$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json) Hash identifier: /IeQRZwFQ78ppMDIvfHpUeKrv/38S/3tmaF3zfPpWJo= Subject key identifier: 7C:A2:0D:9B:3C:47:EB:7C:0C:22:3B:5C:18:80:8B:1E:56:76:FE:CA Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft Manifest number: 0577 Signing time: Fri 22 Aug 2025 23:28:22 +0000 Manifest this update: Fri 22 Aug 2025 23:28:22 +0000 Manifest next update: Fri 29 Aug 2025 23:28:22 +0000 Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: RUM7OlsY+nxpQEjU8UDLoalC4iZt/wkzcRmJmOj8VGU=) 2: EDA4BE18EF8711EBAF811557C4F9AE02.roa (hash: XzFg7Hp2s0t/ygNB9X7ACgOTOxQW40ffh6L1IDqjhU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Validity Not Before: Aug 22 23:28:22 2025 GMT Not After : Aug 29 23:28:22 2025 GMT Subject: CN=68a8fd16-a0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:15:a4:5e:05:07:93:51:1f:b5:c8:51:cc: 01:db:7d:4b:cd:cb:0b:a0:e5:5d:40:01:dd:14:b0: f1:40:04:e4:78:e0:bc:b9:7d:71:ae:f0:5a:e8:12: ce:fb:00:4e:92:e5:f8:0c:be:02:44:11:b1:aa:0d: 89:1a:56:0c:1e:20:bb:05:54:bd:46:55:15:4b:57: 81:9c:25:bb:ce:a8:13:98:9f:87:6d:77:dd:71:e0: 5d:e4:50:8a:d6:22:e1:aa:3c:a5:e7:71:4c:2e:c1: 9e:e3:57:74:23:53:51:d1:7f:ee:34:c0:99:51:84: db:9d:1d:19:09:bb:1b:f0:f6:07:0f:53:a6:6c:0e: b4:30:5e:44:f6:60:11:bb:bf:4b:a7:0b:08:6a:13: 43:ad:a0:da:22:df:e3:50:e3:4f:07:73:73:5b:0c: c3:a9:df:7b:08:eb:b3:23:63:43:c7:2e:85:e9:8a: 21:75:62:60:bf:75:34:32:2b:a8:ff:b2:9c:24:98: 99:cf:f5:da:b2:3f:ee:a6:6f:27:fa:20:0c:75:87: cb:65:8b:ed:80:93:f4:3b:88:82:27:71:ab:da:c8: 45:1b:60:f4:76:ed:ee:92:ee:f6:8c:36:b8:b5:ce: 04:a7:c1:0e:43:81:fc:df:e3:6e:3f:49:1b:ac:fe: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A2:0D:9B:3C:47:EB:7C:0C:22:3B:5C:18:80:8B:1E:56:76:FE:CA X509v3 Authority Key Identifier: keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3a:fa:40:f6:cd:0a:65:a0:da:ce:9e:ee:0a:99:73:04:3c: bf:6f:59:c9:25:fb:f3:0f:79:ad:e1:23:ac:dc:05:7d:0b:94: 0a:e2:36:53:96:34:86:b7:ba:94:b3:5a:a4:ad:79:f4:f2:11: ec:38:fd:1f:13:fc:37:7b:2a:78:ac:85:b6:de:e4:b3:0d:89: c6:a1:20:3a:7c:a2:f1:36:5a:ad:3d:90:3a:0d:5d:66:97:e8: 3d:ec:d8:ee:2c:b2:53:2c:92:2c:17:db:4b:9e:30:56:11:26: 4e:ac:0b:cf:24:10:f5:23:97:5d:41:08:60:fb:2c:db:0a:d9: a9:b6:14:f2:7e:69:70:69:70:63:41:c2:88:cc:f7:61:ad:c1: 91:b5:0c:fa:a0:72:15:5f:cb:a6:d8:a1:a5:36:c4:96:72:71: 81:10:4d:c6:f0:a9:b9:8a:78:71:60:a3:ea:d0:32:f5:5a:da: e6:9a:f3:91:51:7c:a8:bd:06:4c:97:7b:0b:37:a9:85:88:40: b2:7d:05:fa:c5:51:e7:07:a7:1b:e6:2a:a1:1a:79:e9:03:d9: b8:64:62:4e:b7:10:c6:0e:b9:26:52:6e:21:f7:c2:60:54:c9: d3:27:28:7e:13:ad:aa:a3:4d:74:23:e5:45:cb:e5:48:ea:d0: db:f0:ff:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG NzU0NDZEOEIwHhcNMjUwODIyMjMyODIyWhcNMjUwODI5MjMyODIyWjAYMRYwFAYD VQQDEw02OGE4ZmQxNi1hMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XIVpF4FB5NRH7XIUcwB231LzcsLoOVdQAHdFLDxQATkeOC8uX1xrvBa6BLO +wBOkuX4DL4CRBGxqg2JGlYMHiC7BVS9RlUVS1eBnCW7zqgTmJ+HbXfdceBd5FCK 1iLhqjyl53FMLsGe41d0I1NR0X/uNMCZUYTbnR0ZCbsb8PYHD1OmbA60MF5E9mAR u79LpwsIahNDraDaIt/jUONPB3NzWwzDqd97COuzI2NDxy6F6YohdWJgv3U0Miuo /7KcJJiZz/Xasj/upm8n+iAMdYfLZYvtgJP0O4iCJ3Gr2shFG2D0du3uku72jDa4 tc4Ep8EOQ4H83+NuP0kbrP657wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyiDZs8 R+t8DCI7XBiAix5Wdv7KMB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4 amkyZUlrazRLNDMzVkViWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9OvpA9s0KZaDazp7uCplzBDy/b1nJJfvzD3mt4SOs3AV9C5QK4jZT ljSGt7qUs1qkrXn08hHsOP0fE/w3eyp4rIW23uSzDYnGoSA6fKLxNlqtPZA6DV1m l+g97NjuLLJTLJIsF9tLnjBWESZOrAvPJBD1I5ddQQhg+yzbCtmpthTyfmlwaXBj QcKIzPdhrcGRtQz6oHIVX8um2KGlNsSWcnGBEE3G8Km5inhxYKPq0DL1WtrmmvOR UXyovQZMl3sLN6mFiECyfQX6xVHnB6cb5iqhGnnpA9m4ZGJOtxDGDrkmUm4h98Jg VMnTJyh+E62qo010I+VFy+VI6tDb8P8W -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:22 2025 by rpki-client