$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: A+GyfqrS4RHeTHaBgABii4xxOIHGTdOclaNMFkPT5e8= Subject key identifier: 0E:1F:6C:BA:EE:CA:82:9F:69:CB:1A:69:FA:A9:FB:BF:40:3B:1B:88 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 13C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 13A7 Signing time: Sun 24 Aug 2025 16:57:00 +0000 Manifest this update: Sun 24 Aug 2025 16:57:00 +0000 Manifest next update: Sun 31 Aug 2025 16:57:00 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: DZLy59jD+ef+41/1Niq7lRjyJGN+w3+JZN2rIyqZy44=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5064 (0x13c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Aug 24 16:57:00 2025 GMT Not After : Aug 31 16:57:00 2025 GMT Subject: CN=68ab445c-d361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:d8:16:ac:b6:4d:41:3c:03:83:f3:d9:61: ca:e7:b4:b7:36:de:6f:38:bd:00:f6:ab:ec:9b:f9: 5a:2c:37:ea:a8:55:79:6d:a5:be:8f:11:57:7d:36: cf:7e:88:a6:41:75:32:cf:92:5c:da:2f:12:45:cb: d6:93:51:5d:81:86:a3:2d:43:cd:4e:1f:62:fb:6b: e3:e8:3d:6d:a2:c1:0f:3f:43:3f:7b:02:0b:da:40: 58:40:13:aa:ea:20:f8:5e:e6:4b:9e:be:70:dd:c7: 1b:19:d4:14:6c:eb:cd:a2:18:50:bd:44:1c:64:e5: 6e:74:db:e8:59:3e:68:71:49:50:b1:9f:8a:e3:8c: 73:56:8d:e9:29:c9:08:45:60:e0:1e:3c:67:1b:fa: bc:cd:99:ea:08:e6:31:11:74:2b:36:97:ca:49:fe: 0b:66:35:e7:27:70:84:92:4b:65:c3:89:47:38:67: 13:0b:08:39:bb:75:c6:e6:a0:75:51:ca:5a:8e:78: 58:02:ec:0c:f6:d7:82:a6:af:1d:10:6c:c3:fb:12: 98:5d:6a:01:b8:cf:31:1f:ab:1c:6e:ee:fe:de:25: 33:ab:a5:4c:a9:ad:f0:9a:8f:1e:e3:c2:ca:9d:bd: 1e:20:06:06:ba:af:f2:2b:bb:b9:6e:6c:11:59:88: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:6C:BA:EE:CA:82:9F:69:CB:1A:69:FA:A9:FB:BF:40:3B:1B:88 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:86:ae:95:34:f5:4b:a6:07:dc:a4:68:ea:44:9c:28:de:f7: 79:81:da:eb:e2:de:03:2e:af:61:30:18:dd:f9:24:ff:3c:67: e3:0f:a6:f5:4a:31:29:83:04:7c:60:33:63:c3:a9:66:e8:65: 79:ab:44:21:fc:94:b8:16:c5:14:23:01:fc:e3:33:f4:76:d0: 51:d9:07:e5:25:c0:15:4a:a2:f1:df:cf:3a:49:fd:b0:89:8c: 1a:a3:eb:6f:31:f7:4b:48:2f:bf:0f:bc:43:1d:c9:44:e8:86: 5f:84:96:a3:cf:60:0f:dc:32:04:8a:fe:58:f5:76:fb:16:ef: 2d:32:bf:50:fb:6e:c1:9b:43:1a:66:0f:07:65:a7:78:f2:e4: 56:11:7a:47:c3:4f:ab:9f:ac:fc:dc:45:72:f1:46:cc:a9:5c: 77:fc:7b:ba:ba:91:8b:2c:51:2c:1e:d5:82:50:ec:c6:15:14: b8:2c:63:fd:7e:ee:88:d0:2f:47:68:9a:b5:44:b9:02:5c:e1: c4:75:39:79:aa:c9:01:77:82:77:a5:d0:54:e4:6a:b1:8e:98: 36:8d:eb:a2:bf:a2:1b:82:7f:aa:16:46:ac:46:19:8e:14:da: ec:ed:b8:95:ef:3c:6a:9d:87:94:d8:f6:e2:27:96:e3:73:b1: 15:73:c6:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUwODI0MTY1NzAwWhcNMjUwODMxMTY1NzAwWjAYMRYwFAYD VQQDEw02OGFiNDQ1Yy1kMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOXYFqy2TUE8A4Pz2WHK57S3Nt5vOL0A9qvsm/laLDfqqFV5baW+jxFXfTbP foimQXUyz5Jc2i8SRcvWk1FdgYajLUPNTh9i+2vj6D1tosEPP0M/ewIL2kBYQBOq 6iD4XuZLnr5w3ccbGdQUbOvNohhQvUQcZOVudNvoWT5ocUlQsZ+K44xzVo3pKckI RWDgHjxnG/q8zZnqCOYxEXQrNpfKSf4LZjXnJ3CEkktlw4lHOGcTCwg5u3XG5qB1 UcpajnhYAuwM9teCpq8dEGzD+xKYXWoBuM8xH6scbu7+3iUzq6VMqa3wmo8e48LK nb0eIAYGuq/yK7u5bmwRWYh1awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4fbLru yoKfacsaafqp+79AOxuIMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdhq6VNPVLpgfcpGjqRJwo3vd5gdrr4t4DLq9hMBjd+ST/PGfjD6b1 SjEpgwR8YDNjw6lm6GV5q0Qh/JS4FsUUIwH84zP0dtBR2QflJcAVSqLx3886Sf2w iYwao+tvMfdLSC+/D7xDHclE6IZfhJajz2AP3DIEiv5Y9Xb7Fu8tMr9Q+27Bm0Ma Zg8HZad48uRWEXpHw0+rn6z83EVy8UbMqVx3/Hu6upGLLFEsHtWCUOzGFRS4LGP9 fu6I0C9HaJq1RLkCXOHEdTl5qskBd4J3pdBU5Gqxjpg2jeuiv6Ibgn+qFkasRhmO FNrs7biV7zxqnYeU2PbiJ5bjc7EVc8Yg -----END CERTIFICATE-----Generated at Sun Aug 24 22:21:01 2025 by rpki-client