$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json) Hash identifier: vJWIYswMB9vTRkI8t6bBv/eqmTXLtg7ul+r6dX6vP+w= Subject key identifier: 32:9E:7D:00:F1:E6:55:C4:C7:B0:DC:D9:16:87:21:B9:57:CF:E3:83 Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft Manifest number: 79 Signing time: Mon 21 Jul 2025 06:58:07 +0000 Manifest this update: Mon 21 Jul 2025 06:58:06 +0000 Manifest next update: Mon 28 Jul 2025 06:58:06 +0000 Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: buo+aZxm0PItZYqOjMUX1mmzlDtHgy4LPIZUY+UUx/o=) 2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Validity Not Before: Jul 21 06:58:06 2025 GMT Not After : Jul 28 06:58:06 2025 GMT Subject: CN=687de4ff-2b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:ec:69:70:13:1f:80:95:0b:d7:70:0b:2b: ed:ed:68:9c:7a:49:25:35:09:f5:bf:ea:71:87:41: fd:60:b9:2e:23:24:44:23:36:40:a4:62:38:94:ec: bb:6b:b5:da:93:b8:6e:76:87:ee:63:22:a8:c3:7c: d2:cb:78:5f:e6:48:ea:3d:37:1a:45:5b:13:08:f5: e7:87:8a:e0:cc:e6:4c:04:81:ff:5c:f6:dd:24:1b: 6d:aa:3a:aa:57:29:02:cb:05:e9:a5:95:df:a8:06: bd:d6:f3:9b:2e:19:1c:b3:83:60:48:08:2a:29:85: 6c:de:d6:92:7b:b7:06:37:27:86:7f:ed:a8:ed:1c: e6:3e:71:81:89:66:11:4c:84:46:d1:1a:c4:53:f9: 5e:c2:3a:2f:1b:b7:52:27:32:6e:33:88:9d:b9:a2: ac:34:6f:b2:f7:dc:e3:83:19:53:f9:6c:fd:d4:38: 32:10:de:e9:a1:b9:7e:79:30:39:66:7b:71:33:4e: cf:36:ae:d5:84:f4:1b:b8:3c:d6:65:ef:1a:86:1f: aa:9b:70:3d:cd:bd:92:1c:ec:15:1b:48:4f:2d:3d: e3:be:6d:dd:69:eb:a2:76:7f:0f:68:ce:c2:c2:71: 20:b1:37:81:e4:7d:68:36:7b:39:f5:1c:0e:ef:6b: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:7D:00:F1:E6:55:C4:C7:B0:DC:D9:16:87:21:B9:57:CF:E3:83 X509v3 Authority Key Identifier: keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:23:22:28:98:90:01:0a:2e:fc:c4:aa:3b:65:fa:a4:90:f2: b2:09:0e:4f:7e:8f:03:d4:9c:7b:9d:f0:ce:b3:28:6c:82:b7: 8d:64:28:d8:ac:7a:2a:97:82:df:66:34:91:05:c3:ee:a5:87: ec:de:4e:31:4a:47:02:84:2d:77:2d:b2:06:a4:17:bd:b9:37: 7c:db:41:96:d4:0c:2a:db:f3:50:9e:07:1c:7b:e2:37:7f:a1: c0:28:d2:22:2b:a8:ad:77:1a:ac:de:40:9f:4f:09:b4:b3:1b: 0f:a6:8e:4b:97:11:78:18:0e:e8:33:e8:29:20:70:55:ff:fb: d3:16:aa:58:f3:b0:7c:ca:60:d1:ff:a1:d1:38:55:6c:14:b1: 64:b6:c8:36:2c:00:48:d8:bc:d7:9e:03:9a:cc:44:b0:6e:8d: c6:b6:c1:95:4a:07:4b:89:fe:f9:64:c4:7f:eb:fb:ff:21:29: e9:eb:de:87:27:2b:79:93:1d:98:65:af:01:6e:e1:f9:3d:ab: f7:54:23:14:3e:e8:83:ff:aa:45:23:f7:3b:09:43:23:c0:1c: 2b:77:f7:48:50:bc:56:51:15:ad:7b:dd:32:aa:7a:e1:c8:69: 25:57:15:7e:25:76:3a:21:46:66:02:9b:6c:7f:81:0c:54:95: e1:94:e0:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjNBMjExMC8GA1UEBRMoQzIzREZDMjY5NzM5NDE4RkE1NzkyMUY4RDI5MDVCQTE2 NzQyRkM0RDAeFw0yNTA3MjEwNjU4MDZaFw0yNTA3MjgwNjU4MDZaMBgxFjAUBgNV BAMTDTY4N2RlNGZmLTJiODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/6+xpcBMfgJUL13ALK+3taJx6SSU1CfW/6nGHQf1guS4jJEQjNkCkYjiU7Ltr tdqTuG52h+5jIqjDfNLLeF/mSOo9NxpFWxMI9eeHiuDM5kwEgf9c9t0kG22qOqpX KQLLBemlld+oBr3W85suGRyzg2BICCophWze1pJ7twY3J4Z/7ajtHOY+cYGJZhFM hEbRGsRT+V7COi8bt1InMm4ziJ25oqw0b7L33OODGVP5bP3UODIQ3umhuX55MDlm e3EzTs82rtWE9Bu4PNZl7xqGH6qbcD3NvZIc7BUbSE8tPeO+bd1p66J2fw9ozsLC cSCxN4HkfWg2ezn1HA7vawTzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMp59APHm VcTHsNzZFochuVfP44MwHwYDVR0jBBgwFoAUwj38Jpc5QY+leSH40pBboWdC/E0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzVGODQ1Q0VBQUU0 OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19F MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2ozOEpwYzVRWS1sZVNINDBwQmJvV2RDX0UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG M0EyLzVGODQ1Q0VBQUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVkt bGVTSDQwcEJib1dkQ19FMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJIjIiiYkAEKLvzEqjtl+qSQ8rIJDk9+jwPUnHud8M6zKGyCt41kKNis eiqXgt9mNJEFw+6lh+zeTjFKRwKELXctsgakF725N3zbQZbUDCrb81CeBxx74jd/ ocAo0iIrqK13GqzeQJ9PCbSzGw+mjkuXEXgYDugz6CkgcFX/+9MWqljzsHzKYNH/ odE4VWwUsWS2yDYsAEjYvNeeA5rMRLBujca2wZVKB0uJ/vlkxH/r+/8hKenr3ocn K3mTHZhlrwFu4fk9q/dUIxQ+6IP/qkUj9zsJQyPAHCt390hQvFZRFa173TKqeuHI aSVXFX4ldjohRmYCm2x/gQxUleGU4PY= -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:51 2025 by rpki-client