$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: ifUNdew/xlB4+fzrZLXadQOzpHoJln8lT3uEOQ6otl8= Subject key identifier: D8:4E:FC:77:BE:8F:24:48:0B:13:62:6D:CF:44:B6:E8:52:DE:48:65 Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 057E Signing time: Sun 10 Aug 2025 23:22:15 +0000 Manifest this update: Sun 10 Aug 2025 23:22:14 +0000 Manifest next update: Sun 17 Aug 2025 23:22:14 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: HYcUYAIC+yihOScWxmeenImWHWroH0FJD66/NqAvLgU=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Aug 10 23:22:14 2025 GMT Not After : Aug 17 23:22:14 2025 GMT Subject: CN=689929a7-10a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:55:39:e3:45:b9:d7:4f:42:bf:fa:fb:b1: f7:01:2e:cc:44:31:80:e6:97:6a:d2:d4:7c:e6:bf: c1:9a:7d:95:f1:5e:f1:c7:54:38:40:e1:75:23:5b: 93:3e:ae:c7:19:86:e4:96:4c:40:91:9d:b0:f9:cf: 93:62:c0:9d:a6:29:73:da:a9:77:58:ed:45:5e:94: 3a:e8:85:72:64:67:56:0f:bd:03:05:49:53:a1:4a: 1f:f4:d1:84:f4:41:97:04:34:21:45:ec:54:3a:21: fd:64:cd:2e:e4:49:0d:15:f7:dc:f7:31:dc:50:f5: e4:3f:a2:e7:10:ca:9b:a3:e4:97:78:7c:85:37:a3: a2:bf:3d:c3:8c:99:15:5d:cb:24:07:62:b6:f7:25: 6c:45:b3:00:e3:e0:b9:6f:b7:f9:2e:fa:28:ec:94: 59:96:a9:43:1e:d5:ff:8a:7b:71:25:09:94:a2:c6: ba:21:f4:26:06:2f:4c:c3:93:de:f9:2c:3d:1b:06: 25:71:26:63:69:8b:32:3d:23:7f:28:59:e4:5e:f1: 9d:13:bb:69:88:3c:e6:12:09:46:7d:61:ee:0d:4a: 4a:0a:54:77:3e:62:3b:85:0b:2a:02:56:d6:af:af: 63:69:5b:d2:08:ac:aa:7c:60:42:b2:60:7d:d1:2e: 7b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:FC:77:BE:8F:24:48:0B:13:62:6D:CF:44:B6:E8:52:DE:48:65 X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0b:21:6e:5d:c1:25:f3:e0:de:c4:47:24:94:83:46:63:9d: 8b:3f:26:11:59:8f:f1:6f:0c:25:07:86:b7:e7:40:d7:c9:5b: 5c:87:21:89:29:95:f3:66:c3:0a:99:67:63:07:7a:64:74:45: 71:be:4e:1f:8f:82:35:bf:05:fc:15:7c:44:70:af:02:be:9c: e7:fb:0a:92:32:c1:8b:56:59:63:55:a2:b8:a7:6b:87:0f:40: fb:c2:7f:51:43:d8:75:77:8b:92:79:0b:58:53:e7:05:7e:21: 77:32:43:d9:05:01:d2:7b:c9:d6:a8:cd:b0:f2:de:8c:a9:11: 13:49:e5:e3:b2:bc:81:56:5f:4e:44:90:52:b5:6d:61:4f:06: f2:22:0f:2d:12:7b:18:51:14:31:a7:af:a3:e8:07:b9:46:bc: a5:8f:0f:f7:39:50:28:a3:3e:71:39:38:5d:8a:95:25:b5:db: c8:73:31:ef:64:7c:ef:06:41:b3:1f:69:83:b2:98:fa:44:8e: e6:71:de:57:91:6a:14:d0:29:7f:da:b9:67:fa:19:a2:ed:e8: fa:ed:2e:04:86:8c:fe:63:a5:cc:1c:eb:30:fc:84:32:54:a4: 4f:d3:31:bf:38:25:db:5c:ac:c7:a6:fa:f0:ae:4d:a0:df:a6: 83:a8:d9:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjUwODEwMjMyMjE0WhcNMjUwODE3MjMyMjE0WjAYMRYwFAYD VQQDEw02ODk5MjlhNy0xMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq9VOeNFuddPQr/6+7H3AS7MRDGA5pdq0tR85r/Bmn2V8V7xx1Q4QOF1I1uT Pq7HGYbklkxAkZ2w+c+TYsCdpilz2ql3WO1FXpQ66IVyZGdWD70DBUlToUof9NGE 9EGXBDQhRexUOiH9ZM0u5EkNFffc9zHcUPXkP6LnEMqbo+SXeHyFN6Oivz3DjJkV XcskB2K29yVsRbMA4+C5b7f5Lvoo7JRZlqlDHtX/intxJQmUosa6IfQmBi9Mw5Pe +Sw9GwYlcSZjaYsyPSN/KFnkXvGdE7tpiDzmEglGfWHuDUpKClR3PmI7hQsqAlbW r69jaVvSCKyqfGBCsmB90S57RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhO/He+ jyRICxNibc9EtuhS3khlMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHCyFuXcEl8+DexEcklINGY52LPyYRWY/xbwwlB4a350DXyVtchyGJ KZXzZsMKmWdjB3pkdEVxvk4fj4I1vwX8FXxEcK8Cvpzn+wqSMsGLVlljVaK4p2uH D0D7wn9RQ9h1d4uSeQtYU+cFfiF3MkPZBQHSe8nWqM2w8t6MqRETSeXjsryBVl9O RJBStW1hTwbyIg8tEnsYURQxp6+j6Ae5Rryljw/3OVAooz5xOThdipUltdvIczHv ZHzvBkGzH2mDspj6RI7mcd5XkWoU0Cl/2rln+hmi7ej67S4Ehoz+Y6XMHOsw/IQy VKRP0zG/OCXbXKzHpvrwrk2g36aDqNm9 -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:43 2025 by rpki-client