$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: HsWV4qFpwZ4EJmqdDXqTYMNsHR0vA2oawgIjcY+nV+k= Subject key identifier: 66:1F:74:E0:F5:8A:B1:1E:E3:20:0D:90:F1:9B:6A:79:AB:0F:16:45 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: AB Signing time: Wed 09 Jul 2025 07:01:00 +0000 Manifest this update: Wed 09 Jul 2025 07:01:00 +0000 Manifest next update: Wed 16 Jul 2025 07:01:00 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: C/py+gSRxa9gMrCB6fBoMAKw9nafc9gGH+/HzIh7GVQ=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Jul 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Jul 9 07:01:00 2025 GMT Not After : Jul 16 07:01:00 2025 GMT Subject: CN=686e13ac-b7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:60:27:fa:e8:7e:29:fb:0f:83:fc:4d:7c: f7:4c:ea:75:d1:e6:c6:0a:03:c6:b2:dd:3f:77:13: 5b:46:83:c3:80:9f:83:5c:cc:74:7e:16:91:3b:65: d3:cb:d0:4c:dc:d4:92:f5:12:fc:ab:29:89:a3:56: c8:5c:41:8c:58:8b:e2:42:e3:22:90:71:18:05:b1: c0:88:b0:f4:21:5b:48:be:f4:d9:04:67:97:89:a7: b9:1b:80:c0:b0:a0:a8:fb:42:3a:8c:27:0e:57:21: 1c:47:1a:4f:15:b7:30:c4:48:62:c2:d8:d8:67:fb: ae:1e:34:52:a7:e7:ef:74:34:c8:15:4e:8c:67:a4: 9d:cf:39:d7:15:01:56:69:39:0b:89:6d:57:a5:20: ab:db:d1:6e:c3:9c:1a:62:fe:0a:35:3e:61:ee:7f: 48:d9:c4:8e:bd:05:13:98:4a:0e:47:fb:e9:4a:e6: c4:c5:8a:12:f6:98:8d:db:ac:73:7d:96:03:97:bb: ff:ac:e1:fe:e7:84:62:27:c9:8f:84:b7:0d:ca:f5: 6f:4a:3b:a3:17:ff:be:59:8b:4f:f3:e5:14:43:6c: 85:4b:01:50:37:18:ff:b8:e6:e6:78:69:7f:60:96: 86:2d:6c:70:17:ae:24:12:76:1c:ce:4d:79:32:7c: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1F:74:E0:F5:8A:B1:1E:E3:20:0D:90:F1:9B:6A:79:AB:0F:16:45 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:e1:03:21:82:df:34:06:01:ac:88:12:22:d1:70:b6:c5:45: 1f:90:f7:3c:6e:ae:ee:18:fb:aa:f9:fc:dc:1d:58:2d:07:ae: 45:83:1f:11:46:72:e5:a2:da:0b:60:97:b1:1b:6d:9c:b5:85: bc:9e:81:f2:d5:4a:33:1c:ee:91:22:f3:69:77:f8:cf:d8:37: 5d:d8:e0:c2:7f:bc:7b:ec:7c:ea:f9:7c:04:5b:2b:6e:cf:c0: 7c:54:01:af:e0:0f:7d:23:ba:82:4c:d4:a2:c3:64:f3:7b:b0: ed:5b:ae:f1:cc:39:25:7b:33:b2:56:93:16:b3:ff:10:59:f8: e7:71:bd:e3:63:cd:e2:fc:eb:a1:af:51:02:04:9d:15:b1:39: f5:80:17:0a:e4:72:79:66:9f:42:b0:7d:25:29:8d:0b:17:06: 17:19:93:0a:e6:59:1a:8e:de:82:a9:4b:d7:51:e5:e1:8f:f3: b2:de:6b:86:0d:73:c3:83:a0:b3:46:8f:21:56:a4:14:3b:12: 9c:9f:11:72:46:62:da:08:33:b7:45:a1:a5:d3:5d:cb:bf:a3: aa:74:bd:8d:8b:99:cc:2d:b0:48:aa:68:69:07:0c:ea:9d:a5: a6:9a:3f:58:5a:ae:ac:73:f5:5e:47:a0:6b:5f:e5:42:82:10: 9e:88:ec:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUwNzA5MDcwMTAwWhcNMjUwNzE2MDcwMTAwWjAYMRYwFAYD VQQDEw02ODZlMTNhYy1iN2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbVgJ/rofin7D4P8TXz3TOp10ebGCgPGst0/dxNbRoPDgJ+DXMx0fhaRO2XT y9BM3NSS9RL8qymJo1bIXEGMWIviQuMikHEYBbHAiLD0IVtIvvTZBGeXiae5G4DA sKCo+0I6jCcOVyEcRxpPFbcwxEhiwtjYZ/uuHjRSp+fvdDTIFU6MZ6SdzznXFQFW aTkLiW1XpSCr29Fuw5waYv4KNT5h7n9I2cSOvQUTmEoOR/vpSubExYoS9piN26xz fZYDl7v/rOH+54RiJ8mPhLcNyvVvSjujF/++WYtP8+UUQ2yFSwFQNxj/uObmeGl/ YJaGLWxwF64kEnYczk15Mnx4SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYfdOD1 irEe4yANkPGbanmrDxZFMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB4QMhgt80BgGsiBIi0XC2xUUfkPc8bq7uGPuq+fzcHVgtB65Fgx8R RnLlotoLYJexG22ctYW8noHy1UozHO6RIvNpd/jP2Ddd2ODCf7x77Hzq+XwEWytu z8B8VAGv4A99I7qCTNSiw2Tze7DtW67xzDklezOyVpMWs/8QWfjncb3jY83i/Ouh r1ECBJ0VsTn1gBcK5HJ5Zp9CsH0lKY0LFwYXGZMK5lkajt6CqUvXUeXhj/Oy3muG DXPDg6CzRo8hVqQUOxKcnxFyRmLaCDO3RaGl013Lv6OqdL2Ni5nMLbBIqmhpBwzq naWmmj9YWq6sc/VeR6BrX+VCghCeiOx0 -----END CERTIFICATE-----Generated at Wed Jul 9 09:05:38 2025 by rpki-client