlDkmnmjH0O8U1OebWxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91843C6, serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD Validity Not Before: Aug 23 02:33:50 2025 GMT Not After : Aug 30 02:33:50 2025 GMT Subject: CN=68a9288e-8c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a4:2c:e9:fb:6b:ea:f3:2c:d9:c5:e2:38:32: be:27:37:35:a2:c0:24:10:f2:5b:5b:a3:ab:49:05: f2:c8:79:9c:51:db:dd:44:48:d1:7c:34:08:54:22: bc:10:35:1a:d3:d5:ae:60:a9:af:cf:cd:46:40:bc: 5c:aa:59:a8:13:44:a7:8b:40:7d:39:03:4f:88:e5: 41:2f:10:ec:d2:a7:84:2f:5f:a4:63:66:5f:76:9c: 89:b1:10:56:e6:d0:13:e2:ec:17:2a:25:dc:3c:1b: 0b:95:80:25:7e:75:a5:55:38:61:95:79:99:d2:15: 99:7e:87:59:ba:97:b0:43:c3:36:54:52:92:55:43: 20:8e:d6:d4:3d:ea:3c:89:7e:bc:b0:58:41:6b:f8: ee:14:83:a0:39:e7:71:91:97:8f:83:19:ff:15:c2: 89:d0:72:dc:21:dc:72:7a:59:d9:c3:f1:89:ec:06: 71:cd:cb:b8:6c:0f:41:38:49:f1:46:09:3f:57:5c: 6b:74:48:3d:80:dd:9a:85:cf:8c:18:92:21:c8:3c: d1:5f:34:22:5b:bf:a1:f9:35:2c:2a:eb:19:f8:9e: 90:d2:08:d4:89:13:d4:89:09:5e:c3:f5:a9:b5:4f: 81:37:3b:0b:e6:0a:59:48:e2:39:7a:ff:63:66:cb: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C0:1A:3E:A2:65:59:19:5C:86:D3:E0:E4:2C:7F:32:18:FB:70:25 X509v3 Authority Key Identifier: keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:c9:9a:78:06:6b:42:ef:11:4c:8a:a4:f8:b3:dd:94:a1: b7:a5:47:4b:99:a2:87:07:72:db:22:86:9c:4c:bb:ae:a6:d6: a2:7e:11:fb:e5:cf:4c:43:de:34:00:c0:4e:dc:51:be:7a:3a: 37:ae:c6:0a:88:b5:1b:ed:66:f8:c9:0b:35:c4:b0:99:e3:cf: 67:c2:e7:87:55:72:b6:fc:d9:3e:74:7f:42:bd:5e:76:cf:aa: 7b:c1:6b:ff:00:12:00:fb:9c:f4:f8:21:12:ef:a6:38:48:67: d0:1e:15:ac:c7:27:8c:f9:a9:50:8f:80:32:85:f5:14:f5:09: e4:6f:c2:03:f8:d9:65:21:00:04:df:58:fd:ee:c1:1a:69:42: 2a:9c:18:ed:2e:64:c4:36:52:c9:f5:91:9b:6b:e0:8b:46:74: 45:6c:9a:fe:eb:cb:04:88:ef:9c:a2:ef:88:24:8b:07:ab:0f: 4e:55:e9:d5:fb:f7:3f:94:6f:88:53:d1:1d:e8:94:3c:12:65: 27:38:69:7f:5f:e2:fb:13:c9:5f:13:cb:b5:63:96:48:2f:e6: af:ac:36:04:77:15:fa:9a:6f:eb:70:e9:cf:d2:5c:5d:0a:77: 23:c7:82:81:98:ab:33:bc:e3:77:62:b3:ba:c4:67:7c:8b:00: 9d:fe:83:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQzQzYxMTAvBgNVBAUTKEMyRTFGNzY3NDNENUVGN0EzNDZBMzczMkVBRjkwREFE NTgyODc3REQwHhcNMjUwODIzMDIzMzUwWhcNMjUwODMwMDIzMzUwWjAYMRYwFAYD VQQDEw02OGE5Mjg4ZS04Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KQs6ftr6vMs2cXiODK+Jzc1osAkEPJbW6OrSQXyyHmcUdvdREjRfDQIVCK8 EDUa09WuYKmvz81GQLxcqlmoE0Sni0B9OQNPiOVBLxDs0qeEL1+kY2ZfdpyJsRBW 5tAT4uwXKiXcPBsLlYAlfnWlVThhlXmZ0hWZfodZupewQ8M2VFKSVUMgjtbUPeo8 iX68sFhBa/juFIOgOedxkZePgxn/FcKJ0HLcIdxyelnZw/GJ7AZxzcu4bA9BOEnx Rgk/V1xrdEg9gN2ahc+MGJIhyDzRXzQiW7+h+TUsKusZ+J6Q0gjUiRPUiQlew/Wp tU+BNzsL5gpZSOI5ev9jZsu3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfAGj6i ZVkZXIbT4OQsfzIY+3AlMB8GA1UdIwQYMBaAFMLh92dD1e96NGo3Mur5Da1YKHfd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDNDNi8wMjM2MTY0QTdC ODkxMUVEOURFMTUyODNDNEY5QUUwMi93dUgzWjBQVjczbzBhamN5NnZrTnJWZ29k OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d1SDNaMFBWNzNvMGFqY3k2dmtOclZnb2Q5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDNDNi8wMjM2MTY0QTdCODkxMUVEOURFMTUyODNDNEY5QUUwMi93dUgzWjBQVjcz bzBhamN5NnZrTnJWZ29kOTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbo8maeAZrQu8RTIqk+LPdlKG3pUdLmaKHB3LbIoacTLuuptaifhH7 5c9MQ940AMBO3FG+ejo3rsYKiLUb7Wb4yQs1xLCZ489nwueHVXK2/Nk+dH9CvV52 z6p7wWv/ABIA+5z0+CES76Y4SGfQHhWsxyeM+alQj4AyhfUU9Qnkb8ID+NllIQAE 31j97sEaaUIqnBjtLmTENlLJ9ZGba+CLRnRFbJr+68sEiO+cou+IJIsHqw9OVenV +/c/lG+IU9Ed6JQ8EmUnOGl/X+L7E8lfE8u1Y5ZIL+avrDYEdxX6mm/rcOnP0lxd Cncjx4KBmKszvON3YrO6xGd8iwCd/oP1 -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:11 2025 by rpki-client