$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: 6sdb+asjNrL3RBpkPr4WeEDh1IWghu+XLVA0CJX3oao= Subject key identifier: 73:69:F9:ED:C1:D5:E1:76:5C:B2:7B:01:D4:9A:30:F1:D9:38:27:67 Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: DC Signing time: Sat 09 Aug 2025 05:54:47 +0000 Manifest this update: Sat 09 Aug 2025 05:54:46 +0000 Manifest next update: Sat 16 Aug 2025 05:54:46 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: 4Qe8WZzLYouAG9yE3cKpHhRSW1voxg/cNuR9zSeTLS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Aug 9 05:54:46 2025 GMT Not After : Aug 16 05:54:46 2025 GMT Subject: CN=6896e2a6-e4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:c9:d7:dd:4f:43:f6:fd:8b:36:84:93:2a: 6d:1d:90:b1:4d:20:71:05:48:ec:75:7d:e6:09:85: 66:57:20:7e:d5:1c:48:94:2e:e0:f5:9b:56:9e:2d: 1e:3f:2c:f2:68:8d:46:c5:ef:5c:17:ac:55:b2:c4: 3b:54:12:b0:0e:04:d7:b5:73:52:df:8e:f3:81:c9: 8a:8b:15:a0:1e:9e:cd:28:f3:f3:f9:e6:2d:c6:81: e6:04:28:e3:fe:46:63:76:49:d4:30:d6:0d:ac:d5: 97:59:fa:f7:35:82:63:7d:23:2a:6f:95:22:12:ae: c5:20:03:4c:fb:fc:1d:c6:22:f1:38:02:a3:0f:77: fa:a5:5f:58:7a:d5:a2:7d:45:28:6d:b4:f3:dc:b8: cf:df:27:64:2d:c4:b9:93:dd:59:c7:d7:94:d0:e7: ef:e5:87:53:40:2b:28:61:bc:07:b9:66:60:54:72: 8f:c8:cd:49:93:16:5b:ff:23:17:7c:08:94:0c:ae: 03:71:63:9d:cd:06:14:10:dc:db:a9:3b:a0:1f:65: 69:40:44:02:53:49:6b:24:8a:1f:46:f6:c1:1e:ca: fe:20:26:66:dc:0a:be:21:32:70:cd:58:ec:62:a8: 42:c1:ba:2c:1d:ea:7c:b5:9d:c4:5b:bd:6c:b6:bc: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:69:F9:ED:C1:D5:E1:76:5C:B2:7B:01:D4:9A:30:F1:D9:38:27:67 X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:20:12:e4:26:f3:38:d2:89:99:6b:c8:de:e9:90:1c:1b:8f: 89:f6:e5:ee:39:64:dd:78:6f:ce:2c:8d:b8:a3:2a:ea:93:fd: 01:36:b5:7e:45:d5:8e:df:ed:b1:6a:ea:58:a9:0f:bc:a0:4a: d3:44:d2:de:d4:f4:7a:dd:da:2a:a6:4d:05:0a:d2:24:7c:08: bb:2d:a5:b9:e8:2b:2c:08:7b:bb:19:02:bb:cb:a7:20:97:b0: 68:a5:11:9d:ed:b8:ab:e6:d8:30:d1:93:9c:ac:a6:8d:cc:36: 77:0b:b7:3c:59:9d:ea:5d:52:02:c8:75:dd:49:29:1e:bf:4a: f2:4a:34:22:cf:cb:eb:81:0b:55:cb:3d:66:2b:f2:fb:a6:91: e7:e5:29:b2:c2:18:10:56:54:16:52:8e:cd:dd:c5:6b:f4:dc: 1d:15:21:fc:5a:55:3c:c3:84:44:fe:e1:47:78:ab:ff:6d:67: d1:00:22:76:c5:f8:56:73:7e:04:e9:61:ad:6a:4c:0f:37:38: e2:c1:e2:e2:36:3b:70:d3:e2:09:a1:4f:c0:40:4e:5d:62:64: 3f:f2:59:d2:34:9d:c9:27:1f:92:c5:14:8d:a0:f9:91:bf:5a: 86:75:ff:df:ca:39:8c:d2:0d:ad:55:2e:55:88:1a:2e:0e:0a: 45:c2:88:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUwODA5MDU1NDQ2WhcNMjUwODE2MDU1NDQ2WjAYMRYwFAYD VQQDEw02ODk2ZTJhNi1lNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8jJ191PQ/b9izaEkyptHZCxTSBxBUjsdX3mCYVmVyB+1RxIlC7g9ZtWni0e PyzyaI1Gxe9cF6xVssQ7VBKwDgTXtXNS347zgcmKixWgHp7NKPPz+eYtxoHmBCjj /kZjdknUMNYNrNWXWfr3NYJjfSMqb5UiEq7FIANM+/wdxiLxOAKjD3f6pV9YetWi fUUobbTz3LjP3ydkLcS5k91Zx9eU0Ofv5YdTQCsoYbwHuWZgVHKPyM1JkxZb/yMX fAiUDK4DcWOdzQYUENzbqTugH2VpQEQCU0lrJIofRvbBHsr+ICZm3Aq+ITJwzVjs YqhCwbosHep8tZ3EW71stryDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNp+e3B 1eF2XLJ7AdSaMPHZOCdnMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPIBLkJvM40omZa8je6ZAcG4+J9uXuOWTdeG/OLI24oyrqk/0BNrV+ RdWO3+2xaupYqQ+8oErTRNLe1PR63doqpk0FCtIkfAi7LaW56CssCHu7GQK7y6cg l7BopRGd7bir5tgw0ZOcrKaNzDZ3C7c8WZ3qXVICyHXdSSkev0rySjQiz8vrgQtV yz1mK/L7ppHn5SmywhgQVlQWUo7N3cVr9NwdFSH8WlU8w4RE/uFHeKv/bWfRACJ2 xfhWc34E6WGtakwPNzjiweLiNjtw0+IJoU/AQE5dYmQ/8lnSNJ3JJx+SxRSNoPmR v1qGdf/fyjmM0g2tVS5ViBouDgpFwogQ -----END CERTIFICATE-----Generated at Sun Aug 10 18:53:13 2025 by rpki-client