$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: 8qyQZKw55gNE5NADSPyb/crhlp+38MCVmLUbEXKneZ4= Subject key identifier: C6:78:FD:59:DF:6F:05:4C:4F:83:04:89:E7:AA:E5:4A:82:6F:FB:2E Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 061E Signing time: Fri 08 Aug 2025 23:11:47 +0000 Manifest this update: Fri 08 Aug 2025 23:11:47 +0000 Manifest next update: Fri 15 Aug 2025 23:11:47 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: mEbnFt/ybCC19DoCTxYrd1niuA7qH2GqZNOz6w5F3Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215, serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: Aug 8 23:11:47 2025 GMT Not After : Aug 15 23:11:47 2025 GMT Subject: CN=68968433-1be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:ef:40:f1:52:3c:5e:b3:03:48:c9:82:29: cf:fc:73:7f:fc:fa:4b:fc:9e:da:fe:47:f8:11:f5: 48:f5:47:d4:22:3f:3d:27:4b:9d:f7:c8:8c:a6:52: 94:e7:9d:ce:cd:cb:96:76:4a:e2:1a:cf:fd:11:c8: 8b:ac:cf:b3:be:0d:8f:0d:52:5a:10:fe:d4:25:72: cd:53:b0:ae:09:78:e9:9c:fa:3e:c4:02:0d:99:00: 65:c7:f0:49:f2:26:0c:bd:dd:77:e2:eb:99:f9:e7: a1:2e:cf:68:28:58:53:f6:0a:00:00:79:5e:1d:01: e1:1f:a4:9c:0b:ca:9e:ea:2c:04:d6:db:cf:31:f3: 29:3c:72:8c:0b:49:dd:81:da:11:d1:74:fa:88:f9: 8c:bd:81:aa:3c:9d:61:21:eb:c2:25:1b:14:7f:22: e5:84:75:b5:c4:24:10:2f:7a:5a:af:29:de:1a:ec: 29:41:e5:58:80:ef:d0:7a:24:b1:62:0c:31:83:40: fc:c7:7a:93:1a:28:be:e6:6d:ee:13:e8:59:a3:7a: b2:ed:be:41:1e:b9:54:3d:d1:e3:69:bf:3d:56:3a: f0:4a:a9:f7:9f:7b:83:67:54:cf:9a:2c:93:e0:63: e8:eb:0f:1d:10:d7:0b:e2:7e:5c:11:6e:5d:e2:07: 5a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:78:FD:59:DF:6F:05:4C:4F:83:04:89:E7:AA:E5:4A:82:6F:FB:2E X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:49:5c:9e:12:d6:37:43:44:8d:f6:44:e5:24:d1:85:f9:72: 69:a3:d4:b3:21:b0:dc:01:64:dd:6b:68:7f:ee:ce:37:6d:82: d5:da:56:b8:ef:de:d7:f4:a6:0a:6a:a5:07:68:30:88:18:e0: 4c:7d:85:7b:0d:3d:bf:38:7b:ce:56:f3:05:39:5b:50:da:ab: f9:11:69:8a:37:5b:fe:5e:cb:75:9d:b1:4b:c8:61:c1:e1:49: 1e:3e:5c:d9:8d:61:ea:30:f7:75:7e:b1:ab:89:7d:2e:08:3a: 96:8a:39:24:99:6a:f8:c7:15:5d:ba:69:24:2d:28:45:43:71: 83:9b:fb:3e:bc:3b:d0:1e:13:d9:cd:a6:1e:1d:d3:91:77:fe: 7e:0e:18:91:7e:4a:d3:7e:92:6f:25:3a:45:67:72:23:90:ce: 31:4c:0b:a3:3a:69:d3:00:f7:87:0a:74:82:a7:17:08:68:68: b6:f1:8e:93:64:98:fd:db:79:0a:85:68:ea:19:db:2f:ff:cb: 37:db:7c:e5:59:e0:e3:79:43:ed:ca:40:df:b0:1e:0c:0c:c6: 4f:95:4f:46:a7:1a:eb:27:e5:c4:1a:75:4d:dc:09:26:85:ab: b9:41:82:a0:0a:c0:66:27:7b:2e:c0:27:66:b2:2f:f4:0b:23: 6c:7d:31:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjUwODA4MjMxMTQ3WhcNMjUwODE1MjMxMTQ3WjAYMRYwFAYD VQQDEw02ODk2ODQzMy0xYmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtafvQPFSPF6zA0jJginP/HN//PpL/J7a/kf4EfVI9UfUIj89J0ud98iMplKU 553OzcuWdkriGs/9EciLrM+zvg2PDVJaEP7UJXLNU7CuCXjpnPo+xAINmQBlx/BJ 8iYMvd134uuZ+eehLs9oKFhT9goAAHleHQHhH6ScC8qe6iwE1tvPMfMpPHKMC0nd gdoR0XT6iPmMvYGqPJ1hIevCJRsUfyLlhHW1xCQQL3paryneGuwpQeVYgO/QeiSx Ygwxg0D8x3qTGii+5m3uE+hZo3qy7b5BHrlUPdHjab89VjrwSqn3n3uDZ1TPmiyT 4GPo6w8dENcL4n5cEW5d4gdaRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ4/Vnf bwVMT4MEieeq5UqCb/suMB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGSVyeEtY3Q0SN9kTlJNGF+XJpo9SzIbDcAWTda2h/7s43bYLV2la4 797X9KYKaqUHaDCIGOBMfYV7DT2/OHvOVvMFOVtQ2qv5EWmKN1v+Xst1nbFLyGHB 4UkePlzZjWHqMPd1frGriX0uCDqWijkkmWr4xxVdumkkLShFQ3GDm/s+vDvQHhPZ zaYeHdORd/5+DhiRfkrTfpJvJTpFZ3IjkM4xTAujOmnTAPeHCnSCpxcIaGi28Y6T ZJj923kKhWjqGdsv/8s323zlWeDjeUPtykDfsB4MDMZPlU9GpxrrJ+XEGnVN3Akm hau5QYKgCsBmJ3suwCdmsi/0CyNsfTEw -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:51 2025 by rpki-client