$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft File: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft (raw, json) Hash identifier: YonqZLgOjGHpHl4AJEHa+nfDSMIe1rVzn1qDu05jw40= Subject key identifier: 4B:B6:73:99:50:7F:12:77:4B:D0:3F:2F:74:35:21:3C:93:CF:B1:E3 Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 Certificate issuer: /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft Manifest number: 0BC4 Signing time: Fri 22 Aug 2025 19:08:22 +0000 Manifest this update: Fri 22 Aug 2025 19:08:21 +0000 Manifest next update: Fri 29 Aug 2025 19:08:21 +0000 Files and hashes: 1: WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl (hash: Y50OB9N3pAciuZrsYjlqt84zqlV366J/yKGBM6580p8=) 2: 140D52F2854B11EAACB2FE39C4F9AE02.roa (hash: lUd8khrscqt2/SuycXkak1zRZ1/D9J3OfZ7NRIMFXKQ=) 3: 1495D7EE854B11EAACB2FE39C4F9AE02.roa (hash: 4kFdxqJRF+UtayrYr11Ti8tQHel/QxYA6eu1cTGYKjY=) 4: 21A731506C9B11ED93A7513AC4F9AE02.roa (hash: 8dlna4OSSEor7RjmsLK1ACn3Ob2tSwzfuy2V+7m0V0I=) 5: 474DC6748C2B11EA90152018C4F9AE02.roa (hash: S/XkCg/mwHSXROr2dfVl+A2MAUNuvm6ulkjfEMhHMjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5 Validity Not Before: Aug 22 19:08:21 2025 GMT Not After : Aug 29 19:08:21 2025 GMT Subject: CN=68a8c026-3260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:c7:d7:01:69:5d:c4:39:10:6a:a6:47:6d: e8:40:3a:ff:16:24:c4:91:2c:bf:32:a2:69:07:58: e5:01:36:3a:95:1e:66:9e:31:fc:5c:f3:77:aa:cf: 4f:f1:11:8d:36:6c:a8:56:c2:d8:50:1a:55:4c:24: 35:71:9e:37:d9:4b:fe:dd:36:9d:6d:c9:f5:53:aa: cb:cf:95:c5:f8:94:ae:f5:16:0c:5f:8a:e1:97:fe: d4:81:61:b1:52:79:06:55:66:bb:54:45:90:bf:d0: 74:3f:91:ce:e2:66:87:78:e0:60:ed:5e:54:9f:f2: 74:ac:97:ea:f0:20:f9:a2:ae:a5:e3:85:18:b4:8e: eb:33:81:75:63:28:b1:48:09:af:85:4a:50:e5:21: 84:38:45:ae:5b:7d:23:5b:43:34:24:2a:ef:a3:80: a6:16:e7:13:09:c5:ed:79:01:e5:83:92:01:60:8c: 5d:a5:85:d9:c3:0b:64:8d:03:b0:90:55:07:43:7b: dd:0b:fb:84:90:03:e8:61:eb:77:ef:00:1a:fc:86: 34:82:1a:89:22:10:5f:99:56:a3:bd:4f:93:db:2f: b6:c8:a4:16:32:95:84:20:39:9d:7f:79:8b:ac:31: 7a:76:ff:5c:5e:9d:09:30:07:03:c8:5b:8f:85:71: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B6:73:99:50:7F:12:77:4B:D0:3F:2F:74:35:21:3C:93:CF:B1:E3 X509v3 Authority Key Identifier: keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f1:f1:b0:82:88:ea:5a:c4:2c:23:2f:0a:fe:00:4b:35:2c: 41:45:13:1f:27:8a:56:ef:9c:15:27:6d:b0:05:b8:dd:42:32: 58:1c:58:1a:bd:88:53:35:5e:f0:75:df:0c:f1:93:90:dd:dd: 62:dc:5d:f0:73:e0:9a:5f:b0:3a:b7:60:09:09:3d:2e:9b:ce: ac:43:d7:d8:75:2f:8b:a8:52:f2:31:cf:d3:16:72:80:14:72: 93:74:b3:10:ad:dc:ba:c0:64:f0:18:9b:a9:e9:97:ec:7b:f0: b4:2b:df:37:42:33:2d:b9:46:01:de:53:11:5f:38:fb:8d:4d: 62:1e:34:10:6b:c1:43:56:03:ee:38:e7:2f:29:6b:7e:f0:a9: f2:28:b0:fa:77:ef:b5:83:bb:89:91:5c:15:b1:80:12:55:6f: 22:2e:b9:44:24:aa:b9:1f:21:83:22:63:a4:e6:0a:49:13:84: 1f:41:2e:36:79:79:b7:1a:9d:de:2a:2a:7d:f4:68:ca:4a:44: 6c:ca:4d:6f:09:cd:33:de:e9:89:a2:cc:be:5d:17:3f:9b:32: 56:fb:71:94:b0:74:27:9b:db:5c:56:db:b0:00:29:de:a2:41: d4:4f:b0:75:76:12:be:c7:2e:df:31:70:8b:bc:f0:eb:83:7f: 3e:ae:80:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy NDRFNjBDQTUwHhcNMjUwODIyMTkwODIxWhcNMjUwODI5MTkwODIxWjAYMRYwFAYD VQQDEw02OGE4YzAyNi0zMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNDH1wFpXcQ5EGqmR23oQDr/FiTEkSy/MqJpB1jlATY6lR5mnjH8XPN3qs9P 8RGNNmyoVsLYUBpVTCQ1cZ432Uv+3Tadbcn1U6rLz5XF+JSu9RYMX4rhl/7UgWGx UnkGVWa7VEWQv9B0P5HO4maHeOBg7V5Un/J0rJfq8CD5oq6l44UYtI7rM4F1Yyix SAmvhUpQ5SGEOEWuW30jW0M0JCrvo4CmFucTCcXteQHlg5IBYIxdpYXZwwtkjQOw kFUHQ3vdC/uEkAPoYet37wAa/IY0ghqJIhBfmVajvU+T2y+2yKQWMpWEIDmdf3mL rDF6dv9cXp0JMAcDyFuPhXFSYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu2c5lQ fxJ3S9A/L3Q1ITyTz7HjMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzRBNC9EREJFNDIwQTMwRjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVI YzNIM1ZCOXlDZHdrVG1ES1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE8fGwgojqWsQsIy8K/gBLNSxBRRMfJ4pW75wVJ22wBbjdQjJYHFga vYhTNV7wdd8M8ZOQ3d1i3F3wc+CaX7A6t2AJCT0um86sQ9fYdS+LqFLyMc/TFnKA FHKTdLMQrdy6wGTwGJup6Zfse/C0K983QjMtuUYB3lMRXzj7jU1iHjQQa8FDVgPu OOcvKWt+8KnyKLD6d++1g7uJkVwVsYASVW8iLrlEJKq5HyGDImOk5gpJE4QfQS42 eXm3Gp3eKip99GjKSkRsyk1vCc0z3umJosy+XRc/mzJW+3GUsHQnm9tcVtuwACne okHUT7B1dhK+xy7fMXCLvPDrg38+roCh -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:07 2025 by rpki-client