$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: gbOfxrUrVFygnpS8lRMVvEHPAhtuq9u2InvhRijtrRI= Subject key identifier: F1:67:DF:0B:40:72:03:AB:D4:45:0A:53:F8:72:88:A5:9C:30:4D:77 Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 73 Signing time: Sat 19 Jul 2025 06:01:12 +0000 Manifest this update: Sat 19 Jul 2025 06:01:11 +0000 Manifest next update: Sat 26 Jul 2025 06:01:11 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: yg81Ypzyd1siUwruVsFrTycAeH1nXEhZkBrJJFluHq8=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: 6QazPAViDz/vpoTr8YQep/2te+BhGM7kc2XHX85fKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Jul 19 06:01:11 2025 GMT Not After : Jul 26 06:01:11 2025 GMT Subject: CN=687b34a7-ad53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:15:c9:09:ad:cf:a1:a5:b1:da:d3:3f:47: 06:56:1b:c5:86:14:28:4e:64:6c:c2:97:48:02:1a: 22:65:dd:bb:4f:fe:cf:93:76:a5:93:78:27:0e:29: be:a6:f9:3a:a7:06:97:13:41:89:71:f9:0c:4a:03: e4:8f:30:f5:ca:78:d4:83:da:24:1d:af:3f:e4:a9: e7:7f:0d:9d:d8:71:44:a4:e0:f8:c3:06:1c:a6:2b: 37:97:19:47:3a:b8:fc:77:9d:0f:9b:7b:0d:b2:86: e8:75:d0:ed:86:9e:e7:d1:f9:fb:d3:7d:7b:f7:34: 3e:82:2b:54:d1:30:8e:19:13:20:9f:f8:a1:bf:18: 2b:39:36:7a:af:5b:29:ce:a4:a2:71:ad:fe:b5:66: ed:56:7d:fd:35:95:27:db:53:d7:2b:bb:55:9d:25: 09:da:be:20:e4:40:66:73:ac:14:a7:5d:2f:c5:76: c8:40:4a:39:59:7f:0f:f6:90:ba:84:db:d9:48:d1: 47:1f:42:b9:32:f6:d4:96:3b:60:b3:d8:3f:c1:19: d2:99:28:ec:27:a8:f8:ff:c9:51:98:d6:2f:0a:10: 32:85:12:33:ed:b3:55:f4:c7:a2:8f:f5:82:8b:15: c1:ca:ad:b4:e3:76:f2:c9:a7:1d:46:b1:a0:54:40: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:67:DF:0B:40:72:03:AB:D4:45:0A:53:F8:72:88:A5:9C:30:4D:77 X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f9:9f:e8:56:05:23:6e:ae:83:04:5a:a7:8e:cf:95:a5:c4: d7:2d:45:58:a0:e9:47:19:8e:2a:4d:19:e5:75:d9:95:8d:63: ad:fe:59:81:7b:3c:b3:22:f6:5a:b3:f0:b4:f4:13:ee:5d:d3: 3d:cd:9e:d1:10:56:84:51:05:75:b6:81:dd:3b:e7:ba:ec:b6: 23:b8:04:5c:a8:f2:9b:9f:a1:c2:ef:14:6b:3d:f3:f2:d2:45: a4:a5:f5:89:02:ad:63:08:04:28:02:7c:a6:5e:49:4a:e1:87: 03:5b:e2:36:60:03:e1:12:60:fd:94:dd:17:28:14:06:ec:99: 2c:e0:5d:03:21:d2:1d:9b:f1:c0:76:0d:d5:ea:a2:0d:10:dc: 79:2d:cd:91:04:45:f7:70:27:43:12:20:89:5c:b4:59:01:43: e4:d2:09:ec:f1:51:6a:c4:50:99:f3:cd:b9:60:f0:5b:f8:08: b6:97:e0:98:bb:76:58:6e:74:af:1d:a1:6e:fc:b6:a2:2e:16: a6:52:0a:aa:09:77:88:2f:e5:35:e9:65:61:cb:3d:46:42:6d: 71:5f:2b:15:d4:7c:8b:38:ae:1d:1b:50:83:e5:f5:58:e7:10: d5:5a:86:2b:95:b4:43:4b:2e:0c:f2:92:9b:17:5d:e9:1f:26: 3e:79:c2:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNTA3MTkwNjAxMTFaFw0yNTA3MjYwNjAxMTFaMBgxFjAUBgNV BAMTDTY4N2IzNGE3LWFkNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyZBXJCa3PoaWx2tM/RwZWG8WGFChOZGzCl0gCGiJl3btP/s+TdqWTeCcOKb6m +TqnBpcTQYlx+QxKA+SPMPXKeNSD2iQdrz/kqed/DZ3YcUSk4PjDBhymKzeXGUc6 uPx3nQ+bew2yhuh10O2GnufR+fvTfXv3ND6CK1TRMI4ZEyCf+KG/GCs5NnqvWynO pKJxrf61Zu1Wff01lSfbU9cru1WdJQnaviDkQGZzrBSnXS/FdshASjlZfw/2kLqE 29lI0UcfQrky9tSWO2Cz2D/BGdKZKOwnqPj/yVGY1i8KEDKFEjPts1X0x6KP9YKL FcHKrbTjdvLJpx1GsaBUQD0lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8WffC0By A6vURQpT+HKIpZwwTXcwHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NjE4L0U2RjY2REQyQkVDMzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3Et bGoxaFR2aS1yeXA4bThPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAf5n+hWBSNuroMEWqeOz5WlxNctRVig6UcZjipNGeV12ZWNY63+WYF7 PLMi9lqz8LT0E+5d0z3NntEQVoRRBXW2gd0757rstiO4BFyo8pufocLvFGs98/LS RaSl9YkCrWMIBCgCfKZeSUrhhwNb4jZgA+ESYP2U3RcoFAbsmSzgXQMh0h2b8cB2 DdXqog0Q3HktzZEERfdwJ0MSIIlctFkBQ+TSCezxUWrEUJnzzblg8Fv4CLaX4Ji7 dlhudK8doW78tqIuFqZSCqoJd4gv5TXpZWHLPUZCbXFfKxXUfIs4rh0bUIPl9Vjn ENVahiuVtENLLgzykpsXXekfJj55wng= -----END CERTIFICATE-----Generated at Sun Jul 20 18:38:39 2025 by rpki-client