$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: 7gLai4QUq5IQnhOpsBFMR4AjP7I6oqx1RONu6UEomdc= Subject key identifier: 37:B6:30:FC:4E:76:75:26:E3:34:F7:76:D4:ED:18:63:AD:67:05:02 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 6C Signing time: Sun 27 Jul 2025 07:11:09 +0000 Manifest this update: Sun 27 Jul 2025 07:11:09 +0000 Manifest next update: Sun 03 Aug 2025 07:11:09 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: eqqIu9obhAE5mnHjatiRDtqSGqW+gB08O9EpARpjidA=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 07:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Jul 27 07:11:09 2025 GMT Not After : Aug 3 07:11:09 2025 GMT Subject: CN=6885d10d-036f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6b:96:0d:40:cf:73:42:62:2c:b9:93:3a:b9: e9:67:70:05:9e:b4:34:41:5f:9a:c8:0b:06:da:f2: f5:9f:d0:ac:56:df:c9:c9:e4:4b:8d:a4:64:e8:c8: ae:be:f4:f1:c5:4e:be:54:85:c7:fa:40:3a:99:4c: 9d:2e:87:55:d1:82:89:ba:12:a8:7e:3d:4d:e1:13: 4e:55:a0:39:8a:d1:7d:6f:ef:ea:81:71:34:ce:4a: 5f:4b:9b:86:9f:29:db:a7:64:63:a2:25:93:4e:e1: eb:bd:dc:0c:ed:45:b1:0b:55:87:86:3f:e1:30:9a: e5:34:bd:98:04:a8:ab:99:e8:a0:54:be:51:b4:ae: 13:7a:bf:cc:17:d5:61:68:26:62:93:90:cc:ba:06: 14:05:70:85:d2:c9:35:31:aa:d5:ee:81:59:b7:9d: 92:ca:bd:05:17:87:c4:87:6d:58:28:ac:dc:84:f6: ac:e2:23:15:77:4e:1c:d6:65:2c:d6:7d:6c:d8:fb: bd:b0:c3:01:96:c7:9d:95:87:b9:42:51:0f:01:81: 88:42:da:7e:ba:16:4d:b3:b3:1f:6a:64:7b:15:a2: 43:b3:6a:56:de:0b:8a:70:c1:86:e8:78:08:bd:92: e7:eb:4b:e0:13:51:fe:5b:6e:68:c7:89:13:14:4d: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:30:FC:4E:76:75:26:E3:34:F7:76:D4:ED:18:63:AD:67:05:02 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ce:89:3f:f5:71:8c:40:62:54:e3:04:6d:ee:d6:75:94:67: 4c:b4:5d:05:84:7d:5d:20:86:57:14:d1:7e:41:75:3c:b0:03: 8a:43:41:ad:b3:b7:ec:79:d6:fa:e0:d9:55:30:78:66:27:e6: 47:f9:de:08:0f:a1:0b:9b:05:ed:34:dd:31:8b:20:ac:80:2b: 3f:3d:88:ba:56:c1:83:31:4f:34:4b:53:b7:80:2a:62:60:c1: 00:2f:4a:d7:84:9a:93:dd:2e:ba:e3:a3:e0:b7:5c:21:b1:41: 19:f8:36:ec:12:09:05:6d:d9:0c:d6:e2:ab:64:e1:bf:1d:29: d0:00:9a:67:05:dd:90:26:ae:8c:92:60:1b:94:0f:b4:c2:e9: f1:b4:db:0c:34:f7:f0:13:35:c7:f1:b9:69:c4:1b:da:8a:18: 30:bd:c4:a5:fc:8d:02:37:87:dc:98:71:1d:7d:d3:59:04:05: 1d:14:29:d1:f5:27:a0:cf:a0:19:15:0a:a0:d3:f1:14:c9:26: b8:81:eb:40:a2:d5:f7:a7:05:41:a3:2c:87:ed:21:1e:6e:30: 66:12:b9:42:30:3b:4f:8f:e2:a9:b7:75:71:93:94:d5:06:b5: bb:d8:19:04:7c:88:2c:87:e4:20:7c:a3:98:81:9a:21:f0:8c: 3e:de:c1:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA3MjcwNzExMDlaFw0yNTA4MDMwNzExMDlaMBgxFjAUBgNV BAMTDTY4ODVkMTBkLTAzNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxa5YNQM9zQmIsuZM6uelncAWetDRBX5rICwba8vWf0KxW38nJ5EuNpGToyK6+ 9PHFTr5Uhcf6QDqZTJ0uh1XRgom6Eqh+PU3hE05VoDmK0X1v7+qBcTTOSl9Lm4af KdunZGOiJZNO4eu93AztRbELVYeGP+EwmuU0vZgEqKuZ6KBUvlG0rhN6v8wX1WFo JmKTkMy6BhQFcIXSyTUxqtXugVm3nZLKvQUXh8SHbVgorNyE9qziIxV3ThzWZSzW fWzY+72wwwGWx52Vh7lCUQ8BgYhC2n66Fk2zsx9qZHsVokOzalbeC4pwwYboeAi9 kufrS+ATUf5bbmjHiRMUTdb1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN7Yw/E52 dSbjNPd21O0YY61nBQIwHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzOiT/1cYxAYlTjBG3u1nWUZ0y0XQWEfV0ghlcU0X5BdTywA4pDQa2z t+x51vrg2VUweGYn5kf53ggPoQubBe003TGLIKyAKz89iLpWwYMxTzRLU7eAKmJg wQAvSteEmpPdLrrjo+C3XCGxQRn4NuwSCQVt2QzW4qtk4b8dKdAAmmcF3ZAmroyS YBuUD7TC6fG02ww09/ATNcfxuWnEG9qKGDC9xKX8jQI3h9yYcR1901kEBR0UKdH1 J6DPoBkVCqDT8RTJJriB60Ci1fenBUGjLIftIR5uMGYSuUIwO0+P4qm3dXGTlNUG tbvYGQR8iCyH5CB8o5iBmiHwjD7ewXM= -----END CERTIFICATE-----Generated at Mon Jul 28 08:04:50 2025 by rpki-client