$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: 9hudlnLXQmd6SRhsPclATFE0KHUsgYsRhfKogWp4T+8= Subject key identifier: B2:D6:C7:8F:C7:12:FE:EA:D4:E3:FB:DC:8D:C1:71:CA:27:4F:0C:57 Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 8B Signing time: Mon 11 Aug 2025 06:49:17 +0000 Manifest this update: Mon 11 Aug 2025 06:49:16 +0000 Manifest next update: Mon 18 Aug 2025 06:49:16 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: TW1rqED9CFrFQ1+MXbIXn0AQOt4TqmXuYAEXNFDBZVE=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Validity Not Before: Aug 11 06:49:16 2025 GMT Not After : Aug 18 06:49:16 2025 GMT Subject: CN=6899926d-260e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:c6:fe:56:92:7f:0f:46:88:48:72:2c:65: e3:b0:32:1e:f8:e2:a1:86:8d:46:2a:36:73:44:31: dd:ef:7a:3c:d0:32:be:e9:b7:9c:13:90:04:0b:38: f1:53:ea:47:7b:23:6c:31:74:d3:27:2b:a6:fe:51: 6e:a1:bb:c3:bb:b3:db:3a:f7:e7:6e:83:ba:b1:88: 5c:ab:18:92:78:1e:24:0e:60:fb:3a:48:a3:cb:57: f8:2f:54:87:a0:b5:63:80:74:6d:0b:27:39:ff:8f: d8:5d:4f:61:44:7c:af:ec:49:d1:ee:d4:f2:81:ec: 8a:3e:ac:72:63:1e:e2:39:57:42:87:54:e8:ab:a6: c1:f6:18:31:0f:f0:db:f2:4f:1b:d7:2f:87:a3:f5: ac:f5:4f:8a:35:7c:8f:a4:c7:92:b2:0d:51:b2:ef: e9:2c:22:15:d9:05:e7:19:9f:9a:00:d6:f8:41:0a: 12:21:28:fe:96:89:22:a8:a4:d0:f9:5e:e7:c0:76: 79:67:47:84:bb:7a:52:4b:79:0b:67:b0:a1:da:ec: 45:2c:8f:48:72:26:97:4a:04:c5:f0:d7:19:4b:58: ce:91:c8:09:45:c4:f9:30:b7:bd:5d:11:98:63:b7: 9e:d8:5e:d5:e3:84:9a:17:e2:f3:61:c8:dd:4f:8e: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D6:C7:8F:C7:12:FE:EA:D4:E3:FB:DC:8D:C1:71:CA:27:4F:0C:57 X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ce:9a:14:d3:cd:3e:4f:2e:1a:d0:a5:16:3e:04:2f:a8:4e: 13:6f:f0:e2:82:6d:b3:4b:cf:5c:f1:ea:aa:c8:dd:92:79:e8: db:01:41:05:f5:88:3d:d8:e6:68:7b:41:11:8e:13:ff:ea:83: af:1d:9f:8b:1e:06:b7:fd:50:f5:23:d5:38:be:64:d6:78:f7: 05:f9:52:46:f2:39:02:f6:fd:bb:89:43:39:d4:a5:af:31:e3: 78:fc:40:7b:86:0c:91:e1:28:ff:4d:ac:54:94:cd:e0:20:96: fc:85:f0:1c:6f:ae:9a:01:75:50:cc:ac:8b:93:f0:3d:a6:7a: 11:ba:93:b6:a3:e4:05:13:db:08:bb:f6:d9:eb:cc:fe:62:28: 4d:42:92:04:9c:fd:af:c4:3b:3e:09:b9:1e:ef:0b:0e:d7:86: 01:be:49:b7:29:16:76:78:13:57:84:e1:fa:42:a9:9e:bd:5f: df:d0:d8:9c:26:b0:9d:8b:23:e8:77:3b:3d:6f:10:c5:e5:d2: 81:4c:26:23:4d:07:01:4e:35:3b:51:86:b7:1a:2e:ff:31:4c: 5b:2f:73:66:a8:59:3b:de:dd:e4:8c:fe:68:ce:fb:1b:79:4a: 1c:04:ee:f5:a3:fa:f3:02:93:ce:d7:0b:a4:11:92:84:58:17: 28:75:38:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0RkQxMTAvBgNVBAUTKDU5OTBGNEMzQkIyMzQzNkM5NTEwMEI0ODQ4REM5MTg2 QUE0OTUzMTkwHhcNMjUwODExMDY0OTE2WhcNMjUwODE4MDY0OTE2WjAYMRYwFAYD VQQDEw02ODk5OTI2ZC0yNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw93G/laSfw9GiEhyLGXjsDIe+OKhho1GKjZzRDHd73o80DK+6becE5AECzjx U+pHeyNsMXTTJyum/lFuobvDu7PbOvfnboO6sYhcqxiSeB4kDmD7Okijy1f4L1SH oLVjgHRtCyc5/4/YXU9hRHyv7EnR7tTygeyKPqxyYx7iOVdCh1Toq6bB9hgxD/Db 8k8b1y+Ho/Ws9U+KNXyPpMeSsg1Rsu/pLCIV2QXnGZ+aANb4QQoSISj+lokiqKTQ +V7nwHZ5Z0eEu3pSS3kLZ7Ch2uxFLI9IciaXSgTF8NcZS1jOkcgJRcT5MLe9XRGY Y7ee2F7V44SaF+LzYcjdT46GfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLWx4/H Ev7q1OP73I3BcconTwxXMB8GA1UdIwQYMBaAFFmQ9MO7I0NslRALSEjckYaqSVMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzRGRC9BNTdDQUJFQ0E1 NTQxMUVGOEE5NzUyNDdDNEY5QUUwMi9XWkQwdzdzalEyeVZFQXRJU055UmhxcEpV eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzRGRC9BNTdDQUJFQ0E1NTQxMUVGOEE5NzUyNDdDNEY5QUUwMi9XWkQwdzdzalEy eVZFQXRJU055UmhxcEpVeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWzpoU080+Ty4a0KUWPgQvqE4Tb/Digm2zS89c8eqqyN2SeejbAUEF 9Yg92OZoe0ERjhP/6oOvHZ+LHga3/VD1I9U4vmTWePcF+VJG8jkC9v27iUM51KWv MeN4/EB7hgyR4Sj/TaxUlM3gIJb8hfAcb66aAXVQzKyLk/A9pnoRupO2o+QFE9sI u/bZ68z+YihNQpIEnP2vxDs+Cbke7wsO14YBvkm3KRZ2eBNXhOH6QqmevV/f0Nic JrCdiyPodzs9bxDF5dKBTCYjTQcBTjU7UYa3Gi7/MUxbL3NmqFk73t3kjP5ozvsb eUocBO71o/rzApPO1wukEZKEWBcodTio -----END CERTIFICATE-----Generated at Mon Aug 11 08:51:53 2025 by rpki-client