$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: OGbwro10ytaUoWy4ijUWGOT2y8qMeZvbzQdT2dJgXS0= Subject key identifier: 10:87:69:F9:20:9D:A3:1E:1C:D1:F0:E3:25:BB:2E:AD:F8:6D:78:47 Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 7F Signing time: Sat 19 Jul 2025 06:56:54 +0000 Manifest this update: Sat 19 Jul 2025 06:56:53 +0000 Manifest next update: Sat 26 Jul 2025 06:56:53 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: JMD2MJMSLY2GIf5CDd3gEogyFDQZfWQH4wuR4RuDgnU=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Validity Not Before: Jul 19 06:56:53 2025 GMT Not After : Jul 26 06:56:53 2025 GMT Subject: CN=687b41b5-25f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:a5:84:a2:ed:7a:2d:b2:a2:85:47:bc:44: bf:97:72:20:a0:7d:ae:74:04:07:ce:c1:8d:4a:97: 47:c9:b0:ac:83:13:57:8a:8b:e8:98:f8:58:c1:ed: ee:2d:32:b7:92:79:1a:a0:79:85:f7:dc:02:9f:3a: 26:45:62:9b:cd:21:7b:57:70:ae:4d:cb:cc:f6:6d: 7a:d1:a4:2d:7a:06:6d:b5:28:91:99:27:6a:74:c0: ef:35:31:79:50:e5:bd:69:e1:fd:b5:76:d2:a2:4b: d2:d3:26:a8:55:c0:0c:93:a3:ad:c3:e0:41:c2:96: cf:c3:4d:8b:19:49:32:99:0e:00:dc:f8:3c:b9:fd: ae:b0:59:43:75:df:6c:5b:10:77:ee:f0:71:ee:8a: f2:04:40:9c:46:65:44:56:ee:3f:28:6d:81:fa:d4: c4:41:75:03:3c:84:2e:f0:3d:8b:28:3b:e6:4e:a7: 0f:2b:5d:c1:03:84:36:8a:45:fe:44:12:dd:5c:06: ca:f2:82:f1:53:84:be:95:74:4b:ac:ee:e2:af:16: b9:77:27:72:59:b1:9b:37:ff:e1:f5:fc:3f:3f:7a: ed:17:9d:c4:65:ed:86:8e:9b:56:ad:4f:d2:ad:74: 5a:31:b3:b6:83:22:3e:ee:f1:25:4c:22:cb:84:06: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:69:F9:20:9D:A3:1E:1C:D1:F0:E3:25:BB:2E:AD:F8:6D:78:47 X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1b:48:21:5d:53:ab:08:04:c4:58:91:69:d8:7f:8f:5e:53: 9c:f4:26:25:c3:6c:77:3c:f1:c7:5a:f3:68:d7:70:c9:32:dc: 6b:f5:9a:c0:96:cb:72:62:cc:23:98:96:c6:37:d3:b8:ea:04: a4:30:34:c3:ec:a7:73:05:1a:0d:4d:e0:0c:69:b4:51:c9:e6: 34:bb:3b:9b:3a:4f:17:1c:2a:a8:09:d0:98:05:4b:e8:7d:02: e3:b2:71:76:d0:86:bf:e8:ea:2b:b7:58:5d:f2:6c:00:34:a4: e0:66:c1:aa:0c:c6:a5:f9:33:3b:af:71:0f:ac:1d:ac:e4:cf: 2c:da:c7:98:63:fc:7d:74:fe:a3:59:8d:23:90:db:70:d2:ca: af:24:9c:fe:b9:61:32:d6:30:32:05:8d:d2:dc:de:d4:12:24: 64:47:a9:a8:d5:c2:8d:e7:c6:9a:85:0e:e6:d3:5f:de:77:e7: cf:2e:3e:0b:fd:2e:52:28:7b:27:4b:5f:86:5f:e1:bd:07:86: 2e:4b:85:93:73:70:c5:a6:af:51:54:15:3e:c1:09:83:6e:d5: 03:14:0a:4e:4f:b3:70:a1:1b:8a:66:6d:77:d0:70:2b:cf:90: 9f:04:de:44:65:ae:1a:22:82:99:09:c7:0a:e7:88:0a:1a:e5: 9d:8b:cb:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0RkQxMTAvBgNVBAUTKDU5OTBGNEMzQkIyMzQzNkM5NTEwMEI0ODQ4REM5MTg2 QUE0OTUzMTkwHhcNMjUwNzE5MDY1NjUzWhcNMjUwNzI2MDY1NjUzWjAYMRYwFAYD VQQDEw02ODdiNDFiNS0yNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqqlhKLtei2yooVHvES/l3IgoH2udAQHzsGNSpdHybCsgxNXiovomPhYwe3u LTK3knkaoHmF99wCnzomRWKbzSF7V3CuTcvM9m160aQtegZttSiRmSdqdMDvNTF5 UOW9aeH9tXbSokvS0yaoVcAMk6Otw+BBwpbPw02LGUkymQ4A3Pg8uf2usFlDdd9s WxB37vBx7oryBECcRmVEVu4/KG2B+tTEQXUDPIQu8D2LKDvmTqcPK13BA4Q2ikX+ RBLdXAbK8oLxU4S+lXRLrO7irxa5dydyWbGbN//h9fw/P3rtF53EZe2GjptWrU/S rXRaMbO2gyI+7vElTCLLhAac+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCHafkg naMeHNHw4yW7Lq34bXhHMB8GA1UdIwQYMBaAFFmQ9MO7I0NslRALSEjckYaqSVMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzRGRC9BNTdDQUJFQ0E1 NTQxMUVGOEE5NzUyNDdDNEY5QUUwMi9XWkQwdzdzalEyeVZFQXRJU055UmhxcEpV eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzRGRC9BNTdDQUJFQ0E1NTQxMUVGOEE5NzUyNDdDNEY5QUUwMi9XWkQwdzdzalEy eVZFQXRJU055UmhxcEpVeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuG0ghXVOrCATEWJFp2H+PXlOc9CYlw2x3PPHHWvNo13DJMtxr9ZrA lstyYswjmJbGN9O46gSkMDTD7KdzBRoNTeAMabRRyeY0uzubOk8XHCqoCdCYBUvo fQLjsnF20Ia/6Oort1hd8mwANKTgZsGqDMal+TM7r3EPrB2s5M8s2seYY/x9dP6j WY0jkNtw0sqvJJz+uWEy1jAyBY3S3N7UEiRkR6mo1cKN58aahQ7m01/ed+fPLj4L /S5SKHsnS1+GX+G9B4YuS4WTc3DFpq9RVBU+wQmDbtUDFApOT7NwoRuKZm130HAr z5CfBN5EZa4aIoKZCccK54gKGuWdi8uQ -----END CERTIFICATE-----Generated at Sun Jul 20 07:09:41 2025 by rpki-client