$ rpki-client -vvf rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft File: wcgOWfy7f9nU7PrDVqlXStKdpSY.mft (raw, json) Hash identifier: yV8Ys1EfuUvzgWuDOiSXTB+sVb4flai583wHJ1IOGcc= Subject key identifier: 20:BB:56:24:EF:F5:27:FB:80:37:40:77:99:12:4A:2B:05:71:F3:08 Authority key identifier: C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26 Certificate issuer: /CN=A913239C/serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526 Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft Manifest number: 064E Signing time: Tue 16 Sep 2025 22:59:22 +0000 Manifest this update: Tue 16 Sep 2025 22:59:21 +0000 Manifest next update: Tue 23 Sep 2025 22:59:21 +0000 Files and hashes: 1: wcgOWfy7f9nU7PrDVqlXStKdpSY.crl (hash: HpbDlCdqPGJqZDvrIUTsWsycniVci/s4D5gTdVSKnP8=) 2: 6585F720AD9911EB8E8DCF82C4F9AE02.roa (hash: JLMlK+xZyu/t2L3tag7JEQmHAg6B/5ocxSM2xR10I4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 22:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913239C, serialNumber=C1C80E59FCBB7FD9D4ECFAC356A9574AD29DA526 Validity Not Before: Sep 16 22:59:21 2025 GMT Not After : Sep 23 22:59:21 2025 GMT Subject: CN=68c9ebc9-55ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:7c:b0:dd:b7:ab:83:f7:59:46:02:bb:12: 6f:4f:82:ba:8d:b2:16:5c:e6:d2:20:b3:b5:c0:f6: f7:de:f1:f9:57:39:16:da:ed:11:50:ee:db:ac:07: ca:ff:61:64:0d:b9:3a:9a:a1:0f:2e:72:c7:e9:9e: d5:e3:0c:37:1b:3a:d5:09:ab:46:94:65:49:93:c1: 9c:f4:1b:3b:b0:bb:13:1d:40:1a:ca:9b:2e:f6:c3: 7a:e5:35:d8:5e:f9:15:c1:30:44:40:9b:3b:12:96: 80:9f:c5:34:77:35:be:cb:59:c2:a3:28:e6:38:6c: 3f:51:a3:b4:5f:ce:1e:66:3c:a6:10:92:6a:4a:64: c7:26:e8:8b:98:63:1c:4d:62:86:12:a8:f2:fa:1f: 03:af:d5:9f:14:5a:82:58:64:e7:f1:a2:e5:fc:e8: 7b:d2:7a:2f:37:4c:1f:f0:dc:af:0c:3d:8b:55:19: 6e:da:d0:67:81:de:fa:90:7e:ca:2f:cc:49:93:32: f3:00:88:f9:3c:73:96:bb:c9:d6:bc:eb:5b:fb:fd: c7:a1:92:10:d5:53:af:7d:ce:6c:0d:4c:b1:42:d3: 01:61:a3:4f:37:07:ae:ab:34:4b:75:c4:82:19:7d: 75:8b:48:54:fe:9c:e7:f0:b7:65:fb:bc:13:9c:4d: a2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:56:24:EF:F5:27:FB:80:37:40:77:99:12:4A:2B:05:71:F3:08 X509v3 Authority Key Identifier: keyid:C1:C8:0E:59:FC:BB:7F:D9:D4:EC:FA:C3:56:A9:57:4A:D2:9D:A5:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcgOWfy7f9nU7PrDVqlXStKdpSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913239C/AEF194CAA12611EBBF83DD67C4F9AE02/wcgOWfy7f9nU7PrDVqlXStKdpSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:01:7f:f6:06:1a:4e:70:65:4c:d9:9a:d9:af:08:67:d6:f7: f9:13:81:57:8c:f0:88:e1:ac:2b:49:6b:f4:c9:e0:8f:64:18: 11:14:bb:ce:c7:d2:88:e9:90:f7:ba:b1:d5:fa:1e:16:b1:96: 39:0c:32:d4:10:c5:b7:ea:1e:52:59:12:9c:84:28:78:33:16: 71:35:e6:ea:e2:bf:1d:14:7f:b2:6a:2d:73:c6:17:10:16:76: 26:d3:ee:e7:3a:4c:95:c2:c8:ba:4b:82:de:f6:64:8b:c3:67: d0:97:c8:8e:2a:27:68:bf:6f:50:37:77:b2:64:bf:ba:83:90: 60:2f:0e:2b:04:92:16:73:bc:95:7c:1b:1e:73:55:f7:f2:d8: 33:43:64:6a:fc:9b:64:4b:30:1b:bc:59:b2:df:31:f4:e6:31: 7d:55:bf:2f:f6:0f:6a:1d:76:71:40:ee:93:0e:c4:6e:f0:ab: 79:9e:43:34:6a:70:fd:b2:2c:0c:d2:a5:56:f0:fa:67:ea:a0: 95:b6:06:6d:17:72:3c:4d:15:b6:97:4c:cc:fb:ef:23:5f:30: d8:dd:44:21:4a:2f:01:c0:81:6c:eb:ad:fc:16:f2:2f:90:e5: ce:c3:58:f1:2b:d9:33:71:cb:c0:68:f1:f6:c7:8e:84:29:7e: e4:31:52:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIzOUMxMTAvBgNVBAUTKEMxQzgwRTU5RkNCQjdGRDlENEVDRkFDMzU2QTk1NzRB RDI5REE1MjYwHhcNMjUwOTE2MjI1OTIxWhcNMjUwOTIzMjI1OTIxWjAYMRYwFAYD VQQDEw02OGM5ZWJjOS01NWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3Z8sN23q4P3WUYCuxJvT4K6jbIWXObSILO1wPb33vH5VzkW2u0RUO7brAfK /2FkDbk6mqEPLnLH6Z7V4ww3GzrVCatGlGVJk8Gc9Bs7sLsTHUAaypsu9sN65TXY XvkVwTBEQJs7EpaAn8U0dzW+y1nCoyjmOGw/UaO0X84eZjymEJJqSmTHJuiLmGMc TWKGEqjy+h8Dr9WfFFqCWGTn8aLl/Oh70novN0wf8NyvDD2LVRlu2tBngd76kH7K L8xJkzLzAIj5PHOWu8nWvOtb+/3HoZIQ1VOvfc5sDUyxQtMBYaNPNweuqzRLdcSC GX11i0hU/pzn8Ldl+7wTnE2iYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCC7ViTv 9Sf7gDdAd5kSSisFcfMIMB8GA1UdIwQYMBaAFMHIDln8u3/Z1Oz6w1apV0rSnaUm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjM5Qy9BRUYxOTRDQUEx MjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5blU3UHJEVnFsWFN0S2Rw U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djZ09XZnk3ZjluVTdQckRWcWxYU3RLZHBTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjM5Qy9BRUYxOTRDQUExMjYxMUVCQkY4M0RENjdDNEY5QUUwMi93Y2dPV2Z5N2Y5 blU3UHJEVnFsWFN0S2RwU1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7AX/2BhpOcGVM2ZrZrwhn1vf5E4FXjPCI4awrSWv0yeCPZBgRFLvO x9KI6ZD3urHV+h4WsZY5DDLUEMW36h5SWRKchCh4MxZxNebq4r8dFH+yai1zxhcQ FnYm0+7nOkyVwsi6S4Le9mSLw2fQl8iOKidov29QN3eyZL+6g5BgLw4rBJIWc7yV fBsec1X38tgzQ2Rq/JtkSzAbvFmy3zH05jF9Vb8v9g9qHXZxQO6TDsRu8Kt5nkM0 anD9siwM0qVW8Ppn6qCVtgZtF3I8TRW2l0zM++8jXzDY3UQhSi8BwIFs6638FvIv kOXOw1jxK9kzccvAaPH2x46EKX7kMVK+ -----END CERTIFICATE-----Generated at Thu Sep 18 23:52:14 2025 by rpki-client