$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: uWelEjiqsjKcDyDXsrcdlXsFayAp5CBV08yk0x9C3vo= Subject key identifier: 9D:E3:9B:01:63:D7:BE:4E:05:34:A2:9B:4D:19:DE:EA:BE:1D:6D:16 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1BA1 Signing time: Sun 20 Jul 2025 16:36:50 +0000 Manifest this update: Sun 20 Jul 2025 16:36:49 +0000 Manifest next update: Sun 27 Jul 2025 16:36:49 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: 5tH+heaV89Til+s7veOC+nypAMX3qWCSjxqqmhnjTBg=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Jul 20 16:36:49 2025 GMT Not After : Jul 27 16:36:49 2025 GMT Subject: CN=687d1b22-aeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a9:ca:09:d0:2e:01:f1:8a:79:89:b1:28:2d: f4:fc:2d:f0:27:74:b0:dc:94:f7:cb:3b:07:54:dd: 99:8e:51:a6:59:5d:b9:c3:f2:ac:72:59:bd:e1:b5: c8:43:37:1c:68:b8:46:f6:0b:dc:14:19:eb:87:b9: 8e:34:dd:52:d1:0b:de:12:eb:be:c2:95:e2:a7:fa: de:f2:cc:53:48:46:85:27:b9:69:bf:61:55:b8:58: 61:3d:68:a5:f5:c2:a9:45:0e:17:85:15:d9:28:e5: e6:ed:02:ee:64:64:5d:82:ea:9c:30:9d:76:b2:56: 9b:3f:67:bd:e2:fc:79:ec:e4:3f:2f:1e:98:4e:51: a8:16:36:39:ef:55:a2:16:13:11:e8:dd:cf:70:db: 15:3f:62:42:e4:6f:3e:b3:4d:4f:c4:cc:a4:fb:21: 80:32:99:61:30:ca:02:40:df:ff:fa:b3:d0:75:e7: 7b:5d:90:fa:3b:1a:de:bf:12:05:e6:2b:39:7c:bc: 45:c7:2a:72:a4:5f:93:f8:fc:b7:ff:86:ad:26:c0: 7f:5d:ce:cf:27:0d:ac:05:3e:19:dc:55:32:ce:80: d7:e9:31:78:5c:07:e9:d2:7e:d0:82:24:34:e9:16: f7:bc:08:59:7f:d4:7f:21:e4:8e:61:60:0a:74:93: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E3:9B:01:63:D7:BE:4E:05:34:A2:9B:4D:19:DE:EA:BE:1D:6D:16 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:74:6a:db:74:2e:f9:20:71:e1:6f:b2:d8:0b:3c:f1:1f:51: fa:84:fc:b8:b2:e2:bb:0c:0e:ad:c8:af:5a:ae:e6:ea:8b:4b: 28:a6:a9:02:6d:54:9e:e5:05:fb:54:8b:4a:97:6b:b0:7d:ee: f0:e9:60:96:82:f5:08:ce:3d:41:e2:5c:f0:25:5c:d0:72:91: e9:e7:ee:13:3a:ea:65:08:14:4c:63:4f:65:d2:ae:53:16:0e: 14:f4:dd:ab:cc:b4:04:77:17:dc:08:b9:a9:31:2d:dd:27:60: d1:7c:8e:c6:24:ef:48:2f:61:61:ca:42:b4:c2:76:ec:f1:b3: 2c:61:bb:6d:cd:40:38:67:c1:b0:03:48:c6:91:7a:30:ef:38: d1:ab:7a:62:50:ab:21:6c:97:17:00:44:06:9e:27:8c:c0:5f: 15:74:99:8f:e7:db:f2:0f:82:21:4a:f5:3e:05:8b:ad:4f:fe: d7:6b:84:32:4f:04:ec:59:f1:4e:b6:25:a2:aa:4b:fc:ce:2a: 53:df:09:b2:6c:aa:b0:f3:71:35:f6:d5:bc:c6:d2:65:47:2c: 85:3f:d4:ff:4f:6d:9e:da:fe:3b:60:c9:09:7f:8b:cd:cd:40: b4:d6:c6:e8:ed:76:7c:d2:04:fc:aa:af:a3:54:ab:7d:53:99: ec:03:b0:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwNzIwMTYzNjQ5WhcNMjUwNzI3MTYzNjQ5WjAYMRYwFAYD VQQDEw02ODdkMWIyMi1hZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56nKCdAuAfGKeYmxKC30/C3wJ3Sw3JT3yzsHVN2ZjlGmWV25w/Ksclm94bXI QzccaLhG9gvcFBnrh7mONN1S0QveEuu+wpXip/re8sxTSEaFJ7lpv2FVuFhhPWil 9cKpRQ4XhRXZKOXm7QLuZGRdguqcMJ12slabP2e94vx57OQ/Lx6YTlGoFjY571Wi FhMR6N3PcNsVP2JC5G8+s01PxMyk+yGAMplhMMoCQN//+rPQded7XZD6OxrevxIF 5is5fLxFxypypF+T+Py3/4atJsB/Xc7PJw2sBT4Z3FUyzoDX6TF4XAfp0n7QgiQ0 6Rb3vAhZf9R/IeSOYWAKdJNnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3jmwFj 175OBTSim00Z3uq+HW0WMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDdGrbdC75IHHhb7LYCzzxH1H6hPy4suK7DA6tyK9arubqi0sopqkC bVSe5QX7VItKl2uwfe7w6WCWgvUIzj1B4lzwJVzQcpHp5+4TOuplCBRMY09l0q5T Fg4U9N2rzLQEdxfcCLmpMS3dJ2DRfI7GJO9IL2FhykK0wnbs8bMsYbttzUA4Z8Gw A0jGkXow7zjRq3piUKshbJcXAEQGnieMwF8VdJmP59vyD4IhSvU+BYutT/7Xa4Qy TwTsWfFOtiWiqkv8zipT3wmybKqw83E19tW8xtJlRyyFP9T/T22e2v47YMkJf4vN zUC01sbo7XZ80gT8qq+jVKt9U5nsA7Cc -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:14 2025 by rpki-client