$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft File: wkxRvbArcTbA8lrxlbNwN5l7F-g.mft (raw, json) Hash identifier: IWhVXaV4cL7iHt9ox9ey3wWYY2JW//yn6XGR27c++rQ= Subject key identifier: A8:43:DE:92:41:7F:4E:93:9E:32:97:39:4B:38:6D:6B:45:A1:85:21 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 0FAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft Manifest number: 0F9C Signing time: Sun 20 Jul 2025 17:34:26 +0000 Manifest this update: Sun 20 Jul 2025 17:34:25 +0000 Manifest next update: Sun 27 Jul 2025 17:34:25 +0000 Files and hashes: 1: wkxRvbArcTbA8lrxlbNwN5l7F-g.crl (hash: 4bNIHNEH162MoMWHo9BBeZvQCnM6bDGXefEaLek/Jjk=) 2: D3378C20171D11EAAA15E818C4F9AE02.roa (hash: brx75mAIZcLmrMrMmInTA2Jwy5WbjMuVgkiLF5aIeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4014 (0xfae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Jul 20 17:34:25 2025 GMT Not After : Jul 27 17:34:25 2025 GMT Subject: CN=687d28a2-a30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:40:83:95:23:b5:b0:72:5f:17:c8:a1:66:fa: 96:ce:d6:ee:9c:29:15:00:0e:d9:de:3d:9b:5d:13: 7c:06:ec:5a:77:b9:7d:82:ca:10:ea:ef:11:dd:c3: 14:7f:c6:57:38:2a:59:1b:80:be:fc:94:0c:71:18: 9e:5c:81:87:d6:9b:06:a4:cc:9b:70:f2:fc:52:04: 50:f2:91:d1:05:35:e7:34:ba:8f:bd:37:61:5d:ad: 66:40:f0:db:41:65:d9:71:4d:85:3c:cb:1b:59:9b: cb:47:fe:60:f1:a4:67:c1:31:e8:af:81:6f:38:54: 48:8c:d8:7e:a3:fc:fe:f6:3f:05:1b:11:98:7a:0d: 05:77:dd:b2:1a:ad:91:00:39:42:75:15:ad:bf:3f: ed:8b:63:0e:00:42:34:c8:ad:af:ee:9c:5e:f3:e8: 09:0f:f9:51:69:ab:91:ba:64:bf:26:79:8f:12:f9: 49:71:00:61:d2:8b:9e:e6:22:cd:6d:1d:ca:54:7b: 07:d6:96:25:cb:d1:56:18:3e:5b:09:24:fa:79:37: 6a:63:7f:7f:0a:d8:3a:ea:95:9f:d0:a4:a2:85:f3: 1b:79:46:f8:84:a5:64:78:c9:0c:af:7f:43:54:62: 02:b7:96:15:2a:6a:88:d1:c7:44:d4:bb:00:12:ce: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:43:DE:92:41:7F:4E:93:9E:32:97:39:4B:38:6D:6B:45:A1:85:21 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ca:e8:82:55:e1:70:00:3a:04:ab:2b:12:4f:50:5a:75:95: 12:14:74:1a:4e:dc:08:e0:20:79:c9:cf:73:73:0b:64:23:2e: 37:15:5c:92:1e:6d:cd:a9:89:88:a1:09:53:51:8d:ca:25:86: ac:31:06:23:b8:5f:72:ba:81:80:68:16:78:d7:6d:4d:c3:e8: c3:53:a8:19:9d:98:56:97:dd:5d:9e:f2:ac:90:5f:17:70:7c: d9:9d:a0:2f:d6:2a:e9:52:fb:8d:ac:df:a8:55:d3:6d:e7:20: b0:fc:0a:0c:23:61:87:54:f6:35:bb:0a:45:62:b4:ee:87:99: d0:85:cc:7a:14:c5:d2:cc:45:3d:97:70:68:9b:e6:c5:99:52: b6:dc:df:68:4d:c2:ea:40:20:a9:98:0c:dc:5a:cf:00:f9:6c: f1:11:23:71:aa:3d:9b:4d:78:e9:34:95:38:87:ae:5a:92:20: d1:b4:70:c3:88:09:f4:b4:98:80:bf:ce:2d:19:9e:e8:a9:bd: 79:f2:0e:f9:c3:b2:d7:c8:c4:56:da:a0:f9:90:64:40:7b:b8: 2e:d7:ff:1c:d2:0e:54:38:dc:25:e3:b2:c5:04:ce:70:b0:e6: a7:d6:f9:f7:0b:55:6d:76:3e:d9:d7:bc:9d:68:e7:e1:b7:28: 21:a0:87:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUwNzIwMTczNDI1WhcNMjUwNzI3MTczNDI1WjAYMRYwFAYD VQQDEw02ODdkMjhhMi1hMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ECDlSO1sHJfF8ihZvqWztbunCkVAA7Z3j2bXRN8Buxad7l9gsoQ6u8R3cMU f8ZXOCpZG4C+/JQMcRieXIGH1psGpMybcPL8UgRQ8pHRBTXnNLqPvTdhXa1mQPDb QWXZcU2FPMsbWZvLR/5g8aRnwTHor4FvOFRIjNh+o/z+9j8FGxGYeg0Fd92yGq2R ADlCdRWtvz/ti2MOAEI0yK2v7pxe8+gJD/lRaauRumS/JnmPEvlJcQBh0oue5iLN bR3KVHsH1pYly9FWGD5bCST6eTdqY39/Ctg66pWf0KSihfMbeUb4hKVkeMkMr39D VGICt5YVKmqI0cdE1LsAEs7bWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhD3pJB f06TnjKXOUs4bWtFoYUhMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTZCRC85OEE1REY5QzY1ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNU YkE4bHJ4bGJOd041bDdGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADyuiCVeFwADoEqysST1BadZUSFHQaTtwI4CB5yc9zcwtkIy43FVyS Hm3NqYmIoQlTUY3KJYasMQYjuF9yuoGAaBZ4121Nw+jDU6gZnZhWl91dnvKskF8X cHzZnaAv1irpUvuNrN+oVdNt5yCw/AoMI2GHVPY1uwpFYrTuh5nQhcx6FMXSzEU9 l3Bom+bFmVK23N9oTcLqQCCpmAzcWs8A+WzxESNxqj2bTXjpNJU4h65akiDRtHDD iAn0tJiAv84tGZ7oqb158g75w7LXyMRW2qD5kGRAe7gu1/8c0g5UONwl47LFBM5w sOan1vn3C1Vtdj7Z17ydaOfhtyghoIeV -----END CERTIFICATE-----Generated at Mon Jul 21 12:28:10 2025 by rpki-client