$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: a+DUEbzAAsX4Iwdy5RjMfbmPM30nTFQ3+R0jplzU3oM= Subject key identifier: 59:8C:67:FA:11:99:DF:5E:D4:24:88:B4:DD:C0:B1:1A:46:EB:F9:F8 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 052D Signing time: Tue 01 Jul 2025 00:02:12 +0000 Manifest this update: Tue 01 Jul 2025 00:02:11 +0000 Manifest next update: Tue 08 Jul 2025 00:02:11 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: eh+abtOiuMDlhMA/thVVDc01Y6SxZi2+DJcbGoOS2iQ=) 2: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: PT6HAQnCKQ1h24wBLOcqnEqZNrhbuPQnC+z2D3m/yIA=) 3: 24AE273C2D1111EE85C59810C4F9AE02.roa (hash: fJSwaqO5xx9Q9RIgs6JtYncNmKK6M8gTn37HYZrh54Y=) 4: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: R1MK4JszBxBbOzBzvtKc2PZsYBtSXJEyXkwh6miBgAs=) 5: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: mYVTb3naQfgNMS7fIevSh0fymgDfaPtpkRpDdX0Fp/8=) 6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: 918uflqRaxL4teDIN56OfUziBRRQmbbgHsTgJ3UnMS8=) 7: BCE8827C4EB011ECA708A867C4F9AE02.roa (hash: 6UFCXsHGkBs9mNJ/P0P2x3t8KMswz8UkcFEG5pRtYR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jul 1 00:02:11 2025 GMT Not After : Jul 8 00:02:11 2025 GMT Subject: CN=68632583-852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:c1:db:11:69:0b:48:89:bc:79:0b:bc:0f: 59:4d:54:ef:13:50:74:45:3b:0e:2f:14:dd:8f:56: 35:dc:9f:ea:54:41:69:69:f5:48:c9:80:48:b4:3d: 67:71:f7:19:a2:42:26:69:ac:30:ca:96:c5:c1:5f: 6a:ed:c5:a6:e6:35:e2:50:89:b1:bd:e2:c6:b5:2c: 8f:c6:a9:02:9f:65:ba:b4:f0:7f:3e:eb:a2:c6:f4: d5:b0:d9:63:17:e7:28:d2:3b:c6:70:9b:ce:fd:c4: ee:bb:7e:8f:4e:05:5b:d6:6d:02:fa:91:b8:1f:74: 10:d5:a4:c3:a4:13:92:c9:59:1a:70:55:7e:f9:67: ab:75:0a:0e:97:a3:9b:e2:7a:48:a2:e7:bb:54:a4: 29:e8:77:ac:ca:92:d4:57:b3:1e:81:df:41:49:cf: d1:25:99:57:0e:4b:7f:09:91:81:4a:fe:e5:f7:3f: c2:40:f6:16:74:ea:20:45:c3:e5:00:59:e4:ae:12: 65:55:1b:d8:9d:e2:6a:3a:60:bd:fe:3b:64:13:51: d8:c9:52:1f:ea:d6:90:a5:c4:1d:a9:8d:6f:23:4a: a6:6e:ae:9b:5f:7f:dc:34:b6:78:00:c4:23:06:d9: 28:ce:dc:74:b7:88:c8:02:fd:0b:1a:8d:3e:56:90: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8C:67:FA:11:99:DF:5E:D4:24:88:B4:DD:C0:B1:1A:46:EB:F9:F8 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3b:d3:32:62:5e:6c:6e:4a:21:1e:03:25:93:a7:6d:de:5f: 8b:bf:7f:21:e7:8e:3d:6d:52:a8:63:69:5a:a3:e1:f5:f0:a8: 6a:30:05:11:1b:a2:b5:58:5c:55:86:54:03:02:73:c5:0c:a4: 88:55:e4:32:b0:e4:85:c2:87:f1:c9:c3:89:4f:94:14:a9:ab: 1e:43:6c:77:7a:5d:bc:9f:4d:b8:08:88:44:db:cd:45:44:ed: 4d:8d:27:47:91:3b:2e:83:d5:21:74:48:68:2f:6f:9f:72:1b: 90:18:d2:6d:58:28:98:88:f3:1f:80:ee:5e:68:c4:a9:46:1f: 5b:98:eb:63:59:f6:6d:7d:bf:1d:34:05:fd:fd:0a:7e:0f:14: 61:62:31:e8:4d:87:3a:d2:72:15:6e:30:86:56:c0:57:60:2d: 93:39:bc:8d:64:c0:8e:c2:99:33:3a:e6:d3:ad:af:24:3f:e2: 9a:59:d1:26:6d:1e:59:b9:f8:37:26:c3:00:cc:a7:64:6c:0a: ca:46:c3:9b:a5:b6:0e:00:13:03:d3:b4:b2:dc:e6:1f:a1:e8: 44:79:cd:2f:64:bc:fe:2b:9c:1d:e0:b6:bb:79:82:b1:5f:b8: 17:ca:2d:7b:8c:43:b6:19:f8:5e:06:59:db:f2:49:ea:59:10: b0:68:58:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNzAxMDAwMjExWhcNMjUwNzA4MDAwMjExWjAYMRYwFAYD VQQDEw02ODYzMjU4My04NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tLB2xFpC0iJvHkLvA9ZTVTvE1B0RTsOLxTdj1Y13J/qVEFpafVIyYBItD1n cfcZokImaawwypbFwV9q7cWm5jXiUImxveLGtSyPxqkCn2W6tPB/PuuixvTVsNlj F+co0jvGcJvO/cTuu36PTgVb1m0C+pG4H3QQ1aTDpBOSyVkacFV++WerdQoOl6Ob 4npIoue7VKQp6HesypLUV7Megd9BSc/RJZlXDkt/CZGBSv7l9z/CQPYWdOogRcPl AFnkrhJlVRvYneJqOmC9/jtkE1HYyVIf6taQpcQdqY1vI0qmbq6bX3/cNLZ4AMQj Btkoztx0t4jIAv0LGo0+VpBHhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmMZ/oR md9e1CSItN3AsRpG6/n4MB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNO9MyYl5sbkohHgMlk6dt3l+Lv38h5449bVKoY2lao+H18KhqMAUR G6K1WFxVhlQDAnPFDKSIVeQysOSFwofxycOJT5QUqaseQ2x3el28n024CIhE281F RO1NjSdHkTsug9UhdEhoL2+fchuQGNJtWCiYiPMfgO5eaMSpRh9bmOtjWfZtfb8d NAX9/Qp+DxRhYjHoTYc60nIVbjCGVsBXYC2TObyNZMCOwpkzOubTra8kP+KaWdEm bR5Zufg3JsMAzKdkbArKRsObpbYOABMD07Sy3OYfoehEec0vZLz+K5wd4La7eYKx X7gXyi17jEO2GfheBlnb8knqWRCwaFiB -----END CERTIFICATE-----Generated at Tue Jul 1 22:04:16 2025 by rpki-client