$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: Uo1cUsQPMIrahOneCHyN9+yG2tQOTrpvWeA6XpPJ7sA= Subject key identifier: 6E:94:E1:08:5B:47:DA:4F:C9:32:EC:CF:CE:63:1E:2B:47:36:C2:A3 Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 019E Signing time: Sat 23 Aug 2025 03:27:53 +0000 Manifest this update: Sat 23 Aug 2025 03:27:52 +0000 Manifest next update: Sat 30 Aug 2025 03:27:52 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: B/N9fJqp7veBqYztoibeujX8boDYETkBbUK61MfMymM=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: Aug 23 03:27:52 2025 GMT Not After : Aug 30 03:27:52 2025 GMT Subject: CN=68a93538-46be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:3f:89:e0:d6:cf:1f:49:4a:8a:9c:3a:ca: d1:e9:6e:9e:e0:bc:6d:7c:b1:b6:e2:89:c5:5a:71: 56:61:a7:52:69:aa:31:e0:05:d5:9f:10:ee:2b:96: b1:96:46:2d:22:c8:9d:01:93:4e:62:16:18:6b:5e: 2b:91:14:55:cd:73:8c:1e:60:45:98:ee:35:79:73: 1c:6e:e6:7f:69:90:b7:6b:c0:42:60:31:2c:2c:27: 78:ae:2a:52:d5:8e:61:80:9e:cd:2d:f2:c9:83:cd: be:bb:01:6d:d9:6c:da:4c:c9:0e:7d:b7:7f:2a:66: 6d:71:18:98:68:76:9b:73:07:e0:f8:29:36:5f:fb: 2e:cc:42:30:50:70:5c:14:26:dd:f3:ec:e6:9f:d3: 95:b0:6b:cb:4f:84:f1:21:02:f2:40:96:11:e4:ab: 0f:8a:74:66:73:5e:59:6b:a0:50:ed:7f:46:65:48: 19:58:5c:c4:99:4a:23:a5:9e:48:38:b7:50:6f:43: 4c:70:70:74:5a:3c:56:b7:76:68:b3:71:f3:0f:bc: 8c:0a:d8:b0:69:71:c7:a8:f4:7e:b2:86:e1:2f:e5: 9f:13:e0:68:d2:56:d7:e1:c7:b7:6c:af:dd:a9:d9: a6:2c:4a:ee:79:88:f9:d6:95:9a:72:f8:b4:a8:9c: a7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:94:E1:08:5B:47:DA:4F:C9:32:EC:CF:CE:63:1E:2B:47:36:C2:A3 X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6a:51:90:ed:1f:9f:a0:36:96:16:e1:19:5b:d4:83:8f:00: 01:6c:74:be:68:75:3a:c4:13:6d:c3:02:b8:17:28:1f:31:79: 35:59:16:83:4b:bf:f2:57:4b:d7:fe:62:a4:61:cb:57:b0:6c: e5:0c:11:0a:c0:f6:5b:98:d4:ad:63:7e:a0:89:82:0e:23:1a: 01:2e:45:c1:5b:e2:b2:40:04:98:e9:ad:5c:7d:cb:e6:87:d1: 51:00:c3:6f:77:3d:f2:60:bf:0a:e7:af:67:69:e5:2a:a5:8e: 4c:51:65:02:d2:c5:36:6a:85:13:32:90:69:3f:28:cf:51:8c: a7:5e:a0:b6:ae:26:e0:1e:14:39:03:60:a9:de:60:fa:5a:04: 09:8b:4e:61:42:9b:ab:f7:26:56:4d:8e:51:b4:04:30:f5:c1: 33:1b:1d:96:e3:3f:ce:f6:4a:29:44:7e:93:a1:fc:cf:3d:ca: c6:1c:60:0b:33:50:d7:06:90:cc:1b:ad:d8:ea:35:5b:00:2b: 45:83:27:8f:53:ef:c6:76:fd:95:ad:32:f5:66:18:e3:85:dc: ec:b7:e4:14:a1:d9:9c:17:9f:bd:2f:62:55:c0:22:f0:c8:f2: e4:20:ec:53:8c:3b:c9:a5:1e:25:6e:5f:4f:e1:f1:be:0d:1b: b0:b1:a4:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUwODIzMDMyNzUyWhcNMjUwODMwMDMyNzUyWjAYMRYwFAYD VQQDEw02OGE5MzUzOC00NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNc/ieDWzx9JSoqcOsrR6W6e4LxtfLG24onFWnFWYadSaaox4AXVnxDuK5ax lkYtIsidAZNOYhYYa14rkRRVzXOMHmBFmO41eXMcbuZ/aZC3a8BCYDEsLCd4ripS 1Y5hgJ7NLfLJg82+uwFt2WzaTMkOfbd/KmZtcRiYaHabcwfg+Ck2X/suzEIwUHBc FCbd8+zmn9OVsGvLT4TxIQLyQJYR5KsPinRmc15Za6BQ7X9GZUgZWFzEmUojpZ5I OLdQb0NMcHB0WjxWt3Zos3HzD7yMCtiwaXHHqPR+sobhL+WfE+Bo0lbX4ce3bK/d qdmmLErueYj51pWacvi0qJynLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6U4Qhb R9pPyTLsz85jHitHNsKjMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6alGQ7R+foDaWFuEZW9SDjwABbHS+aHU6xBNtwwK4FygfMXk1WRaD S7/yV0vX/mKkYctXsGzlDBEKwPZbmNStY36giYIOIxoBLkXBW+KyQASY6a1cfcvm h9FRAMNvdz3yYL8K569naeUqpY5MUWUC0sU2aoUTMpBpPyjPUYynXqC2ribgHhQ5 A2Cp3mD6WgQJi05hQpur9yZWTY5RtAQw9cEzGx2W4z/O9kopRH6TofzPPcrGHGAL M1DXBpDMG63Y6jVbACtFgyePU+/Gdv2VrTL1Zhjjhdzst+QUodmcF5+9L2JVwCLw yPLkIOxTjDvJpR4lbl9P4fG+DRuwsaSw -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:24 2025 by rpki-client