$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft File: Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json) Hash identifier: WBXtFeNUE2IB4n1qwiTCFXi5MK2G4iulZYcu2hZRN1g= Subject key identifier: 25:63:8C:1A:BD:6F:72:BF:37:D7:30:CC:3C:DA:01:3E:CA:BC:16:4C Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB Certificate issuer: /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft Manifest number: 07A5 Signing time: Fri 22 Aug 2025 22:51:26 +0000 Manifest this update: Fri 22 Aug 2025 22:51:26 +0000 Manifest next update: Fri 29 Aug 2025 22:51:26 +0000 Files and hashes: 1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: 2JD76Vguv8QT4geFWaW6EfO2VTiGot0xEnM9tVktH/8=) 2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: 6nj6gAXwER1+n2mf9YSf45I25ExEU+9WMLCZesRDaKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Validity Not Before: Aug 22 22:51:26 2025 GMT Not After : Aug 29 22:51:26 2025 GMT Subject: CN=68a8f46e-6131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:23:6a:1a:d4:3f:e7:74:f7:2f:4c:b5:e0:a2: 4a:a3:5b:ee:2e:17:0a:34:1e:0e:0e:e2:5d:fe:74: e0:11:ed:61:07:77:8d:5c:20:1e:ec:ac:4e:54:8d: e9:87:dc:26:b4:64:71:d9:8c:14:da:8d:67:43:ea: 6d:d5:3a:61:05:6e:a2:dc:00:3a:da:39:04:18:20: 90:91:46:a8:96:61:64:c2:a7:e5:41:66:bd:14:ec: 50:61:99:7f:e4:37:ea:fd:fa:26:60:03:00:04:96: 68:a9:20:1b:89:c5:9c:74:a3:69:00:99:41:cd:d3: be:57:43:90:26:31:c7:1d:18:47:c4:9b:90:14:07: fe:7d:60:68:22:41:ef:be:3a:d7:56:07:f6:80:71: ef:36:c3:fe:5a:10:c3:44:a6:04:45:d2:76:37:3e: e8:17:9c:66:24:1e:c6:2c:3f:58:72:9e:1f:c0:f0: 05:fd:ae:69:c3:3d:93:db:f7:61:77:c9:7b:a5:3c: 8b:16:aa:4b:ed:3b:11:c9:1f:6c:bc:f1:76:87:05: f8:61:34:1e:fa:e3:d9:bf:04:f7:8d:d2:7f:f2:53: 5a:b9:2d:8e:01:a0:98:3d:72:45:dc:2d:aa:16:0b: d0:ca:66:3b:04:a0:1e:c4:2f:5d:48:77:27:4c:64: bc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:63:8C:1A:BD:6F:72:BF:37:D7:30:CC:3C:DA:01:3E:CA:BC:16:4C X509v3 Authority Key Identifier: keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e2:84:3c:67:57:fc:30:80:e7:62:ec:6e:36:d9:8a:cc:70: 5a:cc:8e:2c:6d:15:10:f9:5f:b6:7e:19:88:12:2d:dc:4c:eb: 42:3e:4b:b2:c5:cf:4f:81:05:12:21:6c:f7:f3:67:b3:f4:83: bb:76:a0:19:77:e2:1c:30:ec:ee:0c:f7:a1:d6:b2:3f:9a:bf: b0:87:1b:8d:98:cb:e5:05:f7:5f:c9:ca:39:30:d0:5e:8d:c4: ff:88:8f:2c:67:d9:c0:9c:42:05:67:63:86:b5:4a:f3:20:d7: b5:b4:57:a3:5c:b0:7a:b4:ae:c4:ad:90:05:29:af:94:1c:28: f7:03:43:df:1e:a8:78:92:fd:79:2f:68:2b:9e:2f:2a:e2:cf: 74:28:bd:7c:02:e7:fc:ed:5d:2e:54:26:4f:90:63:72:ed:7c: e3:e2:17:55:09:24:64:34:e3:ae:20:2f:a9:13:37:c4:11:66: b1:3e:69:ec:0d:fa:28:aa:87:13:28:b6:3d:9d:18:03:2f:c6: 0b:ed:46:a0:dd:dc:d7:c0:35:d1:f7:59:e1:d8:0e:29:89:46: fd:71:2f:bb:71:92:91:48:3f:d7:df:cc:9b:0c:94:43:49:5a: cf:0a:7e:89:8d:2a:6e:43:29:6b:14:7b:40:78:03:5a:b8:73: bb:d6:28:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyMzUxMTAvBgNVBAUTKDVBNTZGODlGNTA4MTJBODEwRkYyREU4NDU0NzBGMTA5 MjcyNEExQUIwHhcNMjUwODIyMjI1MTI2WhcNMjUwODI5MjI1MTI2WjAYMRYwFAYD VQQDEw02OGE4ZjQ2ZS02MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iNqGtQ/53T3L0y14KJKo1vuLhcKNB4ODuJd/nTgEe1hB3eNXCAe7KxOVI3p h9wmtGRx2YwU2o1nQ+pt1TphBW6i3AA62jkEGCCQkUaolmFkwqflQWa9FOxQYZl/ 5Dfq/fomYAMABJZoqSAbicWcdKNpAJlBzdO+V0OQJjHHHRhHxJuQFAf+fWBoIkHv vjrXVgf2gHHvNsP+WhDDRKYERdJ2Nz7oF5xmJB7GLD9Ycp4fwPAF/a5pwz2T2/dh d8l7pTyLFqpL7TsRyR9svPF2hwX4YTQe+uPZvwT3jdJ/8lNauS2OAaCYPXJF3C2q FgvQymY7BKAexC9dSHcnTGS8twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVjjBq9 b3K/N9cwzDzaAT7KvBZMMB8GA1UdIwQYMBaAFFpW+J9QgSqBD/LehFRw8QknJKGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktvRVA4dDZFVkhEeENTY2tv YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsYjRuMUNCS29FUDh0NkVWSER4Q1Nja29hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktv RVA4dDZFVkhEeENTY2tvYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4oQ8Z1f8MIDnYuxuNtmKzHBazI4sbRUQ+V+2fhmIEi3cTOtCPkuy xc9PgQUSIWz382ez9IO7dqAZd+IcMOzuDPeh1rI/mr+whxuNmMvlBfdfyco5MNBe jcT/iI8sZ9nAnEIFZ2OGtUrzINe1tFejXLB6tK7ErZAFKa+UHCj3A0PfHqh4kv15 L2grni8q4s90KL18Auf87V0uVCZPkGNy7Xzj4hdVCSRkNOOuIC+pEzfEEWaxPmns DfooqocTKLY9nRgDL8YL7Uag3dzXwDXR91nh2A4piUb9cS+7cZKRSD/X38ybDJRD SVrPCn6JjSpuQylrFHtAeANauHO71ijx -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:38 2025 by rpki-client