$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: JGlAc/xxSKiT0BuGo9McaipFWqeWgDCcZOb+kWjjQQg= Subject key identifier: 3E:D0:3B:23:2D:04:B8:C8:AF:DC:49:DE:A8:EC:FD:61:96:52:13:B3 Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 01A8 Signing time: Wed 17 Sep 2025 03:52:49 +0000 Manifest this update: Wed 17 Sep 2025 03:52:49 +0000 Manifest next update: Wed 24 Sep 2025 03:52:49 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: yhwHjGO3vSSVGm9LmAscPB0CvF3eJB1oKCV8c/YU5EQ=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: iYf3jZc2jKBrmv31rxXM38VJ1nI1w/3LYJauL+zzxXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Sep 17 03:52:49 2025 GMT Not After : Sep 24 03:52:49 2025 GMT Subject: CN=68ca3091-611a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:75:f1:c5:21:5f:1f:bc:77:40:5e:8d:ec: 78:f4:e8:6a:3b:a5:d5:be:9a:ef:61:fa:ce:ad:be: d9:6e:a7:6d:dc:46:ce:ab:95:30:d4:53:cd:1e:d0: 2f:7f:88:ce:b6:3e:d9:14:65:d6:7c:d5:34:d4:22: 97:e2:ef:62:72:d8:70:e0:c0:43:7d:78:0a:e5:f2: 75:b8:c2:bb:18:88:a9:3c:3a:41:4a:49:ee:26:04: 6d:4a:12:0e:01:7c:30:94:25:4d:63:08:35:40:51: ca:de:97:71:20:a4:0a:fa:f2:6e:30:a1:94:f6:b5: d5:b6:34:71:78:88:94:98:6d:84:d4:00:25:9c:7d: 38:ed:d5:e0:70:94:3b:91:88:5d:b2:1f:18:90:dd: e9:91:dc:4f:9a:95:3d:27:ec:3b:ff:35:3d:9a:31: 66:60:81:f8:7f:79:cd:7e:50:30:ff:ad:4f:22:de: 6b:ba:8d:69:fe:e5:5a:b1:a2:4b:58:22:4b:b1:83: db:45:ad:4c:91:d6:4c:78:4d:c8:0b:7a:94:b9:64: e6:ae:97:5e:d3:48:62:23:38:95:ce:d3:78:08:73: 15:a6:fc:e6:41:45:26:7b:58:3d:cf:24:6f:b3:33: f0:cd:c2:df:67:17:03:58:64:c7:b9:9c:3e:0c:cc: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D0:3B:23:2D:04:B8:C8:AF:DC:49:DE:A8:EC:FD:61:96:52:13:B3 X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:08:e0:4a:60:36:1a:67:b7:31:58:39:0d:fc:75:03:28:8d: 42:7d:e4:06:d2:08:aa:45:b5:3a:c1:ad:96:56:1b:7e:e4:ad: 78:d1:97:8e:fc:5f:69:7f:55:cd:bd:f9:60:06:a1:42:07:27: 57:27:61:6c:2b:60:44:7c:1a:b6:07:5d:e8:b9:7e:fb:24:01: 24:f4:9b:52:d2:71:8b:28:27:d3:4a:8a:3e:e8:54:09:6c:85: b2:b1:98:c6:be:aa:6c:72:b5:7f:b5:9a:04:df:8e:60:20:71: 51:99:92:4c:19:ca:bf:a2:ab:ac:49:ad:96:a0:88:be:10:0a: c5:9a:78:ee:bd:01:86:57:c1:eb:29:1c:d1:79:b2:61:76:22: fc:99:48:1b:c3:a3:5b:5d:4e:5e:46:d6:18:e4:8d:60:02:52: 91:c8:87:66:50:ab:64:51:6a:0e:63:45:59:51:2a:46:45:27: 18:ee:71:8f:72:0a:bb:36:57:dc:16:dc:dd:5b:2c:ea:cc:c3: b2:e4:f4:fa:39:33:c0:7e:d4:8c:f5:68:42:f2:e7:a2:87:b7: 41:83:08:5a:af:a8:2c:b2:e5:86:e1:a1:51:d4:f3:3d:34:d8: 4e:68:14:6b:46:06:03:2b:ef:1f:07:a7:1d:22:8d:6b:8d:82: a6:bd:9f:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUwOTE3MDM1MjQ5WhcNMjUwOTI0MDM1MjQ5WjAYMRYwFAYD VQQDEw02OGNhMzA5MS02MTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTF18cUhXx+8d0Bejex49OhqO6XVvprvYfrOrb7Zbqdt3EbOq5Uw1FPNHtAv f4jOtj7ZFGXWfNU01CKX4u9icthw4MBDfXgK5fJ1uMK7GIipPDpBSknuJgRtShIO AXwwlCVNYwg1QFHK3pdxIKQK+vJuMKGU9rXVtjRxeIiUmG2E1AAlnH047dXgcJQ7 kYhdsh8YkN3pkdxPmpU9J+w7/zU9mjFmYIH4f3nNflAw/61PIt5ruo1p/uVasaJL WCJLsYPbRa1MkdZMeE3IC3qUuWTmrpde00hiIziVztN4CHMVpvzmQUUme1g9zyRv szPwzcLfZxcDWGTHuZw+DMzHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7QOyMt BLjIr9xJ3qjs/WGWUhOzMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbCOBKYDYaZ7cxWDkN/HUDKI1CfeQG0giqRbU6wa2WVht+5K140ZeO /F9pf1XNvflgBqFCBydXJ2FsK2BEfBq2B13ouX77JAEk9JtS0nGLKCfTSoo+6FQJ bIWysZjGvqpscrV/tZoE345gIHFRmZJMGcq/oqusSa2WoIi+EArFmnjuvQGGV8Hr KRzRebJhdiL8mUgbw6NbXU5eRtYY5I1gAlKRyIdmUKtkUWoOY0VZUSpGRScY7nGP cgq7NlfcFtzdWyzqzMOy5PT6OTPAftSM9WhC8ueih7dBgwhar6gssuWG4aFR1PM9 NNhOaBRrRgYDK+8fB6cdIo1rjYKmvZ9F -----END CERTIFICATE-----Generated at Thu Sep 18 04:17:16 2025 by rpki-client