$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: 2+2i7B4jga9A0b8HwzKzh9Rt2bz0n4X22UDhdLgKXzQ= Subject key identifier: 01:CE:35:18:FA:12:49:5B:C9:C2:88:C6:E7:6E:B7:9B:09:BB:2F:3A Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: FC Signing time: Sat 09 Aug 2025 05:33:02 +0000 Manifest this update: Sat 09 Aug 2025 05:33:01 +0000 Manifest next update: Sat 16 Aug 2025 05:33:01 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: ZuMwdTnWI664xbeGWaerRuZoaZ4FFixN0Cqau4kcGHU=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Aug 9 05:33:01 2025 GMT Not After : Aug 16 05:33:01 2025 GMT Subject: CN=6896dd8d-2199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:28:50:ab:37:d5:d3:cb:60:4f:f7:24:d1: c0:9a:2b:d3:78:13:3f:b2:4d:c7:65:83:9b:14:80: dc:c3:89:56:da:ba:5e:81:6e:b6:53:12:78:b4:aa: ae:29:f8:5c:6c:72:a7:22:09:40:31:f1:27:53:e1: 95:18:0e:d5:41:17:25:a5:e5:76:5e:24:07:65:27: c6:95:1b:d5:b7:54:f6:ff:4f:c1:67:f9:b8:0f:69: 34:0c:ce:b0:5e:37:2d:22:bc:05:d5:a1:84:90:4a: 5d:83:d9:b0:20:e6:19:81:34:83:a9:4a:56:09:d4: d4:b3:9d:f8:f2:64:3d:27:db:0a:03:8a:a1:40:53: 22:de:02:82:e7:72:a9:a1:1d:e6:e6:10:45:c3:0b: ed:cf:e1:d3:24:bf:e7:20:ed:70:1f:11:e0:41:de: 40:40:0f:a6:0a:12:7f:5d:91:2e:ca:a4:5e:ec:50: 18:fd:64:74:87:aa:88:2b:47:91:4d:1f:cc:5b:b4: 3f:5e:bf:ac:d6:dc:55:a7:42:f5:5a:d1:fe:58:b8: 34:81:01:76:b1:0e:05:00:d7:d7:fe:d6:31:50:3b: 9f:e8:f9:bd:2c:68:37:22:a5:37:88:72:d6:2b:a1: f5:30:75:20:23:3a:0b:a4:d9:ba:92:55:40:c3:c7: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CE:35:18:FA:12:49:5B:C9:C2:88:C6:E7:6E:B7:9B:09:BB:2F:3A X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:84:98:de:81:d8:21:e0:f6:76:ba:9f:84:9d:19:0a:d1:f8: 7a:af:2a:8d:df:4f:d2:68:3f:53:ea:52:7a:23:c6:f6:9e:9f: 00:74:c2:51:32:a7:f7:74:de:d1:0e:d4:d8:98:63:4d:4f:1e: ea:62:60:06:e4:1f:b9:5d:3b:39:c3:c0:d8:d1:6a:3e:4b:51: a6:9d:b8:f8:fe:f4:e6:fc:0d:6e:29:48:19:4b:d5:40:86:72: 98:0f:71:8b:ec:93:51:60:7e:22:b6:bb:27:f4:0b:d0:61:0b: f2:55:d6:24:69:f3:13:88:af:e1:ef:66:e1:15:a7:61:2c:a0: 7a:a6:85:83:fc:b8:ae:3c:51:f0:66:de:81:f4:da:04:ac:e8: cc:d0:5c:e9:5f:15:f8:61:f4:8e:eb:c7:a3:c5:63:2d:62:9d: 49:ce:3e:44:88:0a:fd:1b:a7:a2:a0:b5:ac:b3:b7:a5:cc:18: f8:3d:ff:cd:82:5a:e1:88:53:82:4e:37:d2:03:d5:0f:26:1d: 5f:3f:f8:4d:f5:20:36:bd:aa:e2:95:38:f8:f5:c2:a8:0d:ba: 34:74:34:c8:c1:93:f3:66:d8:3e:3b:3d:f3:a7:fa:fd:7d:37: 05:20:18:8e:ee:15:d2:be:91:1a:b8:ea:78:16:81:f6:8f:22: ef:8d:bb:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUwODA5MDUzMzAxWhcNMjUwODE2MDUzMzAxWjAYMRYwFAYD VQQDEw02ODk2ZGQ4ZC0yMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF8oUKs31dPLYE/3JNHAmivTeBM/sk3HZYObFIDcw4lW2rpegW62UxJ4tKqu KfhcbHKnIglAMfEnU+GVGA7VQRclpeV2XiQHZSfGlRvVt1T2/0/BZ/m4D2k0DM6w XjctIrwF1aGEkEpdg9mwIOYZgTSDqUpWCdTUs5348mQ9J9sKA4qhQFMi3gKC53Kp oR3m5hBFwwvtz+HTJL/nIO1wHxHgQd5AQA+mChJ/XZEuyqRe7FAY/WR0h6qIK0eR TR/MW7Q/Xr+s1txVp0L1WtH+WLg0gQF2sQ4FANfX/tYxUDuf6Pm9LGg3IqU3iHLW K6H1MHUgIzoLpNm6klVAw8dUiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHONRj6 EklbycKIxudut5sJuy86MB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZhJjegdgh4PZ2up+EnRkK0fh6ryqN30/SaD9T6lJ6I8b2np8AdMJR Mqf3dN7RDtTYmGNNTx7qYmAG5B+5XTs5w8DY0Wo+S1Gmnbj4/vTm/A1uKUgZS9VA hnKYD3GL7JNRYH4itrsn9AvQYQvyVdYkafMTiK/h72bhFadhLKB6poWD/LiuPFHw Zt6B9NoErOjM0FzpXxX4YfSO68ejxWMtYp1Jzj5EiAr9G6eioLWss7elzBj4Pf/N glrhiFOCTjfSA9UPJh1fP/hN9SA2varilTj49cKoDbo0dDTIwZPzZtg+Oz3zp/r9 fTcFIBiO7hXSvpEauOp4FoH2jyLvjbsn -----END CERTIFICATE-----Generated at Sun Aug 10 16:07:32 2025 by rpki-client