$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft File: w5eLa2eb-tci9fh5zBRsC636yzc.mft (raw, json) Hash identifier: dtQ7r2SFSkDMUOPAF/wgsdbn6yMEWtYltcJYDHfi8ik= Subject key identifier: D7:BF:69:22:EC:A2:DE:4E:FB:D5:DF:5D:28:30:8D:37:2D:B8:0A:CE Authority key identifier: C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37 Certificate issuer: /CN=A917877E/serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft Manifest number: 12 Signing time: Sat 09 Aug 2025 08:32:51 +0000 Manifest this update: Sat 09 Aug 2025 08:32:50 +0000 Manifest next update: Sat 16 Aug 2025 08:32:50 +0000 Files and hashes: 1: w5eLa2eb-tci9fh5zBRsC636yzc.crl (hash: Ztom9G5GutGUtsXZc6ChGnwZEOyf80RQViyI6tAAhzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917877E, serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37 Validity Not Before: Aug 9 08:32:50 2025 GMT Not After : Aug 16 08:32:50 2025 GMT Subject: CN=689707b3-c315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:2c:40:21:fa:93:26:1e:47:fa:30:c4:01: ef:91:7c:f7:af:29:0d:55:f4:38:2c:4f:b8:1d:fb: 6f:45:5d:e8:96:dd:99:d1:41:59:0b:c8:3c:62:19: a8:c6:c9:c1:db:6e:d3:b9:8b:90:12:12:44:a2:f6: d0:f5:79:ad:c7:7f:bb:f1:c4:14:6b:c1:8c:4f:f5: 0f:1d:d2:d3:ba:b4:c8:25:96:cb:1b:55:50:a7:9b: 8c:35:e7:ff:08:58:ac:35:46:a2:60:22:1d:ee:b5: d4:2f:03:f1:35:da:17:b5:b4:34:50:4e:ae:f6:e3: ee:da:ae:26:29:1f:d6:e2:d3:5b:81:9d:bc:0b:4b: 2d:af:44:a3:85:56:64:4f:e9:fb:3a:b6:52:af:a0: e5:a3:95:29:8d:d5:cf:07:04:05:e0:8b:2c:97:58: 0d:c7:f3:2a:00:66:05:f8:06:34:c3:a0:69:70:ef: 43:a1:7f:2b:b8:66:bd:51:80:ce:d8:ac:92:ac:b3: fe:77:bb:5b:53:2c:42:5e:aa:84:83:ec:da:01:74: 82:b6:c0:4f:89:5c:af:71:6a:79:4e:d8:b3:94:8a: ec:8a:4d:67:3e:89:ae:91:ec:b4:ed:9f:95:35:cd: 26:08:b5:45:6b:7e:3c:7f:22:4a:8d:7a:1c:c8:83: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:69:22:EC:A2:DE:4E:FB:D5:DF:5D:28:30:8D:37:2D:B8:0A:CE X509v3 Authority Key Identifier: keyid:C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3f:a6:d1:f3:3a:1a:c9:cc:ee:7a:3d:e1:3e:f3:be:00:98: 03:6f:e1:9d:5c:95:39:ce:da:f3:63:c5:5d:14:b3:a9:c0:0a: 00:2b:96:da:60:28:50:3b:e2:e7:cd:2d:ee:c2:d1:00:64:c6: 0d:c3:02:4f:77:64:6d:14:14:3e:74:b3:06:e9:76:70:00:f4: 93:39:88:36:73:93:be:ad:ef:c3:06:88:35:1f:14:fc:05:78: e0:af:df:6d:d9:c0:a9:57:1e:ec:02:e5:25:cb:42:92:20:c7: 55:40:a0:cf:3c:a6:88:cd:f0:d3:97:d4:95:c6:16:a2:3e:cb: ee:b9:fc:a3:ad:f2:63:b8:f5:5f:0d:92:7e:a0:35:e4:c5:9e: cb:2e:8c:3d:21:0a:8e:65:1c:7f:0e:4a:cd:76:d9:65:4d:23: 99:eb:69:1d:6c:65:58:83:92:c6:b8:31:9a:ad:7d:89:ee:24: 0b:c2:2d:6a:c0:5b:90:83:0f:d8:12:10:27:39:bf:f2:ac:47: 9f:51:ef:54:70:82:d5:6f:e6:b5:0d:8b:ce:e9:6f:24:18:c5: bc:50:13:92:87:17:b4:33:59:a4:86:83:81:4e:0b:3b:01:4b: bc:99:85:57:fe:52:56:49:43:0b:3c:25:c5:cd:7e:a3:a7:7b: ee:5d:c2:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODc3RTExMC8GA1UEBRMoQzM5NzhCNkI2NzlCRkFENzIyRjVGODc5Q0MxNDZDMEJB REZBQ0IzNzAeFw0yNTA4MDkwODMyNTBaFw0yNTA4MTYwODMyNTBaMBgxFjAUBgNV BAMTDTY4OTcwN2IzLWMzMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqdSxAIfqTJh5H+jDEAe+RfPevKQ1V9DgsT7gd+29FXeiW3ZnRQVkLyDxiGajG ycHbbtO5i5ASEkSi9tD1ea3Hf7vxxBRrwYxP9Q8d0tO6tMgllssbVVCnm4w15/8I WKw1RqJgIh3utdQvA/E12he1tDRQTq724+7ariYpH9bi01uBnbwLSy2vRKOFVmRP 6fs6tlKvoOWjlSmN1c8HBAXgiyyXWA3H8yoAZgX4BjTDoGlw70Ohfyu4Zr1RgM7Y rJKss/53u1tTLEJeqoSD7NoBdIK2wE+JXK9xanlO2LOUiuyKTWc+ia6R7LTtn5U1 zSYItUVrfjx/IkqNehzIgwjPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU179pIuyi 3k771d9dKDCNNy24Cs4wHwYDVR0jBBgwFoAUw5eLa2eb+tci9fh5zBRsC636yzcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NzdFLzQxRDUzRUVFNUQ1 RDExRjBCNDlBNzg0N0M0RjlBRTAyL3c1ZUxhMmViLXRjaTlmaDV6QlJzQzYzNnl6 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzVlTGEyZWItdGNpOWZoNXpCUnNDNjM2eXpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NzdFLzQxRDUzRUVFNUQ1RDExRjBCNDlBNzg0N0M0RjlBRTAyL3c1ZUxhMmViLXRj aTlmaDV6QlJzQzYzNnl6Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABo/ptHzOhrJzO56PeE+874AmANv4Z1clTnO2vNjxV0Us6nACgArltpg KFA74ufNLe7C0QBkxg3DAk93ZG0UFD50swbpdnAA9JM5iDZzk76t78MGiDUfFPwF eOCv323ZwKlXHuwC5SXLQpIgx1VAoM88pojN8NOX1JXGFqI+y+65/KOt8mO49V8N kn6gNeTFnssujD0hCo5lHH8OSs122WVNI5nraR1sZViDksa4MZqtfYnuJAvCLWrA W5CDD9gSECc5v/KsR59R71RwgtVv5rUNi87pbyQYxbxQE5KHF7QzWaSGg4FOCzsB S7yZhVf+UlZJQws8JcXNfqOne+5dwsY= -----END CERTIFICATE-----Generated at Sun Aug 10 16:07:33 2025 by rpki-client