$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft File: wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft (raw, json) Hash identifier: i0ye0bz3tE9D/7WB4v1/QORtQ17KywOLgsAN2fhAbZw= Subject key identifier: A6:DE:5D:0D:32:70:A3:03:1B:55:4E:BF:62:62:B4:AF:89:0F:ED:58 Authority key identifier: C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 Certificate issuer: /CN=A914400E/serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft Manifest number: 0110 Signing time: Thu 21 Aug 2025 05:03:24 +0000 Manifest this update: Thu 21 Aug 2025 05:03:24 +0000 Manifest next update: Thu 28 Aug 2025 05:03:24 +0000 Files and hashes: 1: wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl (hash: cuF3Ljj0ip/cSQm/kSgavqfKcg4jw9lqNDM/CXK8Z7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=C19D6B6DEB3A1F9C39847E14CAA55997BC9CF276 Validity Not Before: Aug 21 05:03:24 2025 GMT Not After : Aug 28 05:03:24 2025 GMT Subject: CN=68a6a89c-1fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:f1:23:5e:82:ad:53:bb:6d:f2:51:73:bc: e6:d7:d7:e3:89:a8:11:28:f8:99:6a:60:62:be:9b: f2:64:01:64:25:d6:de:3a:3a:04:d4:e1:89:9a:ff: a2:ca:21:b3:50:26:1d:3e:ef:04:a8:4b:ef:65:79: c9:0f:2e:c5:f6:c5:de:2f:81:ca:ae:53:7c:df:75: 0d:bf:9a:5c:fd:a0:dd:54:b6:97:d3:7e:32:a2:02: 7a:8e:f2:b1:e7:2e:d1:d4:3e:ae:21:65:8c:15:df: a9:33:10:52:d7:09:8f:0e:62:49:97:a2:71:4a:98: 14:e2:b8:c4:ef:d6:8a:1c:35:5d:cd:46:9e:eb:5e: d8:89:b7:19:79:b0:c0:7e:38:51:a7:73:9f:a8:37: 1b:cf:71:0d:96:d9:71:e2:79:f9:b3:64:8b:5c:b8: 9a:89:9a:cf:c9:55:5c:5d:6d:27:53:db:ab:c5:71: 0e:3f:58:c9:c5:59:3f:b2:9d:39:02:8f:48:ac:8b: f7:3d:50:63:a4:8c:e7:6d:32:ef:53:08:ce:62:19: 4a:a4:cc:13:e4:af:ae:93:7c:4c:d4:d5:0a:a3:31: 82:6a:ee:3d:f4:a4:c8:c8:1a:af:f7:67:c3:8b:6c: df:44:70:31:1f:99:77:d2:2b:0f:c6:02:da:71:91: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:5D:0D:32:70:A3:03:1B:55:4E:BF:62:62:B4:AF:89:0F:ED:58 X509v3 Authority Key Identifier: keyid:C1:9D:6B:6D:EB:3A:1F:9C:39:84:7E:14:CA:A5:59:97:BC:9C:F2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZ1rbes6H5w5hH4UyqVZl7yc8nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/CEDA52C4D94811EEBA34B47BC4F9AE02/wZ1rbes6H5w5hH4UyqVZl7yc8nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8b:4d:2c:e1:2f:6f:96:e2:07:f1:72:a0:b2:4e:79:a0:5c: 10:c9:d0:6c:34:0a:e8:8d:96:ef:d5:07:46:72:d3:40:99:45: a4:ae:93:f4:73:58:7a:fa:99:02:5d:4a:5a:53:ce:2b:a4:5a: ea:ff:37:1d:6e:c7:3a:b4:0a:3a:5c:4f:f0:17:a2:18:ac:5e: bc:c3:28:b2:c7:85:f6:9b:01:5e:81:b6:e5:e6:24:64:41:0e: 8f:ed:d1:e4:1f:b6:35:54:c8:46:45:fb:fe:1c:13:3c:97:81: c7:d8:f4:79:0f:84:71:c4:2c:b0:85:35:96:dc:b6:53:4b:32: d4:cb:86:c5:47:44:46:e9:7b:43:72:85:50:91:1a:94:01:c7: a5:6f:44:4e:bc:6c:95:54:60:f5:e2:48:cc:05:3d:d2:e3:5b: 73:40:c6:24:1a:a6:68:78:e5:0e:89:6f:3d:3d:ba:c3:af:9f: 23:f4:72:b6:0b:1c:56:ff:9d:81:5f:9b:a9:00:88:c6:e0:de: 7c:94:34:44:ba:69:25:7d:54:a4:3d:63:8c:7a:af:ba:e6:45: 91:49:e5:d5:80:ae:a9:50:ee:38:fe:19:af:1d:45:f6:95:98: 7e:b7:d8:f6:a2:0d:15:e7:78:c1:73:de:6e:92:13:b6:ae:03: e7:a3:c1:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKEMxOUQ2QjZERUIzQTFGOUMzOTg0N0UxNENBQTU1OTk3 QkM5Q0YyNzYwHhcNMjUwODIxMDUwMzI0WhcNMjUwODI4MDUwMzI0WjAYMRYwFAYD VQQDEw02OGE2YTg5Yy0xZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqXxI16CrVO7bfJRc7zm19fjiagRKPiZamBivpvyZAFkJdbeOjoE1OGJmv+i yiGzUCYdPu8EqEvvZXnJDy7F9sXeL4HKrlN833UNv5pc/aDdVLaX034yogJ6jvKx 5y7R1D6uIWWMFd+pMxBS1wmPDmJJl6JxSpgU4rjE79aKHDVdzUae617YibcZebDA fjhRp3OfqDcbz3ENltlx4nn5s2SLXLiaiZrPyVVcXW0nU9urxXEOP1jJxVk/sp05 Ao9IrIv3PVBjpIznbTLvUwjOYhlKpMwT5K+uk3xM1NUKozGCau499KTIyBqv92fD i2zfRHAxH5l30isPxgLacZHfHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbeXQ0y cKMDG1VOv2JitK+JD+1YMB8GA1UdIwQYMBaAFMGda23rOh+cOYR+FMqlWZe8nPJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DRURBNTJDNEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1dzVoSDRVeXFWWmw3eWM4 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3daMXJiZXM2SDV3NWhINFV5cVZabDd5YzhuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DRURBNTJDNEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi93WjFyYmVzNkg1 dzVoSDRVeXFWWmw3eWM4blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWi00s4S9vluIH8XKgsk55oFwQydBsNArojZbv1QdGctNAmUWkrpP0 c1h6+pkCXUpaU84rpFrq/zcdbsc6tAo6XE/wF6IYrF68wyiyx4X2mwFegbbl5iRk QQ6P7dHkH7Y1VMhGRfv+HBM8l4HH2PR5D4RxxCywhTWW3LZTSzLUy4bFR0RG6XtD coVQkRqUAcelb0ROvGyVVGD14kjMBT3S41tzQMYkGqZoeOUOiW89PbrDr58j9HK2 CxxW/52BX5upAIjG4N58lDREumklfVSkPWOMeq+65kWRSeXVgK6pUO44/hmvHUX2 lZh+t9j2og0V53jBc95ukhO2rgPno8HR -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:23 2025 by rpki-client