$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: tJ1JU0fbcXtwEhuQVcrruzvpqx0aKKDh4fjkJxyt9sU= Subject key identifier: DE:50:DE:32:1E:93:B2:7F:15:44:52:0A:44:57:07:51:F1:14:93:35 Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 2934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 2901 Signing time: Fri 22 Aug 2025 15:38:59 +0000 Manifest this update: Fri 22 Aug 2025 15:38:58 +0000 Manifest next update: Fri 29 Aug 2025 15:38:58 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: fxnvm7qZmrR/8mYzV6Ju0VNLQO/mLiEIoPFqNsuKxJk=) 2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: AzW4aIQu3oC/RB4Ph7Oxui4fN9NO75Dymw0HBe9vHgA=) 3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: E9GpG8r2RS+wZVKx4VfWz8DtkWxY78qwYvbLbq0Wo/g=) 4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 3ffKspDDCMwFhMU04xxlteFDU4SgN8Gby605uNp3lZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10548 (0x2934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: Aug 22 15:38:58 2025 GMT Not After : Aug 29 15:38:58 2025 GMT Subject: CN=68a88f13-ee3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:f8:20:3f:a1:c4:e6:d8:8e:6d:6d:41:92: a9:89:1a:ab:67:07:41:d2:a6:27:ac:c8:64:a4:73: 90:9e:c3:13:de:fb:e2:57:75:16:9c:9d:45:7b:b9: 67:f7:1d:cd:95:b2:7e:85:da:b4:61:9c:e7:25:c0: 71:f2:f2:34:98:65:83:2e:61:ef:43:f8:c4:16:6e: bf:7e:87:e5:c7:f3:f2:d3:ee:ba:43:3e:a2:8b:a1: 70:dc:9b:e3:b3:b3:fc:b1:70:62:33:5e:81:4e:89: 27:df:8a:81:c9:3d:a9:71:fc:20:e7:8f:0f:c8:59: 55:aa:b2:31:89:59:5b:21:f9:11:2d:63:d5:59:d7: 37:89:56:1b:20:5a:ac:6d:d9:f6:9e:fd:22:30:48: b7:10:dc:47:ef:8f:08:87:65:da:36:75:8a:1d:9a: f6:48:6f:d0:c1:61:7f:15:e5:6f:6f:d8:69:1a:f9: 6e:40:73:d3:93:07:5a:fa:cc:5d:2c:03:f9:57:5f: 99:35:35:c2:b1:b5:fa:e8:e9:b9:75:59:22:5e:3d: ab:98:34:1b:5d:23:cf:bd:e1:ca:a0:57:17:2d:aa: 7b:7b:d1:b3:b6:d2:b1:11:8d:e8:7b:a1:eb:c9:2a: 73:cd:9d:75:b4:8d:58:57:41:f2:95:c7:54:d2:e8: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:50:DE:32:1E:93:B2:7F:15:44:52:0A:44:57:07:51:F1:14:93:35 X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:26:41:13:23:78:12:16:ad:13:9f:07:0d:aa:e3:f5:74:0f: e3:9b:8d:d5:ca:eb:ec:78:ed:4c:2c:9c:9d:63:9e:e6:57:1b: c6:60:52:25:42:ae:00:26:c9:5b:52:94:18:87:ce:87:d2:6b: 33:42:26:f8:2a:b2:bf:c7:77:43:16:51:3d:57:5b:39:1c:6e: 36:e4:2c:36:ca:9f:0b:90:73:0d:9d:bf:c4:24:5f:0e:64:36: d1:eb:7c:71:6b:31:e6:d9:c7:92:1f:17:ed:b4:fa:54:e0:fd: 23:a1:66:ad:80:2c:3a:c3:6c:20:a6:1c:05:f4:0f:45:fc:b7: 25:92:0f:f6:f3:1d:a0:26:eb:89:8a:59:80:6d:0e:c3:68:60: dc:b5:d1:fd:37:1a:95:5b:4f:c6:98:4f:2c:b2:ed:ef:36:91: 3d:34:4a:a0:16:59:9d:52:30:ea:77:56:50:66:b9:e9:49:2e: ea:95:e2:15:34:ec:ff:46:16:d8:eb:d1:7d:e4:ec:f5:52:cb: 76:78:23:39:f9:42:96:02:85:74:ff:79:d3:ad:76:08:63:60: 65:07:c6:5f:a6:2e:e4:0b:d9:ee:5f:19:60:c3:8b:bd:62:1b: ae:14:5b:85:d7:19:4d:f3:f7:f7:aa:f6:bc:b1:6d:5d:2a:03: b9:be:f1:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjUwODIyMTUzODU4WhcNMjUwODI5MTUzODU4WjAYMRYwFAYD VQQDEw02OGE4OGYxMy1lZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0br4ID+hxObYjm1tQZKpiRqrZwdB0qYnrMhkpHOQnsMT3vviV3UWnJ1Fe7ln 9x3NlbJ+hdq0YZznJcBx8vI0mGWDLmHvQ/jEFm6/foflx/Py0+66Qz6ii6Fw3Jvj s7P8sXBiM16BTokn34qByT2pcfwg548PyFlVqrIxiVlbIfkRLWPVWdc3iVYbIFqs bdn2nv0iMEi3ENxH748Ih2XaNnWKHZr2SG/QwWF/FeVvb9hpGvluQHPTkwda+sxd LAP5V1+ZNTXCsbX66Om5dVkiXj2rmDQbXSPPveHKoFcXLap7e9GzttKxEY3oe6Hr ySpzzZ11tI1YV0HylcdU0uhOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5Q3jIe k7J/FURSCkRXB1HxFJM1MB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaJkETI3gSFq0TnwcNquP1dA/jm43VyuvseO1MLJydY57mVxvGYFIl Qq4AJslbUpQYh86H0mszQib4KrK/x3dDFlE9V1s5HG425Cw2yp8LkHMNnb/EJF8O ZDbR63xxazHm2ceSHxfttPpU4P0joWatgCw6w2wgphwF9A9F/Lclkg/28x2gJuuJ ilmAbQ7DaGDctdH9NxqVW0/GmE8ssu3vNpE9NEqgFlmdUjDqd1ZQZrnpSS7qleIV NOz/RhbY69F95Oz1Ust2eCM5+UKWAoV0/3nTrXYIY2BlB8Zfpi7kC9nuXxlgw4u9 YhuuFFuF1xlN8/f3qva8sW1dKgO5vvGQ -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:06 2025 by rpki-client