$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: BWg3ppGc6G8IYA8hGfoUuMTofKuqp2L8JHoc8tXNXuE= Subject key identifier: 8D:43:E4:29:A4:3B:A6:C5:B8:8D:04:92:69:25:97:91:64:B2:4B:8D Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 0136 Signing time: Tue 05 Aug 2025 04:57:15 +0000 Manifest this update: Tue 05 Aug 2025 04:57:14 +0000 Manifest next update: Tue 12 Aug 2025 04:57:14 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: w+YqGj1UcnmacZmg+4kQtVMcvMy63o2fWu07OjqEBF0=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Aug 5 04:57:14 2025 GMT Not After : Aug 12 04:57:14 2025 GMT Subject: CN=68918f2a-bd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:d3:87:c6:81:a8:bd:73:5f:f2:45:31:7e: 1f:60:06:e7:1e:17:43:13:f0:c3:94:f6:70:75:9c: 17:26:c3:4d:0a:05:3a:b1:5b:07:7c:73:ab:4a:b5: 6c:fc:96:6d:ce:56:0e:93:e9:1b:bd:65:92:ea:19: 23:b4:e2:22:f1:2e:a7:cf:3a:8b:2c:20:63:37:fc: 98:2f:2b:09:e8:96:a3:3b:db:1a:b5:91:0e:12:94: 09:be:4f:cd:c5:b7:82:fc:1d:dd:de:59:6d:67:d8: 92:f0:b2:d0:31:ad:0b:85:07:1b:c4:3a:9a:47:52: fc:b5:92:e5:f7:9a:a3:2e:68:f9:fe:95:28:73:c7: 29:65:70:bb:0c:0c:0f:30:ec:eb:cf:23:88:16:ac: ad:67:1b:91:1d:78:b1:6c:00:23:6d:e4:15:73:05: d8:bf:df:61:61:1c:d5:b2:3a:2f:0d:7b:20:4d:17: 1c:c2:85:6a:26:7b:cf:d2:03:74:24:11:22:aa:95: 7c:54:84:87:dc:7c:5b:93:f3:5a:e9:ac:f7:2d:71: 87:ad:c2:f1:a8:e7:09:d3:bc:b9:d0:ea:79:e5:d3: de:0d:23:e6:62:9d:76:f0:a5:fa:5a:7f:0d:2f:6b: 5b:f5:4f:c6:28:95:1f:91:7e:55:dd:79:47:8f:5e: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:E4:29:A4:3B:A6:C5:B8:8D:04:92:69:25:97:91:64:B2:4B:8D X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a3:b4:3b:70:82:77:a3:0b:9e:90:99:e3:f7:25:0f:c4:ff: c9:0a:20:92:73:b2:c8:46:0c:75:38:9a:c2:7d:04:04:60:4e: 0a:78:12:fb:c6:3f:3e:7e:50:c0:7e:88:66:66:dc:50:e8:24: 69:9b:2c:03:95:ea:02:33:67:22:4c:69:f3:00:f8:fa:f6:26: c0:2d:84:af:d0:87:2c:b2:00:68:51:b7:f7:be:63:ef:e8:81: 0d:b6:44:b4:32:63:c5:97:ba:6e:5b:5e:98:ab:ef:21:60:67: e3:67:18:84:97:6a:33:6e:bc:ba:2b:53:7f:de:22:f3:3c:3e: d7:9c:fd:df:1f:bb:5f:a4:fa:e5:bd:e3:a9:c9:a9:a5:65:a2: 9a:9d:4c:4a:f9:55:4c:4c:22:e1:e7:69:f5:f0:7b:9d:14:2f: 76:2a:6b:b7:6a:2e:11:f1:78:9e:40:ba:25:9b:6d:75:04:ac: 59:6e:44:35:03:8b:d2:0d:07:08:1f:de:fa:ce:e0:ad:a9:86: 5a:c8:ea:df:81:37:0a:b2:d8:9b:0c:30:00:92:f3:40:d6:f6: 72:15:98:14:72:9b:02:70:c3:e2:a8:96:cb:03:bb:87:70:a9: bb:c5:8e:27:08:bf:ec:97:37:04:88:05:b0:06:5c:c3:63:d1: d0:11:47:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwODA1MDQ1NzE0WhcNMjUwODEyMDQ1NzE0WjAYMRYwFAYD VQQDEw02ODkxOGYyYS1iZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnzTh8aBqL1zX/JFMX4fYAbnHhdDE/DDlPZwdZwXJsNNCgU6sVsHfHOrSrVs /JZtzlYOk+kbvWWS6hkjtOIi8S6nzzqLLCBjN/yYLysJ6JajO9satZEOEpQJvk/N xbeC/B3d3lltZ9iS8LLQMa0LhQcbxDqaR1L8tZLl95qjLmj5/pUoc8cpZXC7DAwP MOzrzyOIFqytZxuRHXixbAAjbeQVcwXYv99hYRzVsjovDXsgTRccwoVqJnvP0gN0 JBEiqpV8VISH3Hxbk/Na6az3LXGHrcLxqOcJ07y50Op55dPeDSPmYp128KX6Wn8N L2tb9U/GKJUfkX5V3XlHj15JnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1D5Cmk O6bFuI0Ekmkll5FkskuNMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRo7Q7cIJ3owuekJnj9yUPxP/JCiCSc7LIRgx1OJrCfQQEYE4KeBL7 xj8+flDAfohmZtxQ6CRpmywDleoCM2ciTGnzAPj69ibALYSv0IcssgBoUbf3vmPv 6IENtkS0MmPFl7puW16Yq+8hYGfjZxiEl2ozbry6K1N/3iLzPD7XnP3fH7tfpPrl veOpyamlZaKanUxK+VVMTCLh52n18HudFC92Kmu3ai4R8XieQLolm211BKxZbkQ1 A4vSDQcIH976zuCtqYZayOrfgTcKstibDDAAkvNA1vZyFZgUcpsCcMPiqJbLA7uH cKm7xY4nCL/slzcEiAWwBlzDY9HQEUeM -----END CERTIFICATE-----Generated at Wed Aug 6 16:16:48 2025 by rpki-client