$ rpki-client -vvf rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft File: WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft (raw, json) Hash identifier: 2wQ6hRbPRYie9TYefwT8rGfOl/VVtMe8vutfJBIxars= Subject key identifier: 08:DA:C6:B0:5C:72:C2:37:BA:9A:23:A8:BC:14:74:78:53:2D:BB:6A Authority key identifier: 59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 Certificate issuer: /CN=A913C4FD/serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft Manifest number: 77 Signing time: Thu 03 Jul 2025 07:02:29 +0000 Manifest this update: Thu 03 Jul 2025 07:02:29 +0000 Manifest next update: Thu 10 Jul 2025 07:02:29 +0000 Files and hashes: 1: WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl (hash: 4dFQPLD38RRaUuenahY3dV6wodDToyl890AWCc55NY0=) 2: 7C321BDEA55711EFB8317F6BC4F9AE02.roa (hash: xTT8Qi7eRLtjGj1MJV5lOZ1nPkMc9OMOKapYnFfPneA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C4FD, serialNumber=5990F4C3BB23436C95100B4848DC9186AA495319 Validity Not Before: Jul 3 07:02:29 2025 GMT Not After : Jul 10 07:02:29 2025 GMT Subject: CN=68662b05-86ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:b0:7e:29:14:22:a0:e2:d9:49:ce:11:fd: 32:f0:94:97:60:31:aa:e1:78:0d:05:7e:54:3a:9f: 74:77:b1:77:d3:5b:07:e5:0d:5e:af:76:52:a2:19: 8d:1c:00:6e:bc:40:a6:cf:b2:7e:84:a5:3f:c2:c1: a2:f7:f1:6d:39:4a:8a:f1:27:da:28:7b:b7:5b:15: 59:87:64:39:92:65:38:47:b1:4b:13:6b:d2:60:bb: c9:ca:01:72:75:6c:b5:dc:cd:f3:01:38:a9:f7:75: 17:01:76:8f:87:4a:5e:5d:dc:f5:b4:9c:77:be:56: 28:6a:f9:79:ac:8d:83:97:b6:14:05:f2:16:7e:80: 8f:a8:9f:81:11:e0:09:52:e5:0e:0a:7e:a7:69:25: 29:94:ff:b8:9d:ab:2e:70:75:15:42:cf:c1:51:1d: 5e:e8:71:ce:16:b3:a2:81:bc:3f:f3:a4:b0:6c:ab: 29:ba:72:f1:3e:c5:79:6b:4f:e8:d5:ca:ae:fb:9d: d0:0c:75:9b:0b:2e:d0:16:09:a0:7d:af:10:7c:e5: a0:2e:3a:f9:d8:bc:f3:11:d2:95:65:2d:bd:4b:cb: d5:b4:25:bb:dc:55:b5:d9:af:c6:8e:f1:4e:23:30: 7a:03:42:03:a4:13:e5:e0:52:be:95:72:43:c1:80: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DA:C6:B0:5C:72:C2:37:BA:9A:23:A8:BC:14:74:78:53:2D:BB:6A X509v3 Authority Key Identifier: keyid:59:90:F4:C3:BB:23:43:6C:95:10:0B:48:48:DC:91:86:AA:49:53:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZD0w7sjQ2yVEAtISNyRhqpJUxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C4FD/A57CABECA55411EF8A975247C4F9AE02/WZD0w7sjQ2yVEAtISNyRhqpJUxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:43:a4:1e:1b:39:1c:13:3e:ad:35:79:f6:89:10:ac:32:8e: 08:e7:9f:9b:4f:e7:1b:ee:af:df:26:07:a4:a7:7b:46:cb:a9: 2c:0f:dc:b6:c6:cd:cd:d4:ac:f0:57:d0:2e:03:2a:e1:4f:34: c9:63:d0:55:ed:0c:26:7a:7c:d6:8f:95:ee:68:6d:42:c5:43: 2f:ad:b6:cb:a9:34:ee:1c:ec:d4:79:6b:5f:00:5a:ab:28:60: 0f:43:7d:7c:1a:ff:a8:2c:03:72:63:09:a9:80:8f:4a:60:03: cf:94:e7:ff:4f:e3:ab:a1:72:0a:f3:9f:58:50:1e:48:0a:f5: d8:63:30:7d:70:9c:15:92:ca:a2:c3:51:f3:20:9c:4e:5f:f4: da:4c:15:23:ec:75:99:45:9e:f2:b2:4b:36:17:1e:de:38:09: 4f:5b:c8:ff:68:21:b0:f1:c6:a5:d4:fd:bf:d4:75:3f:cc:41: 19:85:9f:75:91:85:a8:55:27:2c:73:08:cc:fb:3f:c6:53:dd: af:30:2e:cb:5c:b2:2c:91:86:e8:c5:86:ba:be:00:09:c8:b6: 98:3e:1b:3a:66:4b:05:4c:17:f5:ff:f5:69:1c:8c:30:9a:21: b4:78:7c:0b:de:c5:7f:64:89:72:25:44:69:b2:4c:20:23:17: 3d:38:bf:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzRGRDExMC8GA1UEBRMoNTk5MEY0QzNCQjIzNDM2Qzk1MTAwQjQ4NDhEQzkxODZB QTQ5NTMxOTAeFw0yNTA3MDMwNzAyMjlaFw0yNTA3MTAwNzAyMjlaMBgxFjAUBgNV BAMTDTY4NjYyYjA1LTg2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTbrB+KRQioOLZSc4R/TLwlJdgMarheA0FflQ6n3R3sXfTWwflDV6vdlKiGY0c AG68QKbPsn6EpT/CwaL38W05SorxJ9ooe7dbFVmHZDmSZThHsUsTa9Jgu8nKAXJ1 bLXczfMBOKn3dRcBdo+HSl5d3PW0nHe+Vihq+XmsjYOXthQF8hZ+gI+on4ER4AlS 5Q4KfqdpJSmU/7idqy5wdRVCz8FRHV7occ4Ws6KBvD/zpLBsqym6cvE+xXlrT+jV yq77ndAMdZsLLtAWCaB9rxB85aAuOvnYvPMR0pVlLb1Ly9W0JbvcVbXZr8aO8U4j MHoDQgOkE+XgUr6VckPBgCr9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCNrGsFxy wje6miOovBR0eFMtu2owHwYDVR0jBBgwFoAUWZD0w7sjQ2yVEAtISNyRhqpJUxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDNEZEL0E1N0NBQkVDQTU1 NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5VkVBdElTTnlSaHFwSlV4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1pEMHc3c2pRMnlWRUF0SVNOeVJocXBKVXhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND NEZEL0E1N0NBQkVDQTU1NDExRUY4QTk3NTI0N0M0RjlBRTAyL1daRDB3N3NqUTJ5 VkVBdElTTnlSaHFwSlV4ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJDpB4bORwTPq01efaJEKwyjgjnn5tP5xvur98mB6Sne0bLqSwP3LbG zc3UrPBX0C4DKuFPNMlj0FXtDCZ6fNaPle5obULFQy+ttsupNO4c7NR5a18AWqso YA9DfXwa/6gsA3JjCamAj0pgA8+U5/9P46uhcgrzn1hQHkgK9dhjMH1wnBWSyqLD UfMgnE5f9NpMFSPsdZlFnvKySzYXHt44CU9byP9oIbDxxqXU/b/UdT/MQRmFn3WR hahVJyxzCMz7P8ZT3a8wLstcsiyRhujFhrq+AAnItpg+GzpmSwVMF/X/9WkcjDCa IbR4fAvexX9kiXIlRGmyTCAjFz04v90= -----END CERTIFICATE-----Generated at Thu Jul 3 17:10:09 2025 by rpki-client