$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft File: wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json) Hash identifier: /J/fa7Hx2n6tgCOArb3UhtJuRCBd5btw5TVXVTAX9lE= Subject key identifier: BC:6A:B5:63:E2:A2:3C:5E:76:81:73:85:C4:E8:F6:6C:91:80:5C:08 Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Certificate serial: 08DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft Manifest number: 0965 Signing time: Wed 06 Aug 2025 20:48:51 +0000 Manifest this update: Wed 06 Aug 2025 20:48:51 +0000 Manifest next update: Wed 13 Aug 2025 20:48:51 +0000 Files and hashes: 1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: +oNWS2YzG+mU+OwWN2+00q7LC03ubzXsycODcUDbD+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2266 (0x8da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF Validity Not Before: Aug 6 20:48:51 2025 GMT Not After : Aug 13 20:48:51 2025 GMT Subject: CN=6893bfb3-af42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8c:d4:8f:af:74:05:ed:2d:31:19:fd:ad:8e: 84:73:b8:cf:81:2f:4a:08:2a:a6:66:9e:e9:98:f6: 62:23:59:21:bc:36:e0:83:14:ef:68:07:ad:74:94: 9f:1c:17:e7:28:28:30:3c:4c:e1:c8:62:da:be:bc: 14:96:24:a5:3f:e4:45:2b:a6:d0:7d:29:12:12:eb: b2:24:52:0a:e6:04:36:4a:3c:88:e3:a5:60:35:0f: f6:de:30:db:75:a9:ce:2a:b0:01:a0:43:d9:1e:6f: c9:a3:52:96:3e:fc:de:5e:83:d2:01:99:91:87:2f: c0:83:84:a3:f9:d0:ce:fc:4c:fc:6d:1f:c8:75:43: f8:7e:06:68:50:a5:05:4f:68:50:7b:21:dc:6a:4d: 10:b4:fe:60:5f:fa:8b:0f:54:4d:4f:34:ae:00:87: 8f:30:c8:c6:7e:3c:eb:d0:e0:14:05:35:a9:88:04: 69:dd:a9:58:51:89:3b:fa:13:cb:60:0f:c8:91:d7: 43:6b:17:d3:ca:5a:06:92:b7:87:2a:e4:c8:dc:53: 5d:33:74:66:8b:42:c5:05:38:d3:ab:73:15:3b:89: 24:97:2e:c2:ae:ee:fc:b4:7e:e6:4c:5e:a1:a2:56: e7:cd:84:a6:03:fe:5d:a1:5d:8e:3e:cb:c7:66:8b: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6A:B5:63:E2:A2:3C:5E:76:81:73:85:C4:E8:F6:6C:91:80:5C:08 X509v3 Authority Key Identifier: keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f3:5a:62:78:7a:f9:63:d4:5f:a8:18:aa:75:4a:70:db:0e: 8d:dc:93:5b:46:53:24:51:50:c0:52:5e:79:84:f8:e0:ff:5e: 66:b0:62:84:06:f7:46:d7:33:f0:60:35:4a:3e:e6:b9:97:32: 66:dd:45:10:88:4d:e6:d4:30:3f:a2:c2:df:e6:3e:01:e6:8e: 78:34:da:20:95:49:dd:c7:2c:90:05:56:92:46:da:de:4a:34: 70:cb:5d:f1:27:c3:71:57:80:8f:8c:4a:a7:3a:77:d8:e6:12: 30:e4:f6:6a:6d:20:b8:85:0f:05:b0:4f:63:09:c4:d8:bb:b6: 65:29:0c:b6:0b:c7:3c:ce:22:7b:7b:e4:2d:bc:91:c7:45:2b: c6:a2:e6:52:d0:cb:cc:42:07:3e:a5:d9:4d:33:05:6f:b2:54: af:bd:91:0c:fd:f4:b6:14:32:0e:01:0c:e5:55:14:6b:bc:22: 37:3b:eb:a4:57:84:05:ca:a6:2e:c8:1a:a1:d2:8a:6c:c5:6b: c8:22:fa:bf:75:cf:b1:05:cb:5b:0e:08:92:83:6b:62:30:7f: 16:8d:19:fa:a6:ef:64:ec:0b:0f:aa:bb:a6:ac:6b:1b:7b:e4: f2:f2:dc:6e:d9:73:ee:22:92:4f:3e:ba:f8:bc:09:78:81:f1: bb:63:03:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG RjNEOTg4REYwHhcNMjUwODA2MjA0ODUxWhcNMjUwODEzMjA0ODUxWjAYMRYwFAYD VQQDEw02ODkzYmZiMy1hZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ozUj690Be0tMRn9rY6Ec7jPgS9KCCqmZp7pmPZiI1khvDbggxTvaAetdJSf HBfnKCgwPEzhyGLavrwUliSlP+RFK6bQfSkSEuuyJFIK5gQ2SjyI46VgNQ/23jDb danOKrABoEPZHm/Jo1KWPvzeXoPSAZmRhy/Ag4Sj+dDO/Ez8bR/IdUP4fgZoUKUF T2hQeyHcak0QtP5gX/qLD1RNTzSuAIePMMjGfjzr0OAUBTWpiARp3alYUYk7+hPL YA/IkddDaxfTyloGkreHKuTI3FNdM3Rmi0LFBTjTq3MVO4kkly7Cru78tH7mTF6h olbnzYSmA/5doV2OPsvHZovKUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxqtWPi ojxedoFzhcTo9myRgFwIMB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf81pieHr5Y9RfqBiqdUpw2w6N3JNbRlMkUVDAUl55hPjg/15msGKE BvdG1zPwYDVKPua5lzJm3UUQiE3m1DA/osLf5j4B5o54NNoglUndxyyQBVaSRtre SjRwy13xJ8NxV4CPjEqnOnfY5hIw5PZqbSC4hQ8FsE9jCcTYu7ZlKQy2C8c8ziJ7 e+QtvJHHRSvGouZS0MvMQgc+pdlNMwVvslSvvZEM/fS2FDIOAQzlVRRrvCI3O+uk V4QFyqYuyBqh0opsxWvIIvq/dc+xBctbDgiSg2tiMH8WjRn6pu9k7AsPqrumrGsb e+Ty8txu2XPuIpJPPrr4vAl4gfG7YwPu -----END CERTIFICATE-----Generated at Fri Aug 8 00:32:17 2025 by rpki-client