$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: RUzKLJQ+xr5KoU9rr6NSfC3PJcgBmFSKoQcvXLSq90A= Subject key identifier: C8:3A:5D:AD:F9:F6:C5:03:BE:A7:80:AC:CA:31:B1:4D:0E:C0:05:65 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 24 Signing time: Sat 19 Jul 2025 08:09:30 +0000 Manifest this update: Sat 19 Jul 2025 08:09:29 +0000 Manifest next update: Sat 26 Jul 2025 08:09:29 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: 1CQTpDp9M11wuI8EKrTPaC0liOnuRqPm0H/m6tHtuu8=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Jul 19 08:09:29 2025 GMT Not After : Jul 26 08:09:29 2025 GMT Subject: CN=687b52ba-1288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:42:11:c9:ee:5e:32:f6:88:cf:a7:82:5b:27: 71:5e:cc:73:29:79:5e:f2:0b:72:6c:29:81:1c:f4: 1c:be:2b:8c:5d:5b:39:ae:b4:51:af:a2:56:79:51: 25:0e:90:98:9e:9e:44:95:3f:15:eb:dd:25:1f:35: 10:83:d8:23:20:4e:29:49:d2:d1:36:db:f7:44:c2: 4a:45:8a:47:82:4f:9c:20:a5:df:92:73:d3:d1:ca: 03:1f:49:55:f0:ca:a2:8c:2b:2f:b8:3a:36:a0:46: 22:a4:90:5a:9d:c3:1a:99:c7:28:29:90:2e:dd:c9: a2:ed:00:4a:0d:d7:8e:5d:a3:e8:90:aa:59:53:55: 30:13:f6:b2:3e:c0:ac:21:bf:30:19:fb:08:e1:06: 14:43:31:d5:c6:10:98:9e:9e:4c:ff:af:d3:6a:ad: d2:18:a2:15:54:a6:c2:d1:ef:02:7d:64:2f:db:40: 49:e5:5b:f4:02:36:a2:41:1a:39:48:4c:1a:30:b5: 06:2e:6d:7c:1a:dd:8c:85:cb:31:39:4a:fb:86:ad: 1c:72:59:4e:b0:cc:c2:79:de:66:3b:f0:2c:2a:e0: f5:c9:dc:6d:02:62:41:e8:35:52:c3:32:3b:ba:5d: de:61:11:11:38:7d:f1:38:e6:24:8c:db:96:55:54: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:5D:AD:F9:F6:C5:03:BE:A7:80:AC:CA:31:B1:4D:0E:C0:05:65 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:4c:5d:d5:0f:24:b3:d3:fd:b3:d4:de:b2:c5:2b:39:d2:e7: cd:6f:0e:03:13:56:f2:2f:25:6e:a6:3f:13:5b:0e:af:b5:27: 08:d4:ab:6f:f2:2a:8f:f1:10:f0:73:84:20:f9:f0:1f:43:68: b7:19:9c:76:5d:95:85:ff:bc:10:e4:7b:fe:4e:e8:d2:71:33: c7:f8:a6:06:38:49:19:c7:de:3a:37:ed:e6:04:ad:76:f8:ec: b5:8b:a4:3d:72:81:d5:69:85:51:5f:1a:7b:d2:c2:6e:65:82: a9:71:ef:d0:f9:bd:5a:db:0c:c6:6e:d1:10:7d:97:59:e9:06: 99:25:f9:0a:ff:92:8d:67:d2:6d:f6:8b:36:ba:32:e7:fd:cd: 75:d2:29:f4:81:f7:4f:26:eb:ba:91:68:d7:a2:a1:ce:32:e2: 2f:49:3d:92:c3:7d:e9:7e:da:6d:79:fb:50:6f:19:be:41:3f: 9f:35:a1:07:ac:8a:8c:3e:41:df:f7:10:ef:9e:2d:69:20:b7: 7c:e2:3a:d7:43:62:fe:26:50:f3:c1:2d:a6:e1:ff:e6:8b:f9: 44:0f:d1:68:66:16:18:33:9e:ae:66:1b:df:0b:b3:b6:eb:4a: 44:c9:3e:b8:31:d2:6b:74:d9:c4:26:cb:26:85:b3:c5:55:08: fb:da:9b:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTA3MTkwODA5MjlaFw0yNTA3MjYwODA5MjlaMBgxFjAUBgNV BAMTDTY4N2I1MmJhLTEyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmQhHJ7l4y9ojPp4JbJ3FezHMpeV7yC3JsKYEc9By+K4xdWzmutFGvolZ5USUO kJienkSVPxXr3SUfNRCD2CMgTilJ0tE22/dEwkpFikeCT5wgpd+Sc9PRygMfSVXw yqKMKy+4OjagRiKkkFqdwxqZxygpkC7dyaLtAEoN145do+iQqllTVTAT9rI+wKwh vzAZ+wjhBhRDMdXGEJienkz/r9NqrdIYohVUpsLR7wJ9ZC/bQEnlW/QCNqJBGjlI TBowtQYubXwa3YyFyzE5SvuGrRxyWU6wzMJ53mY78Cwq4PXJ3G0CYkHoNVLDMju6 Xd5hERE4ffE45iSM25ZVVK4NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyDpdrfn2 xQO+p4CsyjGxTQ7ABWUwHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFlMXdUPJLPT/bPU3rLFKznS581vDgMTVvIvJW6mPxNbDq+1JwjUq2/y Ko/xEPBzhCD58B9DaLcZnHZdlYX/vBDke/5O6NJxM8f4pgY4SRnH3jo37eYErXb4 7LWLpD1ygdVphVFfGnvSwm5lgqlx79D5vVrbDMZu0RB9l1npBpkl+Qr/ko1n0m32 iza6Muf9zXXSKfSB908m67qRaNeioc4y4i9JPZLDfel+2m15+1BvGb5BP581oQes iow+Qd/3EO+eLWkgt3ziOtdDYv4mUPPBLabh/+aL+UQP0WhmFhgznq5mG98Ls7br SkTJPrgx0mt02cQmyyaFs8VVCPvam6w= -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:26 2025 by rpki-client