$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: H5fyRAsxZ3lyXVQD6Lsy3uI2XaJRMsSFztfUR5ZSVoM= Subject key identifier: 48:DE:B0:6C:B6:84:7B:84:D2:08:62:E6:1E:1D:F6:98:C4:6D:84:E6 Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 07C1 Signing time: Fri 18 Jul 2025 21:25:25 +0000 Manifest this update: Fri 18 Jul 2025 21:25:24 +0000 Manifest next update: Fri 25 Jul 2025 21:25:24 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: IQzZxE5DMrlFimB20/Am//oTOuZ/EulxF7ySapiqTZY=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ciOpG8qRab9sKkVmGRn2hy7gpdalC9pHnHF+YnHZNHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Jul 18 21:25:24 2025 GMT Not After : Jul 25 21:25:24 2025 GMT Subject: CN=687abbc4-d437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:08:a4:01:2f:ea:3c:81:be:73:07:ce:73: bd:37:24:17:89:74:94:20:1c:19:ba:42:60:2e:24: 43:51:6f:b1:46:a5:47:a7:a9:1e:b0:f5:79:7d:ef: 99:76:4d:c9:be:dd:52:e3:9c:13:cf:a7:4d:96:e0: 85:ff:e5:11:6d:c0:67:cc:b2:50:a0:ce:16:0b:3e: 4c:8b:bf:d3:62:a3:7d:7d:1a:91:4b:96:ba:10:b7: cf:13:5b:05:7d:9d:a3:f9:8e:fe:22:51:76:83:ac: 50:3f:75:a5:02:68:90:cb:e6:c8:cd:76:9d:29:46: 8f:fc:f6:a5:91:e8:03:ee:0b:6b:6f:91:ae:bb:ff: cd:2d:b0:87:ce:e0:88:a8:0b:a9:62:d2:db:e6:ee: 1e:ee:84:76:a0:9f:86:78:ef:d1:ff:79:7c:41:e1: 67:78:98:5a:b1:89:b0:f6:53:ed:78:53:3b:60:17: 08:93:82:2a:19:06:02:18:c5:65:b4:2f:ee:7e:7b: c5:cd:d7:a0:f6:c3:80:cb:be:4c:ba:23:e5:bc:d9: 40:47:b8:8b:96:8b:4a:a2:ea:dd:90:e7:a2:62:8d: 24:f1:93:a4:be:c0:8c:26:78:9d:24:47:c0:f6:33: ed:f2:67:38:00:b3:79:b4:90:c2:8e:d0:f2:f2:1a: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DE:B0:6C:B6:84:7B:84:D2:08:62:E6:1E:1D:F6:98:C4:6D:84:E6 X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:92:78:22:da:9d:2f:6d:a4:0c:ee:66:4f:92:78:52:99:16: 75:69:c4:d1:46:11:0c:50:65:d3:2b:8a:97:4e:fe:3a:9d:fd: 75:67:92:ba:14:cc:2a:7f:f1:b6:b1:7d:a3:a6:4d:5c:d6:a0: fe:df:4c:be:78:9f:7f:51:10:2d:84:86:09:2c:d6:a0:7a:97: 61:20:3d:06:af:39:61:1a:b5:d5:bf:0f:de:90:24:26:5b:f3: cf:71:74:66:53:43:67:1f:a1:42:bf:e6:d5:89:8a:34:95:72: 66:ec:a7:10:9a:ed:67:7a:62:9c:a8:43:c6:ad:d8:80:93:b6: ce:94:92:b5:c2:fb:34:60:34:06:24:66:b1:a4:9d:a5:3d:8d: c8:79:fa:08:b1:b7:2f:ba:87:51:58:58:dc:bf:3f:81:07:02: c8:b1:19:35:22:ba:8c:11:56:ea:05:09:48:14:ce:aa:3e:7e: 4f:45:d3:8c:2d:ec:07:81:b1:d3:30:37:43:9c:bb:89:65:3b: 00:a1:24:f9:9b:f3:fc:b1:dd:46:62:4d:2d:79:e6:45:71:67: 90:e9:d7:30:bd:9d:ee:06:24:7f:3f:31:f7:7a:ab:c6:90:b0: e1:c6:61:df:10:e0:30:de:5c:0e:c0:81:95:0e:e4:13:80:93: 58:9b:be:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUwNzE4MjEyNTI0WhcNMjUwNzI1MjEyNTI0WjAYMRYwFAYD VQQDEw02ODdhYmJjNC1kNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykEIpAEv6jyBvnMHznO9NyQXiXSUIBwZukJgLiRDUW+xRqVHp6kesPV5fe+Z dk3Jvt1S45wTz6dNluCF/+URbcBnzLJQoM4WCz5Mi7/TYqN9fRqRS5a6ELfPE1sF fZ2j+Y7+IlF2g6xQP3WlAmiQy+bIzXadKUaP/PalkegD7gtrb5Guu//NLbCHzuCI qAupYtLb5u4e7oR2oJ+GeO/R/3l8QeFneJhasYmw9lPteFM7YBcIk4IqGQYCGMVl tC/ufnvFzdeg9sOAy75MuiPlvNlAR7iLlotKourdkOeiYo0k8ZOkvsCMJnidJEfA 9jPt8mc4ALN5tJDCjtDy8hpngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjesGy2 hHuE0ghi5h4d9pjEbYTmMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAykngi2p0vbaQM7mZPknhSmRZ1acTRRhEMUGXTK4qXTv46nf11Z5K6 FMwqf/G2sX2jpk1c1qD+30y+eJ9/URAthIYJLNagepdhID0GrzlhGrXVvw/ekCQm W/PPcXRmU0NnH6FCv+bViYo0lXJm7KcQmu1nemKcqEPGrdiAk7bOlJK1wvs0YDQG JGaxpJ2lPY3IefoIsbcvuodRWFjcvz+BBwLIsRk1IrqMEVbqBQlIFM6qPn5PRdOM LewHgbHTMDdDnLuJZTsAoST5m/P8sd1GYk0teeZFcWeQ6dcwvZ3uBiR/PzH3eqvG kLDhxmHfEOAw3lwOwIGVDuQTgJNYm74U -----END CERTIFICATE-----Generated at Sun Jul 20 10:13:19 2025 by rpki-client