$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: dG72S458xMBWAEOTwseNicbsoxdlEmvbZpt9C+Wz+lc= Subject key identifier: 46:B7:24:C0:5D:63:D9:33:E5:9E:7B:3D:AB:D4:98:F3:00:B1:4B:B0 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 1318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 1305 Signing time: Mon 30 Jun 2025 17:13:29 +0000 Manifest this update: Mon 30 Jun 2025 17:13:29 +0000 Manifest next update: Mon 07 Jul 2025 17:13:29 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: iD/+aJV8BDP5KafAXnW49nttvwy3yLceSVHT5f7rh2M=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4888 (0x1318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: Jun 30 17:13:29 2025 GMT Not After : Jul 7 17:13:29 2025 GMT Subject: CN=6862c5b9-92e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:ba:52:8f:df:24:d3:10:64:fb:ac:ba:6a: f4:a2:b1:2f:d8:10:c6:5e:bc:09:d9:c3:44:a1:68: cc:11:f3:9b:47:32:f6:d2:44:8f:e4:30:45:cf:b7: d7:58:16:75:f2:ee:2f:1f:dd:fa:1a:dc:23:4f:84: 94:a1:f6:a9:e2:04:de:98:95:b8:81:5e:6a:eb:7b: 47:dd:a0:82:84:9b:c5:bf:81:70:4d:32:f6:fd:db: 9c:e4:84:db:0a:1b:3c:6e:a2:a2:04:1f:26:5f:b5: 73:56:59:d2:a6:d2:0f:93:25:8e:0e:32:43:89:5e: 28:41:2a:97:b0:04:cc:89:91:aa:b3:6c:df:79:f2: 15:2e:28:c3:ce:f0:ba:55:27:78:cc:11:a9:d9:ec: ac:16:c5:76:9d:ca:01:16:5d:26:f7:d0:1f:67:4d: 69:b7:b9:f1:1b:9e:8b:c3:40:5c:c2:92:87:e8:48: d3:d4:5a:13:6c:76:7f:f1:b1:85:5e:b6:72:f5:84: 3d:2f:09:95:0c:7c:3f:35:c7:41:16:a4:aa:6f:86: b3:7e:18:b7:33:09:10:24:b2:81:83:2a:ae:b2:61: d7:08:b4:af:70:52:76:94:cf:f7:b2:e7:4d:f5:e4: 2c:b5:49:a6:c1:4e:f6:91:5d:15:8d:e0:6d:5b:83: e5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B7:24:C0:5D:63:D9:33:E5:9E:7B:3D:AB:D4:98:F3:00:B1:4B:B0 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9a:7d:f6:c5:b6:de:60:3e:51:44:c0:97:db:f4:3e:ed:ea: 18:26:90:08:fc:70:f4:f4:4c:c2:c9:5b:f8:0f:09:34:c7:2e: ed:99:30:0a:b3:88:e9:86:11:fb:87:19:af:d7:e7:69:d4:02: 98:68:36:c0:b4:ca:d3:74:7a:4f:c8:a9:84:57:e1:81:35:d5: e8:a4:b9:0a:d1:45:88:94:76:52:f3:f8:78:14:90:77:b7:73: 6d:c0:43:ed:7d:a5:de:8d:03:ab:c0:83:4e:0b:40:60:6d:c9: 46:3c:45:45:ed:3b:dd:6e:ee:66:8c:77:70:79:71:74:92:c0: 2b:29:19:ff:0d:66:7b:36:c1:f1:45:31:ec:2c:de:f1:37:ba: 81:33:45:06:7d:e4:f3:92:95:1f:01:98:e1:86:7c:37:e5:ad: ac:73:7f:b4:fd:8c:29:1a:cc:3b:37:4f:1e:0c:c9:c0:86:1e: 95:70:b3:dc:1d:f3:d8:90:ae:9a:17:d5:40:da:00:5f:1c:ff: 57:7c:92:08:b1:38:ac:e1:eb:21:8e:67:6b:c4:38:20:97:cf: d1:97:2c:7a:c1:b3:51:af:5a:32:a8:0a:11:32:b1:d1:29:e0: 1f:a3:5b:2f:cb:4d:6f:66:27:54:69:96:f3:4f:32:10:57:77: b3:d4:72:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNjMwMTcxMzI5WhcNMjUwNzA3MTcxMzI5WjAYMRYwFAYD VQQDEw02ODYyYzViOS05MmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+66Uo/fJNMQZPusumr0orEv2BDGXrwJ2cNEoWjMEfObRzL20kSP5DBFz7fX WBZ18u4vH936GtwjT4SUofap4gTemJW4gV5q63tH3aCChJvFv4FwTTL2/duc5ITb Chs8bqKiBB8mX7VzVlnSptIPkyWODjJDiV4oQSqXsATMiZGqs2zfefIVLijDzvC6 VSd4zBGp2eysFsV2ncoBFl0m99AfZ01pt7nxG56Lw0BcwpKH6EjT1FoTbHZ/8bGF XrZy9YQ9LwmVDHw/NcdBFqSqb4azfhi3MwkQJLKBgyqusmHXCLSvcFJ2lM/3sudN 9eQstUmmwU72kV0VjeBtW4PlJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEa3JMBd Y9kz5Z57PavUmPMAsUuwMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjmn32xbbeYD5RRMCX2/Q+7eoYJpAI/HD09EzCyVv4Dwk0xy7tmTAK s4jphhH7hxmv1+dp1AKYaDbAtMrTdHpPyKmEV+GBNdXopLkK0UWIlHZS8/h4FJB3 t3NtwEPtfaXejQOrwINOC0BgbclGPEVF7Tvdbu5mjHdweXF0ksArKRn/DWZ7NsHx RTHsLN7xN7qBM0UGfeTzkpUfAZjhhnw35a2sc3+0/YwpGsw7N08eDMnAhh6VcLPc HfPYkK6aF9VA2gBfHP9XfJIIsTis4eshjmdrxDggl8/Rlyx6wbNRr1oyqAoRMrHR KeAfo1svy01vZidUaZbzTzIQV3ez1HJV -----END CERTIFICATE-----Generated at Wed Jul 2 04:17:28 2025 by rpki-client