$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft File: WpjqUfgHDWcBhCEBRTothWT80ts.mft (raw, json) Hash identifier: UOdq0yhuMueJnSbbbQ+ozoLi8iaLiNRP8NHb+bOLY9E= Subject key identifier: E5:60:87:A5:D2:BF:32:E7:A3:16:E1:C0:08:AC:3C:6E:DF:B2:BA:D0 Authority key identifier: 5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB Certificate issuer: /CN=A9112FE9/serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft Manifest number: 0786 Signing time: Sat 28 Jun 2025 21:05:08 +0000 Manifest this update: Sat 28 Jun 2025 21:05:08 +0000 Manifest next update: Sat 05 Jul 2025 21:05:08 +0000 Files and hashes: 1: WpjqUfgHDWcBhCEBRTothWT80ts.crl (hash: i8SwQmtYsMFXgD1gw14uBl0jOGyJf9H2nwCC/z4g41A=) 2: 27EA36484AC411EB95EE2C61C4F9AE02.roa (hash: 0MFbelavrnvkHJOZxZvDps06Vm64af2RypLjbngW5IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE9, serialNumber=5A98EA51F8070D6701842101453A2D8564FCD2DB Validity Not Before: Jun 28 21:05:08 2025 GMT Not After : Jul 5 21:05:08 2025 GMT Subject: CN=68605904-81f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:08:89:4e:df:fe:fc:0a:7f:c0:dc:78:3f: b4:bc:c3:43:2d:84:cc:4e:73:48:16:ca:a9:0c:6e: fd:c8:e1:c9:12:66:5c:3d:e1:d0:3d:f6:12:f7:da: 33:97:36:63:46:35:23:c8:29:aa:ad:b3:10:fa:70: 87:b8:81:f0:92:5f:31:03:30:68:2e:fd:12:3b:2e: 57:c0:41:39:63:36:01:4d:62:fc:cf:1c:74:51:bf: 1f:c1:2a:86:df:3c:06:e2:53:c3:35:3f:40:1b:b9: 85:80:6f:cd:67:9f:36:95:c0:29:58:2b:63:de:30: e3:26:9b:02:1b:45:43:d4:f3:e4:b9:9e:c5:71:91: f5:b3:32:41:25:24:70:a6:1c:9f:b0:ee:7d:48:01: a2:17:ec:ce:cf:9f:7f:f1:23:68:79:56:71:db:e5: 1d:5f:51:73:63:9a:d7:ab:ec:79:ae:c6:10:d4:6f: 8d:56:d8:6a:4c:ea:cd:50:83:bd:4e:16:60:67:e9: e3:8a:45:a4:1c:fc:6f:a0:5b:70:60:9c:53:9c:fd: de:ee:d0:d7:2c:19:b1:be:f8:82:16:08:11:99:1e: 0c:77:76:7d:85:97:86:d9:6b:0f:49:61:c9:74:af: a1:42:53:a1:f1:eb:21:2f:05:0d:37:ae:eb:14:77: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:87:A5:D2:BF:32:E7:A3:16:E1:C0:08:AC:3C:6E:DF:B2:BA:D0 X509v3 Authority Key Identifier: keyid:5A:98:EA:51:F8:07:0D:67:01:84:21:01:45:3A:2D:85:64:FC:D2:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpjqUfgHDWcBhCEBRTothWT80ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE9/7CE522A6151E11EB925B9C0FC4F9AE02/WpjqUfgHDWcBhCEBRTothWT80ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2c:e7:13:b9:b5:d6:b8:88:98:09:29:b2:80:cf:11:28:44: 9d:3a:4a:62:cc:6e:7f:1c:16:1d:d9:f4:5e:65:db:e1:7a:44: e0:23:5a:a5:25:2f:4e:ee:1c:a9:93:7f:9c:01:ed:ad:34:2a: 09:9b:2e:6d:7c:80:5a:b7:f0:da:c4:10:4b:46:31:ac:07:7a: cb:35:4b:83:0f:2f:a6:4a:e6:85:52:a3:d8:fb:37:fa:42:de: 4b:f1:f2:62:4d:65:24:cc:68:9e:df:aa:28:29:10:3d:b4:77: 18:f1:f6:e7:b8:1d:e7:e9:59:76:8e:6d:55:58:17:cc:00:ef: a4:ae:51:15:ca:31:87:15:d7:5e:15:22:86:87:a0:3d:bc:a9: 9b:64:61:f7:72:72:d0:09:ef:e0:0d:4d:e2:f1:49:9a:76:7c: 64:28:ba:96:62:da:61:eb:5d:18:f2:b0:fe:7f:59:73:d3:57: eb:e2:34:cc:31:fe:01:87:b7:10:82:d5:12:eb:ae:a0:08:f0: cb:90:85:14:be:49:40:aa:69:a4:1a:4e:1c:90:bf:c2:2a:fa: fa:04:61:cc:8d:6e:ec:37:51:f6:b0:fa:06:6c:09:82:15:cd: 90:53:b1:e3:2a:72:9a:c4:74:d0:83:31:f5:db:ad:f7:63:6a: fe:b0:53:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJGRTkxMTAvBgNVBAUTKDVBOThFQTUxRjgwNzBENjcwMTg0MjEwMTQ1M0EyRDg1 NjRGQ0QyREIwHhcNMjUwNjI4MjEwNTA4WhcNMjUwNzA1MjEwNTA4WjAYMRYwFAYD VQQDEw02ODYwNTkwNC04MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IgIiU7f/vwKf8DceD+0vMNDLYTMTnNIFsqpDG79yOHJEmZcPeHQPfYS99oz lzZjRjUjyCmqrbMQ+nCHuIHwkl8xAzBoLv0SOy5XwEE5YzYBTWL8zxx0Ub8fwSqG 3zwG4lPDNT9AG7mFgG/NZ582lcApWCtj3jDjJpsCG0VD1PPkuZ7FcZH1szJBJSRw phyfsO59SAGiF+zOz59/8SNoeVZx2+UdX1FzY5rXq+x5rsYQ1G+NVthqTOrNUIO9 ThZgZ+njikWkHPxvoFtwYJxTnP3e7tDXLBmxvviCFggRmR4Md3Z9hZeG2WsPSWHJ dK+hQlOh8eshLwUNN67rFHftUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVgh6XS vzLnoxbhwAisPG7fsrrQMB8GA1UdIwQYMBaAFFqY6lH4Bw1nAYQhAUU6LYVk/NLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkZFOS83Q0U1MjJBNjE1 MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERXY0JoQ0VCUlRvdGhXVDgw dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwanFVZmdIRFdjQmhDRUJSVG90aFdUODB0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkZFOS83Q0U1MjJBNjE1MUUxMUVCOTI1QjlDMEZDNEY5QUUwMi9XcGpxVWZnSERX Y0JoQ0VCUlRvdGhXVDgwdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvLOcTubXWuIiYCSmygM8RKESdOkpizG5/HBYd2fReZdvhekTgI1ql JS9O7hypk3+cAe2tNCoJmy5tfIBat/DaxBBLRjGsB3rLNUuDDy+mSuaFUqPY+zf6 Qt5L8fJiTWUkzGie36ooKRA9tHcY8fbnuB3n6Vl2jm1VWBfMAO+krlEVyjGHFdde FSKGh6A9vKmbZGH3cnLQCe/gDU3i8UmadnxkKLqWYtph610Y8rD+f1lz01fr4jTM Mf4Bh7cQgtUS666gCPDLkIUUvklAqmmkGk4ckL/CKvr6BGHMjW7sN1H2sPoGbAmC Fc2QU7HjKnKaxHTQgzH12633Y2r+sFMs -----END CERTIFICATE-----Generated at Mon Jun 30 11:34:21 2025 by rpki-client