$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: zaozmUDa7mrg6QRfGqiKoNVyd1YTOFXH+A75JhV7enQ= Subject key identifier: 79:D4:FB:89:44:C9:34:80:20:29:39:CD:68:9F:84:75:BD:E8:9C:15 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 349E Signing time: Sun 20 Jul 2025 14:55:36 +0000 Manifest this update: Sun 20 Jul 2025 14:55:35 +0000 Manifest next update: Sun 27 Jul 2025 14:55:35 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: NfnrXbWQKXqg5lWGXFX+WkYboeGf+J6/YIEdJ4KZ59k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Jul 20 14:55:35 2025 GMT Not After : Jul 27 14:55:35 2025 GMT Subject: CN=687d0367-55e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:06:c2:9b:e8:d3:e2:f3:8b:a4:03:ab:96: c4:a9:79:2a:23:5b:e4:0f:62:6a:fb:6c:b0:4f:5f: a2:4e:a4:0d:d5:67:ce:a5:9c:08:47:8d:fb:03:86: d6:9c:b1:87:a7:fa:07:7c:d8:6f:21:92:6d:e6:83: 8e:90:69:81:d8:5c:89:ad:4f:ec:23:f2:b0:72:dc: 12:ce:ff:61:b2:bb:64:e9:df:56:ac:0e:39:aa:a1: 0b:77:94:e0:8f:65:18:38:29:28:95:d0:86:04:15: f6:c1:f6:b0:86:82:07:8e:ae:6e:6e:9f:4a:e3:7c: 69:7f:90:bd:f5:3d:f1:fb:7a:8f:4f:44:41:69:43: d4:79:1b:54:dc:44:e2:50:ef:dc:91:f7:0a:dd:59: b4:c6:0d:fd:c8:9e:f9:a4:c8:33:eb:3e:9d:b4:df: 4f:21:b7:f7:a2:a1:01:ff:c4:1f:50:08:e2:22:5d: 7e:d7:24:df:84:7b:7e:85:68:cf:2d:d5:8c:22:17: 2d:72:6d:46:f0:b5:d9:6d:6f:de:e3:14:da:ca:48: 47:25:ad:09:ac:c3:75:3a:0d:4b:73:be:9c:49:3b: 33:d7:32:04:f6:ce:32:6b:65:8a:1b:ef:27:52:92: c0:54:c3:30:c1:dc:bf:92:95:dc:6c:13:66:c5:f1: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D4:FB:89:44:C9:34:80:20:29:39:CD:68:9F:84:75:BD:E8:9C:15 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d8:08:31:13:ec:50:a5:d7:56:a3:a5:55:2e:1f:07:e6:29: ac:22:a9:c0:95:55:15:0a:dd:81:1e:67:39:61:3d:42:7d:eb: 63:93:30:d7:eb:2f:f0:52:38:b4:07:7e:ee:25:a2:c5:e6:78: 1c:dc:27:8d:6f:5b:15:49:5a:20:71:47:cd:6d:0b:10:dc:ed: d6:28:fe:47:e2:2d:90:08:23:05:17:a7:67:2d:4a:1d:95:3d: 2c:02:53:83:52:95:02:b6:96:b1:cf:6d:1b:97:7c:87:21:b0: c4:0a:f1:46:08:1c:7a:98:6b:ba:10:3b:8e:da:79:df:a3:e7: 8d:b8:50:ec:0b:23:83:97:34:c1:89:91:68:6d:69:f1:8f:91: 80:8f:7c:2b:02:80:2d:5f:f3:31:5b:55:83:59:ac:fe:28:94: 12:33:ae:80:32:aa:fd:48:7e:df:42:f3:64:78:cf:a1:37:2a: f0:6f:ba:63:4c:23:ba:39:37:73:65:b4:c3:19:2e:f2:44:5a: da:80:b9:99:d4:32:c9:4b:99:8e:5e:5b:2d:96:66:c4:38:95: 52:1e:65:04:88:bc:84:19:c5:81:ac:4b:8f:8a:e6:e1:36:cc: 7c:5e:b1:d6:22:0a:32:48:b4:3f:85:83:99:dd:78:23:c8:ca: d4:1b:62:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUwNzIwMTQ1NTM1WhcNMjUwNzI3MTQ1NTM1WjAYMRYwFAYD VQQDEw02ODdkMDM2Ny01NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W0Gwpvo0+Lzi6QDq5bEqXkqI1vkD2Jq+2ywT1+iTqQN1WfOpZwIR437A4bW nLGHp/oHfNhvIZJt5oOOkGmB2FyJrU/sI/KwctwSzv9hsrtk6d9WrA45qqELd5Tg j2UYOCkoldCGBBX2wfawhoIHjq5ubp9K43xpf5C99T3x+3qPT0RBaUPUeRtU3ETi UO/ckfcK3Vm0xg39yJ75pMgz6z6dtN9PIbf3oqEB/8QfUAjiIl1+1yTfhHt+hWjP LdWMIhctcm1G8LXZbW/e4xTaykhHJa0JrMN1Og1Lc76cSTsz1zIE9s4ya2WKG+8n UpLAVMMwwdy/kpXcbBNmxfFzWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnU+4lE yTSAICk5zWifhHW96JwVMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt2AgxE+xQpddWo6VVLh8H5imsIqnAlVUVCt2BHmc5YT1CfetjkzDX 6y/wUji0B37uJaLF5ngc3CeNb1sVSVogcUfNbQsQ3O3WKP5H4i2QCCMFF6dnLUod lT0sAlODUpUCtpaxz20bl3yHIbDECvFGCBx6mGu6EDuO2nnfo+eNuFDsCyODlzTB iZFobWnxj5GAj3wrAoAtX/MxW1WDWaz+KJQSM66AMqr9SH7fQvNkeM+hNyrwb7pj TCO6OTdzZbTDGS7yRFragLmZ1DLJS5mOXlstlmbEOJVSHmUEiLyEGcWBrEuPiubh Nsx8XrHWIgoySLQ/hYOZ3XgjyMrUG2Kn -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:58 2025 by rpki-client