$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft File: wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json) Hash identifier: cv5EuaIgXrki4vaZYmzSPT7hhdYFHL+c6jiA5Lgyy8c= Subject key identifier: 0C:C0:A9:66:28:88:41:B8:25:66:3F:46:9E:F7:45:CB:BD:C3:0B:40 Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft Manifest number: 0877 Signing time: Sat 06 Sep 2025 20:53:08 +0000 Manifest this update: Sat 06 Sep 2025 20:53:07 +0000 Manifest next update: Sat 13 Sep 2025 20:53:07 +0000 Files and hashes: 1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: klKPdgTdki45il9C/Xt3jM7NAaHaF2F1ndpdgiOy3Yc=) 2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: zFR7H0I05Qw/TO5ZHqVPc5vZPqDppqV5WtkiH3GvXLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Validity Not Before: Sep 6 20:53:07 2025 GMT Not After : Sep 13 20:53:07 2025 GMT Subject: CN=68bc9f34-b667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:68:f1:0c:ee:be:ab:2e:d9:77:13:b0:33: 9f:30:45:50:44:13:a1:eb:a0:de:2b:5d:ad:cb:ca: a0:14:56:35:ae:86:01:d9:a2:2e:76:80:b5:4f:15: cb:f7:bf:12:51:88:56:0b:e4:20:7e:e1:34:72:2d: 25:45:c9:97:9a:fe:d4:7a:14:90:d4:5f:27:01:82: 63:f7:c4:e3:90:5a:db:54:0f:55:9e:fe:2c:bb:f8: 67:ab:0b:32:12:ee:55:c4:bb:00:ab:60:4c:23:b7: 1a:4c:6d:21:15:9d:3e:20:67:7e:a5:ec:bf:4d:91: 85:96:78:f3:23:3d:21:b8:04:69:ae:64:6c:00:d3: 10:64:f1:ce:89:df:6d:bb:b9:20:b0:c4:60:c0:d5: c4:ba:34:8d:cc:67:b7:cd:6a:28:10:1d:be:6b:23: aa:07:c3:cc:f7:ae:3d:88:5d:91:ad:ee:79:68:87: 01:6f:0b:ae:28:7a:3e:49:e5:bc:95:4e:bb:a4:db: 7b:e4:c7:03:10:07:0f:6f:0e:a3:8f:c5:87:c3:b7: a3:d8:9b:2e:d7:05:31:e4:b1:db:5c:1c:3b:77:58: fb:b3:f2:26:4b:4e:eb:96:b8:4c:87:84:88:02:cc: 51:c8:fd:4b:6d:74:77:77:4d:cf:f6:b0:5f:38:15: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C0:A9:66:28:88:41:B8:25:66:3F:46:9E:F7:45:CB:BD:C3:0B:40 X509v3 Authority Key Identifier: keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:10:31:3f:c6:0c:9c:a8:30:f6:a0:cb:30:70:3b:aa:5b:a9: c2:a3:4f:c0:81:23:05:64:9b:92:0c:ee:ba:4a:72:86:75:e4: 99:7e:89:35:cb:1a:19:42:38:8e:99:eb:be:fb:5f:38:f2:3d: 5f:44:f3:51:dd:8d:65:d7:07:bf:3b:b7:a1:74:6d:2f:07:35: c1:48:8c:05:28:5e:4c:3d:8b:61:9a:6b:44:72:6a:e4:40:b7: 31:99:7a:bb:c9:c1:08:6a:27:e8:dd:cc:56:30:04:12:d6:73: 03:0b:af:5d:52:e5:df:7f:38:69:a2:44:13:0b:cb:05:87:9a: c0:e2:ef:10:7f:67:53:45:d1:08:b6:33:f7:c1:c2:18:ec:de: d1:1b:5a:1d:e8:7c:ef:70:e5:4f:08:06:1e:c7:e0:1c:54:c2: bf:04:9a:f8:ab:70:4a:11:d1:d5:e3:d9:d8:62:ac:ae:fd:6d: 51:41:30:2c:db:54:11:e5:6e:71:5d:b4:b8:3b:0e:69:01:8d: 1e:68:d9:7f:6f:90:b3:da:5d:71:e5:7d:90:18:80:94:98:25: c8:0c:5b:ee:51:4b:36:12:dd:24:07:10:5b:8e:2c:4c:9c:f0: 86:76:44:31:55:29:ea:71:00:22:5d:03:ce:dc:db:c3:a9:eb: d6:d6:c9:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERDMxMTAvBgNVBAUTKEMyRTBCNTgzREE0MERCNkREODMzMDUxQzA1MjQ1OTlF MUE1OTAyQzYwHhcNMjUwOTA2MjA1MzA3WhcNMjUwOTEzMjA1MzA3WjAYMRYwFAYD VQQDEw02OGJjOWYzNC1iNjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF5o8Qzuvqsu2XcTsDOfMEVQRBOh66DeK12ty8qgFFY1roYB2aIudoC1TxXL 978SUYhWC+QgfuE0ci0lRcmXmv7UehSQ1F8nAYJj98TjkFrbVA9Vnv4su/hnqwsy Eu5VxLsAq2BMI7caTG0hFZ0+IGd+pey/TZGFlnjzIz0huARprmRsANMQZPHOid9t u7kgsMRgwNXEujSNzGe3zWooEB2+ayOqB8PM9649iF2Rre55aIcBbwuuKHo+SeW8 lU67pNt75McDEAcPbw6jj8WHw7ej2Jsu1wUx5LHbXBw7d1j7s/ImS07rlrhMh4SI AsxRyP1LbXR3d03P9rBfOBWQfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzAqWYo iEG4JWY/Rp73Rcu9wwtAMB8GA1UdIwQYMBaAFMLgtYPaQNtt2DMFHAUkWZ4aWQLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0REMy8wRDcxNTAzMkQw OTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIyM1lNd1VjQlNSWm5ocFpB c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d1QzFnOXBBMjIzWU13VWNCU1JabmhwWkFzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0REMy8wRDcxNTAzMkQwOTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIy M1lNd1VjQlNSWm5ocFpBc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLEDE/xgycqDD2oMswcDuqW6nCo0/AgSMFZJuSDO66SnKGdeSZfok1 yxoZQjiOmeu++1848j1fRPNR3Y1l1we/O7ehdG0vBzXBSIwFKF5MPYthmmtEcmrk QLcxmXq7ycEIaifo3cxWMAQS1nMDC69dUuXffzhpokQTC8sFh5rA4u8Qf2dTRdEI tjP3wcIY7N7RG1od6HzvcOVPCAYex+AcVMK/BJr4q3BKEdHV49nYYqyu/W1RQTAs 21QR5W5xXbS4Ow5pAY0eaNl/b5Cz2l1x5X2QGICUmCXIDFvuUUs2Et0kBxBbjixM nPCGdkQxVSnqcQAiXQPO3NvDqevW1snl -----END CERTIFICATE-----Generated at Sun Sep 7 22:02:32 2025 by rpki-client