$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft File: wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json) Hash identifier: p/FVed0n5IP6rgdPej5EwODOGcRkNdPJ8qlk7xDcawo= Subject key identifier: D2:34:43:89:60:95:5C:68:35:94:A4:81:EB:51:C6:04:7C:D8:6B:40 Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 Certificate issuer: /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Certificate serial: 196F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft Manifest number: 195E Signing time: Wed 02 Jul 2025 16:31:51 +0000 Manifest this update: Wed 02 Jul 2025 16:31:50 +0000 Manifest next update: Wed 09 Jul 2025 16:31:50 +0000 Files and hashes: 1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: ngRJii2SMRVW46S1QYmKDis5WQ9F1Ke9XXY1qY5bR/8=) 2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: 4h9/gedAkyFkLOFX95sZ0gtcQY54jVFNaMdtuEQXK5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6511 (0x196f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ACC3, serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Validity Not Before: Jul 2 16:31:50 2025 GMT Not After : Jul 9 16:31:50 2025 GMT Subject: CN=68655ef7-46f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:f5:48:98:19:00:fb:f7:5a:e3:56:53:64: 93:31:e7:1b:44:ee:e3:56:2d:1e:70:76:73:47:62: 70:d3:a7:9b:90:20:10:cc:01:b0:d8:76:31:cb:42: 4a:2c:3a:84:ea:03:99:52:e0:82:b7:29:76:c1:08: 9e:20:33:30:50:24:4b:ee:d8:e3:0d:9c:d7:8b:98: 3d:93:cc:0c:72:49:71:56:fc:8d:bd:d5:d7:92:c5: 71:67:57:04:cc:c4:11:a3:78:77:a2:a8:c7:93:e4: 49:e6:fd:3c:1e:55:20:ad:e9:1c:e8:c6:55:cd:e3: 4e:7f:09:ef:d4:67:87:51:e2:c1:73:3e:16:ba:8f: f0:b0:38:a0:01:01:72:aa:6f:2f:c0:c5:1b:bf:1d: 87:f2:41:9f:8a:7d:88:83:39:da:33:84:6a:5f:d0: b1:7a:8c:17:1a:d8:3b:97:a4:74:b9:3e:53:42:45: a8:c1:30:3f:f9:dd:79:03:4b:1a:a6:6f:cb:88:a6: 4c:09:8a:47:d9:99:de:6a:17:c5:16:23:20:e7:00: c4:fe:44:58:d4:76:0e:17:e7:d2:8d:f4:77:17:27: 12:31:72:b2:73:20:6f:f8:5e:67:8a:1f:f2:e7:c0: 3e:6f:fc:35:aa:fe:1f:84:0b:5c:a8:f2:10:08:91: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:34:43:89:60:95:5C:68:35:94:A4:81:EB:51:C6:04:7C:D8:6B:40 X509v3 Authority Key Identifier: keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5b:ee:45:c3:f9:f8:38:8c:99:7c:e5:33:f4:f7:99:5c:6a: 50:4e:e5:13:0c:5c:1a:5a:42:8d:15:05:b8:a8:ce:13:27:dd: 6e:2e:97:71:e5:45:de:e2:a2:3c:a6:e0:eb:7b:2e:5c:c7:2a: 6f:d1:f6:f3:ad:cb:8c:08:d6:56:e5:96:e2:3a:3b:29:15:b9: fa:fb:f1:b4:c6:21:2e:4e:a6:96:67:b7:08:c2:00:5b:cc:e5: dd:8c:36:11:0c:36:a5:c7:d5:93:a6:1b:5c:b0:4d:90:62:26: 64:f8:5f:ef:a5:ba:77:1e:6e:50:3d:ae:a7:71:30:4b:b7:8b: 56:33:2a:fd:57:09:a5:02:ad:13:30:42:f1:9c:04:89:d8:d5: 9f:7a:7e:31:b8:9c:69:07:a3:a1:1d:50:ca:12:80:8d:b2:90: 55:86:b2:22:50:fd:2e:5f:f7:30:7b:ba:5f:d4:bf:4b:89:01: a4:88:c1:90:b5:54:e4:75:27:b1:03:09:1d:49:85:f2:27:41: eb:9e:9e:17:b5:97:99:81:ea:b2:53:45:6e:08:d1:f1:61:ce: 35:52:ee:4e:70:58:f5:98:ca:35:d4:f4:3d:09:58:7c:d5:6a: 2e:de:5a:ab:a7:e2:25:ed:c0:e7:c9:b0:47:4b:3c:fd:f7:4d: 3a:0b:58:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDQzMxMTAvBgNVBAUTKEMxQUE1Q0U1MkUxMTUzM0I2NDFFM0I2ODVBQjMyM0M0 Njk3NkE0MDEwHhcNMjUwNzAyMTYzMTUwWhcNMjUwNzA5MTYzMTUwWjAYMRYwFAYD VQQDEw02ODY1NWVmNy00NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIL1SJgZAPv3WuNWU2STMecbRO7jVi0ecHZzR2Jw06ebkCAQzAGw2HYxy0JK LDqE6gOZUuCCtyl2wQieIDMwUCRL7tjjDZzXi5g9k8wMcklxVvyNvdXXksVxZ1cE zMQRo3h3oqjHk+RJ5v08HlUgrekc6MZVzeNOfwnv1GeHUeLBcz4Wuo/wsDigAQFy qm8vwMUbvx2H8kGfin2IgznaM4RqX9CxeowXGtg7l6R0uT5TQkWowTA/+d15A0sa pm/LiKZMCYpH2ZneahfFFiMg5wDE/kRY1HYOF+fSjfR3FycSMXKycyBv+F5nih/y 58A+b/w1qv4fhAtcqPIQCJH4WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI0Q4lg lVxoNZSkgetRxgR82GtAMB8GA1UdIwQYMBaAFMGqXOUuEVM7ZB47aFqzI8RpdqQB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUNDMy9ENEY0QjQ4ODc3 RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6dGtIanRvV3JNanhHbDJw QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhcGM1UzRSVXp0a0hqdG9Xck1qeEdsMnBBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUNDMy9ENEY0QjQ4ODc3RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6 dGtIanRvV3JNanhHbDJwQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAW+5Fw/n4OIyZfOUz9PeZXGpQTuUTDFwaWkKNFQW4qM4TJ91uLpdx 5UXe4qI8puDrey5cxypv0fbzrcuMCNZW5ZbiOjspFbn6+/G0xiEuTqaWZ7cIwgBb zOXdjDYRDDalx9WTphtcsE2QYiZk+F/vpbp3Hm5QPa6ncTBLt4tWMyr9VwmlAq0T MELxnASJ2NWfen4xuJxpB6OhHVDKEoCNspBVhrIiUP0uX/cwe7pf1L9LiQGkiMGQ tVTkdSexAwkdSYXyJ0Hrnp4XtZeZgeqyU0VuCNHxYc41Uu5OcFj1mMo11PQ9CVh8 1Wou3lqrp+Il7cDnybBHSzz99006C1iL -----END CERTIFICATE-----Generated at Fri Jul 4 08:37:37 2025 by rpki-client