$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: 7OgiuKBbyjGrgk6YaUgnBPB3ryfQ5HXLxommVdP606g= Subject key identifier: 24:7D:3E:0D:21:4B:4F:62:7E:61:8A:EA:59:EB:98:74:2B:90:20:75 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1BC3 Signing time: Fri 22 Aug 2025 16:41:10 +0000 Manifest this update: Fri 22 Aug 2025 16:41:09 +0000 Manifest next update: Fri 29 Aug 2025 16:41:09 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: m8Rc5l/5Rs3VK5y4U99ACXjpoJImc22zHx6gAlUJrzc=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Aug 22 16:41:09 2025 GMT Not After : Aug 29 16:41:09 2025 GMT Subject: CN=68a89da6-7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:38:24:2d:ef:76:66:b0:d2:09:3b:55:d8:b1: 31:c6:dc:60:db:d7:96:31:da:e0:1a:6f:ce:97:5f: 88:b8:64:ad:c1:95:5d:ce:82:2d:a7:cd:7f:a8:99: c6:3b:f8:01:35:03:1b:ab:a9:88:5b:46:89:c1:c4: b4:a7:eb:b3:c4:38:ee:98:79:b2:31:b3:89:34:57: fb:5b:b1:1a:09:3a:38:e2:34:2a:25:c3:f1:c0:e1: 94:1e:67:fc:21:97:66:80:f9:cb:e2:16:e4:bf:a4: 3e:3d:51:99:03:86:9c:00:ca:0a:d0:3f:01:b2:5b: 19:0d:b6:55:32:fa:ce:04:57:06:e3:a9:5d:7a:b7: 97:a0:51:50:88:0d:7e:7e:62:24:52:47:b8:07:11: b9:45:1d:eb:63:92:47:9b:e1:d6:3b:eb:8c:9e:bd: d6:34:5a:89:22:4b:4b:8c:37:82:98:93:17:0b:60: 6c:9f:be:cc:97:10:84:c8:c9:4e:97:2f:d0:8d:66: 40:b5:a4:fc:8f:37:59:91:2b:65:4d:cc:75:2a:03: ee:8b:92:e7:8e:73:6b:61:b6:2f:87:f2:2c:fc:ef: 1c:f1:46:60:15:c0:d3:ef:c7:43:27:f9:39:5a:84: b0:c9:01:f8:24:78:a0:fc:1c:62:e9:84:13:6a:6a: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:3E:0D:21:4B:4F:62:7E:61:8A:EA:59:EB:98:74:2B:90:20:75 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a0:28:3d:7c:94:9e:c6:96:88:61:3d:42:26:8e:13:0f:fe: 6b:8b:ba:a9:75:e5:d4:51:40:cd:59:8b:42:7b:cf:da:50:5e: b1:f6:99:04:2f:ca:bb:99:36:f8:2d:2d:54:b2:20:3b:65:3a: 44:93:e5:ac:a2:b9:01:3b:ce:63:34:41:ef:d0:e6:f9:ed:c0: fe:95:52:d4:96:bb:81:66:f8:91:2f:8a:ee:c5:f7:d3:76:0f: 59:ea:ba:c8:31:bb:59:a4:48:67:9b:2f:42:c9:7b:ad:67:62: 37:f4:68:46:29:4b:d3:48:56:af:a5:38:28:bb:d8:5a:22:45: 44:27:cb:85:00:b1:45:9f:d0:ac:36:f0:04:99:83:1b:64:11: a4:b7:e2:01:40:d0:2a:83:14:4f:4c:9e:05:f0:c7:a7:8a:a2: fc:60:71:d5:7a:cc:eb:8b:4f:14:d9:f7:ae:d4:8a:45:c3:31: 37:6b:4d:9e:af:10:de:7a:62:96:c0:4a:a9:da:32:45:89:b2: 0a:5c:d6:7f:00:69:90:64:1b:3b:02:a6:50:0d:9e:4b:f9:38: 03:4b:80:aa:61:1d:b9:d8:a4:30:83:0d:d7:29:1c:62:15:bf: ea:26:ad:bc:b4:8d:89:bb:a4:4e:34:de:e0:8d:98:14:1b:7c: 7b:85:f7:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwODIyMTY0MTA5WhcNMjUwODI5MTY0MTA5WjAYMRYwFAYD VQQDEw02OGE4OWRhNi03YzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/jgkLe92ZrDSCTtV2LExxtxg29eWMdrgGm/Ol1+IuGStwZVdzoItp81/qJnG O/gBNQMbq6mIW0aJwcS0p+uzxDjumHmyMbOJNFf7W7EaCTo44jQqJcPxwOGUHmf8 IZdmgPnL4hbkv6Q+PVGZA4acAMoK0D8BslsZDbZVMvrOBFcG46ldereXoFFQiA1+ fmIkUke4BxG5RR3rY5JHm+HWO+uMnr3WNFqJIktLjDeCmJMXC2Bsn77MlxCEyMlO ly/QjWZAtaT8jzdZkStlTcx1KgPui5LnjnNrYbYvh/Is/O8c8UZgFcDT78dDJ/k5 WoSwyQH4JHig/Bxi6YQTamoobwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR9Pg0h S09ifmGK6lnrmHQrkCB1MB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcoCg9fJSexpaIYT1CJo4TD/5ri7qpdeXUUUDNWYtCe8/aUF6x9pkE L8q7mTb4LS1UsiA7ZTpEk+WsorkBO85jNEHv0Ob57cD+lVLUlruBZviRL4ruxffT dg9Z6rrIMbtZpEhnmy9CyXutZ2I39GhGKUvTSFavpTgou9haIkVEJ8uFALFFn9Cs NvAEmYMbZBGkt+IBQNAqgxRPTJ4F8MeniqL8YHHVeszri08U2feu1IpFwzE3a02e rxDeemKWwEqp2jJFibIKXNZ/AGmQZBs7AqZQDZ5L+TgDS4CqYR252KQwgw3XKRxi Fb/qJq28tI2Ju6RONN7gjZgUG3x7hffV -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:35 2025 by rpki-client