$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft File: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft (raw, json) Hash identifier: znHklMoTPGsTVP87dWR+ExDY5dt0X7mKS/5ElSG4pLY= Subject key identifier: FD:BC:FB:4F:40:F5:F3:7C:EA:80:78:84:0D:B8:E2:0B:EC:27:BA:5A Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3 Certificate issuer: /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft Manifest number: 36 Signing time: Sat 19 Jul 2025 07:51:18 +0000 Manifest this update: Sat 19 Jul 2025 07:51:18 +0000 Manifest next update: Sat 26 Jul 2025 07:51:18 +0000 Files and hashes: 1: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl (hash: TCNuejeNKWXiZP0PpQrO04QjZ1uzAFsazQ+TeIFs/ro=) 2: 7CBE8274103011F08606D714C4F9AE02.roa (hash: IuWisIzOrWuJ3prCFTYRSnmT2eAgA9CS8sTrUTpGkp0=) 3: 7D2C0290103011F08606D714C4F9AE02.roa (hash: YeIsqC2yZDriIQzhHfDUg79mV40ujoQQFn6HZz5y+Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3 Validity Not Before: Jul 19 07:51:18 2025 GMT Not After : Jul 26 07:51:18 2025 GMT Subject: CN=687b4e76-90a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:47:ac:a0:12:a9:6d:b3:51:62:4f:e6:49: e3:df:80:23:ef:50:c1:4a:6f:66:43:72:79:f5:73: 7a:6f:64:a3:7a:2d:96:c2:c1:24:f6:fb:69:36:04: 95:a9:88:fc:75:4f:78:c6:cb:4a:f1:20:38:58:5f: a5:32:c0:fd:5b:93:de:50:03:5f:f7:a2:bc:d8:19: 9f:ef:fe:08:f5:d3:e5:39:28:5f:2b:da:0a:1b:08: 1e:8f:10:22:8b:b8:9e:a1:6b:3d:62:48:05:34:a3: cd:2c:51:38:f1:d5:63:0f:8d:f0:a7:e9:76:f7:08: bd:58:8b:c4:1f:e2:bb:8e:78:2a:ec:a4:4c:54:fa: 66:ab:74:65:10:c8:b3:6f:f4:09:9f:47:10:ed:33: 75:5a:01:e3:32:41:c4:b5:6e:77:ba:00:96:dc:0f: 0e:2f:e5:21:d8:b4:ab:30:a4:84:78:aa:65:34:d8: 2b:16:07:28:bb:d7:0e:04:83:00:88:94:f4:d1:c1: 0a:8a:7e:f7:8f:aa:7a:7c:2d:bc:5e:d2:73:3d:20: 88:d9:48:a4:fd:ab:87:fb:60:c4:bc:f6:8b:01:c7: 96:76:64:89:93:a0:5f:0d:fe:ae:18:d9:8f:bf:6b: 56:b2:4d:ac:e3:e1:fd:05:85:ee:e7:2c:0f:d0:c8: d9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BC:FB:4F:40:F5:F3:7C:EA:80:78:84:0D:B8:E2:0B:EC:27:BA:5A X509v3 Authority Key Identifier: keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:35:84:06:7b:48:ce:ab:04:aa:c2:60:84:1a:c0:69:35:f0: 52:df:7d:af:68:e4:b6:4f:1a:a7:0c:96:47:a1:cc:d1:0e:f3: 51:99:81:35:f9:ac:17:c2:70:fc:89:1c:39:09:52:27:02:ac: 89:aa:56:e3:74:8d:e3:c6:d4:a9:35:23:99:8e:62:0b:eb:38: c2:54:56:22:15:99:dd:2c:25:5e:f0:96:00:be:9d:21:cf:18: f2:87:2f:99:75:53:be:bc:d3:4b:2d:bf:78:42:be:1c:5c:8c: 94:05:58:f6:e0:8b:31:57:c4:da:b6:87:e9:1a:19:61:6b:99: f9:5a:3f:32:8c:a9:8e:90:4a:30:3b:56:f7:98:29:ff:55:44: 55:c8:3c:87:7d:5f:ec:98:c7:a7:a2:53:81:cc:8e:48:ac:a9: 21:5d:bb:d5:9e:bc:87:74:dc:32:14:8a:0d:71:5c:4f:c7:ee: 1d:f8:36:1d:ef:8b:db:d4:ca:ee:8f:f9:ea:ee:16:85:52:f2: f7:8c:2b:ae:41:53:3c:ac:ba:1c:e2:a9:a0:a5:8f:12:d9:eb: c6:18:99:83:7a:d8:79:75:ef:84:fa:74:ad:91:3c:a0:4f:82: ae:16:57:26:4f:de:46:1e:a3:70:d3:8e:ad:ed:01:e3:ae:01: 4a:95:a9:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTM5NjExMC8GA1UEBRMoRUY4NUFFRkM3QjA4MTRERjNGNDEwREEwMUNBMzRCRTRE NjZCQjFBMzAeFw0yNTA3MTkwNzUxMThaFw0yNTA3MjYwNzUxMThaMBgxFjAUBgNV BAMTDTY4N2I0ZTc2LTkwYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7qEesoBKpbbNRYk/mSePfgCPvUMFKb2ZDcnn1c3pvZKN6LZbCwST2+2k2BJWp iPx1T3jGy0rxIDhYX6UywP1bk95QA1/3orzYGZ/v/gj10+U5KF8r2gobCB6PECKL uJ6haz1iSAU0o80sUTjx1WMPjfCn6Xb3CL1Yi8Qf4ruOeCrspExU+mardGUQyLNv 9AmfRxDtM3VaAeMyQcS1bne6AJbcDw4v5SHYtKswpIR4qmU02CsWByi71w4EgwCI lPTRwQqKfvePqnp8Lbxe0nM9IIjZSKT9q4f7YMS89osBx5Z2ZImToF8N/q4Y2Y+/ a1ayTazj4f0Fhe7nLA/QyNljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/bz7T0D1 83zqgHiEDbjiC+wnulowHwYDVR0jBBgwFoAU74Wu/HsIFN8/QQ2gHKNL5NZrsaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5Mzk2LzNCOEQ3NDg4MTAy OTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJRk44X1FRMmdIS05MNU5acnNh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNzRXdV9Ic0lGTjhfUVEyZ0hLTkw1Tlpyc2FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 Mzk2LzNCOEQ3NDg4MTAyOTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJRk44 X1FRMmdIS05MNU5acnNhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJc1hAZ7SM6rBKrCYIQawGk18FLffa9o5LZPGqcMlkehzNEO81GZgTX5 rBfCcPyJHDkJUicCrImqVuN0jePG1Kk1I5mOYgvrOMJUViIVmd0sJV7wlgC+nSHP GPKHL5l1U76800stv3hCvhxcjJQFWPbgizFXxNq2h+kaGWFrmflaPzKMqY6QSjA7 VveYKf9VRFXIPId9X+yYx6eiU4HMjkisqSFdu9WevId03DIUig1xXE/H7h34Nh3v i9vUyu6P+eruFoVS8veMK65BUzysuhziqaCljxLZ68YYmYN62Hl174T6dK2RPKBP gq4WVyZP3kYeo3DTjq3tAeOuAUqVqV8= -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:42 2025 by rpki-client