$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: hdKjNsDYB4Gvw7awxbjtfJcPPjj+Gt3DL5kl3lZltdY= Subject key identifier: 7F:9A:0F:A9:C4:2F:67:FE:7F:A2:20:73:7D:27:59:9E:20:33:FB:E6 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: C4 Signing time: Sat 23 Aug 2025 06:04:49 +0000 Manifest this update: Sat 23 Aug 2025 06:04:49 +0000 Manifest next update: Sat 30 Aug 2025 06:04:49 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: uySU5y/61gtT7ps9Hyzg/4x7nPqAkwiP2GRXnT2fhOw=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: +1ovp2NN4rcx7JakHr8vwRXXsKphyunMjKUMuwNMqnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Aug 23 06:04:49 2025 GMT Not After : Aug 30 06:04:49 2025 GMT Subject: CN=68a95a01-68d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:36:22:85:95:7c:66:53:0e:fb:94:26:a8: 15:09:b8:ef:21:84:2e:95:60:de:65:64:39:3f:2c: ff:57:12:23:bb:7a:d7:0e:ad:05:09:c9:b0:a7:61: 07:36:23:32:89:e1:13:9b:17:d1:f9:2c:39:7f:0f: b5:3b:89:f2:cb:7d:96:43:c6:d4:9f:78:a1:7c:99: bf:41:74:be:10:e1:0b:c7:b8:42:6b:08:b1:a5:f5: 6c:89:9d:db:74:ea:44:47:65:aa:6a:14:bb:fc:ed: ae:27:ce:8b:fc:9b:d3:06:38:13:c2:0e:2c:98:e1: 24:fa:82:ec:3f:3c:fa:2b:fa:17:5e:f1:8d:97:11: 66:00:ff:2e:93:a2:19:95:01:da:f0:60:c3:98:42: 48:df:f8:a3:07:ad:a0:8d:30:07:15:75:09:6a:cc: b0:19:34:d7:26:94:0f:77:99:93:b9:91:85:f8:80: 42:b8:f6:37:42:7a:37:01:a3:bc:7a:d8:e7:8b:e3: 58:84:8a:ab:da:6d:4b:7d:75:12:eb:2a:65:df:d6: 9a:73:b5:72:db:be:06:47:91:dc:f7:7b:cd:44:72: fb:27:9d:bd:bf:26:f9:c9:6e:d6:d5:d0:a5:c1:74: fb:50:05:f8:96:df:f6:8d:4d:92:cf:66:67:1b:a2: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9A:0F:A9:C4:2F:67:FE:7F:A2:20:73:7D:27:59:9E:20:33:FB:E6 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:13:b0:d8:12:d1:21:a6:f8:c0:f9:3e:6b:5a:fc:b8:83:c3: f4:9f:e0:f4:2f:87:c4:80:bb:1b:7d:fe:ab:60:ee:a5:27:8f: 3f:7e:5f:94:d6:fe:b1:64:ff:61:f0:96:fb:ff:bb:e4:ee:14: 29:43:95:df:6d:12:57:dd:88:58:1b:3e:f4:90:85:7b:6e:22: b1:d0:0e:5f:eb:38:1c:62:9d:d8:b5:4c:ca:9a:06:a4:3a:dd: c1:62:bf:62:9f:62:ba:4d:a5:fe:1f:a0:c5:74:fc:44:66:e9: e0:ec:3b:e8:48:3f:fe:7c:2e:72:0b:a1:55:8d:40:99:4c:ba: 44:17:c3:42:e8:62:41:34:4d:cc:89:6f:f8:59:fe:83:6c:55: a6:21:18:05:4c:16:2c:2a:e5:dd:d9:9b:03:6c:2f:3f:c7:60: 03:11:5d:16:08:ee:5c:e5:54:82:57:44:52:a8:ff:88:9b:2d: c7:72:bb:10:3d:d0:18:e3:99:27:59:61:50:51:f8:80:ab:88: 68:6b:7a:40:f2:f4:60:42:34:2e:1c:8c:f0:cc:11:62:aa:4f: 22:01:ba:4c:80:70:0b:89:ad:3b:31:8c:68:f0:f2:b5:0c:ce: 41:cf:82:1e:e7:81:da:a6:e9:d8:09:73:53:99:29:0b:6c:83: 4b:41:8b:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUwODIzMDYwNDQ5WhcNMjUwODMwMDYwNDQ5WjAYMRYwFAYD VQQDEw02OGE5NWEwMS02OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLo2IoWVfGZTDvuUJqgVCbjvIYQulWDeZWQ5Pyz/VxIju3rXDq0FCcmwp2EH NiMyieETmxfR+Sw5fw+1O4nyy32WQ8bUn3ihfJm/QXS+EOELx7hCawixpfVsiZ3b dOpER2WqahS7/O2uJ86L/JvTBjgTwg4smOEk+oLsPzz6K/oXXvGNlxFmAP8uk6IZ lQHa8GDDmEJI3/ijB62gjTAHFXUJasywGTTXJpQPd5mTuZGF+IBCuPY3Qno3AaO8 etjni+NYhIqr2m1LfXUS6ypl39aac7Vy274GR5Hc93vNRHL7J529vyb5yW7W1dCl wXT7UAX4lt/2jU2Sz2ZnG6KxsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+aD6nE L2f+f6Igc30nWZ4gM/vmMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGE7DYEtEhpvjA+T5rWvy4g8P0n+D0L4fEgLsbff6rYO6lJ48/fl+U 1v6xZP9h8Jb7/7vk7hQpQ5XfbRJX3YhYGz70kIV7biKx0A5f6zgcYp3YtUzKmgak Ot3BYr9in2K6TaX+H6DFdPxEZung7DvoSD/+fC5yC6FVjUCZTLpEF8NC6GJBNE3M iW/4Wf6DbFWmIRgFTBYsKuXd2ZsDbC8/x2ADEV0WCO5c5VSCV0RSqP+Imy3HcrsQ PdAY45knWWFQUfiAq4hoa3pA8vRgQjQuHIzwzBFiqk8iAbpMgHALia07MYxo8PK1 DM5Bz4Ie54HapunYCXNTmSkLbINLQYs2 -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:26 2025 by rpki-client