$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft File: WRGN11PwUw7cK4w74mO-2wzOvA4.mft (raw, json) Hash identifier: rIw4GK2MeWO39+n5Sk+fYRXEDxFxE7UgKU2yffKVo28= Subject key identifier: A1:32:84:D3:3C:5A:00:76:DA:47:E9:E8:13:85:F2:05:EE:48:08:5B Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 02F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft Manifest number: 02EC Signing time: Mon 21 Jul 2025 01:35:08 +0000 Manifest this update: Mon 21 Jul 2025 01:35:08 +0000 Manifest next update: Mon 28 Jul 2025 01:35:08 +0000 Files and hashes: 1: WRGN11PwUw7cK4w74mO-2wzOvA4.crl (hash: 74FLj2R83VRGsxgSsIXUSJj/+f0frqNIY5Sov7pYmCA=) 2: 6967C1F494F711EF905E5F13C4F9AE02.roa (hash: SKYjC2+Kll4ZZKRgRzaVrVL/om+GJv0anlAPWT1K3TE=) 3: E15780AA32E111EFB163924BC4F9AE02.roa (hash: +tMP8g15DFcYp7mMqY0WVEOydxXfPdFwqrShsC1V228=) 4: 8409527078B011EE8D737723C4F9AE02.roa (hash: 0ZYVM7VxDyYQJk7ae/RUp5ynDYTJuRZ5sT+0mo9VS4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 760 (0x2f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Jul 21 01:35:08 2025 GMT Not After : Jul 28 01:35:08 2025 GMT Subject: CN=687d994c-1ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:a4:51:18:a0:02:b8:2b:38:0f:57:f1:24: e7:30:46:0c:19:bd:0d:9a:e8:2b:08:84:77:f1:c8: 2d:20:eb:6b:c1:83:c0:36:d3:b0:89:5f:cd:52:e7: cf:24:b4:26:6c:c3:41:a2:c3:42:cb:e5:4d:0d:13: 4f:40:26:17:94:09:87:d8:20:64:01:ef:df:f8:1a: c2:7f:89:89:a8:90:ce:7f:37:21:3e:ad:a4:22:d7: eb:30:23:8f:a2:83:0b:b0:42:e4:22:dd:ae:40:c8: bc:c1:ec:42:63:77:63:32:07:1f:0e:57:34:8e:68: 2f:27:61:3c:43:f2:49:16:d4:4a:3d:5d:a2:17:ac: 51:6f:8b:86:4a:23:c8:83:a7:00:f4:b0:08:8f:b2: c4:d0:ca:17:ea:d1:aa:9b:45:c8:1b:8b:6a:54:19: cb:97:60:bc:42:ee:4d:14:84:61:da:9a:13:0c:d6: 7a:e0:2e:03:b8:ac:fe:c3:03:73:78:8c:19:4b:fb: 3b:2a:4a:e6:61:d9:9a:3f:b9:e5:52:c3:15:82:5a: 5f:4c:dc:66:d4:60:1c:ee:94:9b:a1:0f:63:1d:05: ed:17:44:63:5c:82:a8:c7:9b:cc:c9:e2:95:35:6f: e2:d1:ab:6e:10:9a:42:d8:a7:45:24:08:72:87:20: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:84:D3:3C:5A:00:76:DA:47:E9:E8:13:85:F2:05:EE:48:08:5B X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:60:fa:0f:e1:ba:32:39:d1:e6:86:3d:80:46:92:ba:39:bf: ae:78:0e:2c:e3:ce:64:96:72:d1:63:5a:58:a4:6c:1c:8d:92: c6:a3:78:bc:7a:5b:81:85:71:ab:5f:bf:67:a9:f6:a8:a5:72: 6d:46:09:96:c1:39:07:1f:de:ec:03:8d:2a:c9:0e:1a:60:78: 22:1b:ff:23:fc:1f:71:7b:83:52:61:ed:9d:6a:45:8e:c2:3a: d8:67:3f:be:f9:70:c5:a8:3f:0f:22:ed:8f:af:d8:77:c2:17: af:71:72:29:f2:5d:8c:bd:7d:d6:17:64:5d:fa:96:d5:78:4f: 4d:21:3c:0b:77:3d:2e:7a:ac:a8:d0:e1:a7:f8:75:6e:84:8c: 62:63:62:e6:20:cb:39:8f:1d:a9:cd:3b:1b:9f:14:aa:91:e5: 75:5d:4a:ed:d8:e2:27:77:ca:70:12:0c:2e:a0:63:ae:29:94: 3a:20:25:c3:e4:a0:2a:67:cc:88:19:20:68:f8:8b:0a:96:d0: 45:58:86:b9:41:ec:5a:5e:7c:01:4d:47:c0:84:2a:c5:18:38: b4:18:fb:d0:39:b9:a1:08:19:3a:57:c1:29:13:6b:9f:f8:5a: a4:ec:72:8f:cf:c1:de:1c:cf:c1:c5:65:d2:1a:31:4a:2b:8b: 78:f6:ba:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjUwNzIxMDEzNTA4WhcNMjUwNzI4MDEzNTA4WjAYMRYwFAYD VQQDEw02ODdkOTk0Yy0xZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnLikURigArgrOA9X8STnMEYMGb0NmugrCIR38cgtIOtrwYPANtOwiV/NUufP JLQmbMNBosNCy+VNDRNPQCYXlAmH2CBkAe/f+BrCf4mJqJDOfzchPq2kItfrMCOP ooMLsELkIt2uQMi8wexCY3djMgcfDlc0jmgvJ2E8Q/JJFtRKPV2iF6xRb4uGSiPI g6cA9LAIj7LE0MoX6tGqm0XIG4tqVBnLl2C8Qu5NFIRh2poTDNZ64C4DuKz+wwNz eIwZS/s7KkrmYdmaP7nlUsMVglpfTNxm1GAc7pSboQ9jHQXtF0RjXIKox5vMyeKV NW/i0atuEJpC2KdFJAhyhyBWHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEyhNM8 WgB22kfp6BOF8gXuSAhbMB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTJGQi9FMEQ2NDUxNEVEMUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3 N2NLNHc3NG1PLTJ3ek92QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzYPoP4boyOdHmhj2ARpK6Ob+ueA4s485klnLRY1pYpGwcjZLGo3i8 eluBhXGrX79nqfaopXJtRgmWwTkHH97sA40qyQ4aYHgiG/8j/B9xe4NSYe2dakWO wjrYZz+++XDFqD8PIu2Pr9h3whevcXIp8l2MvX3WF2Rd+pbVeE9NITwLdz0ueqyo 0OGn+HVuhIxiY2LmIMs5jx2pzTsbnxSqkeV1XUrt2OInd8pwEgwuoGOuKZQ6ICXD 5KAqZ8yIGSBo+IsKltBFWIa5QexaXnwBTUfAhCrFGDi0GPvQObmhCBk6V8EpE2uf +Fqk7HKPz8HeHM/BxWXSGjFKK4t49rpL -----END CERTIFICATE-----Generated at Tue Jul 22 05:01:54 2025 by rpki-client