$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: k821sPrU4Jn/6YjihriVgdgkAcgNsy63GeYVaAklzuE= Subject key identifier: CB:8D:FE:41:D1:0F:70:25:98:D2:96:AC:2D:F7:D3:F2:87:D2:7B:F9 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0B13 Signing time: Fri 18 Jul 2025 19:32:33 +0000 Manifest this update: Fri 18 Jul 2025 19:32:32 +0000 Manifest next update: Fri 25 Jul 2025 19:32:32 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: Ep0X2SZD6vtB2IsVxhdux1kPU+I8SBkH33DwHjxnk/E=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Jul 18 19:32:32 2025 GMT Not After : Jul 25 19:32:32 2025 GMT Subject: CN=687aa151-1912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:5d:92:bb:03:58:2c:29:09:86:0c:4e:87: e2:6f:c3:49:d4:1f:95:fe:8b:83:a2:93:e7:7b:4c: 70:67:c7:2e:59:12:0b:6f:48:a6:7a:57:d1:e5:66: 4c:79:f7:31:2d:9c:54:1b:12:73:08:7e:3b:aa:b0: 19:cf:3c:8a:2b:d8:7f:47:63:eb:21:f6:fd:fa:5d: 1b:05:0b:3e:b2:ca:57:f1:4d:54:b3:60:53:a2:a1: c3:b0:61:75:76:33:39:cd:72:84:2a:75:5f:b2:6f: 79:16:24:3b:6e:45:3e:e6:1c:17:90:ef:1b:fa:c7: 7b:ea:f8:c6:4d:91:c4:7d:3b:f7:d5:bb:72:46:6d: 5b:0d:4c:b5:ac:17:92:4d:ac:9c:89:73:09:ca:0c: bd:56:a2:84:1b:10:ba:3f:b3:ae:a6:47:05:9e:5c: 01:d1:da:89:c6:4d:77:5d:37:66:71:cb:e3:2f:00: eb:de:9b:a9:86:7f:2c:e7:be:78:02:56:10:7a:6d: 26:30:ee:69:76:fb:f9:bd:b2:fe:3f:d2:c8:2b:52: 51:c4:87:f7:a7:df:1c:e3:d7:21:55:93:f9:b8:75: e7:ef:1b:8c:2a:53:06:04:29:06:3e:11:55:b0:69: 16:99:6b:0c:10:cb:e6:5e:f6:61:e4:a6:02:72:7d: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:FE:41:D1:0F:70:25:98:D2:96:AC:2D:F7:D3:F2:87:D2:7B:F9 X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6c:fb:dc:e1:0d:b0:77:c8:2f:ef:53:26:e9:2b:84:16:df: 7a:06:6f:d9:b4:66:88:ba:c5:3a:83:4d:fd:05:97:03:0e:97: 1c:e5:14:67:c1:b0:2a:ea:11:4b:d7:f9:71:7e:27:9a:f7:66: 9e:fd:5b:22:f4:29:b4:72:5f:df:69:f5:8a:98:99:79:f2:d9: 35:ec:a7:a5:eb:c8:2d:6d:2b:3d:7c:b5:c7:70:05:83:bd:b5: ca:03:5b:17:1d:2a:60:4b:91:ed:ef:d5:81:89:08:c6:8a:bd: b9:b7:22:38:b7:c6:cf:53:35:05:d9:13:49:96:28:f7:7a:b1: f1:92:5f:c9:54:2b:db:6f:f6:10:e5:3d:da:15:e9:cb:11:d6: 25:a5:45:c7:e2:e0:06:d3:f0:ef:8c:8a:95:a7:29:ba:63:c9: 23:0d:6d:f1:8a:0f:d8:6e:3e:4c:2b:c7:21:fe:e6:61:46:b2: 4f:c1:a6:77:54:04:4b:d6:5d:45:ed:07:a6:df:37:0c:84:36: 66:e7:89:45:e4:10:83:be:0b:94:18:31:0f:d6:d0:23:82:9d: b1:39:04:3d:81:5f:92:59:23:d9:d7:fb:0c:ef:e9:aa:17:78: fb:6a:3e:4c:84:5e:a1:1d:81:e6:10:91:bb:48:d7:85:82:92: ec:0e:38:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUwNzE4MTkzMjMyWhcNMjUwNzI1MTkzMjMyWjAYMRYwFAYD VQQDEw02ODdhYTE1MS0xOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVBdkrsDWCwpCYYMTofib8NJ1B+V/ouDopPne0xwZ8cuWRILb0imelfR5WZM efcxLZxUGxJzCH47qrAZzzyKK9h/R2PrIfb9+l0bBQs+sspX8U1Us2BToqHDsGF1 djM5zXKEKnVfsm95FiQ7bkU+5hwXkO8b+sd76vjGTZHEfTv31btyRm1bDUy1rBeS TayciXMJygy9VqKEGxC6P7OupkcFnlwB0dqJxk13XTdmccvjLwDr3puphn8s5754 AlYQem0mMO5pdvv5vbL+P9LIK1JRxIf3p98c49chVZP5uHXn7xuMKlMGBCkGPhFV sGkWmWsMEMvmXvZh5KYCcn1XTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuN/kHR D3AlmNKWrC330/KH0nv5MB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtbPvc4Q2wd8gv71Mm6SuEFt96Bm/ZtGaIusU6g039BZcDDpcc5RRn wbAq6hFL1/lxfiea92ae/Vsi9Cm0cl/fafWKmJl58tk17Kel68gtbSs9fLXHcAWD vbXKA1sXHSpgS5Ht79WBiQjGir25tyI4t8bPUzUF2RNJlij3erHxkl/JVCvbb/YQ 5T3aFenLEdYlpUXH4uAG0/DvjIqVpym6Y8kjDW3xig/Ybj5MK8ch/uZhRrJPwaZ3 VARL1l1F7Qem3zcMhDZm54lF5BCDvguUGDEP1tAjgp2xOQQ9gV+SWSPZ1/sM7+mq F3j7aj5MhF6hHYHmEJG7SNeFgpLsDjhc -----END CERTIFICATE-----Generated at Sun Jul 20 07:29:15 2025 by rpki-client