$ rpki-client -vvf rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft File: wVykEPC8_6LEyIu2QkHBtuBZb-k.mft (raw, json) Hash identifier: k1sj7Ol40z961kuNbG+2KHJQaL3jKZ3+6Glm6O7P1Zg= Subject key identifier: FE:AB:E0:07:05:55:C6:2E:56:B4:D9:5C:4C:62:58:83:81:80:5D:87 Authority key identifier: C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9 Certificate issuer: /CN=A91906A1/serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft Manifest number: 0656 Signing time: Fri 18 Jul 2025 22:51:21 +0000 Manifest this update: Fri 18 Jul 2025 22:51:20 +0000 Manifest next update: Fri 25 Jul 2025 22:51:20 +0000 Files and hashes: 1: wVykEPC8_6LEyIu2QkHBtuBZb-k.crl (hash: 3NamqX1glG+Gxw59hwLbuV5dN8UTewZ62AAF5EwOOME=) 2: 7217203E913011EBB9AC2466C4F9AE02.roa (hash: 9X8KEG2hSV9r9XPS13ZYPYCE+3lUg9P7WgD5IkX+DUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91906A1, serialNumber=C15CA410F0BCFFA2C4C88BB64241C1B6E0596FE9 Validity Not Before: Jul 18 22:51:20 2025 GMT Not After : Jul 25 22:51:20 2025 GMT Subject: CN=687acfe8-a751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:97:57:66:bb:0b:99:f4:10:38:74:cb:29: e1:86:10:e3:60:b8:fd:e4:72:7d:d3:4b:13:df:86: 22:9d:5b:b6:bb:78:59:11:39:9d:e4:30:44:ed:43: 8c:dd:f8:bc:bf:6d:32:be:44:86:4f:6f:b7:86:16: c9:57:bc:2d:a3:df:78:f1:79:2a:f4:4d:da:33:dc: 29:de:98:13:eb:05:f4:6a:4f:10:39:de:4a:30:f5: bd:20:80:7d:58:4d:dd:71:81:da:69:03:56:f3:fd: c7:ed:eb:51:80:05:2b:49:9a:f9:b7:38:27:b1:9d: ef:7c:11:66:12:16:cb:f9:f9:02:26:d9:2e:f2:03: 48:4d:f3:1e:be:f7:c2:26:3f:e0:0e:64:cf:fe:81: 6a:d1:c8:59:03:fd:aa:ec:91:b3:98:55:4c:b1:da: 27:e3:3f:9b:4a:2f:66:a0:c2:2f:35:c6:d9:65:2d: 6e:76:2c:2d:38:8e:6f:e4:f4:4d:cf:e4:07:f0:84: 0e:ca:eb:07:ac:62:ed:bf:00:fe:44:6a:01:ad:08: 79:e4:c0:56:64:6b:c0:1a:44:04:68:b2:3d:ca:07: 4b:6b:ef:b2:87:35:43:c5:17:85:aa:64:3d:41:df: b5:79:ea:45:50:58:91:43:32:41:97:93:ad:e1:b7: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:E0:07:05:55:C6:2E:56:B4:D9:5C:4C:62:58:83:81:80:5D:87 X509v3 Authority Key Identifier: keyid:C1:5C:A4:10:F0:BC:FF:A2:C4:C8:8B:B6:42:41:C1:B6:E0:59:6F:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVykEPC8_6LEyIu2QkHBtuBZb-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91906A1/D97E1268906411EB914E2982C4F9AE02/wVykEPC8_6LEyIu2QkHBtuBZb-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:82:56:02:7e:42:2d:bf:8a:e5:8f:9f:91:cb:36:c9:7c:7a: 8a:89:ef:3d:2a:b5:8b:70:16:bf:5a:10:38:d4:07:a3:a6:b5: 50:dd:44:94:d9:fb:74:00:e5:0d:ba:52:43:c7:fc:06:d7:25: ff:1b:f2:ef:82:d9:9d:bf:e6:d4:e2:9c:50:bc:14:9b:47:af: 7c:cf:88:40:83:94:c7:c1:43:20:35:b8:68:a4:56:99:c5:13: cc:30:93:8f:54:2e:9f:11:42:17:de:97:9d:25:97:da:3a:ff: 92:ba:7b:18:69:96:d1:ef:4d:e7:67:d0:89:b8:a0:c6:8e:d8: f6:3c:4e:c8:e3:98:bf:63:d3:3a:34:93:3c:ad:d8:62:b9:f7: e4:85:8a:42:1a:b4:3f:4f:32:62:5a:9b:da:1c:8c:05:3c:bf: 75:05:15:7c:eb:f7:d7:6e:9e:1f:4f:b1:57:7c:dd:c2:6a:7b: e2:4b:f8:bf:59:85:5a:2c:21:8d:ef:fd:e3:9b:58:da:21:c7: 34:30:9f:f3:13:62:62:ea:a2:6b:ef:b1:4c:9e:11:e4:6a:3f: b8:bf:67:a6:8d:c4:de:5a:a4:83:5d:02:94:8a:a7:dc:c8:8b: 9e:ea:3d:e4:61:23:90:ca:e5:6c:a8:c0:37:b8:c3:a9:86:2f: 87:bf:6a:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA2QTExMTAvBgNVBAUTKEMxNUNBNDEwRjBCQ0ZGQTJDNEM4OEJCNjQyNDFDMUI2 RTA1OTZGRTkwHhcNMjUwNzE4MjI1MTIwWhcNMjUwNzI1MjI1MTIwWjAYMRYwFAYD VQQDEw02ODdhY2ZlOC1hNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvOXV2a7C5n0EDh0yynhhhDjYLj95HJ900sT34YinVu2u3hZETmd5DBE7UOM 3fi8v20yvkSGT2+3hhbJV7wto9948Xkq9E3aM9wp3pgT6wX0ak8QOd5KMPW9IIB9 WE3dcYHaaQNW8/3H7etRgAUrSZr5tzgnsZ3vfBFmEhbL+fkCJtku8gNITfMevvfC Jj/gDmTP/oFq0chZA/2q7JGzmFVMsdon4z+bSi9moMIvNcbZZS1udiwtOI5v5PRN z+QH8IQOyusHrGLtvwD+RGoBrQh55MBWZGvAGkQEaLI9ygdLa++yhzVDxReFqmQ9 Qd+1eepFUFiRQzJBl5Ot4bf1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6r4AcF VcYuVrTZXExiWIOBgF2HMB8GA1UdIwQYMBaAFMFcpBDwvP+ixMiLtkJBwbbgWW/p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDZBMS9EOTdFMTI2ODkw NjQxMUVCOTE0RTI5ODJDNEY5QUUwMi93VnlrRVBDOF82TEV5SXUyUWtIQnR1Qlpi LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dWeWtFUEM4XzZMRXlJdTJRa0hCdHVCWmItay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDZBMS9EOTdFMTI2ODkwNjQxMUVCOTE0RTI5ODJDNEY5QUUwMi93VnlrRVBDOF82 TEV5SXUyUWtIQnR1QlpiLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6glYCfkItv4rlj5+RyzbJfHqKie89KrWLcBa/WhA41AejprVQ3USU 2ft0AOUNulJDx/wG1yX/G/Lvgtmdv+bU4pxQvBSbR698z4hAg5THwUMgNbhopFaZ xRPMMJOPVC6fEUIX3pedJZfaOv+SunsYaZbR703nZ9CJuKDGjtj2PE7I45i/Y9M6 NJM8rdhiuffkhYpCGrQ/TzJiWpvaHIwFPL91BRV86/fXbp4fT7FXfN3CanviS/i/ WYVaLCGN7/3jm1jaIcc0MJ/zE2Ji6qJr77FMnhHkaj+4v2emjcTeWqSDXQKUiqfc yIue6j3kYSOQyuVsqMA3uMOphi+Hv2qv -----END CERTIFICATE-----Generated at Sun Jul 20 11:06:47 2025 by rpki-client