$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: bhB3HgNZcyNLhonaNTwOIyC8mHjRPLtcbcRMAoccN3k= Subject key identifier: F4:C3:C1:68:2E:3A:AA:D3:74:0D:98:31:46:91:54:A4:AD:3D:ED:A1 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 2F Signing time: Sat 09 Aug 2025 08:15:59 +0000 Manifest this update: Sat 09 Aug 2025 08:15:58 +0000 Manifest next update: Sat 16 Aug 2025 08:15:58 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: ajA1tNWDqgsK28NEF3v8Vjlg9sZgJyZt77Wx1A95pLI=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Aug 9 08:15:58 2025 GMT Not After : Aug 16 08:15:58 2025 GMT Subject: CN=689703bf-2be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:25:90:dc:94:68:c3:c0:06:db:52:c2:9b: 11:44:92:b4:35:0d:5c:b3:47:72:20:db:84:8c:ce: a8:18:49:5a:95:ed:51:2d:13:8f:3a:41:23:6e:7b: 4c:af:b3:bb:65:d5:1e:76:c3:d4:3d:5c:1e:a2:a4: 03:1e:8f:a6:89:8a:9e:b6:29:e0:19:0d:9d:56:e3: 49:e7:cc:06:45:a8:ca:3e:3d:fa:47:99:22:66:cd: 94:e1:99:3c:14:f8:a5:dc:af:f2:a3:4f:93:d1:dc: 0b:9f:d0:ce:11:a6:a7:55:c0:53:09:2e:80:07:d7: 73:71:74:8a:4a:fb:7e:0a:e6:8c:a9:f6:9d:2d:41: fe:60:c7:de:7f:f7:13:6b:7d:b8:4b:4e:02:88:eb: d8:ec:35:5f:2d:34:ae:19:bd:98:6c:d4:00:91:97: 41:8c:06:a7:e5:cb:5a:62:1d:de:71:fd:33:9a:30: b5:11:e1:d6:39:41:b6:c1:19:20:84:5b:92:76:34: 55:0d:6d:60:12:78:0f:5f:7b:83:60:35:f5:ff:3d: 90:62:dc:24:53:59:94:0b:c3:64:cc:ab:a2:9d:23: 62:ed:dc:ae:72:fc:bf:22:0d:a0:14:81:0f:f6:17: 80:1c:36:21:3f:6c:4a:df:a8:3e:a3:f3:f3:f2:c3: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:C1:68:2E:3A:AA:D3:74:0D:98:31:46:91:54:A4:AD:3D:ED:A1 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9c:84:dd:24:34:75:cc:b2:89:50:c6:d2:23:67:c8:37:ce: da:e2:8a:7c:4f:5e:69:3c:22:fe:91:dd:c1:ce:01:75:e1:0f: 14:88:c1:20:3f:92:eb:5b:02:f6:f0:60:91:cf:00:f2:5a:dc: a1:23:20:77:dd:0b:57:b5:38:76:93:b6:3e:e9:4c:41:d1:7d: 0a:78:35:d4:c2:1b:6e:5f:14:73:ee:5a:4e:0e:4c:dd:83:5d: a9:35:d2:01:f9:35:1b:65:92:3d:2f:68:b8:c8:b8:09:b9:ab: b7:08:4f:68:47:98:7c:2b:9a:36:0f:52:51:f3:44:25:5e:d6: 98:62:6d:4e:78:dc:dd:a4:bf:86:75:50:65:f0:8e:ca:b4:78: b7:7f:9f:73:53:aa:fd:cb:3c:18:fc:6e:49:c5:d1:14:d4:ab: 5a:e8:ec:0f:1b:fb:15:01:ee:ed:a4:cb:60:60:63:9e:99:a9: 9c:52:6e:eb:58:18:22:ce:3f:d4:a4:2c:27:d0:6c:ab:48:a7: ed:40:4a:ec:c1:b6:d2:14:e6:e9:30:cf:5b:c6:48:6f:8a:7e: 82:8c:b6:9b:4a:30:fa:6f:a0:8c:fe:ad:46:48:52:6a:6d:35: e4:c5:c1:58:bc:c2:9d:01:93:b6:4f:41:57:96:7d:90:a4:e9: 1b:54:df:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTA4MDkwODE1NThaFw0yNTA4MTYwODE1NThaMBgxFjAUBgNV BAMTDTY4OTcwM2JmLTJiZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4fSWQ3JRow8AG21LCmxFEkrQ1DVyzR3Ig24SMzqgYSVqV7VEtE486QSNue0yv s7tl1R52w9Q9XB6ipAMej6aJip62KeAZDZ1W40nnzAZFqMo+PfpHmSJmzZThmTwU +KXcr/KjT5PR3Auf0M4RpqdVwFMJLoAH13NxdIpK+34K5oyp9p0tQf5gx95/9xNr fbhLTgKI69jsNV8tNK4ZvZhs1ACRl0GMBqfly1piHd5x/TOaMLUR4dY5QbbBGSCE W5J2NFUNbWASeA9fe4NgNfX/PZBi3CRTWZQLw2TMq6KdI2Lt3K5y/L8iDaAUgQ/2 F4AcNiE/bErfqD6j8/PywxujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9MPBaC46 qtN0DZgxRpFUpK097aEwHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHechN0kNHXMsolQxtIjZ8g3ztriinxPXmk8Iv6R3cHOAXXhDxSIwSA/ kutbAvbwYJHPAPJa3KEjIHfdC1e1OHaTtj7pTEHRfQp4NdTCG25fFHPuWk4OTN2D Xak10gH5NRtlkj0vaLjIuAm5q7cIT2hHmHwrmjYPUlHzRCVe1phibU543N2kv4Z1 UGXwjsq0eLd/n3NTqv3LPBj8bknF0RTUq1ro7A8b+xUB7u2ky2BgY56ZqZxSbutY GCLOP9SkLCfQbKtIp+1ASuzBttIU5ukwz1vGSG+KfoKMtptKMPpvoIz+rUZIUmpt NeTFwVi8wp0Bk7ZPQVeWfZCk6RtU3yM= -----END CERTIFICATE-----Generated at Sat Aug 9 14:27:36 2025 by rpki-client