$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: VWvd1qNfo5DAHYUqt2pqqYycaryYRd0wWuOaMohiN98= Subject key identifier: 4A:85:1A:0F:EA:7D:26:25:1C:3E:19:8B:6C:48:5F:C7:D1:92:AE:2F Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04D3 Signing time: Fri 25 Jul 2025 00:09:07 +0000 Manifest this update: Fri 25 Jul 2025 00:09:07 +0000 Manifest next update: Fri 01 Aug 2025 00:09:07 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: Z0HwkkvT3gzMvJNVaBM3vzVqTOZLVBPtPy+67Bti3zc=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 00:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Jul 25 00:09:07 2025 GMT Not After : Aug 1 00:09:07 2025 GMT Subject: CN=6882cb23-ae5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:cc:53:25:be:42:ee:be:bc:7c:b9:53:9f: f5:96:a0:4f:e4:c4:96:20:2e:71:30:dd:e4:e1:8e: 5e:32:c7:4f:f2:7a:44:8f:ce:cb:17:22:aa:73:a8: 4f:ee:ca:b0:80:22:68:93:c5:35:ce:a4:00:81:0d: 07:c2:e0:d0:1a:73:00:de:c9:7f:fa:e8:be:ab:99: 49:1c:8e:a5:76:72:40:08:cf:a7:fc:7e:48:a2:fe: b4:41:e4:97:9b:a4:a0:ba:62:e9:05:4f:59:ca:1f: f9:5a:e0:5a:67:64:a5:70:84:c6:f9:39:76:6e:67: 4c:44:6e:a6:5e:f2:e8:a8:91:16:73:37:63:87:24: 45:98:7b:f7:51:b3:eb:bd:60:ff:f0:4c:05:e9:ef: 39:23:3e:36:e4:9a:60:5e:5c:35:c9:b9:43:af:9f: 73:c0:e2:cf:09:ea:c8:27:b0:5e:fb:0b:da:e3:f5: 75:ef:c5:b3:ff:66:ab:a3:bc:00:a6:61:a9:c8:9d: 82:41:75:96:e2:f3:a3:6b:8b:d8:cc:a9:99:6b:00: 75:09:ca:87:ac:9c:8d:4d:2e:13:8b:f4:d5:7d:7d: 5d:86:06:55:b6:39:99:0c:e2:a7:84:fc:d2:9a:a9: ae:8d:2c:8d:c2:30:10:77:b0:db:f8:1d:e3:8b:64: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:1A:0F:EA:7D:26:25:1C:3E:19:8B:6C:48:5F:C7:D1:92:AE:2F X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:44:ff:cc:f0:b9:d2:16:33:9f:75:fb:ad:7d:08:56:c0:b9: d9:0d:82:3b:c4:38:71:e8:33:1f:40:bb:31:fc:6c:3a:9c:51: 54:55:a0:2d:b6:97:e4:46:8d:c3:dc:b3:58:37:73:6e:39:24: 72:31:95:59:22:6f:86:08:09:4f:7f:f6:e9:98:67:73:5d:bf: bd:62:a0:cc:66:8c:74:47:94:d7:67:00:35:90:c0:c0:ba:cc: 43:9a:5d:38:bb:d5:39:70:b1:d3:ab:ef:2b:06:29:ad:92:4e: 3f:cd:d0:42:b7:ab:98:28:5a:a7:8a:8e:36:5a:fd:60:85:10: ee:4c:3a:70:f7:e0:a2:9f:b2:d9:13:8f:53:04:22:8c:ba:5d: d4:fd:b2:6b:58:82:1a:2a:d2:66:bb:a7:3d:26:c0:b9:ae:bb: f1:27:27:68:0d:a7:3a:23:38:b4:fd:10:96:c3:1b:c7:a8:64: 2b:e8:48:46:69:98:3e:e6:c9:94:c8:98:eb:50:d6:9f:fa:9d: 6b:d3:f2:e5:ef:40:16:5f:ea:b3:2f:0d:9a:3a:d8:76:98:ba: 0b:3f:92:8b:e4:88:f5:52:c6:f0:80:fd:e1:8b:9b:b3:a4:75: f2:cf:59:a3:7a:9a:57:e2:28:2f:b0:41:1d:12:ae:e6:33:c9: 8f:ad:d0:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUwNzI1MDAwOTA3WhcNMjUwODAxMDAwOTA3WjAYMRYwFAYD VQQDEw02ODgyY2IyMy1hZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstzMUyW+Qu6+vHy5U5/1lqBP5MSWIC5xMN3k4Y5eMsdP8npEj87LFyKqc6hP 7sqwgCJok8U1zqQAgQ0HwuDQGnMA3sl/+ui+q5lJHI6ldnJACM+n/H5Iov60QeSX m6SgumLpBU9Zyh/5WuBaZ2SlcITG+Tl2bmdMRG6mXvLoqJEWczdjhyRFmHv3UbPr vWD/8EwF6e85Iz425JpgXlw1yblDr59zwOLPCerIJ7Be+wva4/V178Wz/2aro7wA pmGpyJ2CQXWW4vOja4vYzKmZawB1CcqHrJyNTS4Ti/TVfX1dhgZVtjmZDOKnhPzS mqmujSyNwjAQd7Db+B3ji2T5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqFGg/q fSYlHD4Zi2xIX8fRkq4vMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKRP/M8LnSFjOfdfutfQhWwLnZDYI7xDhx6DMfQLsx/Gw6nFFUVaAt tpfkRo3D3LNYN3NuOSRyMZVZIm+GCAlPf/bpmGdzXb+9YqDMZox0R5TXZwA1kMDA usxDml04u9U5cLHTq+8rBimtkk4/zdBCt6uYKFqnio42Wv1ghRDuTDpw9+Cin7LZ E49TBCKMul3U/bJrWIIaKtJmu6c9JsC5rrvxJydoDac6Izi0/RCWwxvHqGQr6EhG aZg+5smUyJjrUNaf+p1r0/Ll70AWX+qzLw2aOth2mLoLP5KL5Ij1UsbwgP3hi5uz pHXyz1mjeppX4igvsEEdEq7mM8mPrdAA -----END CERTIFICATE-----Generated at Sat Jul 26 02:01:23 2025 by rpki-client