$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: zXWxmsMfQC+mAeOhei3JaiKPe08nVAFhtuMwzibLDOM= Subject key identifier: 72:BE:FC:A8:C8:54:D0:A6:7C:5E:83:65:27:58:CC:CF:D4:C8:F9:B1 Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 04E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04DC Signing time: Sun 10 Aug 2025 23:54:06 +0000 Manifest this update: Sun 10 Aug 2025 23:54:05 +0000 Manifest next update: Sun 17 Aug 2025 23:54:05 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: t0dD0jNlVbYfhdC68t23cXrXkvzPglQU231WnGDPnbE=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1249 (0x4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Aug 10 23:54:05 2025 GMT Not After : Aug 17 23:54:05 2025 GMT Subject: CN=6899311e-f231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:66:9a:5d:02:23:07:17:8e:e1:79:a0:4e: 6f:19:9e:b8:92:a6:7a:dd:4b:79:ab:1c:4c:74:29: e9:55:68:15:43:5f:ae:43:9d:2a:aa:77:78:f8:b2: 93:20:c5:3f:0f:5e:7f:9d:bc:92:ba:d9:6e:1b:36: cf:0b:56:5b:0c:19:fc:30:7e:24:9f:cd:3a:15:9c: 97:03:02:e4:86:f0:64:47:27:34:7c:ef:d6:3c:9c: dd:13:0e:e1:00:b0:19:e9:3d:08:d5:13:f6:31:c0: cd:25:ca:27:83:62:b6:42:29:3a:f8:e0:8c:f0:af: cd:37:dc:7c:3b:b9:9d:37:4f:4d:82:d5:ba:dd:c6: 01:db:6e:5a:37:e9:09:a6:42:db:89:b7:e5:e1:ca: ae:2c:b2:18:07:e1:a0:f6:f7:14:1f:f3:8d:fd:77: bd:ae:ef:4f:5f:2a:57:e9:4e:1e:89:24:a9:30:44: b3:4e:ce:3b:fd:a9:87:51:dc:93:b1:3f:3b:67:93: 44:fa:21:05:34:5e:bd:a2:50:62:e1:cb:98:0e:2a: 50:32:39:8b:a5:8e:95:1f:50:36:49:97:de:0a:8f: af:6b:4c:54:c9:0f:88:d5:77:3f:e7:29:16:e9:55: 89:b9:3f:81:f0:ab:ea:f4:f1:97:47:c2:5e:ff:26: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BE:FC:A8:C8:54:D0:A6:7C:5E:83:65:27:58:CC:CF:D4:C8:F9:B1 X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:66:f1:15:0d:05:c7:3e:b5:b6:94:17:8b:b8:74:aa:fe:36: ac:85:bb:11:c4:93:c3:e3:5f:15:7c:00:4c:eb:73:5d:48:f6: 82:4d:46:50:cf:e8:65:d1:08:d9:73:9f:47:58:53:f3:a9:ca: 8e:38:f8:3c:04:fd:0f:a1:bb:17:67:5e:3e:45:12:d2:36:a5: 5a:74:df:00:84:84:83:34:bf:fb:e6:0b:5f:a0:91:42:d9:71: 06:b3:c4:77:41:07:59:88:60:af:40:37:50:70:ec:dd:68:b4: 89:63:c1:41:72:7e:1b:a0:07:f1:f7:1d:5d:dc:85:20:2d:50: 66:f7:c4:8c:dd:9c:4e:87:9a:a6:ce:f8:f0:44:4c:b0:62:18: 3a:27:85:6f:d0:f0:92:01:3c:f2:35:ff:66:5c:61:fa:66:d3: 0a:8f:c6:05:50:b4:93:c6:0d:35:e7:ee:6e:d4:54:a5:69:ff: dd:7b:07:51:b5:f8:75:f2:ce:41:1e:8b:f7:10:5c:ca:89:bb: 2a:87:13:9b:ed:19:fc:b2:b8:57:1f:86:da:10:9c:2a:51:a9: e3:77:ea:9f:ed:a0:a1:d4:26:bb:9d:99:47:a7:3a:ea:13:61: c3:74:cc:8f:2a:b4:ec:74:07:d3:a5:91:df:0b:12:98:11:57: 40:a5:ab:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUwODEwMjM1NDA1WhcNMjUwODE3MjM1NDA1WjAYMRYwFAYD VQQDEw02ODk5MzExZS1mMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ihmml0CIwcXjuF5oE5vGZ64kqZ63Ut5qxxMdCnpVWgVQ1+uQ50qqnd4+LKT IMU/D15/nbySutluGzbPC1ZbDBn8MH4kn806FZyXAwLkhvBkRyc0fO/WPJzdEw7h ALAZ6T0I1RP2McDNJcong2K2Qik6+OCM8K/NN9x8O7mdN09NgtW63cYB225aN+kJ pkLbibfl4cquLLIYB+Gg9vcUH/ON/Xe9ru9PXypX6U4eiSSpMESzTs47/amHUdyT sT87Z5NE+iEFNF69olBi4cuYDipQMjmLpY6VH1A2SZfeCo+va0xUyQ+I1Xc/5ykW 6VWJuT+B8Kvq9PGXR8Je/ybfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHK+/KjI VNCmfF6DZSdYzM/UyPmxMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ZvEVDQXHPrW2lBeLuHSq/jashbsRxJPD418VfABM63NdSPaCTUZQ z+hl0QjZc59HWFPzqcqOOPg8BP0PobsXZ14+RRLSNqVadN8AhISDNL/75gtfoJFC 2XEGs8R3QQdZiGCvQDdQcOzdaLSJY8FBcn4boAfx9x1d3IUgLVBm98SM3ZxOh5qm zvjwREywYhg6J4Vv0PCSATzyNf9mXGH6ZtMKj8YFULSTxg015+5u1FSlaf/dewdR tfh18s5BHov3EFzKibsqhxOb7Rn8srhXH4baEJwqUanjd+qf7aCh1Ca7nZlHpzrq E2HDdMyPKrTsdAfTpZHfCxKYEVdApasg -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:43 2025 by rpki-client