$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft File: WUvRQ79yOI2ipctku8ORCIj2TcU.mft (raw, json) Hash identifier: kQm9hcYY5Tcd/O4xi0xQE7LJU+dDgSgQwlzyU6jXg6Y= Subject key identifier: 64:EA:EC:B2:C2:28:71:AF:F1:C4:DE:12:87:06:65:92:C5:54:6E:F5 Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft Manifest number: A8 Signing time: Tue 01 Jul 2025 06:47:37 +0000 Manifest this update: Tue 01 Jul 2025 06:47:37 +0000 Manifest next update: Tue 08 Jul 2025 06:47:37 +0000 Files and hashes: 1: WUvRQ79yOI2ipctku8ORCIj2TcU.crl (hash: FIASLpthXAnqCzVCSLFt8IbCNoJyZ+BcxEBiQ5JBhb4=) 2: ACDAB45E592011EF976B8A1BC4F9AE02.roa (hash: 4GxfwSppjmwPB5KvCU0KTCfh5qeeGsb0mq6St5vDNUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A53A, serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Validity Not Before: Jul 1 06:47:37 2025 GMT Not After : Jul 8 06:47:37 2025 GMT Subject: CN=68638489-d314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:7f:0c:21:0b:16:27:29:36:1e:d9:9c:a2: c6:48:55:1d:13:37:5b:fa:11:46:52:d9:85:94:bd: 6e:04:12:b7:3f:90:90:0e:6b:45:b9:ad:35:0a:0d: 0b:24:81:df:6c:a2:08:ae:14:12:48:a7:4c:32:c4: d9:7d:5c:42:a3:8d:10:38:0c:25:fa:7b:81:10:99: 27:70:42:a0:a6:40:9b:53:10:c1:6b:67:40:88:d8: 9c:ff:d0:23:e5:56:43:e4:c6:1f:4b:06:ab:3a:8a: a1:82:89:9e:2a:95:92:4e:d7:07:3d:b5:d7:9f:2d: b8:8c:ea:d4:bf:54:d2:7d:d0:fd:1e:52:b1:ff:45: 9f:32:ca:49:9d:a3:30:9b:51:f3:2d:55:1c:26:d1: 7d:16:fc:73:a5:bf:db:f0:ab:11:ce:bb:ab:b0:ff: 42:e1:25:9a:a0:3b:9e:ae:5c:b1:72:41:b2:e3:10: 8f:0c:4b:fd:80:e2:5b:88:4a:17:68:b6:bc:81:3f: ca:70:b4:d8:e2:20:0e:9f:2a:96:29:2e:db:0c:ae: 18:91:e7:14:13:71:f2:40:13:81:c3:0d:26:ea:f0: b0:c6:01:d6:85:28:ee:39:ab:70:dc:9d:a5:3d:7d: 08:95:4c:fa:2d:e4:5a:fa:ec:e0:60:36:ac:89:1f: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:EC:B2:C2:28:71:AF:F1:C4:DE:12:87:06:65:92:C5:54:6E:F5 X509v3 Authority Key Identifier: keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:73:32:c6:64:0a:9a:3a:9e:78:12:f8:b7:ef:89:18:69:ed: bf:93:33:cc:be:85:b9:ab:76:5f:f9:1c:24:cc:83:e9:1d:13: 2f:94:47:5b:84:fa:5e:25:44:dd:6f:18:d1:01:09:c4:ab:50: a2:b9:fc:88:fc:d1:53:a8:c5:df:72:3f:b4:8c:cb:da:8b:39: d2:0e:6e:0b:9b:07:2f:3d:a2:7a:33:8d:db:2a:59:72:31:ab: 78:c5:88:58:52:f8:03:ce:99:11:b9:7a:fa:c1:10:50:a2:ee: 84:d4:73:e6:01:1f:de:0a:35:63:89:b9:2d:f4:ce:72:d7:4c: 5e:42:bd:f1:89:86:70:22:55:0c:ad:82:82:59:2a:12:b7:12: 8a:ae:87:56:55:03:c9:24:6d:c7:c7:f2:72:46:b1:e4:fc:9f: eb:f9:db:d7:1f:fe:e5:62:9f:fc:a6:5b:64:bb:a5:e0:b3:a2: f5:76:8e:90:11:7a:40:a3:7f:df:23:7a:ea:74:49:ab:5e:78: 5b:89:22:c5:7c:e6:27:6f:dd:12:10:04:a6:22:d9:ba:91:b2: 94:90:a4:ba:c6:0f:67:07:96:90:b8:82:98:ba:e8:2c:e6:34: c5:db:d7:99:cd:93:e0:f4:64:fc:41:03:ba:38:b2:ff:0e:59: 4f:0d:fe:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E1M0ExMTAvBgNVBAUTKDU5NEJEMTQzQkY3MjM4OERBMkE1Q0I2NEJCQzM5MTA4 ODhGNjREQzUwHhcNMjUwNzAxMDY0NzM3WhcNMjUwNzA4MDY0NzM3WjAYMRYwFAYD VQQDEw02ODYzODQ4OS1kMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqa5/DCELFicpNh7ZnKLGSFUdEzdb+hFGUtmFlL1uBBK3P5CQDmtFua01Cg0L JIHfbKIIrhQSSKdMMsTZfVxCo40QOAwl+nuBEJkncEKgpkCbUxDBa2dAiNic/9Aj 5VZD5MYfSwarOoqhgomeKpWSTtcHPbXXny24jOrUv1TSfdD9HlKx/0WfMspJnaMw m1HzLVUcJtF9Fvxzpb/b8KsRzrursP9C4SWaoDuerlyxckGy4xCPDEv9gOJbiEoX aLa8gT/KcLTY4iAOnyqWKS7bDK4YkecUE3HyQBOBww0m6vCwxgHWhSjuOatw3J2l PX0IlUz6LeRa+uzgYDasiR/BMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTq7LLC KHGv8cTeEocGZZLFVG71MB8GA1UdIwQYMBaAFFlL0UO/cjiNoqXLZLvDkQiI9k3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTUzQS80RTZCQzY2QTU5 MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9XVXZSUTc5eU9JMmlwY3RrdThPUkNJajJU Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dVdlJRNzl5T0kyaXBjdGt1OE9SQ0lqMlRjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTUzQS80RTZCQzY2QTU5MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9XVXZSUTc5eU9J MmlwY3RrdThPUkNJajJUY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtczLGZAqaOp54Evi374kYae2/kzPMvoW5q3Zf+RwkzIPpHRMvlEdb hPpeJUTdbxjRAQnEq1CiufyI/NFTqMXfcj+0jMvaiznSDm4LmwcvPaJ6M43bKlly Mat4xYhYUvgDzpkRuXr6wRBQou6E1HPmAR/eCjVjibkt9M5y10xeQr3xiYZwIlUM rYKCWSoStxKKrodWVQPJJG3Hx/JyRrHk/J/r+dvXH/7lYp/8pltku6Xgs6L1do6Q EXpAo3/fI3rqdEmrXnhbiSLFfOYnb90SEASmItm6kbKUkKS6xg9nB5aQuIKYuugs 5jTF29eZzZPg9GT8QQO6OLL/DllPDf4B -----END CERTIFICATE-----Generated at Tue Jul 1 21:48:33 2025 by rpki-client