$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json) Hash identifier: oEet+/A2sW9i1WWnoBJf8FAA2jODJkuG2fDmnMWwD58= Subject key identifier: 45:B7:59:AC:F8:81:1F:B3:B0:70:72:6C:BC:AB:28:0A:E1:E7:23:1D Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Certificate serial: 0EDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft Manifest number: 0ED4 Signing time: Fri 18 Jul 2025 17:48:57 +0000 Manifest this update: Fri 18 Jul 2025 17:48:57 +0000 Manifest next update: Fri 25 Jul 2025 17:48:57 +0000 Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: lGkuenIs7eoGDR5glu+if1BRfomikDa1ymKBraHATt0=) 2: 7DAD1584881811E99CA76437C4F9AE02.roa (hash: kQ1ecN3du3BFvR7/Vwlq9mllQVMxIS/rTwYJnbfcfck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3802 (0xeda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Validity Not Before: Jul 18 17:48:57 2025 GMT Not After : Jul 25 17:48:57 2025 GMT Subject: CN=687a8909-16e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:a2:12:e0:b3:75:4b:71:d7:b4:c9:9d:d4: cd:1f:11:89:c4:99:48:2f:0f:8b:96:4a:23:ca:cd: 3e:62:d5:c2:f7:c0:5c:78:78:7f:0d:3b:ef:bf:f8: 40:55:3c:d0:7c:4a:d1:9d:26:04:c2:c7:af:6a:e8: 7f:32:7a:2b:7c:9a:b9:4a:73:48:9e:9e:df:0f:c4: da:f1:91:6a:4c:8f:70:76:48:30:eb:09:db:8c:f8: 47:a6:87:f8:55:dd:4d:b8:50:6a:23:35:8c:8d:b2: 8b:25:cb:a2:b6:50:e9:92:c1:67:9b:e6:11:6d:80: 5d:e8:e9:c0:e6:09:05:04:22:e8:e4:78:9a:ae:0b: 92:9c:ab:33:df:01:96:68:5e:da:82:58:65:75:f7: 98:67:17:6c:33:2b:4b:4c:9d:26:16:d8:a2:c8:81: 37:bf:71:e1:f1:69:a1:16:46:c4:3a:6d:b1:bb:47: 23:51:d7:50:fb:f2:6b:ef:c3:35:59:bb:c9:9a:ea: ef:8c:00:d5:ac:fc:55:f2:a9:61:55:53:27:7d:c4: 79:74:6a:f3:25:b0:ed:7f:93:61:fc:28:81:d4:6a: 17:63:5b:ff:e5:72:f9:5e:8b:cb:50:a7:71:42:8a: 6a:1b:77:16:8b:dd:b3:9d:5f:81:ef:6f:25:c1:9c: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B7:59:AC:F8:81:1F:B3:B0:70:72:6C:BC:AB:28:0A:E1:E7:23:1D X509v3 Authority Key Identifier: keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e3:25:a6:ce:3c:b4:02:32:14:89:8a:de:54:2a:a9:e4:8b: 47:f5:9c:60:b0:01:a2:d3:fa:ab:7c:8d:1f:7c:44:fd:0a:ee: ec:d9:65:57:a3:5d:66:ad:85:59:8e:2f:2b:a4:2b:6a:31:bf: 24:fa:2b:09:df:95:52:ac:14:0b:7b:69:f6:c0:27:96:10:0b: 86:c1:c1:2b:b8:f1:7a:13:54:18:1c:65:d5:8d:b9:a2:0e:e7: b8:ba:69:8c:a5:bb:b2:b6:76:67:57:2b:93:a0:fd:ed:c9:61: 6f:eb:cc:94:24:d9:50:93:20:a9:0d:fa:6c:e5:0d:48:4a:b0: 37:91:28:9e:c0:58:cb:2b:ad:09:e5:ee:08:eb:0c:1a:71:d5: e1:8c:e1:1c:38:59:94:d6:c9:d4:58:9b:82:fc:40:c3:a2:4d: c2:af:ac:1e:b0:05:14:bd:e8:1c:06:d6:17:43:9a:d6:11:4d: 12:e8:97:45:de:4e:40:52:45:93:65:b3:38:5d:a5:7a:af:33: 18:e7:0d:f8:47:a0:e8:da:11:cc:4c:83:47:72:71:43:fd:09: 36:78:e9:97:3c:a7:64:3e:b6:8f:02:11:3e:cd:ef:d9:b0:1e: 73:d2:6e:bf:8e:19:8f:f9:b1:63:b0:d4:d5:78:37:34:d2:6c: 78:c7:eb:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC MEQxNjhCQ0MwHhcNMjUwNzE4MTc0ODU3WhcNMjUwNzI1MTc0ODU3WjAYMRYwFAYD VQQDEw02ODdhODkwOS0xNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyGiEuCzdUtx17TJndTNHxGJxJlILw+Llkojys0+YtXC98BceHh/DTvvv/hA VTzQfErRnSYEwsevauh/MnorfJq5SnNInp7fD8Ta8ZFqTI9wdkgw6wnbjPhHpof4 Vd1NuFBqIzWMjbKLJcuitlDpksFnm+YRbYBd6OnA5gkFBCLo5HiarguSnKsz3wGW aF7aglhldfeYZxdsMytLTJ0mFtiiyIE3v3Hh8WmhFkbEOm2xu0cjUddQ+/Jr78M1 WbvJmurvjADVrPxV8qlhVVMnfcR5dGrzJbDtf5Nh/CiB1GoXY1v/5XL5XovLUKdx QopqG3cWi92znV+B728lwZwVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEW3Waz4 gR+zsHBybLyrKArh5yMdMB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4 MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz4yWmzjy0AjIUiYreVCqp5ItH9ZxgsAGi0/qrfI0ffET9Cu7s2WVX o11mrYVZji8rpCtqMb8k+isJ35VSrBQLe2n2wCeWEAuGwcEruPF6E1QYHGXVjbmi Due4ummMpbuytnZnVyuToP3tyWFv68yUJNlQkyCpDfps5Q1ISrA3kSiewFjLK60J 5e4I6wwacdXhjOEcOFmU1snUWJuC/EDDok3Cr6wesAUUvegcBtYXQ5rWEU0S6JdF 3k5AUkWTZbM4XaV6rzMY5w34R6Do2hHMTINHcnFD/Qk2eOmXPKdkPraPAhE+ze/Z sB5z0m6/jhmP+bFjsNTVeDc00mx4x+sa -----END CERTIFICATE-----Generated at Sun Jul 20 06:36:24 2025 by rpki-client