$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft File: wFrpU0_TnWSMKEQ8SNURu6moyv4.mft (raw, json) Hash identifier: UyYyaFIJqfJsNe/ea9u69L7Z+gAYWlh2BodNvcFZXYQ= Subject key identifier: 6D:0A:96:87:BB:06:50:9C:2A:F0:59:47:88:04:F0:07:8F:EB:92:0D Authority key identifier: C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE Certificate issuer: /CN=A917C11F/serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft Manifest number: 061F Signing time: Wed 20 Aug 2025 22:52:27 +0000 Manifest this update: Wed 20 Aug 2025 22:52:26 +0000 Manifest next update: Wed 27 Aug 2025 22:52:26 +0000 Files and hashes: 1: wFrpU0_TnWSMKEQ8SNURu6moyv4.crl (hash: XhQGiI9i1Q94F3ugQtF3JbJUmc0WHni0zPgSsLAj+LY=) 2: 2E7B4D90ACD411EBA8C2F944C4F9AE02.roa (hash: MwOY3BipT7r/AeBZi7pm11RmpGFzpmYVKaT5s//Pc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11F, serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Validity Not Before: Aug 20 22:52:26 2025 GMT Not After : Aug 27 22:52:26 2025 GMT Subject: CN=68a651ab-5ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:94:79:19:5b:c0:39:1b:85:bd:8e:01:83: 82:3b:50:68:6a:71:60:c3:ab:63:2e:b8:4c:e5:cc: c1:f1:da:de:34:56:a5:9f:e4:88:c3:b7:36:a6:e1: ba:80:0c:8d:67:19:38:96:a6:84:4c:25:2c:5b:dd: 4b:9c:99:f4:fe:d4:d9:39:c7:8d:61:77:32:92:25: 65:f5:88:ba:cc:73:65:7e:a0:58:62:93:66:12:18: b9:b4:db:21:e2:2e:cc:a5:a5:1d:66:d8:32:f1:b9: 86:29:a5:99:3d:60:63:8f:83:a1:87:bd:e3:ec:8c: 5b:13:42:78:cd:1d:10:3f:e7:73:bc:3e:28:c9:f8: 54:9a:4d:50:ff:f2:71:1d:9c:83:9e:85:58:cf:53: 23:f6:58:54:52:6e:15:81:ac:4c:64:48:2f:fc:71: 02:02:5e:80:a9:d4:69:73:2c:46:23:c6:e3:f4:3a: 68:51:c9:78:8c:d0:79:1f:97:64:68:52:07:82:42: 41:88:14:43:af:9c:8a:70:5f:18:0e:4c:67:23:11: 86:bf:a6:6b:da:c8:c1:bc:23:36:bd:dd:c7:00:b9: 6d:ac:65:b2:3b:e3:7a:38:63:f1:e7:2a:51:fe:05: 70:a3:82:ba:68:09:d0:08:5d:b1:24:22:97:f9:58: 95:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:96:87:BB:06:50:9C:2A:F0:59:47:88:04:F0:07:8F:EB:92:0D X509v3 Authority Key Identifier: keyid:C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:45:2f:bb:0b:35:03:7e:4b:93:3d:ab:ea:ff:45:26:cb:fe: e5:67:2b:69:2e:e0:00:b0:72:45:db:a9:bb:2f:32:e4:d9:2b: d7:d6:70:d2:fb:52:b6:87:f5:7a:8f:7d:da:16:aa:78:8b:23: 94:ff:50:5a:ec:25:67:e8:53:2f:b2:aa:5b:ed:87:09:12:b2: d9:c1:31:6f:8d:f7:7b:73:e7:9a:0b:ef:63:c4:43:1d:60:6c: 6f:84:64:68:00:04:ad:30:bf:cb:ee:51:c1:4a:52:7a:10:4e: 7d:2c:c0:07:94:8d:35:ed:23:8c:28:6c:49:27:de:f2:64:88: fc:7d:ad:1e:17:7d:f7:3f:88:71:0d:eb:6d:fb:01:9f:dd:23: bb:54:83:87:bc:ad:0f:82:ca:ee:07:29:47:18:ea:af:54:c7: 94:8f:4b:c2:10:0f:20:4b:8a:fd:1c:e4:f2:90:f0:f3:5b:3e: a7:95:ea:3b:4b:51:30:82:ef:ff:dd:7c:13:05:62:bf:92:a0: 28:cc:15:a8:7c:36:97:8e:66:26:65:5f:94:7d:e8:71:49:9c: b2:09:50:1e:f0:f4:5f:05:a8:87:77:aa:7f:d4:37:b8:4c:48: a4:54:e1:f6:52:54:24:25:cc:4b:2e:80:69:e5:13:85:f5:3c: 8a:6b:b1:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUYxMTAvBgNVBAUTKEMwNUFFOTUzNEZEMzlENjQ4QzI4NDQzQzQ4RDUxMUJC QTlBOENBRkUwHhcNMjUwODIwMjI1MjI2WhcNMjUwODI3MjI1MjI2WjAYMRYwFAYD VQQDEw02OGE2NTFhYi01ZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYKUeRlbwDkbhb2OAYOCO1BoanFgw6tjLrhM5czB8dreNFaln+SIw7c2puG6 gAyNZxk4lqaETCUsW91LnJn0/tTZOceNYXcykiVl9Yi6zHNlfqBYYpNmEhi5tNsh 4i7MpaUdZtgy8bmGKaWZPWBjj4Ohh73j7IxbE0J4zR0QP+dzvD4oyfhUmk1Q//Jx HZyDnoVYz1Mj9lhUUm4VgaxMZEgv/HECAl6AqdRpcyxGI8bj9DpoUcl4jNB5H5dk aFIHgkJBiBRDr5yKcF8YDkxnIxGGv6Zr2sjBvCM2vd3HALltrGWyO+N6OGPx5ypR /gVwo4K6aAnQCF2xJCKX+ViV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0Kloe7 BlCcKvBZR4gE8AeP65INMB8GA1UdIwQYMBaAFMBa6VNP051kjChEPEjVEbupqMr+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExRi85RTg4QUUxOEFD RDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5XU01LRVE4U05VUnU2bW95 djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGcnBVMF9UbldTTUtFUThTTlVSdTZtb3l2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExRi85RTg4QUUxOEFDRDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5X U01LRVE4U05VUnU2bW95djQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBORS+7CzUDfkuTPavq/0Umy/7lZytpLuAAsHJF26m7LzLk2SvX1nDS +1K2h/V6j33aFqp4iyOU/1Ba7CVn6FMvsqpb7YcJErLZwTFvjfd7c+eaC+9jxEMd YGxvhGRoAAStML/L7lHBSlJ6EE59LMAHlI017SOMKGxJJ97yZIj8fa0eF333P4hx Dett+wGf3SO7VIOHvK0PgsruBylHGOqvVMeUj0vCEA8gS4r9HOTykPDzWz6nleo7 S1Ewgu//3XwTBWK/kqAozBWofDaXjmYmZV+UfehxSZyyCVAe8PRfBaiHd6p/1De4 TEikVOH2UlQkJcxLLoBp5ROF9TyKa7Hr -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:20 2025 by rpki-client