$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: 5wj3ZR8Na/HCPg7aR2x/YZoCfpXYP6pP9OLbDRaE1SQ= Subject key identifier: BA:DB:46:B8:BE:2C:1F:C4:4F:9D:BA:24:C9:A4:0F:A9:3F:98:B3:AB Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 5F Signing time: Tue 01 Jul 2025 07:49:33 +0000 Manifest this update: Tue 01 Jul 2025 07:49:32 +0000 Manifest next update: Tue 08 Jul 2025 07:49:32 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: L+nr8Tws3c5S02/xETdwBuV5yhO/ZxKKZR8ek1t2aQA=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Jul 1 07:49:32 2025 GMT Not After : Jul 8 07:49:32 2025 GMT Subject: CN=6863930c-e5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:89:9b:22:20:f0:03:0b:08:18:1e:eb:c5: e2:a0:47:37:ee:56:9f:38:12:f9:fd:50:d0:36:d3: 98:a8:59:6a:02:6e:99:1d:68:8d:20:a0:02:fa:a2: 4a:f0:90:2f:95:91:bb:11:7c:4c:4d:12:99:3a:a3: 90:9f:59:a3:3c:08:1e:65:dc:bf:6a:8b:8e:84:b3: cf:91:4a:66:91:da:d1:c1:6d:1a:4a:20:01:b7:4d: 32:76:39:bd:1a:70:12:ce:81:99:5a:08:b0:30:76: e1:6b:ec:00:4d:0c:a7:cb:05:62:56:31:98:df:63: 55:0e:d2:10:a1:99:87:d3:8e:d7:a3:14:7b:6f:74: 01:e1:e4:ff:e2:20:59:88:5a:a5:d4:7a:06:cc:f8: be:00:82:e9:72:4c:ee:70:77:ed:3e:3c:a5:43:54: 42:41:ed:d3:de:6f:12:86:64:1e:88:67:b1:e1:25: 74:f7:35:61:2d:24:07:11:9b:79:f1:e1:5f:0a:12: 2d:3d:fc:eb:2b:27:e6:b8:e0:0a:38:80:31:7b:c1: cd:58:46:12:b4:96:48:00:e8:b3:ea:df:71:f8:cd: 95:cc:5a:fa:71:0f:30:ec:29:c3:55:c0:a9:8a:04: da:2a:b6:c7:58:53:c9:5b:3c:0e:9f:cf:7f:0a:09: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DB:46:B8:BE:2C:1F:C4:4F:9D:BA:24:C9:A4:0F:A9:3F:98:B3:AB X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cf:56:bc:8a:e1:13:9e:20:b2:a1:f5:18:c3:90:8d:97:29: d0:1e:21:a3:33:1e:bd:1f:f3:e0:5c:6c:52:e0:f4:5d:8e:f4: d8:28:36:6d:02:fb:9f:e3:28:ce:45:1e:7d:01:01:16:61:a8: d0:68:42:4e:2e:77:3c:88:51:78:74:a5:75:ab:21:ca:5b:28: f7:b7:84:d0:86:fa:64:36:40:6c:fc:0a:5c:ba:1b:f4:0b:e9: 37:18:cd:73:a7:15:b5:07:f6:ce:5c:b6:02:bd:ad:bd:43:29: 0e:d2:2e:4e:8f:ab:47:ab:d3:ba:5a:e7:df:bc:aa:b7:df:bf: 13:9b:a1:ef:b1:bd:07:49:b6:23:a3:07:5f:be:12:54:e1:9a: 06:fc:53:3f:de:7b:0e:7b:3c:c4:af:d0:ce:34:0a:80:2f:fb: 05:e3:36:bb:f6:83:59:6f:b1:75:5e:15:79:c5:b2:5e:e6:bc: 93:f8:01:4b:b3:97:4e:0f:9e:09:b3:5f:7c:d6:ce:2d:68:74: de:86:c0:77:ca:30:1f:0c:8f:b3:f7:17:83:3b:12:69:16:1d: a1:5b:8e:22:2d:bf:9e:11:6f:e2:9d:1c:69:30:cf:c2:26:1e: d8:3a:c2:7b:5c:d2:55:01:b0:5a:7d:99:25:88:83:c2:1d:1f: cf:c0:70:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA3MDEwNzQ5MzJaFw0yNTA3MDgwNzQ5MzJaMBgxFjAUBgNV BAMTDTY4NjM5MzBjLWU1YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfs4mbIiDwAwsIGB7rxeKgRzfuVp84Evn9UNA205ioWWoCbpkdaI0goAL6okrw kC+VkbsRfExNEpk6o5CfWaM8CB5l3L9qi46Es8+RSmaR2tHBbRpKIAG3TTJ2Ob0a cBLOgZlaCLAwduFr7ABNDKfLBWJWMZjfY1UO0hChmYfTjtejFHtvdAHh5P/iIFmI WqXUegbM+L4AgulyTO5wd+0+PKVDVEJB7dPebxKGZB6IZ7HhJXT3NWEtJAcRm3nx 4V8KEi09/OsrJ+a44Ao4gDF7wc1YRhK0lkgA6LPq33H4zZXMWvpxDzDsKcNVwKmK BNoqtsdYU8lbPA6fz38KCZnJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuttGuL4s H8RPnbokyaQPqT+Ys6swHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjPVryK4ROeILKh9RjDkI2XKdAeIaMzHr0f8+BcbFLg9F2O9NgoNm0C +5/jKM5FHn0BARZhqNBoQk4udzyIUXh0pXWrIcpbKPe3hNCG+mQ2QGz8Cly6G/QL 6TcYzXOnFbUH9s5ctgK9rb1DKQ7SLk6Pq0er07pa59+8qrffvxOboe+xvQdJtiOj B1++ElThmgb8Uz/eew57PMSv0M40CoAv+wXjNrv2g1lvsXVeFXnFsl7mvJP4AUuz l04PngmzX3zWzi1odN6GwHfKMB8Mj7P3F4M7EmkWHaFbjiItv54Rb+KdHGkwz8Im Htg6wntc0lUBsFp9mSWIg8IdH8/AcEU= -----END CERTIFICATE-----Generated at Wed Jul 2 01:46:00 2025 by rpki-client