$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: 2A7Xfbngtu9sHHOMSqmND2CrHOXyTvKEeNDOCFD3dcs= Subject key identifier: 3F:FE:98:83:64:28:97:5F:63:7E:CC:CE:9E:DD:EF:4E:ED:28:4B:71 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05C2 Signing time: Fri 22 Aug 2025 23:16:38 +0000 Manifest this update: Fri 22 Aug 2025 23:16:38 +0000 Manifest next update: Fri 29 Aug 2025 23:16:38 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: 7jhsNrOTkDggwzXhtuE0agQEyTBHA1B/SP/7Ek56N90=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Aug 22 23:16:38 2025 GMT Not After : Aug 29 23:16:38 2025 GMT Subject: CN=68a8fa56-6e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:3e:03:96:06:ab:bf:ff:59:1a:9a:9f:2f: c9:53:9d:d1:8d:ac:d4:1a:b9:83:0d:ae:98:03:4a: 15:9d:68:97:a1:ba:a8:1b:b8:08:d7:62:ad:ed:b0: f1:cc:6d:d5:4d:af:92:3c:ae:20:89:ef:6f:83:9e: 8a:88:d5:8d:f4:bc:73:31:cd:29:8a:87:72:c1:88: 99:42:b1:ab:1c:c5:a4:43:44:1f:d6:a1:7f:8d:6d: a5:ac:78:34:02:a3:14:da:93:24:c9:0f:70:3f:4e: ab:2a:05:d6:f0:f1:42:29:25:d4:9b:7d:ae:db:ea: 42:32:54:f1:26:e0:32:b2:08:38:d9:a2:62:84:d6: 77:b4:f9:41:5e:59:0d:a9:2f:a6:4f:ee:c5:d1:e8: 3b:68:02:f4:5f:ed:91:40:96:9e:c9:55:8a:a0:5c: 62:78:8b:5e:24:23:23:ab:a8:7c:6a:0f:f7:80:10: 2e:e3:33:e9:0e:7a:5d:1e:81:fa:b3:80:6b:27:76: e1:c1:65:67:5c:cb:90:d0:ff:c6:4c:8b:da:a7:95: 89:e4:0a:75:b8:4b:b2:36:be:a8:e3:ed:40:71:ba: 07:ce:62:46:a3:a4:15:55:a3:20:f5:e6:74:b0:96: ff:57:79:59:9b:d2:d9:57:0b:ef:12:e0:eb:b5:e2: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:98:83:64:28:97:5F:63:7E:CC:CE:9E:DD:EF:4E:ED:28:4B:71 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:2c:09:9f:a3:b5:10:98:cf:48:bb:f9:a6:b2:f0:7b:e4:f9: 81:09:67:9d:03:91:2b:a3:cc:bf:26:de:27:3e:c8:ef:42:e9: 8e:43:3a:1f:b0:46:89:f1:62:c1:2b:8e:cc:a5:19:15:c3:77: c1:79:69:b5:ec:b6:63:4b:55:1f:c9:84:d8:76:e0:be:e6:2e: e4:2f:96:c2:eb:ef:c2:90:65:e4:f7:20:01:98:f4:07:1f:c1: e6:fd:72:14:60:19:3c:42:48:07:6b:37:15:22:dd:94:32:d3: 89:78:c9:f6:59:5f:02:d8:13:e8:c3:58:e3:a8:7f:05:35:26: b4:52:ff:d9:bb:3e:ce:f2:08:e2:f7:8e:20:b5:dd:ca:90:2e: 59:ed:fd:a9:e0:f9:32:19:9e:56:3d:65:43:1c:17:da:c6:42: 18:52:65:f3:f6:c4:01:45:a8:08:c2:a0:f5:48:8a:73:9f:d7: e6:65:31:2c:76:b0:56:87:1f:58:07:6f:ef:f2:b0:22:52:05: 05:09:23:0b:19:7a:0b:62:cc:87:dc:eb:d6:74:b8:2e:d2:c6: 87:90:82:f8:e6:45:81:8c:b4:df:35:6d:a2:89:7b:97:40:3a: fb:d6:76:ac:61:e5:56:95:cc:1d:3b:ad:c5:90:03:b8:4f:14: 88:d9:a3:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwODIyMjMxNjM4WhcNMjUwODI5MjMxNjM4WjAYMRYwFAYD VQQDEw02OGE4ZmE1Ni02ZTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA0+A5YGq7//WRqany/JU53RjazUGrmDDa6YA0oVnWiXobqoG7gI12Kt7bDx zG3VTa+SPK4gie9vg56KiNWN9LxzMc0piodywYiZQrGrHMWkQ0Qf1qF/jW2lrHg0 AqMU2pMkyQ9wP06rKgXW8PFCKSXUm32u2+pCMlTxJuAysgg42aJihNZ3tPlBXlkN qS+mT+7F0eg7aAL0X+2RQJaeyVWKoFxieIteJCMjq6h8ag/3gBAu4zPpDnpdHoH6 s4BrJ3bhwWVnXMuQ0P/GTIvap5WJ5Ap1uEuyNr6o4+1AcboHzmJGo6QVVaMg9eZ0 sJb/V3lZm9LZVwvvEuDrteKdxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/+mINk KJdfY37Mzp7d707tKEtxMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5LAmfo7UQmM9Iu/mmsvB75PmBCWedA5Ero8y/Jt4nPsjvQumOQzof sEaJ8WLBK47MpRkVw3fBeWm17LZjS1UfyYTYduC+5i7kL5bC6+/CkGXk9yABmPQH H8Hm/XIUYBk8QkgHazcVIt2UMtOJeMn2WV8C2BPow1jjqH8FNSa0Uv/Zuz7O8gji 944gtd3KkC5Z7f2p4PkyGZ5WPWVDHBfaxkIYUmXz9sQBRagIwqD1SIpzn9fmZTEs drBWhx9YB2/v8rAiUgUFCSMLGXoLYsyH3OvWdLgu0saHkIL45kWBjLTfNW2iiXuX QDr71nasYeVWlcwdO63FkAO4TxSI2aO8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:54 2025 by rpki-client