$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: J5c3elIcKT/vIOr6D4gvLHUF92R2EIAu5YW/FtWxXSM= Subject key identifier: 72:77:A1:6F:F2:C8:1E:F9:16:1E:DF:FB:0C:D6:70:E9:47:79:A6:B9 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 01ED Signing time: Sat 23 Aug 2025 02:39:08 +0000 Manifest this update: Sat 23 Aug 2025 02:39:08 +0000 Manifest next update: Sat 30 Aug 2025 02:39:08 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: 9cI5hNRruiBYZ/L/bRHiPoGQWVTBGb19CRHjHGAwO1s=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A, serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: Aug 23 02:39:08 2025 GMT Not After : Aug 30 02:39:08 2025 GMT Subject: CN=68a929cc-73ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:51:3a:88:d2:fb:14:aa:8f:6a:bc:1b:29: 2b:6e:67:83:75:22:92:6b:88:6a:cd:b7:c1:98:d1: 55:a3:b4:a4:80:74:c8:00:f4:d3:d7:48:6d:8f:99: 3b:66:2e:8d:5f:01:5a:9d:88:37:cb:3f:43:f5:95: 9e:f8:5d:02:9e:e1:10:fd:7f:82:cd:92:36:02:a6: d4:51:cb:a5:8d:db:40:cb:ad:b9:b6:7f:d4:10:63: 20:c5:6a:76:f7:5c:d3:c9:e9:91:e4:6c:f7:13:3b: 57:3b:72:26:24:3c:c9:0a:9f:88:3d:dd:80:4b:59: 82:59:58:10:19:9c:a7:0f:8f:2f:98:08:cf:c1:36: 18:33:e9:fa:b2:a2:a9:d2:63:75:d4:56:1b:21:81: de:db:a5:54:9c:59:d9:96:eb:46:30:e7:a6:6a:8b: 1e:57:f7:19:3b:45:e1:dc:af:8a:3b:15:34:04:96: 0c:24:e5:79:a4:b3:c4:1b:7e:d7:b8:22:9f:7c:77: f4:0d:ae:3d:61:c0:8a:3e:13:db:bd:49:52:ee:12: e6:8c:6d:82:97:76:b4:a1:c9:56:33:39:c0:fb:78: 7d:8e:96:38:c3:ad:f4:6d:67:3c:61:ae:23:0a:f4: 58:a6:36:c5:0f:41:69:38:ac:f7:02:cf:49:c2:e0: 5d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:77:A1:6F:F2:C8:1E:F9:16:1E:DF:FB:0C:D6:70:E9:47:79:A6:B9 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:03:c2:f1:12:24:27:0a:81:04:05:0e:d6:e8:bb:41:42:55: eb:3b:6b:46:2a:57:c0:df:d3:2f:71:51:be:d1:9f:37:34:1b: ff:f9:1b:17:63:ac:c1:1d:20:6a:65:a6:a0:5e:9e:ca:68:9e: 2c:fe:cd:9d:90:dc:29:f2:bf:ec:f0:4c:f8:ec:e1:30:1e:fc: fa:a5:5a:3f:55:71:34:9a:43:60:4f:fe:cf:26:23:76:2a:53: 4a:21:3d:95:9c:33:81:15:10:6f:97:95:ab:36:63:1b:57:1e: 3b:08:12:e0:17:e4:02:51:bf:b5:a7:00:31:4d:07:0c:b1:57: c5:7b:76:92:4b:85:38:a2:c6:9b:a3:f3:77:2b:33:2d:7a:dd: c8:b0:1b:29:5b:23:6c:03:3a:c8:7a:6b:40:27:50:b2:e1:1a: 96:06:64:d3:c6:92:f4:c9:9b:14:ab:b5:cd:61:b6:0a:c9:af: 09:5c:f3:5c:40:92:55:2a:19:8c:d2:28:da:60:a4:c0:3c:a5: 50:89:65:53:18:e4:cc:6d:6c:46:8d:bd:30:50:8d:e1:a0:b6: e8:32:7d:62:58:f2:bd:29:14:75:f2:98:a4:01:53:31:dd:ba: b5:36:f4:98:8d:ae:21:1a:9c:8a:76:95:87:df:87:51:41:97: 66:eb:06:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjUwODIzMDIzOTA4WhcNMjUwODMwMDIzOTA4WjAYMRYwFAYD VQQDEw02OGE5MjljYy03M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpBROojS+xSqj2q8GykrbmeDdSKSa4hqzbfBmNFVo7SkgHTIAPTT10htj5k7 Zi6NXwFanYg3yz9D9ZWe+F0CnuEQ/X+CzZI2AqbUUculjdtAy625tn/UEGMgxWp2 91zTyemR5Gz3EztXO3ImJDzJCp+IPd2AS1mCWVgQGZynD48vmAjPwTYYM+n6sqKp 0mN11FYbIYHe26VUnFnZlutGMOemaoseV/cZO0Xh3K+KOxU0BJYMJOV5pLPEG37X uCKffHf0Da49YcCKPhPbvUlS7hLmjG2Cl3a0oclWMznA+3h9jpY4w630bWc8Ya4j CvRYpjbFD0FpOKz3As9JwuBd3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJ3oW/y yB75Fh7f+wzWcOlHeaa5MB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFA8LxEiQnCoEEBQ7W6LtBQlXrO2tGKlfA39MvcVG+0Z83NBv/+RsX Y6zBHSBqZaagXp7KaJ4s/s2dkNwp8r/s8Ez47OEwHvz6pVo/VXE0mkNgT/7PJiN2 KlNKIT2VnDOBFRBvl5WrNmMbVx47CBLgF+QCUb+1pwAxTQcMsVfFe3aSS4U4osab o/N3KzMtet3IsBspWyNsAzrIemtAJ1Cy4RqWBmTTxpL0yZsUq7XNYbYKya8JXPNc QJJVKhmM0ijaYKTAPKVQiWVTGOTMbWxGjb0wUI3hoLboMn1iWPK9KRR18pikAVMx 3bq1NvSYja4hGpyKdpWH34dRQZdm6wbq -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:11 2025 by rpki-client