$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: Wa0bxLzzVgI7Vc48BFg26nzz1EBY/OO85eZWP6bygn8= Subject key identifier: A7:A5:B8:9A:FB:FC:F0:E7:B3:2B:59:36:E6:D2:A8:C8:28:4E:B3:89 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05A6 Signing time: Wed 02 Jul 2025 23:28:37 +0000 Manifest this update: Wed 02 Jul 2025 23:28:37 +0000 Manifest next update: Wed 09 Jul 2025 23:28:37 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: IBzWIDlcfpgDJ5JNDNpSxLw91obgHlorVUD3a788eiA=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Jul 2 23:28:37 2025 GMT Not After : Jul 9 23:28:37 2025 GMT Subject: CN=6865c0a5-bf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:9f:f6:47:4a:1a:8c:1f:4e:be:79:24:ac: dd:d5:97:04:e9:96:b8:f1:58:43:00:a1:f1:b3:0a: a3:37:04:81:7a:4f:16:12:62:ab:32:04:dd:7b:7b: e6:a3:fc:af:97:6f:8d:e7:86:7a:7a:ed:3f:2d:97: ea:3b:9f:0f:50:fb:48:24:b9:88:ff:86:68:98:f6: 03:57:df:24:9c:92:e1:d5:43:e4:67:67:a8:da:75: 81:92:6a:70:38:58:e2:bb:74:f8:d7:17:48:00:eb: 0a:01:f3:df:b2:56:0d:b2:1a:29:ac:ce:42:f3:3e: 73:d5:8d:94:4c:7e:da:60:49:1c:52:0f:3d:44:1e: 27:84:78:17:0b:a1:6b:6d:6e:9d:5d:c1:85:99:74: 26:e2:3c:bb:5b:c1:79:8f:e7:39:36:79:b7:97:3c: 1e:fd:18:6d:09:db:d1:c0:1c:e9:10:af:a4:7a:f0: 44:51:25:9d:3f:60:e1:3a:c5:8e:92:17:01:46:66: 8e:fa:3f:93:9e:17:18:48:b5:ef:45:e4:67:9c:3f: 26:1a:87:17:63:9b:42:b0:8f:b6:d1:5d:11:5e:31: 14:23:8c:65:97:f3:97:b9:1e:6c:bd:54:e6:14:b7: a6:ac:49:65:39:77:08:23:b5:b5:ee:9c:c2:39:90: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A5:B8:9A:FB:FC:F0:E7:B3:2B:59:36:E6:D2:A8:C8:28:4E:B3:89 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4f:0b:99:63:b6:d2:62:25:16:2a:2b:07:1d:a3:be:62:82: 04:56:23:94:82:28:dd:ff:34:d5:15:b9:be:cc:4e:ff:5f:12: ba:8c:5f:2f:4d:ba:14:33:bd:01:6a:9a:71:52:59:21:5f:7b: 68:17:81:ef:89:c7:88:f2:91:21:83:ae:81:9b:18:88:f4:28: 0c:6a:10:70:5b:3e:90:b3:b2:bc:f4:92:be:01:5e:ff:54:7c: 1f:bb:76:5d:23:d8:c3:4e:86:94:4f:04:46:e9:33:52:6f:e7: bd:5f:ad:2d:9e:e7:fb:29:30:fb:27:b0:9a:d9:59:34:9e:ae: 5f:4c:60:7d:c4:cf:f3:89:dc:f5:a7:58:1d:ec:33:5a:dd:7f: d4:68:0b:64:73:0b:cf:72:99:7e:fa:10:8d:c7:65:93:de:18: 8c:7d:06:cf:46:2e:55:d0:0d:38:90:83:7d:f6:6f:3e:c2:58: 6e:78:b0:5f:8f:91:b6:15:cc:31:0b:0c:58:71:56:c9:a2:e5: c9:38:d3:f9:4f:59:7c:0b:c9:68:33:1c:03:0c:03:7b:c6:56: 6f:46:77:df:5d:a4:44:b0:e0:5b:d3:89:8e:3b:a0:bc:97:98: f3:a6:a2:ad:f6:c0:ef:34:38:b8:77:08:9a:55:eb:3f:78:a8: 55:20:08:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNzAyMjMyODM3WhcNMjUwNzA5MjMyODM3WjAYMRYwFAYD VQQDEw02ODY1YzBhNS1iZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCGf9kdKGowfTr55JKzd1ZcE6Za48VhDAKHxswqjNwSBek8WEmKrMgTde3vm o/yvl2+N54Z6eu0/LZfqO58PUPtIJLmI/4ZomPYDV98knJLh1UPkZ2eo2nWBkmpw OFjiu3T41xdIAOsKAfPfslYNshoprM5C8z5z1Y2UTH7aYEkcUg89RB4nhHgXC6Fr bW6dXcGFmXQm4jy7W8F5j+c5Nnm3lzwe/RhtCdvRwBzpEK+kevBEUSWdP2DhOsWO khcBRmaO+j+TnhcYSLXvReRnnD8mGocXY5tCsI+20V0RXjEUI4xll/OXuR5svVTm FLemrEllOXcII7W17pzCOZDwwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeluJr7 /PDnsytZNubSqMgoTrOJMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaTwuZY7bSYiUWKisHHaO+YoIEViOUgijd/zTVFbm+zE7/XxK6jF8v TboUM70BappxUlkhX3toF4HviceI8pEhg66BmxiI9CgMahBwWz6Qs7K89JK+AV7/ VHwfu3ZdI9jDToaUTwRG6TNSb+e9X60tnuf7KTD7J7Ca2Vk0nq5fTGB9xM/zidz1 p1gd7DNa3X/UaAtkcwvPcpl++hCNx2WT3hiMfQbPRi5V0A04kIN99m8+wlhueLBf j5G2FcwxCwxYcVbJouXJONP5T1l8C8loMxwDDAN7xlZvRnffXaREsOBb04mOO6C8 l5jzpqKt9sDvNDi4dwiaVes/eKhVIAi2 -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:05 2025 by rpki-client