$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: 4GD1F2hIFHIae2MegaZFv/T6QM1zrsheYEWSQh3+SLI= Subject key identifier: B0:CA:67:7D:83:FA:93:32:6B:95:1D:E4:EC:E4:E9:19:A2:4B:25:56 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: A8 Signing time: Thu 03 Jul 2025 06:23:42 +0000 Manifest this update: Thu 03 Jul 2025 06:23:41 +0000 Manifest next update: Thu 10 Jul 2025 06:23:41 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: +OgIF056u4y+koY0miWX8jjhWmlEhZWU/p7iqRUbEBs=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Jul 3 06:23:41 2025 GMT Not After : Jul 10 06:23:41 2025 GMT Subject: CN=686621ed-6796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:0c:30:5e:8c:12:75:c8:ce:81:60:22:be: 80:4b:af:44:3c:ce:45:10:19:bf:98:0b:ee:ba:24: 9d:84:e0:1d:be:b4:df:ec:08:ab:a1:33:81:b9:a6: c8:f5:29:bf:8d:67:56:9f:b3:25:bf:3f:06:ee:6f: d5:ba:d0:25:80:47:d5:dc:c3:12:37:1e:78:9d:77: ae:fc:49:a7:29:8a:98:cf:9c:6e:d4:d8:74:18:b0: 53:a3:e5:f6:c8:94:3d:2d:f9:a2:e0:5f:de:dd:f3: 6d:a9:5f:60:79:bd:40:f8:5c:86:d7:1d:ad:0b:c3: 2e:98:4e:d5:72:ec:4a:b8:e1:e8:9d:f0:25:c0:e6: 4a:66:14:0d:b0:bd:74:e5:2c:c1:2a:83:e3:7d:ed: cc:90:ce:f7:82:dd:19:cf:80:09:26:87:39:87:60: eb:eb:98:6c:96:d6:cd:0c:09:d5:ec:17:70:af:04: 99:70:01:d8:11:1e:8b:f8:a2:88:40:67:64:77:9b: cc:3c:e2:be:cc:bf:d1:31:76:62:31:dc:a8:d5:b5: e8:87:e5:fb:4e:1e:21:9b:d1:89:83:02:06:ae:23: 87:0a:3f:d7:00:c2:6b:39:55:4f:77:98:34:ec:da: e6:12:f7:1a:61:95:27:40:fa:45:4b:bd:58:1c:83: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CA:67:7D:83:FA:93:32:6B:95:1D:E4:EC:E4:E9:19:A2:4B:25:56 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:82:b0:d1:e1:06:1b:0c:42:57:52:45:23:c4:fa:3b:46:89: 92:ef:37:65:6e:07:f1:b0:7d:d0:42:8d:19:3d:79:05:6e:1f: 2b:65:eb:e9:f2:d8:bd:34:32:b6:80:0d:5f:99:69:f6:23:b4: f8:cf:37:87:41:1a:4f:03:cf:f8:79:bb:cc:0b:17:f2:f3:5e: 28:7a:b4:92:88:79:0f:c1:13:52:78:7d:f0:4e:4e:30:8e:b6: 40:1e:5a:1c:49:a0:12:68:e6:2e:b3:d6:2b:d0:f9:d5:1a:b2: 54:cf:3a:98:2b:23:42:87:8c:c6:56:19:12:c2:97:ad:3e:a0: 3c:10:02:20:58:19:e6:76:1d:5e:d8:be:60:a8:ae:83:4e:1e: a3:b2:ea:9d:97:f9:7b:87:b7:09:a0:16:f1:18:f7:f6:56:44: b5:90:56:16:12:0e:41:60:15:e9:15:3e:ed:47:e3:73:0b:e7: ac:a5:1a:05:ac:f0:83:80:99:65:46:96:27:55:29:d9:80:3a: a9:74:ab:02:67:6f:20:79:dd:3e:dc:f6:88:95:cb:a6:84:5b: bf:b1:9f:79:07:3d:fd:72:9f:f3:ed:21:86:41:a4:d5:8d:fc: 49:4c:ab:f5:2f:00:ca:42:57:3e:58:32:49:03:9a:04:68:f6: 6b:fc:a1:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUwNzAzMDYyMzQxWhcNMjUwNzEwMDYyMzQxWjAYMRYwFAYD VQQDEw02ODY2MjFlZC02Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6MMMF6MEnXIzoFgIr6AS69EPM5FEBm/mAvuuiSdhOAdvrTf7AiroTOBuabI 9Sm/jWdWn7Mlvz8G7m/VutAlgEfV3MMSNx54nXeu/EmnKYqYz5xu1Nh0GLBTo+X2 yJQ9Lfmi4F/e3fNtqV9geb1A+FyG1x2tC8MumE7VcuxKuOHonfAlwOZKZhQNsL10 5SzBKoPjfe3MkM73gt0Zz4AJJoc5h2Dr65hsltbNDAnV7BdwrwSZcAHYER6L+KKI QGdkd5vMPOK+zL/RMXZiMdyo1bXoh+X7Th4hm9GJgwIGriOHCj/XAMJrOVVPd5g0 7NrmEvcaYZUnQPpFS71YHIPsjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDKZ32D +pMya5Ud5Ozk6RmiSyVWMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBgrDR4QYbDEJXUkUjxPo7RomS7zdlbgfxsH3QQo0ZPXkFbh8rZevp 8ti9NDK2gA1fmWn2I7T4zzeHQRpPA8/4ebvMCxfy814oerSSiHkPwRNSeH3wTk4w jrZAHlocSaASaOYus9Yr0PnVGrJUzzqYKyNCh4zGVhkSwpetPqA8EAIgWBnmdh1e 2L5gqK6DTh6jsuqdl/l7h7cJoBbxGPf2VkS1kFYWEg5BYBXpFT7tR+NzC+espRoF rPCDgJllRpYnVSnZgDqpdKsCZ28ged0+3PaIlcumhFu/sZ95Bz39cp/z7SGGQaTV jfxJTKv1LwDKQlc+WDJJA5oEaPZr/KHv -----END CERTIFICATE-----Generated at Fri Jul 4 02:10:54 2025 by rpki-client