$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json) Hash identifier: qQ+gQ/YVrVNRbdBh7SyWgjoluRlpdI4crIl5KDQYLaE= Subject key identifier: 40:A6:56:95:E7:99:23:35:C7:77:7E:A6:E5:C2:39:91:93:B1:F6:12 Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Certificate serial: 0F73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft Manifest number: 0F6B Signing time: Fri 18 Jul 2025 17:43:08 +0000 Manifest this update: Fri 18 Jul 2025 17:43:08 +0000 Manifest next update: Fri 25 Jul 2025 17:43:08 +0000 Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: oTDxHHLyVCXoaBjZMRCK16lISBeJ78+HA63Ir1fpz9M=) 2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: OgNGu/mRKm6xVdHYanAV24opwQSD/lMEZY85nUgEHHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Validity Not Before: Jul 18 17:43:08 2025 GMT Not After : Jul 25 17:43:08 2025 GMT Subject: CN=687a87ac-31ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fc:f9:48:5d:71:d8:5b:ed:3f:4c:eb:f2:ce: b7:0c:e9:ff:c6:b4:19:c0:04:92:7c:54:d2:9a:84: 25:03:fe:56:51:d7:97:32:77:66:a9:08:d5:66:f5: 8c:9c:a2:32:3c:57:9b:56:60:3c:13:9c:fa:d1:84: 6a:a4:e1:93:e0:35:5c:31:ad:fd:f5:69:87:e2:88: f1:0b:32:bb:48:b0:9f:d0:d0:b0:86:ac:90:d1:09: e0:16:63:fa:6c:4e:24:56:bf:fd:58:eb:1b:13:dc: c3:09:2a:4a:2d:94:fd:93:f4:ea:b2:e7:44:4e:21: da:c4:3e:60:08:d1:5c:3e:ef:1e:6e:23:6e:39:4d: f0:33:58:06:5d:30:8d:a1:3c:66:4c:bc:66:2c:d0: 9d:90:4f:f9:c9:1d:e8:7d:97:c1:a9:3d:bd:ad:a3: 9c:7b:dc:96:2b:2f:c8:dd:3e:ce:d5:87:0d:4d:ae: 09:d2:8f:db:45:46:86:a4:6b:5f:13:49:66:2b:0c: ce:a7:41:eb:ad:e6:45:62:56:ef:a5:17:c9:f0:4c: 2b:b4:8c:bc:46:d8:2e:0e:fc:7d:75:a0:1b:0a:f2: cc:bf:77:f4:17:f2:c3:59:9f:56:b1:ea:3a:2a:07: 90:1c:9e:17:0b:e0:7c:1b:74:6c:14:44:91:4a:05: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A6:56:95:E7:99:23:35:C7:77:7E:A6:E5:C2:39:91:93:B1:F6:12 X509v3 Authority Key Identifier: keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:00:41:42:c0:17:bf:b5:19:5a:33:ea:73:ef:96:f3:22:f3: 48:31:54:94:8e:36:05:26:e9:1c:13:50:c1:07:9d:f6:26:77: 99:78:2f:32:a9:86:64:ec:ba:03:a8:b1:c0:eb:47:79:0e:ba: ca:90:cc:d3:5d:0c:2c:ad:d7:19:c8:4b:0b:31:80:e1:dd:60: 7e:3d:92:62:37:c5:48:ba:bb:18:10:9b:74:f4:bb:9f:e4:9f: 83:e1:3d:56:41:86:95:00:82:c2:bd:43:ee:65:39:c9:b4:21: 7e:83:2b:ae:1d:ce:0d:66:b3:8f:15:47:dc:51:62:54:b1:4b: da:d6:b4:1b:95:d4:d4:d2:61:b3:d8:95:7c:69:00:2b:49:65: 90:f3:c3:d5:2d:51:e0:78:28:80:b9:23:5d:8a:5b:58:99:33: 08:4f:29:a6:1f:7a:1f:8e:71:13:54:17:46:7b:05:69:e4:84: ac:ef:10:3c:04:22:69:c1:1f:4e:d2:6c:f9:11:2e:b9:20:5e: ff:2a:bb:ab:0c:fc:31:27:6f:da:c5:f8:c3:34:a7:c5:dc:8b: ec:c0:ba:bc:54:ba:3a:8b:a0:56:ee:3e:59:18:d7:9f:d8:53: 84:98:2f:d6:98:4e:e2:2c:81:64:a4:3d:49:d6:76:b3:f0:39: b9:85:f6:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVFMkRDOENBOUY1 QUZBRTFCNTMwHhcNMjUwNzE4MTc0MzA4WhcNMjUwNzI1MTc0MzA4WjAYMRYwFAYD VQQDEw02ODdhODdhYy0zMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vz5SF1x2FvtP0zr8s63DOn/xrQZwASSfFTSmoQlA/5WUdeXMndmqQjVZvWM nKIyPFebVmA8E5z60YRqpOGT4DVcMa399WmH4ojxCzK7SLCf0NCwhqyQ0QngFmP6 bE4kVr/9WOsbE9zDCSpKLZT9k/TqsudETiHaxD5gCNFcPu8ebiNuOU3wM1gGXTCN oTxmTLxmLNCdkE/5yR3ofZfBqT29raOce9yWKy/I3T7O1YcNTa4J0o/bRUaGpGtf E0lmKwzOp0HrreZFYlbvpRfJ8EwrtIy8RtguDvx9daAbCvLMv3f0F/LDWZ9Wseo6 KgeQHJ4XC+B8G3RsFESRSgVKPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECmVpXn mSM1x3d+puXCOZGTsfYSMB8GA1UdIwQYMBaAFFl2710L8WaI4l7F4tyMqfWvrhtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzJDNi8wQUE0RDY2NDZB NEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpvamlYc1hpM0l5cDlhLXVH MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dYYnZYUXZ4Wm9qaVhzWGkzSXlwOWEtdUcxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpv amlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaAEFCwBe/tRlaM+pz75bzIvNIMVSUjjYFJukcE1DBB532JneZeC8y qYZk7LoDqLHA60d5DrrKkMzTXQwsrdcZyEsLMYDh3WB+PZJiN8VIursYEJt09Luf 5J+D4T1WQYaVAILCvUPuZTnJtCF+gyuuHc4NZrOPFUfcUWJUsUva1rQbldTU0mGz 2JV8aQArSWWQ88PVLVHgeCiAuSNdiltYmTMITymmH3ofjnETVBdGewVp5ISs7xA8 BCJpwR9O0mz5ES65IF7/KrurDPwxJ2/axfjDNKfF3IvswLq8VLo6i6BW7j5ZGNef 2FOEmC/WmE7iLIFkpD1J1naz8Dm5hfZD -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:07 2025 by rpki-client