$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: kEKZIMoVLbwVonr2SUYgocgQlqRnGaC0ShJODlHX1yM= Subject key identifier: C8:27:52:F7:6A:6A:C6:DB:C8:4B:71:C8:6B:08:B4:4B:DD:86:95:AE Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0ED1 Signing time: Mon 30 Jun 2025 17:54:05 +0000 Manifest this update: Mon 30 Jun 2025 17:54:04 +0000 Manifest next update: Mon 07 Jul 2025 17:54:04 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 7qnLb07ujepaIzd6yR8LI6/nDTzc1W0eapbxK46YkGQ=) 2: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: VEZ7s8au88OcCIFniLaU9jr2DOkZYlGYw2X2o/OxHCE=) 3: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=) 4: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: 10DFF7xCpxy47ECiljTuKfUMmTINmM368KgsuVpPV2A=) 5: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: MCZ4hWeiAmt9KhYesLRixKufRw6yQV6zNqKued4Xvos=) 6: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=) 7: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=) 8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3923 (0xf53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 30 17:54:04 2025 GMT Not After : Jul 7 17:54:04 2025 GMT Subject: CN=6862cf3d-f31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a0:82:24:aa:f0:23:f6:86:95:05:8d:9e:2b: dc:64:e5:a2:ce:d8:e2:0c:da:cc:55:e8:85:5c:ff: ae:10:1c:6b:29:10:8b:4a:30:8e:82:cf:4b:e0:17: cc:83:08:d6:94:12:28:0b:4d:3d:61:a6:65:ae:b8: 68:53:1c:e3:94:1c:32:7a:ca:61:ee:74:b0:95:12: 78:dc:14:e6:f6:77:df:cb:20:15:6b:b0:e7:57:49: 20:7b:e5:4a:b4:d4:25:e5:d2:63:db:5e:78:8f:82: 6d:22:4a:f3:48:1d:89:86:24:c9:1c:06:0c:cd:d5: 6a:fd:f3:7a:2b:77:8e:c3:f0:6e:ec:e4:f5:14:ba: 56:5b:41:d4:31:4f:a0:9c:a6:88:c3:99:e1:b3:15: 2c:1f:96:83:4a:47:e8:b0:05:a7:96:2d:34:f0:f7: 05:06:07:91:a0:02:80:19:05:92:0b:a2:33:9d:41: 9c:52:30:a3:1b:79:29:32:a5:0e:fa:12:69:78:63: 3d:eb:7b:72:bb:01:10:14:4a:ed:f2:37:4e:c7:5b: c1:9a:e5:00:b9:a9:05:24:fa:61:ee:c8:dc:2d:d6: c3:aa:8b:98:4f:85:d0:6d:e7:70:3d:d4:20:89:d7: ec:f4:bf:28:53:01:8d:55:55:25:3f:ec:74:92:ed: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:52:F7:6A:6A:C6:DB:C8:4B:71:C8:6B:08:B4:4B:DD:86:95:AE X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b1:62:8d:e0:bd:4a:e1:23:02:17:fa:eb:59:8c:af:8e:7d: e6:20:7e:c5:19:e8:d9:79:8f:7b:2f:be:95:09:6a:f4:2d:cd: 45:db:a3:3c:da:b8:82:77:e1:68:1d:5a:e9:47:8b:2a:f0:fc: cb:23:6f:05:aa:9c:0a:b1:24:87:17:80:95:c2:c2:9e:20:29: ba:66:dc:65:1d:6b:c3:cc:10:57:7c:ff:31:42:41:92:b7:26: 7d:7d:8d:21:3d:fa:b3:7d:a3:07:94:27:e9:23:d9:76:14:9b: 4d:2e:e7:15:be:d1:97:c7:34:7d:4b:8b:07:7f:5f:79:29:a6: 1e:4e:3e:ea:eb:37:43:f7:1d:18:02:01:48:58:b0:ab:70:2c: 10:72:f0:8f:ea:e9:df:aa:ec:b0:f8:a9:a7:b1:34:29:c2:69: 47:e1:e8:c3:9e:fd:88:93:14:2b:26:ab:b5:5a:25:a6:5f:1d: 24:89:2f:e0:cf:f7:b4:c0:f8:90:fa:d6:69:13:a4:a3:b2:5b: 8c:8b:e5:38:d6:93:b2:cc:c2:71:32:17:28:d6:b7:72:56:d2: 58:09:6f:93:69:89:a1:5e:43:9c:89:51:d4:98:7d:1b:9a:88: 02:ca:f8:05:aa:17:19:0e:6d:f5:67:f3:66:b2:1d:96:03:35: 37:31:f3:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNjMwMTc1NDA0WhcNMjUwNzA3MTc1NDA0WjAYMRYwFAYD VQQDEw02ODYyY2YzZC1mMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqCCJKrwI/aGlQWNnivcZOWiztjiDNrMVeiFXP+uEBxrKRCLSjCOgs9L4BfM gwjWlBIoC009YaZlrrhoUxzjlBwyesph7nSwlRJ43BTm9nffyyAVa7DnV0kge+VK tNQl5dJj2154j4JtIkrzSB2JhiTJHAYMzdVq/fN6K3eOw/Bu7OT1FLpWW0HUMU+g nKaIw5nhsxUsH5aDSkfosAWnli008PcFBgeRoAKAGQWSC6IznUGcUjCjG3kpMqUO +hJpeGM963tyuwEQFErt8jdOx1vBmuUAuakFJPph7sjcLdbDqouYT4XQbedwPdQg idfs9L8oUwGNVVUlP+x0ku2ZzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgnUvdq asbbyEtxyGsItEvdhpWuMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOsWKN4L1K4SMCF/rrWYyvjn3mIH7FGejZeY97L76VCWr0Lc1F26M8 2riCd+FoHVrpR4sq8PzLI28FqpwKsSSHF4CVwsKeICm6ZtxlHWvDzBBXfP8xQkGS tyZ9fY0hPfqzfaMHlCfpI9l2FJtNLucVvtGXxzR9S4sHf195KaYeTj7q6zdD9x0Y AgFIWLCrcCwQcvCP6unfquyw+KmnsTQpwmlH4ejDnv2IkxQrJqu1WiWmXx0kiS/g z/e0wPiQ+tZpE6SjsluMi+U41pOyzMJxMhco1rdyVtJYCW+TaYmhXkOciVHUmH0b mogCyvgFqhcZDm31Z/Nmsh2WAzU3MfNx -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:14 2025 by rpki-client