$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: 3hZIAzoSBG7zPtcnIItbkr8WiU5RDAYjIl/PIceBC7A= Subject key identifier: 0E:8B:1B:36:D0:E5:5D:7B:93:A4:E3:F0:97:12:F9:85:CF:65:E0:84 Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 018C Signing time: Sat 09 Aug 2025 03:52:49 +0000 Manifest this update: Sat 09 Aug 2025 03:52:48 +0000 Manifest next update: Sat 16 Aug 2025 03:52:48 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: tjQzuqkNP9P46UAODf1WZdmW0eF0ubRcYiW8gErRtb8=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1, serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: Aug 9 03:52:48 2025 GMT Not After : Aug 16 03:52:48 2025 GMT Subject: CN=6896c610-0934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:f3:67:d4:db:ad:f0:54:cb:f6:82:94:ae: dd:fb:18:e9:dc:2a:06:8c:17:08:ae:20:52:5d:34: 50:e9:d4:b1:a9:4f:f4:1e:58:09:3f:f8:cc:1a:69: e3:73:d3:42:40:2f:62:54:cc:10:4c:a2:ea:c8:ab: 09:bf:a4:db:29:35:bd:8e:14:ad:a7:35:92:d8:e6: 57:94:df:d6:5e:ce:b3:67:9e:2c:02:e4:20:0d:0c: 47:3e:50:0f:6e:31:42:1b:20:c8:18:16:f5:cd:45: f7:56:83:69:d1:16:87:a6:1b:c9:84:c5:a4:66:89: 66:e6:93:0b:5e:0c:21:33:1c:44:e1:64:53:4a:5d: f6:54:2f:cd:32:f9:1d:3d:1c:8c:51:e0:5c:47:a8: 44:76:f1:67:a3:6c:3c:51:12:e9:94:9c:20:22:9f: ba:0c:1a:94:7c:9b:60:8d:84:e8:81:0e:88:72:e7: 49:6f:aa:7a:38:6e:58:8e:28:60:06:b6:35:76:e8: 06:6d:b6:5e:77:ba:d7:07:e5:1e:c1:a9:4c:e8:22: 6e:dd:48:43:ef:2a:e6:75:ff:ee:75:98:88:1e:cd: 93:40:82:b8:46:e5:4a:d8:cc:8a:b8:a4:04:22:e5: 51:f5:5a:df:4e:d8:c1:01:a9:51:d7:0e:39:17:39: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8B:1B:36:D0:E5:5D:7B:93:A4:E3:F0:97:12:F9:85:CF:65:E0:84 X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e8:38:0a:64:f0:b9:ff:02:9f:00:d3:33:bb:e5:b0:a2:0f: 1e:0c:b3:16:0e:d1:18:53:e2:e8:aa:bb:d8:0e:0f:c5:b2:4a: 53:23:46:37:1e:7d:47:3f:01:64:a2:30:b2:c6:bb:2a:b4:25: b4:54:7d:91:f8:26:a8:d6:47:26:1b:6c:65:a8:31:f3:bb:ff: 22:f4:83:00:91:30:a2:3f:87:c6:22:31:ee:3a:33:96:51:03: dd:5c:47:6e:2c:73:83:e4:13:4d:c9:0d:f9:ae:f5:20:e9:b0: 08:fb:c5:aa:3d:58:58:a8:eb:f1:6f:33:43:4d:fa:27:32:1a: 64:69:b7:6d:0f:48:43:f2:a8:ce:69:43:d4:a2:d4:24:30:12: cb:0e:cb:df:00:25:93:24:7f:2e:a7:d9:8d:80:f1:de:0a:78: 5c:18:a0:2f:1f:65:cb:09:22:50:f7:4c:7c:c5:b0:e4:8e:c9: 67:63:a5:e2:17:ce:27:e0:15:16:37:b8:8e:4b:18:ef:93:07: 4d:e0:e0:24:c5:7c:12:af:56:3c:29:7a:81:69:15:d9:2c:ec: 21:78:ed:0d:7a:1d:d6:fd:a1:12:9a:1b:79:83:be:51:8a:0b: df:31:20:41:7e:17:5e:8f:05:45:50:88:d5:7b:a6:7e:12:60: 49:16:bb:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUwODA5MDM1MjQ4WhcNMjUwODE2MDM1MjQ4WjAYMRYwFAYD VQQDEw02ODk2YzYxMC0wOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKDzZ9TbrfBUy/aClK7d+xjp3CoGjBcIriBSXTRQ6dSxqU/0HlgJP/jMGmnj c9NCQC9iVMwQTKLqyKsJv6TbKTW9jhStpzWS2OZXlN/WXs6zZ54sAuQgDQxHPlAP bjFCGyDIGBb1zUX3VoNp0RaHphvJhMWkZolm5pMLXgwhMxxE4WRTSl32VC/NMvkd PRyMUeBcR6hEdvFno2w8URLplJwgIp+6DBqUfJtgjYTogQ6IcudJb6p6OG5Yjihg BrY1dugGbbZed7rXB+UewalM6CJu3UhD7yrmdf/udZiIHs2TQIK4RuVK2MyKuKQE IuVR9VrfTtjBAalR1w45FzmzcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6LGzbQ 5V17k6Tj8JcS+YXPZeCEMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa6DgKZPC5/wKfANMzu+Wwog8eDLMWDtEYU+LoqrvYDg/FskpTI0Y3 Hn1HPwFkojCyxrsqtCW0VH2R+Cao1kcmG2xlqDHzu/8i9IMAkTCiP4fGIjHuOjOW UQPdXEduLHOD5BNNyQ35rvUg6bAI+8WqPVhYqOvxbzNDTfonMhpkabdtD0hD8qjO aUPUotQkMBLLDsvfACWTJH8up9mNgPHeCnhcGKAvH2XLCSJQ90x8xbDkjslnY6Xi F84n4BUWN7iOSxjvkwdN4OAkxXwSr1Y8KXqBaRXZLOwheO0Neh3W/aESmht5g75R igvfMSBBfhdejwVFUIjVe6Z+EmBJFrtB -----END CERTIFICATE-----Generated at Sun Aug 10 18:11:57 2025 by rpki-client