$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: a488TNsPuXMQDnHBDs5nkVUgf0d/kjrFzVWLA8h93yw= Subject key identifier: FB:C6:34:85:E7:1A:FC:49:2A:F3:37:08:0C:41:AF:81:33:A3:DE:07 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 34A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 34A6 Signing time: Mon 04 Aug 2025 14:55:24 +0000 Manifest this update: Mon 04 Aug 2025 14:55:23 +0000 Manifest next update: Mon 11 Aug 2025 14:55:23 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: W8UaOVFEADGD+gG6U7a+kboGER3i/zY26wAr7qxkEIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13478 (0x34a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Aug 4 14:55:23 2025 GMT Not After : Aug 11 14:55:23 2025 GMT Subject: CN=6890c9dc-3558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:d9:da:50:a0:69:cf:f8:35:61:86:c8:12: e9:0c:3a:f3:bd:bd:fe:33:78:6c:0d:cc:04:5c:3e: d2:e1:1a:60:ce:04:67:ea:52:42:6a:0d:53:13:10: 90:96:06:76:dd:9e:aa:96:8f:0f:ee:4e:eb:6d:c3: 42:a6:9d:6a:49:87:2f:27:b6:b6:15:76:95:bf:5c: 13:92:79:3b:a2:25:3a:bf:f1:7e:cc:79:3f:c0:bc: cd:72:22:c2:a2:06:86:fa:fd:c4:ff:0a:f8:20:2b: 62:67:bd:3a:b6:86:87:c4:50:53:0e:56:cd:fe:8e: 85:97:68:3c:3c:ef:23:7e:55:cb:73:03:5a:d5:b7: cf:8a:a3:07:82:39:76:c4:f5:bf:18:35:1b:03:0e: a7:de:b8:86:4a:92:4e:0f:45:90:cd:d3:d8:df:26: 51:79:42:73:37:3f:5c:82:21:70:ca:f7:04:41:5a: cc:5e:64:98:36:5e:a9:7f:66:3c:56:b8:0a:fb:88: 6b:14:49:43:f4:0b:e0:be:39:21:d4:d8:20:e4:eb: a0:f8:3d:e3:9c:80:ac:9c:e0:c1:fb:d6:f9:12:e5: dc:50:20:c2:a2:31:09:cc:67:19:d5:50:7e:70:75: 53:e6:44:0b:ed:04:5d:ad:1b:67:d4:43:4f:1f:b4: 15:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C6:34:85:E7:1A:FC:49:2A:F3:37:08:0C:41:AF:81:33:A3:DE:07 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5a:fd:03:39:4d:a7:13:07:7f:fa:05:e1:21:99:8e:e8:18: d5:dd:b8:62:47:5e:a6:7e:94:56:e1:eb:74:fa:3f:e9:91:ca: b2:f3:07:c5:eb:4b:32:de:d6:c5:32:b2:96:25:d4:09:ec:8f: 4c:dd:a4:1a:79:38:ff:b5:7b:a5:1c:9b:5e:c7:66:99:93:51: b3:3e:4d:fd:ea:08:3d:f8:88:8a:86:94:9b:47:b2:d3:e0:f1: ad:b9:a4:53:6b:68:7a:89:f8:cd:d7:0e:f7:5c:a6:d1:fd:9d: 00:9b:9c:3c:d7:90:bf:0f:65:97:97:23:87:6a:c2:06:b4:57: 0a:56:08:91:26:d8:4a:43:20:69:ff:67:68:54:ac:d8:b7:cd: cb:91:ed:d1:a3:7e:10:af:e4:15:28:14:77:9b:e2:20:42:17: d2:9d:cd:d8:7e:fc:51:07:31:4c:bb:15:5d:4e:45:ab:33:9f: b9:7b:6d:ec:c9:fb:de:d3:d8:30:f0:56:d0:4a:7d:5e:aa:b0: 59:05:fd:94:c4:53:9f:f0:59:28:92:d3:95:29:7d:bd:95:cc: 33:b7:34:c3:75:48:ed:4e:9a:78:e9:97:ae:e6:6b:dc:71:d8: 34:c2:34:ac:3e:5b:f4:65:e8:63:0a:8e:98:16:39:60:46:32: da:84:16:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUwODA0MTQ1NTIzWhcNMjUwODExMTQ1NTIzWjAYMRYwFAYD VQQDEw02ODkwYzlkYy0zNTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRjZ2lCgac/4NWGGyBLpDDrzvb3+M3hsDcwEXD7S4RpgzgRn6lJCag1TExCQ lgZ23Z6qlo8P7k7rbcNCpp1qSYcvJ7a2FXaVv1wTknk7oiU6v/F+zHk/wLzNciLC ogaG+v3E/wr4ICtiZ706toaHxFBTDlbN/o6Fl2g8PO8jflXLcwNa1bfPiqMHgjl2 xPW/GDUbAw6n3riGSpJOD0WQzdPY3yZReUJzNz9cgiFwyvcEQVrMXmSYNl6pf2Y8 VrgK+4hrFElD9Avgvjkh1Ngg5Oug+D3jnICsnODB+9b5EuXcUCDCojEJzGcZ1VB+ cHVT5kQL7QRdrRtn1ENPH7QV/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvGNIXn GvxJKvM3CAxBr4Ezo94HMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWv0DOU2nEwd/+gXhIZmO6BjV3bhiR16mfpRW4et0+j/pkcqy8wfF 60sy3tbFMrKWJdQJ7I9M3aQaeTj/tXulHJtex2aZk1GzPk396gg9+IiKhpSbR7LT 4PGtuaRTa2h6ifjN1w73XKbR/Z0Am5w815C/D2WXlyOHasIGtFcKVgiRJthKQyBp /2doVKzYt83Lke3Ro34Qr+QVKBR3m+IgQhfSnc3YfvxRBzFMuxVdTkWrM5+5e23s yfve09gw8FbQSn1eqrBZBf2UxFOf8FkoktOVKX29lcwztzTDdUjtTpp46Zeu5mvc cdg0wjSsPlv0ZehjCo6YFjlgRjLahBai -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:14 2025 by rpki-client