$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: SxDgEy4zip5m9o8kDtiivVu5YdXTd4t/5Sl45+J1Mmw= Subject key identifier: EC:E9:79:D1:CB:AB:14:98:94:47:65:C0:50:3E:FA:77:D4:AF:57:A6 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 1323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 1310 Signing time: Tue 22 Jul 2025 17:11:23 +0000 Manifest this update: Tue 22 Jul 2025 17:11:23 +0000 Manifest next update: Tue 29 Jul 2025 17:11:23 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: A8M8MGVzeUNrv7FMPdCY2pS1rSJ6HEfR6ef7hD25MAA=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4899 (0x1323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: Jul 22 17:11:23 2025 GMT Not After : Jul 29 17:11:23 2025 GMT Subject: CN=687fc63b-bb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:26:33:69:7b:1d:86:1d:0d:9b:e1:00:e1: 0f:0b:47:ef:fd:dc:7a:ef:20:c0:12:97:37:ce:19: c8:51:ef:cd:a4:8a:37:96:57:61:1c:03:b1:3f:62: 3f:26:3e:c9:c7:39:72:db:59:5f:76:6f:db:fb:fa: 79:1e:f6:d9:f9:ea:2e:f3:b2:04:af:27:06:f2:7e: 0e:d7:e4:e1:3a:b6:ff:92:19:57:dc:84:6e:2d:05: cb:9b:84:43:c2:97:3f:fa:0a:3c:36:3e:f2:de:14: 3f:eb:6b:55:53:78:fe:9a:64:c6:98:45:6e:a4:1a: 5d:94:42:32:b1:05:93:08:e6:7c:38:53:a7:56:cf: dd:40:89:af:e5:20:b2:3c:42:f5:5a:b6:a2:8c:3a: af:95:3e:04:cd:ff:f4:04:9f:d7:c4:e3:13:b6:a2: 7a:11:ac:fa:af:04:61:1f:0c:b1:c4:4a:84:ff:3d: b7:1e:6e:22:cb:9c:5f:a3:95:82:ea:72:b5:6d:8d: ed:30:c2:8b:f0:a4:47:96:e0:4e:b3:b7:d4:7d:8e: c5:7c:7f:c8:f6:90:39:e1:a2:58:20:cd:7a:e3:91: 58:58:95:04:46:4b:cf:b6:9a:9e:c3:d0:d5:d7:8f: 64:f3:7d:49:cd:68:b7:94:91:cf:6a:0c:81:5c:0d: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:79:D1:CB:AB:14:98:94:47:65:C0:50:3E:FA:77:D4:AF:57:A6 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0e:ee:93:cf:50:ae:db:10:de:1b:f5:29:b2:bc:5b:7e:8a: 00:e8:8d:ef:cb:6f:2b:3d:6a:c8:45:f9:87:2a:57:33:f9:b0: 88:5b:d4:b2:1c:8b:ae:a7:aa:2d:43:08:99:2f:b7:b1:ec:ee: 58:2c:2e:99:b0:6d:b5:7b:0f:7b:2d:4c:d1:a6:09:32:8d:97: f6:52:ec:6c:92:64:e1:8b:cb:71:2d:b2:8c:21:ae:7c:cc:26: c8:f5:6f:79:4a:e6:8d:16:39:77:c9:5d:a1:7c:46:8b:e4:72: 6b:b5:cd:22:10:ad:58:64:63:dc:82:fd:f5:a3:5e:95:a6:b3: 0e:57:5d:79:4e:d1:ae:80:38:c6:a3:74:3f:de:e8:c1:39:fa: 13:b8:9e:11:a6:02:72:4f:a8:91:e7:b4:1d:b9:29:c6:4e:69: d1:be:e8:b3:73:2c:21:70:23:6e:87:83:bd:ae:e0:8a:af:d6: 4b:5f:e9:21:55:89:b5:12:3d:1b:61:a6:81:c5:02:21:a4:da: 41:0f:fa:89:76:16:30:e4:cd:ad:14:29:f7:17:0c:7c:b7:cd: b3:89:40:b2:48:63:5b:33:e5:ac:6a:9a:65:b9:ae:8e:66:da: 05:e1:57:9c:c2:0b:6b:9b:35:07:f7:6c:83:81:49:9d:da:f8: 96:b6:66:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNzIyMTcxMTIzWhcNMjUwNzI5MTcxMTIzWjAYMRYwFAYD VQQDEw02ODdmYzYzYi1iYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oAmM2l7HYYdDZvhAOEPC0fv/dx67yDAEpc3zhnIUe/NpIo3lldhHAOxP2I/ Jj7Jxzly21lfdm/b+/p5HvbZ+eou87IErycG8n4O1+ThOrb/khlX3IRuLQXLm4RD wpc/+go8Nj7y3hQ/62tVU3j+mmTGmEVupBpdlEIysQWTCOZ8OFOnVs/dQImv5SCy PEL1WraijDqvlT4Ezf/0BJ/XxOMTtqJ6Eaz6rwRhHwyxxEqE/z23Hm4iy5xfo5WC 6nK1bY3tMMKL8KRHluBOs7fUfY7FfH/I9pA54aJYIM1645FYWJUERkvPtpqew9DV 149k831JzWi3lJHPagyBXA3nNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzpedHL qxSYlEdlwFA++nfUr1emMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnDu6Tz1Cu2xDeG/UpsrxbfooA6I3vy28rPWrIRfmHKlcz+bCIW9Sy HIuup6otQwiZL7ex7O5YLC6ZsG21ew97LUzRpgkyjZf2UuxskmThi8txLbKMIa58 zCbI9W95SuaNFjl3yV2hfEaL5HJrtc0iEK1YZGPcgv31o16VprMOV115TtGugDjG o3Q/3ujBOfoTuJ4RpgJyT6iR57QduSnGTmnRvuizcywhcCNuh4O9ruCKr9ZLX+kh VYm1Ej0bYaaBxQIhpNpBD/qJdhYw5M2tFCn3Fwx8t82ziUCySGNbM+Wsapplua6O ZtoF4VecwgtrmzUH92yDgUmd2viWtmZ4 -----END CERTIFICATE-----Generated at Wed Jul 23 12:13:22 2025 by rpki-client