$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json) Hash identifier: jhOU8y6dapLvE+e9LYCKqjGltF/Zt36JQusmp07pOPc= Subject key identifier: 60:6A:42:68:3C:3C:09:3D:B0:08:C7:72:CE:FD:BF:1A:99:66:BE:B7 Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft Manifest number: 12 Signing time: Sat 19 Jul 2025 08:13:37 +0000 Manifest this update: Sat 19 Jul 2025 08:13:36 +0000 Manifest next update: Sat 26 Jul 2025 08:13:36 +0000 Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: 0Z53TeazbbL1Et2qmYnN5sskQcC2mIePFWS4M2t7cG0=) 2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: Bm8WKhY+hNcg+fjUuluI2/RvbnR7gkU6ugwO04YyI/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Validity Not Before: Jul 19 08:13:36 2025 GMT Not After : Jul 26 08:13:36 2025 GMT Subject: CN=687b53b1-c4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:1a:d4:99:65:87:4e:64:f1:d1:40:65:57: 51:c1:48:ba:a6:95:d4:1f:6c:6c:ac:54:26:c5:63: a1:35:65:8a:f8:a4:48:85:7f:1c:35:e2:5c:97:d1: 5a:13:cc:f2:64:3a:ec:5e:17:be:80:7b:2b:0b:5d: 62:b1:ee:e4:35:05:81:6b:20:3e:f2:a3:d0:d2:38: c1:87:81:13:13:4e:74:21:ff:d7:89:2c:7a:4f:97: 8f:a3:7d:40:ae:e5:83:9f:25:a8:9c:3d:02:b4:91: d4:c8:fa:c0:2e:1c:68:92:4f:a3:a3:50:d0:c7:41: e1:68:25:5d:e8:03:3a:93:b2:f9:0b:1c:94:3d:90: 0e:78:21:f3:45:83:37:1e:f2:31:b7:f8:3c:be:7f: fa:d7:64:06:39:84:8c:43:16:5c:24:52:e4:47:42: 67:a1:74:73:b6:9a:41:c6:14:e4:e6:48:ab:dc:87: 4e:8a:fe:64:b0:d4:60:b3:ea:b8:94:ab:1e:61:25: 02:31:38:30:1b:3e:bd:92:f4:58:96:08:85:c7:97: a0:56:ac:78:c6:39:2c:3e:81:4f:04:e0:de:1e:00: 7a:67:a6:ca:c4:46:02:2d:2f:e0:62:60:21:54:d6: 75:e0:f5:f9:46:92:28:fd:36:88:15:40:ed:05:ec: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6A:42:68:3C:3C:09:3D:B0:08:C7:72:CE:FD:BF:1A:99:66:BE:B7 X509v3 Authority Key Identifier: keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e3:60:13:18:f5:d4:b5:cc:a8:6b:7b:ac:6b:cb:f6:29:ef: 79:76:82:f4:52:43:3e:9b:0e:1a:d0:50:b4:6a:e1:6d:a9:f6: 36:95:c9:67:1f:02:d1:40:8f:fa:2a:92:d4:26:d1:37:12:df: ed:c2:b6:90:48:b5:4c:21:b1:4c:fe:40:db:49:43:e0:bb:58: 2e:3c:78:cf:75:8c:fa:67:9d:a6:e6:6c:81:56:43:65:31:bd: 5e:dd:72:48:49:5d:6c:e4:80:c3:0c:80:67:7b:ed:f9:aa:41: 46:41:cc:ac:fb:37:0c:c7:d7:f4:0c:a0:21:ab:cd:d0:1e:c8: b7:33:93:ef:c1:ef:5b:b4:6a:3d:f9:50:8f:09:90:b7:f5:18: 37:dd:80:e4:a1:98:05:b8:ba:c5:d7:eb:2c:57:13:7c:d8:c8: 05:53:3d:4c:0f:8b:db:3f:cc:10:46:1e:4f:d2:1d:14:86:32: a4:6d:43:d8:d2:97:06:80:9e:f0:2b:a5:a7:8a:43:fa:e5:ad: 1f:a8:98:6b:e8:bd:8d:97:44:7c:19:5a:07:72:76:79:2a:b9: 38:e1:b7:28:5b:23:57:ca:47:45:e7:c3:fe:3a:c5:c4:fe:25: 9d:e8:46:e8:16:44:fb:bd:9c:8e:e9:62:8f:22:d5:61:10:20: bd:db:60:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoNThBMjFFN0IyM0ZBRjIxQjg5RDM0MjcwRUI1NkY3NDQ5 QzIzOTk4NjAeFw0yNTA3MTkwODEzMzZaFw0yNTA3MjYwODEzMzZaMBgxFjAUBgNV BAMTDTY4N2I1M2IxLWM0ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4VBrUmWWHTmTx0UBlV1HBSLqmldQfbGysVCbFY6E1ZYr4pEiFfxw14lyX0VoT zPJkOuxeF76AeysLXWKx7uQ1BYFrID7yo9DSOMGHgRMTTnQh/9eJLHpPl4+jfUCu 5YOfJaicPQK0kdTI+sAuHGiST6OjUNDHQeFoJV3oAzqTsvkLHJQ9kA54IfNFgzce 8jG3+Dy+f/rXZAY5hIxDFlwkUuRHQmehdHO2mkHGFOTmSKvch06K/mSw1GCz6riU qx5hJQIxODAbPr2S9FiWCIXHl6BWrHjGOSw+gU8E4N4eAHpnpsrERgItL+BiYCFU 1nXg9flGkij9NogVQO0F7P+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYGpCaDw8 CT2wCMdyzv2/GplmvrcwHwYDVR0jBBgwFoAUWKIeeyP68huJ00Jw61b3RJwjmYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3Lzg1REVEQUQ4NTBB NTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1Z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0tJZWV5UDY4aHVKMDBKdzYxYjNSSndqbVlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3Lzg1REVEQUQ4NTBBNTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1 SjAwSnc2MWIzUkp3am1ZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIrjYBMY9dS1zKhre6xry/Yp73l2gvRSQz6bDhrQULRq4W2p9jaVyWcf AtFAj/oqktQm0TcS3+3CtpBItUwhsUz+QNtJQ+C7WC48eM91jPpnnabmbIFWQ2Ux vV7dckhJXWzkgMMMgGd77fmqQUZBzKz7NwzH1/QMoCGrzdAeyLczk+/B71u0aj35 UI8JkLf1GDfdgOShmAW4usXX6yxXE3zYyAVTPUwPi9s/zBBGHk/SHRSGMqRtQ9jS lwaAnvArpaeKQ/rlrR+omGvovY2XRHwZWgdydnkquTjhtyhbI1fKR0Xnw/46xcT+ JZ3oRugWRPu9nI7pYo8i1WEQIL3bYA8= -----END CERTIFICATE-----Generated at Sun Jul 20 18:40:14 2025 by rpki-client