$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: dyzOn8E7zgoTiHiyF/SrGCBPyUgzy9KP/5U141fFi+g= Subject key identifier: 7F:BD:5C:23:D3:7E:F6:BD:31:92:61:E0:44:E0:0C:84:5C:33:BD:C5 Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 0875 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 0873 Signing time: Fri 18 Jul 2025 20:52:37 +0000 Manifest this update: Fri 18 Jul 2025 20:52:36 +0000 Manifest next update: Fri 25 Jul 2025 20:52:36 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: bPSwA0RVfWISE+WdZJmXk831WkAng7V79MnozZnVQOk=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: 75Xx9HK/DSb6cqMFmlY3w1Yvea4hRHDh6jcfeq7uocg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Jul 18 20:52:36 2025 GMT Not After : Jul 25 20:52:36 2025 GMT Subject: CN=687ab414-6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:2e:55:b5:78:26:46:b3:64:5c:42:19:8e: 0b:7a:d5:9c:d0:95:e1:77:b0:56:ce:57:95:53:cd: 64:6b:6d:cc:7c:e3:dc:7b:38:2f:5f:ac:d5:a6:de: ec:51:4f:34:ad:97:49:cc:91:34:0d:99:81:47:3d: fd:fa:2f:2b:5f:e6:f9:56:a9:97:59:9a:63:5a:d8: ea:0e:11:1b:d9:07:38:c8:b0:a4:1a:98:a6:84:a0: 23:c6:7d:d9:f3:9f:cd:34:af:c6:8b:40:a5:d3:14: ba:1c:1e:23:75:1f:ca:39:bf:f4:d0:64:ac:6d:a6: 70:4c:54:d6:33:13:a6:76:01:e2:da:9e:5b:64:b2: 6e:84:71:0b:b1:6a:86:52:ba:82:d9:f8:9a:c0:49: cf:51:95:6b:1c:98:c5:6a:4a:e3:20:a6:ef:ba:07: c8:34:38:99:e5:bb:c8:6b:04:bf:fc:0a:f0:7a:20: d2:29:24:d3:b3:4c:c3:62:40:cf:94:c0:16:31:8f: d4:7a:99:aa:0f:e8:d8:01:29:04:2d:b8:b8:f2:1c: d7:88:f4:50:4b:9f:86:bf:75:b6:a3:3c:a5:5b:81: 92:51:49:7b:ec:76:22:4d:15:fa:e1:a0:0b:20:94: e3:97:a9:03:1f:be:77:2f:78:53:16:5d:10:3c:fd: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BD:5C:23:D3:7E:F6:BD:31:92:61:E0:44:E0:0C:84:5C:33:BD:C5 X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:63:c5:45:b8:d8:d3:1d:5d:be:d2:21:00:f9:70:3d:10: 66:82:a7:ff:3a:40:f0:b0:12:5b:9b:f1:9f:5c:5a:67:69:06: 12:6f:42:06:00:84:3e:a5:ab:00:48:39:f2:a5:43:7c:46:5a: 43:91:47:df:98:a3:7f:c3:47:8e:37:6c:aa:6e:20:82:c5:c1: cd:a9:10:7d:5f:dd:a1:fc:92:d0:d5:b1:bd:d1:3b:38:15:c5: 7f:df:fd:70:0c:4b:34:01:fb:8f:ef:4a:ae:b8:fb:b5:32:b6: 2a:eb:bc:3f:11:1c:ee:0d:5e:da:26:92:df:b4:fe:91:60:d9: 36:86:c8:f5:41:3a:7e:bc:fb:13:81:94:9e:4c:ce:73:fc:96: 54:28:6b:68:89:98:58:c9:a0:15:e3:13:26:7e:0e:e8:af:3e: f4:21:5d:d5:15:47:cc:05:2e:fd:99:a7:d3:b9:f3:3b:48:7c: 3b:d3:5e:b1:c0:54:52:44:2d:0a:fc:79:be:8a:42:0a:2c:00: 4e:97:82:4c:2a:a0:23:ca:d4:a8:99:eb:eb:b9:44:8f:48:f2: 2c:fb:3c:5a:de:0f:83:23:ab:09:0c:6b:be:dd:89:e3:99:99: 7e:e6:17:30:ae:d0:bc:20:50:47:92:2f:de:5f:d7:20:a4:af: 23:d4:0d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUwNzE4MjA1MjM2WhcNMjUwNzI1MjA1MjM2WjAYMRYwFAYD VQQDEw02ODdhYjQxNC02ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA040uVbV4JkazZFxCGY4LetWc0JXhd7BWzleVU81ka23MfOPcezgvX6zVpt7s UU80rZdJzJE0DZmBRz39+i8rX+b5VqmXWZpjWtjqDhEb2Qc4yLCkGpimhKAjxn3Z 85/NNK/Gi0Cl0xS6HB4jdR/KOb/00GSsbaZwTFTWMxOmdgHi2p5bZLJuhHELsWqG UrqC2fiawEnPUZVrHJjFakrjIKbvugfINDiZ5bvIawS//ArweiDSKSTTs0zDYkDP lMAWMY/UepmqD+jYASkELbi48hzXiPRQS5+Gv3W2ozylW4GSUUl77HYiTRX64aAL IJTjl6kDH753L3hTFl0QPP18rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+9XCPT fva9MZJh4ETgDIRcM73FMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHT2PFRbjY0x1dvtIhAPlwPRBmgqf/OkDwsBJbm/GfXFpnaQYSb0IG AIQ+pasASDnypUN8RlpDkUffmKN/w0eON2yqbiCCxcHNqRB9X92h/JLQ1bG90Ts4 FcV/3/1wDEs0AfuP70quuPu1MrYq67w/ERzuDV7aJpLftP6RYNk2hsj1QTp+vPsT gZSeTM5z/JZUKGtoiZhYyaAV4xMmfg7orz70IV3VFUfMBS79mafTufM7SHw7016x wFRSRC0K/Hm+ikIKLABOl4JMKqAjytSomevruUSPSPIs+zxa3g+DI6sJDGu+3Ynj mZl+5hcwrtC8IFBHki/eX9cgpK8j1A3D -----END CERTIFICATE-----Generated at Sun Jul 20 04:26:35 2025 by rpki-client