$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: ymooobqFq19kn3/MeiNu92kHdrN6uB0h1CKn73XPBWI= Subject key identifier: 22:17:69:31:47:53:78:AA:CD:D1:CD:40:68:0B:62:1A:3A:44:B8:2D Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 0538 Signing time: Fri 18 Jul 2025 23:55:56 +0000 Manifest this update: Fri 18 Jul 2025 23:55:55 +0000 Manifest next update: Fri 25 Jul 2025 23:55:55 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: U1lh0CLnIOJxTs2XmkgJntp/5+JzCwwaZ5QvoxE6K7I=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: fJSwaqO5xx9Q9RIgs6JtYncNmKK6M8gTn37HYZrh54Y=) 4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: p2UL6GD3BL6Vbs5hBii2dCX7XInOsF8w0LqpGVSuwTU=) 5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: 918uflqRaxL4teDIN56OfUziBRRQmbbgHsTgJ3UnMS8=) 7: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: 6UFCXsHGkBs9mNJ/P0P2x3t8KMswz8UkcFEG5pRtYR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jul 18 23:55:55 2025 GMT Not After : Jul 25 23:55:55 2025 GMT Subject: CN=687adf0c-49b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:88:2d:6b:74:fb:ba:d7:40:10:56:52:a3: 74:08:cc:29:2c:4f:2f:aa:b4:8a:15:0e:1a:a7:96: cb:99:f2:af:6b:a5:3b:b3:ca:12:f5:aa:76:8a:1c: e6:16:9c:58:21:a4:df:f1:87:ee:81:c4:e1:c2:55: f2:0b:8d:b7:11:aa:6f:64:51:0a:05:55:e3:2f:8c: 79:8b:9b:83:72:e1:1c:0a:7f:a9:c4:a0:15:3c:f4: 78:08:82:08:e9:fd:8f:3a:e4:06:28:61:5e:62:81: c6:94:7d:49:0f:dd:1d:43:26:f6:3e:91:b2:a5:04: 56:fc:ab:74:fe:57:2c:7f:63:bd:6d:80:f2:2b:0e: 55:9d:56:d4:3b:9d:6d:f1:7f:e9:cf:ae:99:62:8b: e0:9e:dd:d0:ca:57:4e:de:44:7f:6f:de:d8:a9:6b: 6c:cd:74:1b:04:10:92:f1:0d:34:23:25:46:20:49: a8:2b:fd:a7:2d:ce:39:f0:7c:21:88:b7:c9:f7:e3: 67:b9:e8:e7:a6:1b:2d:b4:96:18:a5:8a:67:1c:a9: 70:f0:08:c7:c4:9b:67:73:e3:24:64:94:b5:b0:9e: 7e:52:17:1b:37:71:ac:77:cb:c7:db:94:fe:8e:82: d2:51:34:11:f0:6c:aa:83:cf:ba:07:df:d4:67:23: 53:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:69:31:47:53:78:AA:CD:D1:CD:40:68:0B:62:1A:3A:44:B8:2D X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:73:d3:6d:61:16:c4:19:99:e5:7b:8f:27:4e:f4:c0:27:21: b2:40:fb:fe:26:e9:b2:2e:d9:6f:67:e7:62:f2:09:ba:70:df: 2a:07:99:b2:0c:23:e2:8d:9f:36:7b:a3:12:23:ca:54:0f:72: 43:fa:07:8a:ea:f3:f3:3c:53:ef:72:58:56:09:2c:2d:45:bb: 5d:ec:5b:68:73:4b:ac:50:3d:78:d3:83:01:14:f9:b0:e1:77: 37:85:2c:80:28:87:38:b1:64:ea:b1:c3:22:90:42:2b:5b:99: 35:20:b7:c2:01:ed:d9:7f:9d:ff:90:b3:1d:08:6d:b2:22:5e: 48:f0:c0:d0:d9:2f:05:1a:aa:ad:a9:9d:d3:d0:70:80:3c:1d: 80:0a:5a:e9:d0:85:7e:ab:af:26:77:90:59:c3:f2:e5:e1:5a: 5c:23:c2:95:23:b0:c6:b8:40:4e:09:83:d7:51:69:27:fa:7e: 35:ce:b6:ad:f5:39:ee:e8:17:16:bf:44:61:be:9e:09:6f:29: c2:cc:2e:12:00:b0:7d:a7:dc:4b:04:b1:8b:04:41:28:ba:31: 1a:3a:ca:cd:9d:50:14:bc:43:af:c2:b5:0a:8e:a1:a5:08:6e: f4:da:84:7e:4a:2f:fe:05:12:52:ec:ff:92:54:4f:b3:4c:8f: 58:8f:ef:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNzE4MjM1NTU1WhcNMjUwNzI1MjM1NTU1WjAYMRYwFAYD VQQDEw02ODdhZGYwYy00OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+eILWt0+7rXQBBWUqN0CMwpLE8vqrSKFQ4ap5bLmfKva6U7s8oS9ap2ihzm FpxYIaTf8YfugcThwlXyC423EapvZFEKBVXjL4x5i5uDcuEcCn+pxKAVPPR4CIII 6f2POuQGKGFeYoHGlH1JD90dQyb2PpGypQRW/Kt0/lcsf2O9bYDyKw5VnVbUO51t 8X/pz66ZYovgnt3QyldO3kR/b97YqWtszXQbBBCS8Q00IyVGIEmoK/2nLc458Hwh iLfJ9+NnuejnphsttJYYpYpnHKlw8AjHxJtnc+MkZJS1sJ5+UhcbN3Gsd8vH25T+ joLSUTQR8Gyqg8+6B9/UZyNTpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIXaTFH U3iqzdHNQGgLYho6RLgtMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIc9NtYRbEGZnle48nTvTAJyGyQPv+JumyLtlvZ+di8gm6cN8qB5my DCPijZ82e6MSI8pUD3JD+geK6vPzPFPvclhWCSwtRbtd7Ftoc0usUD1404MBFPmw 4Xc3hSyAKIc4sWTqscMikEIrW5k1ILfCAe3Zf53/kLMdCG2yIl5I8MDQ2S8FGqqt qZ3T0HCAPB2AClrp0IV+q68md5BZw/Ll4VpcI8KVI7DGuEBOCYPXUWkn+n41zrat 9Tnu6BcWv0Rhvp4JbynCzC4SALB9p9xLBLGLBEEoujEaOsrNnVAUvEOvwrUKjqGl CG702oR+Si/+BRJS7P+SVE+zTI9Yj+/6 -----END CERTIFICATE-----Generated at Sun Jul 20 07:33:16 2025 by rpki-client