$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: 1hWdJRoMxJB8/h/mSDXx0jKIXUvY9C1MrJF4dVoSDV0= Subject key identifier: 51:B8:80:92:F1:2C:13:7A:A6:38:16:31:55:67:E0:45:68:4F:8F:9D Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 06:58:10 +0000 Manifest this update: Sat 23 Aug 2025 06:58:09 +0000 Manifest next update: Sat 30 Aug 2025 06:58:09 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: vZRMAIsVv3h9m4zsYRvMSYNpant35yIQEMga7MFGRpI=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Aug 23 06:58:09 2025 GMT Not After : Aug 30 06:58:09 2025 GMT Subject: CN=68a96681-2821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:93:e3:e7:98:ff:ce:c1:a7:d0:db:7a:4b: 83:91:f6:4b:bd:69:88:01:f8:0e:33:75:4e:f3:bc: a1:a7:52:ae:6e:b6:31:7b:f4:05:b3:42:3e:6d:57: d9:2a:9b:f0:dd:3f:c6:dd:17:c9:a6:64:87:2e:9c: f3:7d:28:8c:69:bb:73:72:8c:03:02:b9:d1:93:1e: bc:76:83:3d:1b:2d:0d:18:d1:2b:98:d8:9b:fa:a9: df:6e:84:f3:f2:90:76:1d:c8:56:cb:94:b7:96:c0: f6:8f:a4:a8:ec:30:26:da:03:a8:dd:b2:1e:7c:19: e9:da:55:77:14:d4:38:4d:82:5e:9f:24:c6:75:db: 10:98:ca:04:26:c2:40:0b:99:72:f8:a1:a2:a2:26: 6e:7f:4b:9e:55:7c:e0:9a:52:e8:05:ea:ec:6b:20: a0:59:ea:de:66:db:ff:73:12:f5:6f:a7:d7:28:6d: 90:57:ee:0c:6c:fa:d3:65:80:8d:40:85:9a:cb:2a: 10:d7:1a:df:cf:0f:df:c7:79:45:34:e9:0b:be:52: c3:28:7e:0f:74:8e:46:1f:3c:5f:90:3c:fd:d6:14: 73:e7:b5:4a:89:9e:c6:dd:ef:d1:4b:0f:15:82:1c: f4:44:a8:fc:75:c5:54:1a:d1:a6:21:55:7e:a8:17: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B8:80:92:F1:2C:13:7A:A6:38:16:31:55:67:E0:45:68:4F:8F:9D X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:22:da:2a:1d:fe:8f:a8:3f:aa:01:53:87:45:56:bf:35:b0: 49:8d:8c:0c:54:17:90:07:85:e6:f4:04:fa:6c:81:46:8d:28: b8:ac:e5:0a:91:de:24:00:3c:d2:7e:8d:e5:b6:73:48:79:a6: 21:8f:b2:93:79:d0:91:1c:f8:28:f8:de:b5:78:25:22:44:6a: 0e:3c:56:c6:ca:da:77:dd:48:65:5f:7d:b9:7f:a4:ce:eb:8f: 89:e3:47:e9:3b:d4:53:15:16:d8:5e:4b:cb:e1:2f:9b:de:72: e1:53:b6:06:ee:dd:cc:47:27:eb:3e:ed:68:e6:78:3d:f2:f8: 47:3e:9c:c7:c6:5a:14:45:c4:64:3c:4e:fa:85:49:b5:78:4e: 82:78:e2:ab:7c:d6:cc:b8:6f:ed:75:48:97:ae:71:3b:3b:6a: 46:d8:8f:13:c1:f3:97:da:01:d4:df:12:03:70:81:08:4c:cb: 40:f4:f5:ee:c5:44:76:b3:ac:6c:0e:88:b0:fa:07:18:87:96: 53:22:0f:c5:fd:7e:37:8a:1f:7b:00:0b:a2:f3:6e:fd:6a:a4: 8f:a4:35:20:53:0b:c0:5f:0c:9f:b1:0d:c5:0f:b4:29:0f:b9: d4:ae:b1:8f:d3:ef:54:fb:1f:d1:26:85:de:d7:fd:28:aa:a6: 99:8f:a1:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA4MjMwNjU4MDlaFw0yNTA4MzAwNjU4MDlaMBgxFjAUBgNV BAMTDTY4YTk2NjgxLTI4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD1JPj55j/zsGn0Nt6S4OR9ku9aYgB+A4zdU7zvKGnUq5utjF79AWzQj5tV9kq m/DdP8bdF8mmZIcunPN9KIxpu3NyjAMCudGTHrx2gz0bLQ0Y0SuY2Jv6qd9uhPPy kHYdyFbLlLeWwPaPpKjsMCbaA6jdsh58GenaVXcU1DhNgl6fJMZ12xCYygQmwkAL mXL4oaKiJm5/S55VfOCaUugF6uxrIKBZ6t5m2/9zEvVvp9cobZBX7gxs+tNlgI1A hZrLKhDXGt/PD9/HeUU06Qu+UsMofg90jkYfPF+QPP3WFHPntUqJnsbd79FLDxWC HPREqPx1xVQa0aYhVX6oF2MNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUbiAkvEs E3qmOBYxVWfgRWhPj50wHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAYi2iod/o+oP6oBU4dFVr81sEmNjAxUF5AHheb0BPpsgUaNKLis5QqR 3iQAPNJ+jeW2c0h5piGPspN50JEc+Cj43rV4JSJEag48VsbK2nfdSGVffbl/pM7r j4njR+k71FMVFtheS8vhL5vecuFTtgbu3cxHJ+s+7WjmeD3y+Ec+nMfGWhRFxGQ8 TvqFSbV4ToJ44qt81sy4b+11SJeucTs7akbYjxPB85faAdTfEgNwgQhMy0D09e7F RHazrGwOiLD6BxiHllMiD8X9fjeKH3sAC6Lzbv1qpI+kNSBTC8BfDJ+xDcUPtCkP udSusY/T71T7H9Emhd7X/SiqppmPofA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:52:01 2025 by rpki-client