$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft File: wEyBplFeUCbiG-aMudUdQTmoWpI.mft (raw, json) Hash identifier: T3kPS1Gzsi9ziFd/OEyGZJQrxJPikMBfCgEk9AMuHqE= Subject key identifier: BD:2D:9E:05:5E:37:1B:6F:8E:CE:96:5D:FC:51:06:17:8C:37:74:F4 Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 Certificate issuer: /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft Manifest number: 04D3 Signing time: Mon 21 Jul 2025 00:00:09 +0000 Manifest this update: Mon 21 Jul 2025 00:00:09 +0000 Manifest next update: Mon 28 Jul 2025 00:00:09 +0000 Files and hashes: 1: wEyBplFeUCbiG-aMudUdQTmoWpI.crl (hash: a2jjkli4JGJ+O41NIHyhq69gRTQLejW+scUIJiiuzJ8=) 2: 861D1DB82C4411EC9539C124C4F9AE02.roa (hash: L7nlhQmvIweH/CDk6Porr52Om6tp3xqWvQb2+9BsORw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Validity Not Before: Jul 21 00:00:09 2025 GMT Not After : Jul 28 00:00:09 2025 GMT Subject: CN=687d8309-df43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:29:af:d8:49:b8:c0:51:35:06:52:77:a1: 08:5e:5e:98:1b:15:88:4b:b4:ac:64:36:e5:5d:b4: c0:d4:48:63:f0:69:08:15:50:56:32:cc:c8:8d:52: 33:28:f3:a8:e9:17:2e:a8:a0:89:86:73:4b:e0:5a: bb:ec:d6:b9:c2:20:be:43:f2:5b:33:a7:c2:6b:47: 82:58:3e:3d:32:7e:3a:ca:db:e9:d5:a5:45:04:f9: 7e:50:20:28:a3:f1:9e:98:ca:48:45:96:25:d9:f4: c6:fb:d6:c7:2a:ab:03:d8:d9:6f:26:22:3e:5f:34: 96:95:5d:79:2c:11:ed:be:c5:2d:53:c6:97:28:30: ab:b4:a9:f8:ab:92:01:0b:41:61:8f:33:a5:58:11: f5:6a:a4:a0:5c:5f:5a:f2:aa:c0:e9:f5:66:c3:5d: ed:1f:4b:09:91:70:8f:da:17:3f:df:96:81:96:63: 8d:8c:bb:c2:dd:7d:67:52:d7:c4:6e:2f:6d:25:b4: 0c:9b:aa:5a:0b:d1:63:5d:ca:44:b1:f0:d9:e9:75: ea:65:e2:24:08:27:2e:e8:e2:c8:ed:8a:83:91:d7: 93:ec:84:6b:9a:53:8c:4b:55:7c:bf:6b:9a:2b:65: a9:ae:cd:f4:20:e3:67:c5:08:a1:0d:89:2e:16:3d: c6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2D:9E:05:5E:37:1B:6F:8E:CE:96:5D:FC:51:06:17:8C:37:74:F4 X509v3 Authority Key Identifier: keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7e:bf:18:6c:ca:2d:18:4e:c1:ae:f8:aa:ac:de:3d:be:c8: 10:4e:3d:85:e9:4f:fd:18:41:a0:f5:26:a1:9a:21:31:88:c3: 39:d3:88:b8:e0:52:4f:88:ed:14:bc:a7:51:37:cf:e6:9c:d7: 41:5d:a1:6d:85:20:78:3b:ef:d8:58:03:e2:db:2d:56:5b:6c: 21:18:fe:97:68:3e:b0:46:bf:8f:d1:88:74:24:8c:64:48:61: c5:ff:50:e9:4b:4e:9d:b8:2b:7a:0e:6a:f0:7c:35:39:95:d8: 5e:fa:bd:69:d3:44:ae:ac:05:63:e3:7b:13:3d:ed:f9:db:50: e8:fe:2c:9a:1e:25:8f:ec:45:2c:ea:28:8f:d2:38:39:20:1e: d8:12:c5:9b:3a:b9:a1:b2:10:82:59:99:0d:3c:27:76:e0:c4: cc:4d:43:11:fa:74:23:74:53:79:bf:b7:87:8a:41:14:da:bf: da:83:b8:ab:11:06:45:fc:a0:74:a1:27:02:b3:fd:39:a2:e5: a3:a6:39:ea:3e:9f:f9:d5:05:d5:01:94:24:e9:c7:e7:d4:19: 6d:11:8e:3f:d8:a6:ce:c0:02:7a:a0:9c:b7:b7:c8:97:1e:8a: d9:5c:54:9e:ac:73:67:ed:9d:91:e5:76:dc:ee:74:c4:6f:fe: 4e:dd:e7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5ODQxMTAvBgNVBAUTKEMwNEM4MUE2NTE1RTUwMjZFMjFCRTY4Q0I5RDUxRDQx MzlBODVBOTIwHhcNMjUwNzIxMDAwMDA5WhcNMjUwNzI4MDAwMDA5WjAYMRYwFAYD VQQDEw02ODdkODMwOS1kZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtkpr9hJuMBRNQZSd6EIXl6YGxWIS7SsZDblXbTA1Ehj8GkIFVBWMszIjVIz KPOo6RcuqKCJhnNL4Fq77Na5wiC+Q/JbM6fCa0eCWD49Mn46ytvp1aVFBPl+UCAo o/GemMpIRZYl2fTG+9bHKqsD2NlvJiI+XzSWlV15LBHtvsUtU8aXKDCrtKn4q5IB C0FhjzOlWBH1aqSgXF9a8qrA6fVmw13tH0sJkXCP2hc/35aBlmONjLvC3X1nUtfE bi9tJbQMm6paC9FjXcpEsfDZ6XXqZeIkCCcu6OLI7YqDkdeT7IRrmlOMS1V8v2ua K2Wprs30IONnxQihDYkuFj3GEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0tngVe Nxtvjs6WXfxRBheMN3T0MB8GA1UdIwQYMBaAFMBMgaZRXlAm4hvmjLnVHUE5qFqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDk4NC80MEU4MjY2QTJD M0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVDYmlHLWFNdWRVZFFUbW9X cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dFeUJwbEZlVUNiaUctYU11ZFVkUVRtb1dwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDk4NC80MEU4MjY2QTJDM0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVD YmlHLWFNdWRVZFFUbW9XcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6fr8YbMotGE7BrviqrN49vsgQTj2F6U/9GEGg9SahmiExiMM504i4 4FJPiO0UvKdRN8/mnNdBXaFthSB4O+/YWAPi2y1WW2whGP6XaD6wRr+P0Yh0JIxk SGHF/1DpS06duCt6DmrwfDU5ldhe+r1p00SurAVj43sTPe3521Do/iyaHiWP7EUs 6iiP0jg5IB7YEsWbOrmhshCCWZkNPCd24MTMTUMR+nQjdFN5v7eHikEU2r/ag7ir EQZF/KB0oScCs/05ouWjpjnqPp/51QXVAZQk6cfn1BltEY4/2KbOwAJ6oJy3t8iX HorZXFSerHNn7Z2R5Xbc7nTEb/5O3eeu -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:12 2025 by rpki-client