$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: JA5K9R95UrbdZ6f+pdSqxAJ4CLUM47rM6Z2q/d7CLbs= Subject key identifier: 9A:1B:C6:EC:9E:BD:1D:37:12:2A:B3:93:92:A3:FB:5E:16:AB:26:F9 Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 0193 Signing time: Sat 23 Aug 2025 03:33:16 +0000 Manifest this update: Sat 23 Aug 2025 03:33:15 +0000 Manifest next update: Sat 30 Aug 2025 03:33:15 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: gCCYisocADaKSE2Yajxx2Q4f8Hv5LL/oTsv3+NyHqxk=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1, serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: Aug 23 03:33:15 2025 GMT Not After : Aug 30 03:33:15 2025 GMT Subject: CN=68a9367c-6eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3e:3e:73:27:6e:7f:a5:ac:7f:e7:42:82:22: 7b:64:8a:da:5b:81:ba:b8:fb:e8:5b:ab:44:de:68: ea:99:5e:3a:65:b3:0d:55:cc:6c:28:f2:bf:31:f8: 54:d8:23:bc:10:88:c8:7a:da:5a:d5:68:de:34:01: fe:10:3a:76:60:ab:9b:1d:15:69:0f:b3:a7:d6:05: 2c:75:4c:5c:b9:52:51:4a:92:a4:78:16:a1:8c:7a: 54:12:fa:57:4b:73:ee:af:2b:ba:5c:7d:75:33:00: fa:0f:45:58:3c:30:78:88:79:b6:36:91:24:b5:ce: a0:6c:32:06:f9:ef:a2:d5:00:00:56:4a:ed:7e:fc: 94:96:3f:e2:c7:34:bd:40:29:84:9f:07:16:f8:53: 76:1d:53:3a:4a:66:97:a5:ef:cf:26:91:a0:1e:fa: 18:40:c8:7e:8b:cf:a3:9b:97:eb:3a:03:49:9a:7d: 1b:8f:58:31:26:ad:2a:3e:4f:96:38:26:ef:01:4a: ee:81:9f:d1:c8:8d:a3:1b:09:9d:18:b5:90:27:c9: 96:d8:81:f7:f3:03:99:dd:4d:1b:14:41:1f:21:0f: 3f:77:54:56:13:90:d0:fb:33:fe:70:bd:df:37:56: 85:9f:65:45:13:bd:3c:38:b6:b4:d7:21:39:2f:3e: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:C6:EC:9E:BD:1D:37:12:2A:B3:93:92:A3:FB:5E:16:AB:26:F9 X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7b:11:86:0c:0c:89:bd:dc:49:0c:9a:f9:92:2e:d5:5b:4b: 81:81:b2:5b:41:56:9a:03:9d:64:41:05:43:06:c1:4f:a9:10: d6:21:b3:42:cd:0b:82:c3:ae:ab:94:af:8f:f1:40:49:19:9c: cc:75:e6:d6:01:3d:53:fb:47:11:ab:19:91:da:ae:bc:46:69: 29:59:a7:51:1a:65:96:0d:f0:6e:73:c6:e4:86:56:60:9f:89: 14:ac:d4:03:66:66:f2:95:b5:8b:8e:f5:2f:d8:28:dd:d0:76: ce:59:a0:55:a2:42:6a:eb:31:fe:ba:9d:47:1f:97:b1:00:a2: 1e:fc:da:be:14:f1:0d:d3:2b:a0:17:c1:2e:f0:88:9e:10:db: ca:b9:61:7f:63:b0:9e:46:74:c8:e0:fa:7f:59:b3:ee:59:72: dc:bf:d9:14:7d:c6:f3:ab:a0:67:6d:5f:b7:71:46:be:bc:2f: 5c:df:41:8a:65:9d:81:fb:02:bc:31:cf:6d:95:32:c1:cc:a2: 18:21:74:87:66:dd:1e:4c:70:b8:5f:18:56:d1:5d:e3:10:1d: e6:ce:7f:12:60:55:80:82:74:08:5b:4f:f5:9f:82:31:6b:ea: 18:85:cc:64:e7:07:31:79:84:4f:62:cf:f8:d1:d9:07:ca:d2: 88:b9:16:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUwODIzMDMzMzE1WhcNMjUwODMwMDMzMzE1WjAYMRYwFAYD VQQDEw02OGE5MzY3Yy02ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9D4+cyduf6Wsf+dCgiJ7ZIraW4G6uPvoW6tE3mjqmV46ZbMNVcxsKPK/MfhU 2CO8EIjIetpa1WjeNAH+EDp2YKubHRVpD7On1gUsdUxcuVJRSpKkeBahjHpUEvpX S3Puryu6XH11MwD6D0VYPDB4iHm2NpEktc6gbDIG+e+i1QAAVkrtfvyUlj/ixzS9 QCmEnwcW+FN2HVM6SmaXpe/PJpGgHvoYQMh+i8+jm5frOgNJmn0bj1gxJq0qPk+W OCbvAUrugZ/RyI2jGwmdGLWQJ8mW2IH38wOZ3U0bFEEfIQ8/d1RWE5DQ+zP+cL3f N1aFn2VFE708OLa01yE5Lz4PNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJobxuye vR03Eiqzk5Kj+14Wqyb5MB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeexGGDAyJvdxJDJr5ki7VW0uBgbJbQVaaA51kQQVDBsFPqRDWIbNC zQuCw66rlK+P8UBJGZzMdebWAT1T+0cRqxmR2q68RmkpWadRGmWWDfBuc8bkhlZg n4kUrNQDZmbylbWLjvUv2Cjd0HbOWaBVokJq6zH+up1HH5exAKIe/Nq+FPEN0yug F8Eu8IieENvKuWF/Y7CeRnTI4Pp/WbPuWXLcv9kUfcbzq6BnbV+3cUa+vC9c30GK ZZ2B+wK8Mc9tlTLBzKIYIXSHZt0eTHC4XxhW0V3jEB3mzn8SYFWAgnQIW0/1n4Ix a+oYhcxk5wcxeYRPYs/40dkHytKIuRZv -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:36 2025 by rpki-client