$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft File: WapOuYXqXAVIVAS0XMNUp9Ghpso.mft (raw, json) Hash identifier: du6Jyd7GrfRY5wM5bXLEwUfFc4TMlPCEjHBZujscLpU= Subject key identifier: 56:1C:C6:2B:B6:75:16:0A:0C:64:3B:76:1F:DF:CF:81:6A:30:BB:8E Authority key identifier: 59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA Certificate issuer: /CN=A91689C8/serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft Manifest number: 0237 Signing time: Thu 21 Aug 2025 02:39:58 +0000 Manifest this update: Thu 21 Aug 2025 02:39:58 +0000 Manifest next update: Thu 28 Aug 2025 02:39:58 +0000 Files and hashes: 1: WapOuYXqXAVIVAS0XMNUp9Ghpso.crl (hash: FoPyAU4U7shMhjKV+dCpcaYNhQoKTt/JhkqxYIvXufI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=59AA4EB985EA5C05485404B45CC354A7D1A1A6CA Validity Not Before: Aug 21 02:39:58 2025 GMT Not After : Aug 28 02:39:58 2025 GMT Subject: CN=68a686fe-2588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:f7:a8:a4:ef:c0:7b:4c:3c:86:74:29:f7: 02:b1:90:cd:c7:42:17:0f:86:dc:de:0d:2a:2f:aa: e2:31:d3:67:ba:f3:95:76:b6:d9:57:d4:69:c9:4d: db:fa:2e:e2:1c:18:cf:10:49:29:20:b4:c5:c5:e3: d7:1c:41:be:ce:e2:fd:bd:d5:6b:09:bd:38:bc:65: de:af:39:5f:24:67:79:80:50:60:cc:0a:57:92:76: c6:5d:0e:f7:2b:33:3e:00:20:f9:28:49:e3:41:00: 5f:28:6c:ff:f5:11:a0:8e:53:a0:22:46:14:e4:5e: 12:ac:b6:73:c8:af:1f:fb:e8:b8:c1:94:8c:44:7e: ef:bd:e0:01:8d:33:16:bf:a4:5b:86:f7:67:ec:9c: 69:db:37:f8:bb:60:93:5d:ce:dd:ea:a8:d6:a0:e7: ed:53:7c:d6:7a:68:bf:de:57:0b:92:96:74:68:ff: 04:8e:28:bb:60:93:3d:3e:fe:b7:c4:f0:eb:31:35: 03:6f:d0:c3:1d:c4:bc:a1:5f:08:96:54:34:6b:b4: b0:9e:79:45:ad:1c:df:10:07:66:ab:04:2d:d7:24: b7:6a:9b:65:b4:86:e5:79:c5:b1:4e:a0:2a:ae:92: a7:50:0f:2d:9e:5e:78:09:06:b0:14:93:0d:f8:b6: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1C:C6:2B:B6:75:16:0A:0C:64:3B:76:1F:DF:CF:81:6A:30:BB:8E X509v3 Authority Key Identifier: keyid:59:AA:4E:B9:85:EA:5C:05:48:54:04:B4:5C:C3:54:A7:D1:A1:A6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WapOuYXqXAVIVAS0XMNUp9Ghpso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/WapOuYXqXAVIVAS0XMNUp9Ghpso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:80:b0:7c:bb:f1:0e:0e:ca:a8:5c:d9:6b:99:01:d8:0c:bd: 2c:ec:a7:bd:2b:19:f2:18:fa:68:1e:20:9c:a0:6c:b5:48:94: 8c:c6:ec:13:6e:31:21:76:b7:ee:b6:57:9e:0b:13:a9:2b:ec: fb:ff:7a:4c:6b:50:e4:cb:16:aa:c1:0d:5d:aa:b9:9e:c0:3a: d3:e3:85:51:07:8e:f5:89:dd:ba:d5:c2:a1:f5:92:5e:25:61: c6:09:0f:f2:2f:14:c4:9e:a2:c1:a3:d4:e3:67:20:6d:d4:86: 1a:aa:2e:5b:c5:be:8a:33:9f:ea:d0:5f:48:a7:17:68:40:1a: 70:a6:79:5b:77:b6:d2:90:ab:0f:9b:10:e4:c4:6e:6f:14:0b: 9f:b7:3d:96:31:01:38:91:86:53:18:f8:f5:9d:bc:35:e0:b7: 90:ba:85:18:0c:27:d9:06:8d:26:f9:c1:a0:a1:42:7e:9b:ef: 9b:22:25:b5:32:14:32:4a:72:41:c6:0a:d4:8c:42:99:8e:81: 11:c8:b0:a8:f8:88:8a:11:a9:a1:cd:c4:d8:58:81:35:c7:16: bc:04:52:41:63:d9:ae:2e:47:93:77:01:f5:de:c7:4a:15:be: 92:55:af:bf:e9:e6:64:a6:0e:01:d7:14:cb:91:3f:74:a4:d7: 8c:01:41:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKDU5QUE0RUI5ODVFQTVDMDU0ODU0MDRCNDVDQzM1NEE3 RDFBMUE2Q0EwHhcNMjUwODIxMDIzOTU4WhcNMjUwODI4MDIzOTU4WjAYMRYwFAYD VQQDEw02OGE2ODZmZS0yNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4v3qKTvwHtMPIZ0KfcCsZDNx0IXD4bc3g0qL6riMdNnuvOVdrbZV9RpyU3b +i7iHBjPEEkpILTFxePXHEG+zuL9vdVrCb04vGXerzlfJGd5gFBgzApXknbGXQ73 KzM+ACD5KEnjQQBfKGz/9RGgjlOgIkYU5F4SrLZzyK8f++i4wZSMRH7vveABjTMW v6Rbhvdn7Jxp2zf4u2CTXc7d6qjWoOftU3zWemi/3lcLkpZ0aP8Ejii7YJM9Pv63 xPDrMTUDb9DDHcS8oV8IllQ0a7SwnnlFrRzfEAdmqwQt1yS3aptltIblecWxTqAq rpKnUA8tnl54CQawFJMN+LZOSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYcxiu2 dRYKDGQ7dh/fz4FqMLuOMB8GA1UdIwQYMBaAFFmqTrmF6lwFSFQEtFzDVKfRoabK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhBVklWQVMwWE1OVXA5R2hw c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhcE91WVhxWEFWSVZBUzBYTU5VcDlHaHBzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9XYXBPdVlYcVhB VklWQVMwWE1OVXA5R2hwc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqgLB8u/EODsqoXNlrmQHYDL0s7Ke9KxnyGPpoHiCcoGy1SJSMxuwT bjEhdrfutleeCxOpK+z7/3pMa1DkyxaqwQ1dqrmewDrT44VRB471id261cKh9ZJe JWHGCQ/yLxTEnqLBo9TjZyBt1IYaqi5bxb6KM5/q0F9IpxdoQBpwpnlbd7bSkKsP mxDkxG5vFAuftz2WMQE4kYZTGPj1nbw14LeQuoUYDCfZBo0m+cGgoUJ+m++bIiW1 MhQySnJBxgrUjEKZjoERyLCo+IiKEamhzcTYWIE1xxa8BFJBY9muLkeTdwH13sdK Fb6SVa+/6eZkpg4B1xTLkT90pNeMAUFq -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:13 2025 by rpki-client