$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json) Hash identifier: 4M3c6PW7wZuo9SRF4nz73YaZzfYXnUAo5gkzOZd9aBs= Subject key identifier: 57:C0:B1:D5:40:F1:5B:FE:E1:A6:2A:C6:B6:F5:14:ED:AF:8F:72:BB Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft Manifest number: CA Signing time: Tue 05 Aug 2025 06:13:46 +0000 Manifest this update: Tue 05 Aug 2025 06:13:45 +0000 Manifest next update: Tue 12 Aug 2025 06:13:45 +0000 Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: zeXHFCuvY9vFai1E682zPPSVi9Rl6eC0Wyz/SDpu0S8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Validity Not Before: Aug 5 06:13:45 2025 GMT Not After : Aug 12 06:13:45 2025 GMT Subject: CN=6891a119-0ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:eb:e8:ed:b5:8c:f1:d4:b1:f2:20:cb:a4: 54:3e:0e:b0:7e:9b:b1:23:bc:99:28:14:bf:9e:02: 3f:c5:95:17:b9:d2:c6:87:73:c8:f2:17:3d:9b:82: a6:0b:27:95:df:e8:41:92:4a:ec:27:8b:b3:25:bc: 68:33:5b:8c:f4:6d:d8:69:83:29:23:9d:af:95:94: 99:06:ff:0a:e7:8d:be:0e:6d:20:53:0c:25:ad:51: 81:db:ab:bf:6c:31:aa:69:a3:ce:e9:6f:e1:21:fa: 98:32:be:52:b9:7e:16:7e:b0:3a:2d:fe:3c:35:4c: 0b:c8:a2:7e:7e:db:5a:84:4b:10:88:02:f2:84:ac: ff:17:89:fc:94:cf:db:e4:dd:44:6f:a8:24:3a:0d: f7:b1:d1:86:3c:a5:98:ba:43:b8:6d:67:af:26:c7: 5c:cb:e5:a8:18:66:72:0f:e3:c9:64:41:85:e1:60: 5f:a3:cc:a1:d3:7b:69:98:a4:26:00:0f:ad:46:80: 44:65:af:cb:9b:b6:91:fd:42:d5:ac:9a:62:6f:58: 72:79:43:26:e8:9b:ed:c6:47:d8:01:38:6e:99:46: f1:bc:61:60:22:13:e0:91:d3:d1:a8:fa:b4:92:1c: e2:7f:81:e5:15:54:16:52:dc:e0:57:d7:92:62:53: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C0:B1:D5:40:F1:5B:FE:E1:A6:2A:C6:B6:F5:14:ED:AF:8F:72:BB X509v3 Authority Key Identifier: keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c4:cc:44:16:3d:f0:33:5e:69:61:69:88:74:19:ed:ff:52: b7:f7:31:3d:63:37:18:f6:43:39:ee:6b:3b:03:3d:e1:43:5c: 91:79:9e:70:0b:79:26:d3:f5:08:82:ad:fe:55:83:96:51:1e: 75:b2:94:03:8c:12:51:b1:8c:9f:88:56:56:44:fa:93:f3:04: a5:42:92:19:67:a0:e7:2c:77:24:a8:e5:40:26:66:78:a9:74: 5d:25:2e:8a:e3:d2:ca:f1:f5:14:e5:44:d2:3a:c3:c7:6b:2e: e0:e4:68:e8:22:29:03:6a:18:85:3d:3f:15:f2:f2:49:25:d1: 0c:a0:7b:3d:72:06:8f:c7:6e:fa:f6:b0:76:2e:56:b4:73:a4: 8f:95:6d:29:d4:00:2b:93:c8:0b:34:0f:7c:27:bf:24:ee:0a: 9c:b6:e3:b0:bc:bf:1a:99:90:25:20:83:d8:54:b1:ef:52:11: 96:9a:a5:e3:7c:0f:85:e5:c8:52:bb:8e:21:b8:65:72:36:10: 73:a9:e5:2c:29:21:5a:db:3f:d9:b4:42:f8:13:7c:2d:db:e0: 8d:47:06:0e:c0:98:01:df:60:6b:c7:eb:4c:37:7f:d1:39:f2: 77:67:28:52:fe:a8:37:12:69:24:67:90:93:2e:e8:87:ca:9d: 8c:b7:a4:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEMxM0M5QUUzNUMyN0MzMTAzMEUwMjQyODczQkEyRDVB NzM1RDc4MTEwHhcNMjUwODA1MDYxMzQ1WhcNMjUwODEyMDYxMzQ1WjAYMRYwFAYD VQQDEw02ODkxYTExOS0wY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy3r6O21jPHUsfIgy6RUPg6wfpuxI7yZKBS/ngI/xZUXudLGh3PI8hc9m4Km CyeV3+hBkkrsJ4uzJbxoM1uM9G3YaYMpI52vlZSZBv8K542+Dm0gUwwlrVGB26u/ bDGqaaPO6W/hIfqYMr5SuX4WfrA6Lf48NUwLyKJ+fttahEsQiALyhKz/F4n8lM/b 5N1Eb6gkOg33sdGGPKWYukO4bWevJsdcy+WoGGZyD+PJZEGF4WBfo8yh03tpmKQm AA+tRoBEZa/Lm7aR/ULVrJpib1hyeUMm6JvtxkfYAThumUbxvGFgIhPgkdPRqPq0 khzif4HlFVQWUtzgV9eSYlPb4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfAsdVA 8Vv+4aYqxrb1FO2vj3K7MB8GA1UdIwQYMBaAFME8muNcJ8MQMOAkKHO6LVpzXXgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My83NkRGNzZFRTNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4QXc0Q1FvYzdvdFduTmRl QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUeWE0MXdud3hBdzRDUW9jN290V25OZGVCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My83NkRGNzZFRTNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4 QXc0Q1FvYzdvdFduTmRlQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATxMxEFj3wM15pYWmIdBnt/1K39zE9YzcY9kM57ms7Az3hQ1yReZ5w C3km0/UIgq3+VYOWUR51spQDjBJRsYyfiFZWRPqT8wSlQpIZZ6DnLHckqOVAJmZ4 qXRdJS6K49LK8fUU5UTSOsPHay7g5GjoIikDahiFPT8V8vJJJdEMoHs9cgaPx276 9rB2Lla0c6SPlW0p1AArk8gLNA98J78k7gqctuOwvL8amZAlIIPYVLHvUhGWmqXj fA+F5chSu44huGVyNhBzqeUsKSFa2z/ZtEL4E3wt2+CNRwYOwJgB32Brx+tMN3/R OfJ3ZyhS/qg3EmkkZ5CTLuiHyp2Mt6QP -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:06 2025 by rpki-client