$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: M313henURlier8hMTVJLvOOWX3Oz9ROEHtZLkjM7Js4= Subject key identifier: DE:CB:F3:67:9F:07:41:D9:35:35:65:07:70:52:C7:10:55:D3:51:87 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0E9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0E81 Signing time: Sun 20 Jul 2025 17:44:17 +0000 Manifest this update: Sun 20 Jul 2025 17:44:16 +0000 Manifest next update: Sun 27 Jul 2025 17:44:16 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: hWW6t5W5KMGhAVI7UZXKG9AZSVLUp4VMFdiRngWWc6M=) 2: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 1zS8XWzZTz7+tGBFQYN1Yj55+aHf93rbvK5YUu69PHI=) 3: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: m0l23vJryclykCD48Z3CE8U9M7wFbCoJly5IlJCZMlg=) 4: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: Ec1bkGQTqxF1oTL6UjSssM5GunX3miqPVFaIr/V5Yp8=) 5: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: rsXfvz54a2T+jOGss3629AVS3vLaxkP1937oobR11UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3742 (0xe9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Jul 20 17:44:16 2025 GMT Not After : Jul 27 17:44:16 2025 GMT Subject: CN=687d2af0-dd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5e:c4:f4:e2:ab:f3:98:b4:d6:00:7f:f3:21: c8:8d:30:37:dd:9f:a4:1c:84:9e:6f:c1:c9:2c:30: 50:1b:d2:a9:b6:d8:c3:3c:15:19:60:6d:44:2f:d5: 85:05:52:3d:7a:18:7c:02:40:83:4a:f7:e8:d5:f6: 6d:5f:8c:71:eb:f1:02:9d:ea:59:59:f1:a0:e6:24: 81:70:55:c8:67:8f:24:88:29:ec:11:d5:0f:d4:1c: 30:66:7c:99:b2:3f:1c:07:c4:ad:7c:cf:5e:53:ac: b2:d7:33:a6:61:f8:c2:5e:72:d2:9f:df:80:cb:7c: f2:35:06:97:5d:3b:32:26:b9:cb:24:8e:a0:18:18: 09:48:0d:0e:6d:63:24:97:2a:bd:77:dc:09:35:28: e5:d8:dd:93:92:20:64:61:8d:9b:33:87:32:b0:f9: 95:2a:75:1c:81:50:7e:3f:06:3e:f2:c4:4e:51:e6: 66:e9:71:2c:06:c6:e2:67:8e:b0:55:cd:4a:ff:e5: 97:52:b0:0e:21:95:ed:2f:75:02:32:7c:14:1c:a7: 2c:e0:0b:3f:e2:54:d9:14:af:e3:e9:ee:0c:e0:06: 27:ea:bc:aa:1a:c1:5a:a1:68:19:71:be:e1:98:a3: c3:4e:d8:07:24:af:a8:62:1d:9d:0c:59:ae:d8:c4: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:F3:67:9F:07:41:D9:35:35:65:07:70:52:C7:10:55:D3:51:87 X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f5:23:fb:46:92:ec:60:87:29:04:12:cd:3e:da:2d:9f:33: 36:b3:1e:e1:7f:2a:27:16:99:ad:7c:08:86:f5:89:a9:2a:ff: 47:89:7f:a1:b3:a8:f2:b2:fa:b6:63:88:4a:31:60:57:4a:bd: 21:f6:de:b6:bb:8f:d5:a0:25:92:7a:94:84:ae:4b:11:76:f5: f2:c6:6c:8d:00:0a:7b:49:2c:22:bc:f3:5f:1e:cc:b7:7a:1a: 96:1d:36:20:21:82:d3:ea:5a:04:43:0a:8b:36:49:5c:17:9b: 0e:64:62:ad:eb:1c:90:83:71:66:45:9b:b8:3f:3c:ba:57:a9: bd:a4:63:17:2c:73:b0:2f:25:8c:7c:d7:80:39:55:21:77:4d: e6:5b:46:50:7f:34:13:3a:8a:9f:a2:df:14:a3:f7:2d:8f:2c: 11:48:5a:26:87:26:d1:79:c5:7c:e1:38:99:d3:74:98:b4:d5: b4:86:28:35:ec:4f:0c:bd:43:3f:e0:3a:2c:87:da:6c:d7:f6: b7:be:23:99:c0:15:c8:3c:96:12:36:b8:96:47:64:9a:46:c8: ca:5e:c3:67:05:18:cb:5b:96:a7:0a:e5:78:4a:6e:9e:22:2d: 32:62:d9:f4:40:e6:ac:0b:5a:b2:b0:90:25:71:a6:5d:75:25: 1a:72:19:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjUwNzIwMTc0NDE2WhcNMjUwNzI3MTc0NDE2WjAYMRYwFAYD VQQDEw02ODdkMmFmMC1kZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6l7E9OKr85i01gB/8yHIjTA33Z+kHISeb8HJLDBQG9KpttjDPBUZYG1EL9WF BVI9ehh8AkCDSvfo1fZtX4xx6/ECnepZWfGg5iSBcFXIZ48kiCnsEdUP1BwwZnyZ sj8cB8StfM9eU6yy1zOmYfjCXnLSn9+Ay3zyNQaXXTsyJrnLJI6gGBgJSA0ObWMk lyq9d9wJNSjl2N2TkiBkYY2bM4cysPmVKnUcgVB+PwY+8sROUeZm6XEsBsbiZ46w Vc1K/+WXUrAOIZXtL3UCMnwUHKcs4As/4lTZFK/j6e4M4AYn6ryqGsFaoWgZcb7h mKPDTtgHJK+oYh2dDFmu2MRuyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7L82ef B0HZNTVlB3BSxxBV01GHMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP9SP7RpLsYIcpBBLNPtotnzM2sx7hfyonFpmtfAiG9YmpKv9HiX+h s6jysvq2Y4hKMWBXSr0h9t62u4/VoCWSepSErksRdvXyxmyNAAp7SSwivPNfHsy3 ehqWHTYgIYLT6loEQwqLNklcF5sOZGKt6xyQg3FmRZu4Pzy6V6m9pGMXLHOwLyWM fNeAOVUhd03mW0ZQfzQTOoqfot8Uo/ctjywRSFomhybRecV84TiZ03SYtNW0hig1 7E8MvUM/4Dosh9ps1/a3viOZwBXIPJYSNriWR2SaRsjKXsNnBRjLW5anCuV4Sm6e Ii0yYtn0QOasC1qysJAlcaZddSUachmP -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:09 2025 by rpki-client