$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft File: wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json) Hash identifier: 71M7j/mY3JEQ5tCl0cCDwvZsaNEnf9C61h6ST2qJuZs= Subject key identifier: F9:85:2E:FA:4A:07:E6:0B:65:D4:2A:CA:55:2F:96:FA:C4:7F:D6:C5 Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D Certificate issuer: /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft Manifest number: 06A0 Signing time: Sun 20 Jul 2025 22:19:02 +0000 Manifest this update: Sun 20 Jul 2025 22:19:01 +0000 Manifest next update: Sun 27 Jul 2025 22:19:01 +0000 Files and hashes: 1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: heFKDQMM/THLUxbyIALIO9DOLvV0vEF1P1anu+qJ5EQ=) 2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: qtAk8oTZDrgTWNBm9Xz8I2B3TKuJD5JEiZtJXgjDA28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Validity Not Before: Jul 20 22:19:01 2025 GMT Not After : Jul 27 22:19:01 2025 GMT Subject: CN=687d6b56-c328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:be:71:ba:29:aa:76:95:bd:b1:5c:f7:a6: 3f:e7:07:c2:7f:07:85:81:9e:14:94:0e:bf:78:5b: 9b:b9:3c:72:11:1a:54:9c:c7:3a:47:e3:ee:a6:9e: 5a:2a:44:9a:15:32:c5:93:04:01:44:33:bd:82:67: 35:0b:4c:19:01:23:24:50:4c:44:78:56:04:66:fb: 5d:20:c4:c2:d0:45:bf:79:b0:44:2d:f5:91:7e:97: 4c:e3:15:cc:80:31:36:47:62:85:cb:0d:41:c1:1d: f0:84:77:a1:19:3f:c7:d0:21:42:db:6d:34:f9:96: a8:2f:d8:8d:cd:8a:f7:0e:88:9e:d4:ac:a1:48:bb: 53:f5:29:32:aa:09:ca:09:2c:ed:d6:b6:3a:78:93: 30:dc:19:94:a7:03:a9:0f:cf:d6:61:21:4e:30:82: a0:a9:57:32:13:9c:ee:a2:93:06:cc:b5:bd:57:c3: 30:ec:e3:b1:1c:79:d5:44:43:68:e1:ee:d1:05:ad: 3e:e3:9f:24:75:5d:e3:da:34:d8:cc:be:f1:5c:9b: fa:87:19:62:50:5a:41:82:81:7b:80:72:ae:d6:2c: d5:0e:d5:52:ca:11:a2:89:06:2e:9b:4f:57:37:b4: 03:9a:39:df:3d:62:42:08:c7:34:b8:d9:09:cb:4b: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:2E:FA:4A:07:E6:0B:65:D4:2A:CA:55:2F:96:FA:C4:7F:D6:C5 X509v3 Authority Key Identifier: keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:58:35:ea:cf:80:94:9e:0b:04:3e:0a:a6:dc:30:78:7e:98: 25:6d:e3:46:7b:fc:b5:f1:41:da:ca:43:ba:89:ff:45:8c:c3: 4b:b9:99:25:6b:d1:93:49:40:71:ea:10:b8:32:95:40:7a:f0: db:a3:1c:f1:b6:b4:d9:c8:07:f3:be:85:c5:85:99:4d:d7:dc: 58:f2:35:1b:d2:f6:0a:c2:dd:b6:f0:6e:3e:f0:0d:54:78:6f: 7b:43:40:ac:d2:0d:14:d5:e8:74:62:16:ad:ac:32:3b:65:c1: 64:10:d1:b2:7a:08:79:47:c4:d3:1a:5e:a8:d3:ea:dc:17:47: da:e2:60:32:3a:54:ee:0a:6c:e4:99:e5:a0:49:a4:b1:a4:47: 31:1d:75:db:6a:27:f4:1f:87:71:5f:ce:0d:40:7d:6b:8c:99: c2:92:52:55:c1:23:aa:c1:d9:d9:32:57:4e:80:0d:5a:c0:e1: 28:65:f8:d9:d8:e6:ec:cc:bd:52:d4:36:7d:1f:01:32:ec:23: 29:7f:88:1d:f0:70:38:32:2d:39:dd:c4:c8:a1:3b:0a:26:1e: 14:15:1d:dd:e9:fb:cf:18:d9:3e:33:fa:74:25:d2:81:55:0d: 3b:4e:28:70:a5:26:5d:34:6f:7a:c0:2a:86:71:2d:d6:f9:08: a7:de:66:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBM0UxMTAvBgNVBAUTKEMxM0Q4RjgyQjNEM0NFNDc0NjUzNTQwRTUzNjVDNEM5 MDg5NEMwM0QwHhcNMjUwNzIwMjIxOTAxWhcNMjUwNzI3MjIxOTAxWjAYMRYwFAYD VQQDEw02ODdkNmI1Ni1jMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjy+cbopqnaVvbFc96Y/5wfCfweFgZ4UlA6/eFubuTxyERpUnMc6R+Pupp5a KkSaFTLFkwQBRDO9gmc1C0wZASMkUExEeFYEZvtdIMTC0EW/ebBELfWRfpdM4xXM gDE2R2KFyw1BwR3whHehGT/H0CFC2200+ZaoL9iNzYr3Doie1KyhSLtT9SkyqgnK CSzt1rY6eJMw3BmUpwOpD8/WYSFOMIKgqVcyE5zuopMGzLW9V8Mw7OOxHHnVRENo 4e7RBa0+458kdV3j2jTYzL7xXJv6hxliUFpBgoF7gHKu1izVDtVSyhGiiQYum09X N7QDmjnfPWJCCMc0uNkJy0ufmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmFLvpK B+YLZdQqylUvlvrEf9bFMB8GA1UdIwQYMBaAFME9j4Kz085HRlNUDlNlxMkIlMA9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREEzRS80MjI2ODc0ODcz NDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHprZEdVMVFPVTJYRXlRaVV3 RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUMlBnclBUemtkR1UxUU9VMlhFeVFpVXdEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REEzRS80MjI2ODc0ODczNDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHpr ZEdVMVFPVTJYRXlRaVV3RDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbWDXqz4CUngsEPgqm3DB4fpglbeNGe/y18UHaykO6if9FjMNLuZkl a9GTSUBx6hC4MpVAevDboxzxtrTZyAfzvoXFhZlN19xY8jUb0vYKwt228G4+8A1U eG97Q0Cs0g0U1eh0YhatrDI7ZcFkENGyegh5R8TTGl6o0+rcF0fa4mAyOlTuCmzk meWgSaSxpEcxHXXbaif0H4dxX84NQH1rjJnCklJVwSOqwdnZMldOgA1awOEoZfjZ 2ObszL1S1DZ9HwEy7CMpf4gd8HA4Mi053cTIoTsKJh4UFR3d6fvPGNk+M/p0JdKB VQ07TihwpSZdNG96wCqGcS3W+Qin3mba -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:13 2025 by rpki-client