$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: 59b1O3KjOki2i+KnQmfk1HQ5v5bPEtfIkVzjv4Ee5kE= Subject key identifier: 54:C2:18:67:97:FA:12:88:8B:D4:F0:8E:F3:3D:5D:37:CA:61:89:17 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05B2 Signing time: Tue 22 Jul 2025 23:30:36 +0000 Manifest this update: Tue 22 Jul 2025 23:30:35 +0000 Manifest next update: Tue 29 Jul 2025 23:30:35 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: 7QIy2z5Sch+laCGQxyVpF93BT5jDahOlFJ6pT7wMINU=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Jul 22 23:30:35 2025 GMT Not After : Jul 29 23:30:35 2025 GMT Subject: CN=68801f1b-75b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:b8:28:73:17:5a:2d:88:11:d4:8e:46:92: 34:5f:ed:4f:99:a8:57:dd:8c:0c:14:01:a4:6f:7b: a3:89:e4:b9:d5:1d:df:40:64:68:82:37:1c:b7:21: 98:52:4a:16:e1:13:0c:5a:77:8c:ba:1e:42:fe:87: 88:87:26:8e:05:75:df:03:2e:15:93:dd:de:22:7a: b8:ae:38:20:b7:68:81:1a:bf:8d:87:59:87:25:3f: de:dc:c8:28:e1:2a:0f:53:c3:2e:1b:40:90:84:8a: 7a:84:9f:45:b9:7f:66:80:70:98:10:20:55:3f:bc: cf:f8:50:0b:09:0b:05:68:d6:01:69:58:95:22:cc: 4f:00:b1:79:e3:78:4f:a3:a8:3a:98:b8:d1:14:c7: 85:7a:40:ee:72:7b:95:70:07:de:8a:52:ec:01:74: 77:a0:2d:2b:c1:e1:89:26:b6:89:89:ff:1d:57:81: 24:c0:ec:02:02:58:db:1f:51:b9:59:79:d2:38:70: 58:01:83:d6:00:59:b6:97:0d:a3:e8:0a:f4:43:9c: d1:78:19:aa:a0:78:19:47:1b:d6:5d:62:8c:72:ce: a4:66:4f:91:9f:44:3b:ce:2f:e9:4e:38:ce:7d:4b: d1:18:ad:d2:97:a9:65:dc:5e:a9:f5:9e:01:73:d0: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C2:18:67:97:FA:12:88:8B:D4:F0:8E:F3:3D:5D:37:CA:61:89:17 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:56:13:eb:ef:68:ce:e4:96:34:d3:b1:ea:74:d0:0f:92:f0: 59:f3:1c:d2:60:d5:b3:d4:72:23:66:de:8d:ce:90:c9:d7:f2: c7:93:bd:ea:7c:d0:24:76:e2:f8:b9:a6:c7:37:7f:19:df:33: 2c:73:6d:76:7d:46:42:79:35:5c:ad:14:9a:52:ef:5d:95:2c: 97:da:1a:c6:6b:60:1a:c6:27:9a:44:5f:6c:55:b6:0a:c3:c1: f8:61:21:97:da:91:7a:9b:16:0c:37:45:8e:aa:26:af:36:bb: f9:4b:7f:74:ac:87:fa:3c:a1:0a:38:64:b5:39:c0:63:ed:fd: 38:81:b4:2a:3d:3a:78:7b:c9:11:65:0c:ec:7e:39:01:f0:83: be:98:2f:5c:cf:8c:60:66:21:19:4c:17:1a:6e:65:84:a5:f2: 3d:f6:f5:a1:eb:17:6f:87:83:c0:f8:de:3d:f7:70:2c:a3:03: c6:24:9f:66:2c:ec:91:8d:e0:c3:c0:4f:bc:b7:77:a9:56:50: 7f:7d:f1:ee:f8:72:26:61:ee:0b:1d:e5:17:62:db:c0:60:fa: 15:27:67:34:f6:dc:4b:eb:3a:d7:e3:f4:74:03:a2:4c:a6:40: 4e:49:1b:2b:8c:f6:ee:60:ec:dc:f9:d1:8a:47:07:a3:63:e0: a2:75:e8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNzIyMjMzMDM1WhcNMjUwNzI5MjMzMDM1WjAYMRYwFAYD VQQDEw02ODgwMWYxYi03NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRu4KHMXWi2IEdSORpI0X+1PmahX3YwMFAGkb3ujieS51R3fQGRogjcctyGY UkoW4RMMWneMuh5C/oeIhyaOBXXfAy4Vk93eInq4rjggt2iBGr+Nh1mHJT/e3Mgo 4SoPU8MuG0CQhIp6hJ9FuX9mgHCYECBVP7zP+FALCQsFaNYBaViVIsxPALF543hP o6g6mLjRFMeFekDucnuVcAfeilLsAXR3oC0rweGJJraJif8dV4EkwOwCAljbH1G5 WXnSOHBYAYPWAFm2lw2j6Ar0Q5zReBmqoHgZRxvWXWKMcs6kZk+Rn0Q7zi/pTjjO fUvRGK3Sl6ll3F6p9Z4Bc9CNrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTCGGeX +hKIi9TwjvM9XTfKYYkXMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfVhPr72jO5JY007HqdNAPkvBZ8xzSYNWz1HIjZt6NzpDJ1/LHk73q fNAkduL4uabHN38Z3zMsc212fUZCeTVcrRSaUu9dlSyX2hrGa2AaxieaRF9sVbYK w8H4YSGX2pF6mxYMN0WOqiavNrv5S390rIf6PKEKOGS1OcBj7f04gbQqPTp4e8kR ZQzsfjkB8IO+mC9cz4xgZiEZTBcabmWEpfI99vWh6xdvh4PA+N4993AsowPGJJ9m LOyRjeDDwE+8t3epVlB/ffHu+HImYe4LHeUXYtvAYPoVJ2c09txL6zrX4/R0A6JM pkBOSRsrjPbuYOzc+dGKRwejY+CidejD -----END CERTIFICATE-----Generated at Thu Jul 24 12:14:37 2025 by rpki-client