$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: 1EmZIoDb/g+bx4afdtSg0mM3qRnGmeZ01xJ7Xa53bII= Subject key identifier: 65:6E:9D:F6:10:17:E2:89:83:31:C0:E6:A7:EF:C5:A5:72:D9:9A:EF Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1BB5 Signing time: Fri 08 Aug 2025 16:44:51 +0000 Manifest this update: Fri 08 Aug 2025 16:44:51 +0000 Manifest next update: Fri 15 Aug 2025 16:44:51 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: I0/ijr8JV58GkCtvq45txNsjV5oUaZK+VHNml1S2uIk=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Aug 8 16:44:51 2025 GMT Not After : Aug 15 16:44:51 2025 GMT Subject: CN=68962983-75b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:f1:be:44:ee:3b:8c:bc:ea:12:15:50:a0: e2:2b:75:73:d1:e1:0e:92:71:19:82:f4:99:60:44: b1:23:34:1e:39:fa:b0:b3:3b:b5:ab:f4:23:91:f1: 84:b0:3b:fe:c7:fb:e6:e8:6f:88:ad:b3:04:46:17: 51:60:ae:78:1e:4e:12:2c:49:2b:2a:3e:4a:fd:a5: c2:cb:72:25:46:a5:ea:19:64:1d:d6:91:ad:bc:10: 3b:4c:1f:f1:69:e0:e3:7a:6e:19:3f:d4:f3:67:80: c2:f5:39:20:a4:6e:3b:44:0f:cf:d2:39:f7:a0:57: ba:b2:31:3d:69:59:1c:97:02:7f:b0:d5:d7:18:eb: ba:a3:3e:99:aa:94:49:a8:b2:db:55:e4:69:25:52: 59:fd:d7:ca:32:f6:bf:d9:76:e8:8f:a9:07:4f:6b: 7a:9b:84:7e:e7:81:db:8b:ed:a8:03:42:c6:b8:f4: 43:f3:bc:a3:e2:1d:36:c1:54:3d:22:68:ae:b2:89: 8a:2a:1b:7e:3d:c6:8a:1c:3c:12:85:8e:95:39:81: 96:c9:29:e1:4a:d7:0d:ac:d1:ac:be:d3:c8:e0:2f: 23:cb:19:1a:e6:58:58:e0:f8:9a:21:c5:8c:0c:89: ac:5b:3f:ef:eb:9d:19:f2:a7:1f:a6:ec:cf:fe:07: 08:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:9D:F6:10:17:E2:89:83:31:C0:E6:A7:EF:C5:A5:72:D9:9A:EF X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f7:37:be:0a:e0:74:8f:8a:25:4d:fa:b9:81:d7:3d:86:91: 9b:2a:a1:38:a5:93:80:37:60:8d:93:a5:48:03:d2:f4:4f:07: 1f:dd:89:16:5f:c7:87:7e:c4:38:59:4b:94:68:13:91:cf:fa: 0b:b0:8a:58:46:a1:58:37:f0:2e:82:aa:c3:6d:f6:8a:cd:07: 7d:78:31:7a:fa:11:29:48:d7:7b:e7:90:60:dc:3f:44:28:38: 81:88:c3:27:e7:c9:5b:30:fe:18:fa:20:0b:53:76:fb:b2:e7: 04:67:13:42:7b:53:86:11:9f:62:24:2f:97:4a:72:4f:40:94: c4:a2:97:ba:10:47:a5:29:16:d4:23:31:9e:a9:62:bf:23:d0: 12:ad:fb:68:a2:0e:8f:51:d5:a4:da:ef:50:69:a3:76:4c:69: f0:fa:f2:08:ec:77:7c:73:ca:d8:71:02:09:89:05:7b:dc:d5: c2:92:e0:c5:16:a4:df:ad:ab:9b:c1:9e:87:5b:20:76:b4:98: be:ff:d7:3b:a6:05:25:3c:95:2f:87:88:29:95:43:04:4e:55: 7c:d9:d9:20:03:10:55:b7:94:a9:89:8e:b2:aa:6a:e2:0a:67: 2c:16:20:27:41:64:0c:f9:f8:08:82:90:e6:a8:97:1d:23:f9: 1f:37:19:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwODA4MTY0NDUxWhcNMjUwODE1MTY0NDUxWjAYMRYwFAYD VQQDEw02ODk2Mjk4My03NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3TxvkTuO4y86hIVUKDiK3Vz0eEOknEZgvSZYESxIzQeOfqwszu1q/QjkfGE sDv+x/vm6G+IrbMERhdRYK54Hk4SLEkrKj5K/aXCy3IlRqXqGWQd1pGtvBA7TB/x aeDjem4ZP9TzZ4DC9TkgpG47RA/P0jn3oFe6sjE9aVkclwJ/sNXXGOu6oz6ZqpRJ qLLbVeRpJVJZ/dfKMva/2Xboj6kHT2t6m4R+54Hbi+2oA0LGuPRD87yj4h02wVQ9 ImiusomKKht+PcaKHDwShY6VOYGWySnhStcNrNGsvtPI4C8jyxka5lhY4PiaIcWM DImsWz/v650Z8qcfpuzP/gcIlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVunfYQ F+KJgzHA5qfvxaVy2ZrvMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd9ze+CuB0j4olTfq5gdc9hpGbKqE4pZOAN2CNk6VIA9L0Twcf3YkW X8eHfsQ4WUuUaBORz/oLsIpYRqFYN/AugqrDbfaKzQd9eDF6+hEpSNd755Bg3D9E KDiBiMMn58lbMP4Y+iALU3b7sucEZxNCe1OGEZ9iJC+XSnJPQJTEope6EEelKRbU IzGeqWK/I9ASrftoog6PUdWk2u9QaaN2TGnw+vII7Hd8c8rYcQIJiQV73NXCkuDF FqTfraubwZ6HWyB2tJi+/9c7pgUlPJUvh4gplUMETlV82dkgAxBVt5SpiY6yqmri CmcsFiAnQWQM+fgIgpDmqJcdI/kfNxnQ -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:32 2025 by rpki-client