$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft File: wxT-rYcguxji2eIkk4K433VEbYs.mft (raw, json) Hash identifier: BwOaSSSTq3nYyCS7MppQg3kWGF1cjrrodoyanDgViaI= Subject key identifier: B1:6D:BA:73:B0:26:88:47:52:7B:AA:92:FC:E4:4D:1E:1B:29:73:7D Authority key identifier: C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B Certificate issuer: /CN=A91CFCD3/serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Certificate serial: 0577 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft Manifest number: 0572 Signing time: Tue 12 Aug 2025 23:44:37 +0000 Manifest this update: Tue 12 Aug 2025 23:44:37 +0000 Manifest next update: Tue 19 Aug 2025 23:44:37 +0000 Files and hashes: 1: wxT-rYcguxji2eIkk4K433VEbYs.crl (hash: LuhSiOc/VvgxW3TG2KzYTUCL5rmXj1DUW55kKCsP6jU=) 2: EDA4BE18EF8711EBAF811557C4F9AE02.roa (hash: XzFg7Hp2s0t/ygNB9X7ACgOTOxQW40ffh6L1IDqjhU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCD3, serialNumber=C314FEAD8720BB18E2D9E2249382B8DF75446D8B Validity Not Before: Aug 12 23:44:37 2025 GMT Not After : Aug 19 23:44:37 2025 GMT Subject: CN=689bd1e5-63e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:2c:ef:39:2a:db:83:33:6c:8f:ad:6e:a6: b6:fa:77:e5:0f:ce:ff:d8:41:0b:7b:83:25:f2:d2: 45:48:b8:2b:c7:42:2a:43:46:8c:b1:77:0f:b3:35: 28:c7:cd:a6:f3:59:bd:57:d5:05:29:63:a3:0c:e2: 76:ab:19:88:b4:86:da:85:4c:fe:a7:2d:bf:e2:f2: 85:49:6f:50:37:8f:a1:69:b2:da:9e:d4:0d:bd:79: bc:f3:a6:16:70:b6:bb:16:06:24:2b:92:36:1f:70: 9e:21:f0:54:a6:45:db:22:47:35:cc:b7:81:20:01: 48:1c:df:ae:cd:c6:03:c0:3b:54:fe:17:d9:d3:e7: 72:72:88:fd:8c:9a:8e:28:ff:d5:19:47:f8:8e:e1: 76:b6:bc:13:cb:76:62:ae:c9:97:e2:30:5c:8b:50: d6:29:21:70:4b:fd:c4:e1:5b:38:91:79:9f:6a:8e: 03:ec:52:c4:9f:9b:76:cb:7b:33:c2:e4:97:ea:23: 44:5a:41:c8:59:35:ef:3e:e9:29:4c:f3:df:c8:e4: 0e:5f:83:68:e3:0d:5c:56:e5:ab:77:af:79:14:fa: cf:b9:75:65:e8:52:53:d1:95:2a:44:c2:05:2d:1a: da:66:17:a6:f1:91:d9:9b:c6:da:14:96:a1:b4:80: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6D:BA:73:B0:26:88:47:52:7B:AA:92:FC:E4:4D:1E:1B:29:73:7D X509v3 Authority Key Identifier: keyid:C3:14:FE:AD:87:20:BB:18:E2:D9:E2:24:93:82:B8:DF:75:44:6D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxT-rYcguxji2eIkk4K433VEbYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCD3/C4727A10EF8411EB929B0650C4F9AE02/wxT-rYcguxji2eIkk4K433VEbYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7e:6e:1c:6b:73:0b:d0:d7:20:61:44:61:63:21:c5:69:66: b1:23:16:40:d0:a0:dc:6e:c7:bf:e8:72:54:69:ba:16:e5:aa: d0:55:8d:33:26:01:1b:6b:ff:88:e7:e5:e7:e6:b0:94:1b:83: c4:fe:ca:ba:f6:4c:a1:ab:fa:21:33:c4:a9:22:26:c0:a9:65: 9c:0b:05:5d:c6:07:65:1d:6a:2d:19:ce:06:e2:82:dc:8a:f6: fe:4b:a6:08:3a:e1:50:12:1b:aa:97:5f:b7:60:51:f8:73:3d: e9:7e:eb:01:1d:b3:01:31:40:e2:c5:32:35:1a:0f:b0:6c:b2: 42:43:4f:36:f2:e3:fd:64:48:8d:20:90:ce:29:2e:a8:6b:a9: c0:42:11:15:9e:c3:d9:d2:17:8e:4c:66:7d:0d:12:25:05:34: 3e:93:ac:dd:08:bb:a4:d0:e2:65:5a:cd:b2:f6:d5:fc:39:bf: 05:57:4b:c1:96:94:f7:3a:64:2b:12:66:3e:ce:b7:bf:ea:bc: 41:c5:ef:c2:06:24:67:19:75:87:70:75:75:e5:e2:8d:40:33: fb:6f:80:3a:ab:6f:e9:d0:02:9c:ac:a8:1c:79:09:74:44:85: 5f:38:ce:bc:c9:cb:89:4f:2c:ea:50:bb:1a:5e:0d:90:0b:32: 8d:41:5a:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRDMxMTAvBgNVBAUTKEMzMTRGRUFEODcyMEJCMThFMkQ5RTIyNDkzODJCOERG NzU0NDZEOEIwHhcNMjUwODEyMjM0NDM3WhcNMjUwODE5MjM0NDM3WjAYMRYwFAYD VQQDEw02ODliZDFlNS02M2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfss7zkq24MzbI+tbqa2+nflD87/2EELe4Ml8tJFSLgrx0IqQ0aMsXcPszUo x82m81m9V9UFKWOjDOJ2qxmItIbahUz+py2/4vKFSW9QN4+habLantQNvXm886YW cLa7FgYkK5I2H3CeIfBUpkXbIkc1zLeBIAFIHN+uzcYDwDtU/hfZ0+dycoj9jJqO KP/VGUf4juF2trwTy3ZirsmX4jBci1DWKSFwS/3E4Vs4kXmfao4D7FLEn5t2y3sz wuSX6iNEWkHIWTXvPukpTPPfyOQOX4No4w1cVuWrd695FPrPuXVl6FJT0ZUqRMIF LRraZhem8ZHZm8baFJahtIBJlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFtunOw JohHUnuqkvzkTR4bKXN9MB8GA1UdIwQYMBaAFMMU/q2HILsY4tniJJOCuN91RG2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNEMy9DNDcyN0ExMEVG ODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4amkyZUlrazRLNDMzVkVi WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4VC1yWWNndXhqaTJlSWtrNEs0MzNWRWJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNEMy9DNDcyN0ExMEVGODQxMUVCOTI5QjA2NTBDNEY5QUUwMi93eFQtclljZ3V4 amkyZUlrazRLNDMzVkViWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVfm4ca3ML0NcgYURhYyHFaWaxIxZA0KDcbse/6HJUaboW5arQVY0z JgEba/+I5+Xn5rCUG4PE/sq69kyhq/ohM8SpIibAqWWcCwVdxgdlHWotGc4G4oLc ivb+S6YIOuFQEhuql1+3YFH4cz3pfusBHbMBMUDixTI1Gg+wbLJCQ0828uP9ZEiN IJDOKS6oa6nAQhEVnsPZ0heOTGZ9DRIlBTQ+k6zdCLuk0OJlWs2y9tX8Ob8FV0vB lpT3OmQrEmY+zre/6rxBxe/CBiRnGXWHcHV15eKNQDP7b4A6q2/p0AKcrKgceQl0 RIVfOM68ycuJTyzqULsaXg2QCzKNQVoD -----END CERTIFICATE-----Generated at Wed Aug 13 02:44:19 2025 by rpki-client