$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft File: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft (raw, json) Hash identifier: oRfodB7HjRG+TZxv69jebH6aLLilVC4atpHgyHA/NLo= Subject key identifier: EE:C9:6F:3A:64:38:C6:99:6F:55:6A:2F:68:B0:FD:EE:88:38:00:52 Authority key identifier: 5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 Certificate issuer: /CN=A9188D0C/serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Certificate serial: 030E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft Manifest number: 0309 Signing time: Thu 07 Aug 2025 01:49:13 +0000 Manifest this update: Thu 07 Aug 2025 01:49:13 +0000 Manifest next update: Thu 14 Aug 2025 01:49:13 +0000 Files and hashes: 1: WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl (hash: lTdatU3/ZOlKhSwcRXuee4KlWcs51gmzFCDTSKXffts=) 2: 42CD71AEE33511EC9EDB371BC4F9AE02.roa (hash: WrNqwpKibajA317uV8R1n49/EqSR3J93tv1ZPGtLnSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 782 (0x30e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0C, serialNumber=5B3B8BFB2C9F2CE883515FA3DCF9D1C0CFAD07A4 Validity Not Before: Aug 7 01:49:13 2025 GMT Not After : Aug 14 01:49:13 2025 GMT Subject: CN=68940619-01b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:ce:50:bc:0b:65:e2:c5:60:5d:35:25:98: 55:31:7f:8f:86:e7:99:65:41:c8:10:c6:9a:bd:09: c0:dc:f2:b7:4f:c0:44:44:a3:55:b3:0e:c6:bc:9b: 98:88:3b:0c:f1:b8:8c:96:33:cc:72:1a:10:67:5e: 81:ec:1a:5a:ba:23:04:83:fd:3b:7b:19:9b:ae:16: 4e:fa:83:2c:37:2a:33:fa:bf:b6:fd:07:ae:91:62: 09:50:65:2d:fb:49:e1:76:55:8f:ea:eb:65:95:3d: 09:60:a3:56:43:06:38:d0:f6:2e:df:0c:20:00:6f: 97:3d:1c:45:95:66:37:9c:57:2b:19:73:d5:d3:58: 6e:de:ab:7e:80:22:e7:19:79:09:10:55:c3:18:5e: 99:26:f5:55:55:97:2e:ac:2b:af:bf:d0:36:69:91: 16:58:e3:ca:29:3f:e7:52:ef:e9:f8:5d:fe:d5:63: 75:01:f8:01:bb:09:a4:fb:4a:9c:ab:4e:1b:18:4a: 45:68:ea:81:b6:f5:a6:6e:85:58:85:f1:aa:dd:a9: 90:dc:86:2d:24:3d:24:a0:60:6b:21:9d:59:4b:7a: d9:46:af:ef:d1:53:f2:88:5e:d1:07:78:a8:4d:e1: 3a:57:4d:76:79:be:13:59:77:8d:82:6f:12:a9:1e: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C9:6F:3A:64:38:C6:99:6F:55:6A:2F:68:B0:FD:EE:88:38:00:52 X509v3 Authority Key Identifier: keyid:5B:3B:8B:FB:2C:9F:2C:E8:83:51:5F:A3:DC:F9:D1:C0:CF:AD:07:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0C/BA86BA22E32E11EC9848507BC4F9AE02/WzuL-yyfLOiDUV-j3PnRwM-tB6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:1f:41:24:20:42:22:21:68:39:a9:04:d3:f6:fa:d8:f2:4f: 30:8a:76:36:86:f5:1a:cc:7f:bf:f0:6c:9e:c5:16:fa:ac:f0: 05:5a:f3:ea:dc:51:aa:69:42:a0:b7:40:85:b3:8f:1c:ab:06: 8b:1d:ec:45:ca:70:09:66:41:ed:73:ac:9b:f8:7a:4f:54:c1: 52:b4:e7:2c:8b:36:2c:ba:3d:8e:04:eb:f2:f5:26:e2:c7:84: 6e:bc:94:01:b0:95:6f:b7:67:7b:f7:02:8a:92:ae:c9:24:01: ef:2f:4c:59:3f:c7:bd:14:bf:a1:6a:14:51:ff:89:e5:df:aa: 66:fa:5f:2f:9c:2e:5d:7f:c7:2b:88:0e:55:96:76:0f:8b:84: ae:5f:f8:a4:b2:4c:9a:d2:6e:c8:0f:1e:a3:82:5f:f1:1c:ac: 75:55:4d:2a:dc:92:f3:d6:78:0b:31:b1:d3:95:07:85:a1:4e: d1:d7:ce:07:3c:07:cb:09:42:4c:17:34:35:41:85:ba:00:c9: f7:5d:33:3f:4f:2f:c5:c5:17:e2:b5:e6:77:b9:7b:1c:98:ae: 38:3c:d1:ad:95:ee:1d:c4:d1:36:50:46:30:6c:b4:7c:a7:a5: d2:d6:17:82:0b:ea:e2:b7:b1:1b:bc:56:d5:ce:05:77:10:4b: 99:fd:a9:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMEMxMTAvBgNVBAUTKDVCM0I4QkZCMkM5RjJDRTg4MzUxNUZBM0RDRjlEMUMw Q0ZBRDA3QTQwHhcNMjUwODA3MDE0OTEzWhcNMjUwODE0MDE0OTEzWjAYMRYwFAYD VQQDEw02ODk0MDYxOS0wMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH3OULwLZeLFYF01JZhVMX+PhueZZUHIEMaavQnA3PK3T8BERKNVsw7GvJuY iDsM8biMljPMchoQZ16B7BpauiMEg/07exmbrhZO+oMsNyoz+r+2/QeukWIJUGUt +0nhdlWP6utllT0JYKNWQwY40PYu3wwgAG+XPRxFlWY3nFcrGXPV01hu3qt+gCLn GXkJEFXDGF6ZJvVVVZcurCuvv9A2aZEWWOPKKT/nUu/p+F3+1WN1AfgBuwmk+0qc q04bGEpFaOqBtvWmboVYhfGq3amQ3IYtJD0koGBrIZ1ZS3rZRq/v0VPyiF7RB3io TeE6V012eb4TWXeNgm8SqR73DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7Jbzpk OMaZb1VqL2iw/e6IOABSMB8GA1UdIwQYMBaAFFs7i/ssnyzog1Ffo9z50cDPrQek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQwQy9CQTg2QkEyMkUz MkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxPaURVVi1qM1BuUndNLXRC NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d6dUwteXlmTE9pRFVWLWozUG5Sd00tdEI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQwQy9CQTg2QkEyMkUzMkUxMUVDOTg0ODUwN0JDNEY5QUUwMi9XenVMLXl5ZkxP aURVVi1qM1BuUndNLXRCNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIH0EkIEIiIWg5qQTT9vrY8k8winY2hvUazH+/8GyexRb6rPAFWvPq 3FGqaUKgt0CFs48cqwaLHexFynAJZkHtc6yb+HpPVMFStOcsizYsuj2OBOvy9Sbi x4RuvJQBsJVvt2d79wKKkq7JJAHvL0xZP8e9FL+hahRR/4nl36pm+l8vnC5df8cr iA5VlnYPi4SuX/ikskya0m7IDx6jgl/xHKx1VU0q3JLz1ngLMbHTlQeFoU7R184H PAfLCUJMFzQ1QYW6AMn3XTM/Ty/FxRfiteZ3uXscmK44PNGtle4dxNE2UEYwbLR8 p6XS1heCC+rit7EbvFbVzgV3EEuZ/alV -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:49 2025 by rpki-client