$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft File: wlVOkccHDswx5jeOpDvPrzyCE8A.mft (raw, json) Hash identifier: M0DWstqVv2e7TODzRK/k/AVii8gfElR1VsTJuIdhtrs= Subject key identifier: C3:F9:78:F2:15:4B:E9:69:C7:6F:B0:65:A1:51:0F:4B:E7:3D:7E:FC Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 Certificate issuer: /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft Manifest number: 61 Signing time: Sat 19 Jul 2025 07:19:43 +0000 Manifest this update: Sat 19 Jul 2025 07:19:42 +0000 Manifest next update: Sat 26 Jul 2025 07:19:42 +0000 Files and hashes: 1: wlVOkccHDswx5jeOpDvPrzyCE8A.crl (hash: rKmqAVwEd8cXFbz+AP8/MCQw2MfWAXKBYvmU8NLQq+s=) 2: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (hash: KHoPbgNVtZT0OwKjaJvVWJ02MeB3Fx2ZKzMa6yBJHMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Validity Not Before: Jul 19 07:19:42 2025 GMT Not After : Jul 26 07:19:42 2025 GMT Subject: CN=687b470e-7423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:73:f2:0c:82:d1:52:1d:98:50:65:21:3d: a2:11:00:5b:89:8b:08:72:4e:8a:8a:92:f3:91:0d: 3e:0c:96:a6:08:b3:72:81:43:fd:04:2b:5b:0f:08: d5:b1:09:24:54:79:02:b4:7a:24:d7:bc:12:84:a1: 68:c5:78:b1:db:72:ec:a9:d6:17:aa:af:ad:1b:ee: 87:46:4c:1e:80:62:41:34:af:f1:78:45:52:84:aa: 63:02:c6:64:e8:0a:dd:e9:76:41:06:15:ce:a6:1a: 75:c4:f8:42:d3:1e:7a:1c:ca:23:d1:41:0f:f2:03: 05:1f:67:88:62:43:91:74:0b:3a:2f:28:58:2e:ca: ad:eb:d6:3a:db:0c:de:69:aa:2d:20:3c:16:69:5d: 11:e0:c8:87:d1:91:74:5a:a2:7f:b5:2a:f2:63:46: 48:17:e9:01:08:70:30:10:4c:83:75:0b:29:be:2c: c7:1d:89:a8:dd:22:8e:f0:b3:8c:41:6d:29:7b:5b: 61:ef:a1:8d:d3:b1:49:f2:41:15:34:9e:e4:96:bf: 18:00:f0:ef:c5:3d:7a:12:2b:47:87:e8:0f:43:49: 37:8c:d8:c3:b2:d6:c0:50:55:d5:7c:b5:e1:1d:92: e9:75:b4:39:81:7a:16:23:b6:07:f0:38:2d:65:bd: 4e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F9:78:F2:15:4B:E9:69:C7:6F:B0:65:A1:51:0F:4B:E7:3D:7E:FC X509v3 Authority Key Identifier: keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:44:a1:9b:66:ef:9e:ff:79:77:dc:8a:8f:10:54:93:5f:65: fe:42:22:95:c9:41:f8:e4:23:94:e9:86:fd:1a:9a:81:eb:84: 34:4a:7c:68:6a:11:48:24:05:38:5c:75:94:72:fc:a7:fe:cc: d4:20:51:df:b0:5a:13:a0:98:22:84:fa:83:e0:07:d4:3f:b5: a9:05:ea:67:d7:e1:62:05:8f:a2:fb:da:50:00:49:66:0d:3e: 58:fa:5e:a6:36:04:27:17:34:57:05:b2:8b:c9:ce:5d:31:06: 62:bd:96:87:27:f6:65:02:4d:0a:96:f8:51:16:0c:10:fa:6c: dc:68:5c:00:54:39:e6:bf:91:e1:13:af:23:ed:3b:d9:28:a9: dd:df:1b:91:06:a9:ab:41:c2:f3:d3:2d:3b:6b:d9:d0:8d:d3: 84:0f:75:5d:53:9a:ff:32:9b:56:f4:27:5b:8b:0d:0e:7d:f5: ee:95:9c:0b:6a:d7:3e:78:99:c3:be:9f:55:28:c2:c1:51:3e: 78:25:73:e8:74:20:ac:6e:d8:92:02:5a:8e:10:f5:92:72:eb: 66:22:85:ac:fb:dc:72:a4:41:31:9c:6a:de:0f:e6:cf:34:f5: 11:f4:69:f9:58:ef:73:b9:ce:c4:2b:7f:ea:4a:b5:9e:96:a4: 60:76:f1:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoQzI1NTRFOTFDNzA3MEVDQzMxRTYzNzhFQTQzQkNGQUYz QzgyMTNDMDAeFw0yNTA3MTkwNzE5NDJaFw0yNTA3MjYwNzE5NDJaMBgxFjAUBgNV BAMTDTY4N2I0NzBlLTc0MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFcnPyDILRUh2YUGUhPaIRAFuJiwhyToqKkvORDT4MlqYIs3KBQ/0EK1sPCNWx CSRUeQK0eiTXvBKEoWjFeLHbcuyp1heqr60b7odGTB6AYkE0r/F4RVKEqmMCxmTo Ct3pdkEGFc6mGnXE+ELTHnocyiPRQQ/yAwUfZ4hiQ5F0CzovKFguyq3r1jrbDN5p qi0gPBZpXRHgyIfRkXRaon+1KvJjRkgX6QEIcDAQTIN1Cym+LMcdiajdIo7ws4xB bSl7W2HvoY3TsUnyQRU0nuSWvxgA8O/FPXoSK0eH6A9DSTeM2MOy1sBQVdV8teEd kul1tDmBehYjtgfwOC1lvU6fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw/l48hVL 6WnHb7BloVEPS+c9fvwwHwYDVR0jBBgwFoAUwlVOkccHDswx5jeOpDvPrzyCE8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0FFOTJEQzFDRDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL3dsVk9rY2NIRHN3eDVqZU9wRHZQcnp5Q0U4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2xWT2tjY0hEc3d4NWplT3BEdlByenlDRThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0FFOTJEQzFDRDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL3dsVk9rY2NIRHN3 eDVqZU9wRHZQcnp5Q0U4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANtEoZtm757/eXfcio8QVJNfZf5CIpXJQfjkI5Tphv0amoHrhDRKfGhq EUgkBThcdZRy/Kf+zNQgUd+wWhOgmCKE+oPgB9Q/takF6mfX4WIFj6L72lAASWYN Plj6XqY2BCcXNFcFsovJzl0xBmK9locn9mUCTQqW+FEWDBD6bNxoXABUOea/keET ryPtO9koqd3fG5EGqatBwvPTLTtr2dCN04QPdV1Tmv8ym1b0J1uLDQ599e6VnAtq 1z54mcO+n1UowsFRPnglc+h0IKxu2JICWo4Q9ZJy62Yihaz73HKkQTGcat4P5s80 9RH0aflY73O5zsQrf+pKtZ6WpGB28Uo= -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:04 2025 by rpki-client