$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft File: Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft (raw, json) Hash identifier: n9dY9qlsVKS/MpdDBvYJTalilLkoiB4Qml3QJCgPtaE= Subject key identifier: C4:FE:57:C3:7D:E8:61:3C:1E:73:40:A9:FB:E3:26:23:27:DC:13:C7 Authority key identifier: 5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB Certificate issuer: /CN=A918DAC5/serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft Manifest number: 8B Signing time: Sat 23 Aug 2025 06:47:15 +0000 Manifest this update: Sat 23 Aug 2025 06:47:14 +0000 Manifest next update: Sat 30 Aug 2025 06:47:14 +0000 Files and hashes: 1: Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl (hash: 9QDSwFHE1rXGhOFTD8jaLVX52J1FpMKHr7jS9nCAwug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=5AED05A6427641081AFCE84F69725EC856A0A4EB Validity Not Before: Aug 23 06:47:14 2025 GMT Not After : Aug 30 06:47:14 2025 GMT Subject: CN=68a963f3-a0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:24:76:cd:d4:94:4f:b3:d6:d0:d7:a3:a3: b7:4d:d5:b1:53:dc:5c:c9:29:41:d3:db:79:1f:8d: d1:af:51:b7:17:c0:46:90:14:8d:72:ec:5f:da:e4: d6:f9:c2:fa:e5:95:cb:a3:86:50:78:99:9b:d2:0e: aa:56:07:bb:fc:74:c9:7c:71:65:43:8c:55:42:50: e4:85:10:98:2d:88:2c:49:ba:e0:40:d1:68:b5:ea: 65:8b:ff:b9:4b:87:9c:64:cf:f6:cf:da:31:6b:8f: 5c:89:c2:95:8d:95:1f:39:20:b9:86:07:74:0e:15: e5:35:ef:d2:72:28:fb:79:4f:3a:d4:9b:14:42:22: 31:9c:ac:d2:1e:52:35:5d:ad:9d:b4:15:92:83:9f: 9e:b9:89:e1:e6:48:5c:04:8f:5c:14:7a:8f:a9:15: 9d:7e:ad:80:ae:80:0a:ab:b2:e0:36:ed:22:b9:6e: f8:a4:2f:c7:c0:46:33:1a:42:e6:75:79:95:b5:8a: c9:b6:a3:a6:50:d4:ef:70:e8:94:0d:e5:1d:54:0c: 54:15:f8:a4:18:12:25:da:de:a6:5a:43:b1:7d:de: bc:49:c8:7f:f4:89:36:b9:a4:83:6f:1c:f9:19:89: 31:1d:c8:40:ab:f9:6b:ae:b9:20:bc:85:b4:d6:24: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FE:57:C3:7D:E8:61:3C:1E:73:40:A9:FB:E3:26:23:27:DC:13:C7 X509v3 Authority Key Identifier: keyid:5A:ED:05:A6:42:76:41:08:1A:FC:E8:4F:69:72:5E:C8:56:A0:A4:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wu0FpkJ2QQga_OhPaXJeyFagpOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/CB9AD5F6ABDA11EFA1C14E76C4F9AE02/Wu0FpkJ2QQga_OhPaXJeyFagpOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c7:eb:c1:d1:06:d8:42:b9:b5:0c:ac:85:94:e3:8a:1d:4c: 1a:1a:56:33:57:97:88:25:3d:a2:5b:db:73:3f:b9:f2:13:1c: 4a:60:e7:b1:01:89:78:af:0e:82:90:44:eb:c8:99:db:9b:f1: c3:5c:b0:73:ad:bb:04:4b:ae:fb:2c:32:85:eb:04:48:89:a8: 03:55:30:ae:92:68:e2:b3:d2:e9:81:e2:96:92:e1:31:28:af: 1e:d0:52:67:49:08:8b:27:13:61:be:f1:fa:b4:85:c5:8c:de: 57:c1:7d:3e:85:f1:87:fd:4e:0c:13:94:7c:6a:e1:6f:30:59: 2f:55:f4:e4:0c:91:5c:9c:0a:a1:a8:a4:b7:5c:eb:17:1e:6f: 0a:f5:f4:1c:a9:be:75:28:4d:90:06:3a:e3:fe:89:7c:fd:f7: f7:02:70:12:f1:46:a4:90:be:6d:56:52:fd:ed:0a:4d:38:e3: a2:e8:ac:43:43:2c:da:e6:75:a4:8c:f0:f4:5d:75:40:c2:a2: 77:c0:ce:b7:b9:f6:59:03:df:cc:b9:0d:20:b7:65:4a:92:46: 6e:f0:d3:fe:9b:c5:25:81:29:81:b6:89:43:4e:55:ea:d6:84: 1f:96:33:9e:9a:4c:61:b4:47:3a:c0:b8:27:ea:57:29:41:d6: 5a:8f:8e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERBQzUxMTAvBgNVBAUTKDVBRUQwNUE2NDI3NjQxMDgxQUZDRTg0RjY5NzI1RUM4 NTZBMEE0RUIwHhcNMjUwODIzMDY0NzE0WhcNMjUwODMwMDY0NzE0WjAYMRYwFAYD VQQDEw02OGE5NjNmMy1hMGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XQkds3UlE+z1tDXo6O3TdWxU9xcySlB09t5H43Rr1G3F8BGkBSNcuxf2uTW +cL65ZXLo4ZQeJmb0g6qVge7/HTJfHFlQ4xVQlDkhRCYLYgsSbrgQNFotepli/+5 S4ecZM/2z9oxa49cicKVjZUfOSC5hgd0DhXlNe/Scij7eU861JsUQiIxnKzSHlI1 Xa2dtBWSg5+euYnh5khcBI9cFHqPqRWdfq2AroAKq7LgNu0iuW74pC/HwEYzGkLm dXmVtYrJtqOmUNTvcOiUDeUdVAxUFfikGBIl2t6mWkOxfd68Sch/9Ik2uaSDbxz5 GYkxHchAq/lrrrkgvIW01iQuXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMT+V8N9 6GE8HnNAqfvjJiMn3BPHMB8GA1UdIwQYMBaAFFrtBaZCdkEIGvzoT2lyXshWoKTr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REFDNS9DQjlBRDVGNkFC REExMUVGQTFDMTRFNzZDNEY5QUUwMi9XdTBGcGtKMlFRZ2FfT2hQYVhKZXlGYWdw T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1MEZwa0oyUVFnYV9PaFBhWEpleUZhZ3BPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REFDNS9DQjlBRDVGNkFCREExMUVGQTFDMTRFNzZDNEY5QUUwMi9XdTBGcGtKMlFR Z2FfT2hQYVhKZXlGYWdwT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhx+vB0QbYQrm1DKyFlOOKHUwaGlYzV5eIJT2iW9tzP7nyExxKYOex AYl4rw6CkETryJnbm/HDXLBzrbsES677LDKF6wRIiagDVTCukmjis9LpgeKWkuEx KK8e0FJnSQiLJxNhvvH6tIXFjN5XwX0+hfGH/U4ME5R8auFvMFkvVfTkDJFcnAqh qKS3XOsXHm8K9fQcqb51KE2QBjrj/ol8/ff3AnAS8UakkL5tVlL97QpNOOOi6KxD Qyza5nWkjPD0XXVAwqJ3wM63ufZZA9/MuQ0gt2VKkkZu8NP+m8UlgSmBtolDTlXq 1oQfljOemkxhtEc6wLgn6lcpQdZaj45h -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:55 2025 by rpki-client