$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: APG3TdrH6aaIbmFkC5x0gVH63itO6tynPQM4ZJdVfrI= Subject key identifier: AC:F3:97:CE:F4:D9:6D:D8:31:CF:A7:B8:15:0D:A4:51:6D:62:84:EE Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 01E1 Signing time: Sat 19 Jul 2025 03:04:17 +0000 Manifest this update: Sat 19 Jul 2025 03:04:17 +0000 Manifest next update: Sat 26 Jul 2025 03:04:17 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: dZT4hP28RkvvCDfKhSo+kuqHJvpAQ2bx1UxoDT34JlQ=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: Jul 19 03:04:17 2025 GMT Not After : Jul 26 03:04:17 2025 GMT Subject: CN=687b0b31-9bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:50:eb:78:15:95:07:4c:6b:fa:e2:b3:a1: 7d:90:1d:40:f6:17:aa:6c:0f:c7:aa:e3:68:7d:a3: 72:7f:d8:57:08:26:91:a6:75:2e:a4:57:3d:57:a1: 0a:aa:de:91:fb:71:f6:ef:81:ae:cd:b5:c0:5b:5c: 03:89:3b:42:94:d1:aa:c0:87:fd:9f:e6:49:1c:0c: 71:a8:73:7d:2d:7c:5d:ad:24:ab:bb:67:7b:8a:82: 7c:f0:cf:60:76:00:5a:2b:74:5d:a6:8a:af:6e:4a: 03:d3:bf:26:da:b2:ae:c2:64:0a:84:1c:ad:38:75: 2b:38:97:c8:76:34:43:06:2b:41:7b:2b:fc:cf:f3: 33:a3:9e:6e:a2:0f:af:de:c3:0b:7a:d0:38:d2:50: 90:5a:0e:09:71:43:15:fc:4a:f4:29:09:cd:1e:70: ee:7d:7d:45:06:e8:7c:87:5e:97:22:2b:9f:bf:4b: 04:95:41:d6:a5:77:8f:d6:ce:b4:78:d1:7c:69:45: 68:35:4c:17:bb:8f:07:c4:88:16:c3:31:9e:6b:08: ea:19:87:5e:17:4a:2c:b9:74:f7:ec:64:85:a9:22: 5d:77:b7:70:b4:cb:89:6c:01:07:09:80:ea:c3:0a: d1:86:3a:02:aa:e8:55:89:47:5e:51:7e:03:ce:6e: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:97:CE:F4:D9:6D:D8:31:CF:A7:B8:15:0D:A4:51:6D:62:84:EE X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:df:1a:af:4f:ad:03:cc:66:ed:fa:b4:b2:bc:57:ce:6a:40: 86:e6:d3:fe:9d:a3:56:48:af:0f:17:2a:fa:d6:f8:ac:df:b0: 3b:86:6a:6a:e4:7f:cb:73:6b:23:26:46:91:f3:1e:6f:ff:fc: f6:5c:f3:f2:3e:1f:68:04:5e:24:0b:aa:20:c9:78:fe:dd:51: bc:a5:d1:c6:87:38:90:fb:d8:e6:1e:27:8f:81:8d:3c:0e:15: b5:b9:a9:78:8c:e3:62:49:62:38:45:96:d0:81:83:6e:de:9a: 1e:6d:f5:75:b4:a7:7d:7a:38:2e:31:22:bb:88:e4:4a:dc:4a: 0a:8b:01:c0:90:e5:63:b5:8c:08:78:60:aa:99:b0:04:65:1c: d2:6e:0e:ca:e7:b6:a8:02:1e:6a:a8:78:3b:07:f4:64:77:0c: 41:00:b0:20:35:6c:2f:08:c1:b9:51:20:e1:15:40:7a:97:f1: 0b:7f:f3:02:da:ed:5b:c4:f6:66:e3:b0:7a:69:4f:5c:43:29: 6d:c8:3c:dc:3a:aa:cf:b5:28:40:00:58:de:9d:ba:01:09:34: c1:b3:6d:a7:f6:74:3f:62:2c:26:c6:a4:6d:c7:e0:f0:e2:89: 68:c3:f7:25:a4:5f:70:f8:92:d8:17:46:1e:f7:a0:3b:4f:04: 7e:42:5b:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUwNzE5MDMwNDE3WhcNMjUwNzI2MDMwNDE3WjAYMRYwFAYD VQQDEw02ODdiMGIzMS05YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHZQ63gVlQdMa/ris6F9kB1A9heqbA/HquNofaNyf9hXCCaRpnUupFc9V6EK qt6R+3H274GuzbXAW1wDiTtClNGqwIf9n+ZJHAxxqHN9LXxdrSSru2d7ioJ88M9g dgBaK3RdpoqvbkoD078m2rKuwmQKhBytOHUrOJfIdjRDBitBeyv8z/Mzo55uog+v 3sMLetA40lCQWg4JcUMV/Er0KQnNHnDufX1FBuh8h16XIiufv0sElUHWpXeP1s60 eNF8aUVoNUwXu48HxIgWwzGeawjqGYdeF0osuXT37GSFqSJdd7dwtMuJbAEHCYDq wwrRhjoCquhViUdeUX4Dzm6swwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzzl870 2W3YMc+nuBUNpFFtYoTuMB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs3xqvT60DzGbt+rSyvFfOakCG5tP+naNWSK8PFyr61vis37A7hmpq 5H/Lc2sjJkaR8x5v//z2XPPyPh9oBF4kC6ogyXj+3VG8pdHGhziQ+9jmHiePgY08 DhW1ual4jONiSWI4RZbQgYNu3poebfV1tKd9ejguMSK7iORK3EoKiwHAkOVjtYwI eGCqmbAEZRzSbg7K57aoAh5qqHg7B/RkdwxBALAgNWwvCMG5USDhFUB6l/ELf/MC 2u1bxPZm47B6aU9cQyltyDzcOqrPtShAAFjenboBCTTBs22n9nQ/YiwmxqRtx+Dw 4olow/clpF9w+JLYF0Ye96A7TwR+QluE -----END CERTIFICATE-----Generated at Sun Jul 20 11:10:11 2025 by rpki-client