$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: 6EZXuol+NuyH7DvdwfM2tak9A4tikqXF4MRsuKIZo9I= Subject key identifier: BA:FB:DE:BA:4F:4C:D2:9C:A4:55:47:83:8B:31:27:42:8C:05:BC:EF Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: 010B Signing time: Mon 11 Aug 2025 05:07:53 +0000 Manifest this update: Mon 11 Aug 2025 05:07:52 +0000 Manifest next update: Mon 18 Aug 2025 05:07:52 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: DpTmVlXtr4h/PiO4/xHJpLjfMYkvU1gLeiMebLZ6jQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: Aug 11 05:07:52 2025 GMT Not After : Aug 18 05:07:52 2025 GMT Subject: CN=68997aa8-7840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:9d:fd:01:b0:89:40:8c:27:7b:45:97:a9: d9:eb:c3:5c:d4:cc:e7:55:31:d7:e6:d9:49:ec:4f: ea:61:39:13:72:af:7b:f6:bf:54:ce:75:31:62:9a: 0d:b1:66:60:54:92:fb:05:e0:1f:6e:9b:10:c2:d1: 7f:7f:6a:3c:99:68:07:30:e5:22:3d:34:a4:e2:ab: 3e:f0:cf:77:a4:23:ba:68:fc:a7:02:ec:17:8f:53: 43:2f:ef:cc:6d:b2:46:01:10:e4:21:49:c0:2e:90: 64:60:b0:18:ed:3f:5a:4e:51:11:00:1f:4a:0b:90: 08:48:63:a2:28:29:c3:0e:7d:80:2f:50:29:ea:e8: ab:f2:b7:5a:6b:95:06:e8:f7:31:02:65:21:6d:f4: 9e:91:1d:6b:c4:87:ab:ac:24:98:40:fc:fd:ca:d1: d5:31:50:34:f1:d8:d6:7a:bc:a3:2c:fc:67:9e:70: 28:93:ef:f0:29:c0:5c:7c:8a:d4:3d:df:fb:2e:7e: 4a:3b:25:df:95:af:4d:d4:81:4b:c1:c9:cc:d2:f4: 26:6b:ad:77:e2:6e:41:c6:05:e8:97:6b:2a:be:4a: c3:8e:62:e7:3c:bd:68:d6:9a:c7:a2:a8:53:f3:7e: dc:06:b4:87:5b:2b:e8:a0:96:11:99:2a:cf:ea:8f: d0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:DE:BA:4F:4C:D2:9C:A4:55:47:83:8B:31:27:42:8C:05:BC:EF X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:8e:13:96:2e:e8:3b:50:be:6d:43:4d:f7:28:65:64:a7:45: 44:b4:d6:26:de:b3:27:c5:00:dd:d1:51:7b:7f:e6:23:3e:b5: 72:f3:7f:5d:80:b1:28:a8:2e:1a:e7:1f:26:79:e3:9a:7a:36: 82:52:c2:6e:c5:81:b5:85:08:66:c6:db:f0:87:0f:97:ca:1d: 26:6e:b5:98:80:5f:81:d8:3b:9c:5d:7b:09:29:fa:e2:c3:28: 0c:97:b0:57:cd:6e:00:91:d9:c9:d4:fa:56:8c:08:6d:7c:1b: d0:67:11:96:99:1d:64:8e:89:d2:76:86:95:09:a0:f5:34:b4: 29:05:96:f4:09:30:70:34:2f:ec:c8:27:71:69:dc:b4:dc:ff: 4c:ec:0d:d6:87:a6:20:9d:2c:14:a9:4b:ac:32:78:78:11:49: 37:db:a3:85:57:7d:99:f9:e6:f4:c5:1f:b4:fd:e3:15:77:fd: 87:de:00:08:97:96:99:b5:ba:84:53:71:55:31:02:ca:70:fc: ba:19:58:74:a4:ea:d5:6f:8a:c1:90:3c:4d:34:7b:3a:2a:77: 8b:78:cf:9f:d2:84:08:e2:d1:e5:79:db:27:48:e7:1d:bb:6b: e3:8a:60:d1:84:1c:68:79:a6:55:d1:27:74:01:57:ad:03:80: 1a:c8:a8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjUwODExMDUwNzUyWhcNMjUwODE4MDUwNzUyWjAYMRYwFAYD VQQDEw02ODk5N2FhOC03ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08Sd/QGwiUCMJ3tFl6nZ68Nc1MznVTHX5tlJ7E/qYTkTcq979r9UznUxYpoN sWZgVJL7BeAfbpsQwtF/f2o8mWgHMOUiPTSk4qs+8M93pCO6aPynAuwXj1NDL+/M bbJGARDkIUnALpBkYLAY7T9aTlERAB9KC5AISGOiKCnDDn2AL1Ap6uir8rdaa5UG 6PcxAmUhbfSekR1rxIerrCSYQPz9ytHVMVA08djWeryjLPxnnnAok+/wKcBcfIrU Pd/7Ln5KOyXfla9N1IFLwcnM0vQma6134m5BxgXol2sqvkrDjmLnPL1o1prHoqhT 837cBrSHWyvooJYRmSrP6o/Q5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr73rpP TNKcpFVHg4sxJ0KMBbzvMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCojhOWLug7UL5tQ033KGVkp0VEtNYm3rMnxQDd0VF7f+YjPrVy839d gLEoqC4a5x8meeOaejaCUsJuxYG1hQhmxtvwhw+Xyh0mbrWYgF+B2DucXXsJKfri wygMl7BXzW4AkdnJ1PpWjAhtfBvQZxGWmR1kjonSdoaVCaD1NLQpBZb0CTBwNC/s yCdxady03P9M7A3Wh6YgnSwUqUusMnh4EUk326OFV32Z+eb0xR+0/eMVd/2H3gAI l5aZtbqEU3FVMQLKcPy6GVh0pOrVb4rBkDxNNHs6KneLeM+f0oQI4tHledsnSOcd u2vjimDRhBxoeaZV0Sd0AVetA4AayKgs -----END CERTIFICATE-----Generated at Mon Aug 11 10:35:04 2025 by rpki-client