$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: +EqhHZ0/1L8Jik2xPaC5Q54i7VYrPSd8Ols85Q4CuY4= Subject key identifier: 56:8A:26:49:5A:FD:43:7B:DA:6C:BE:77:F4:3E:4D:BD:88:8A:C8:19 Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0BAF Signing time: Wed 02 Jul 2025 19:11:28 +0000 Manifest this update: Wed 02 Jul 2025 19:11:28 +0000 Manifest next update: Wed 09 Jul 2025 19:11:28 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: lDVv+E+KoujtLewb/tnzcVdrWuci96eHyF8ISftEGjI=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: w2bZ1Vy5tJz/xtNGpIMywBX1w2FBfB12WPfrA4jI4ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3000 (0xbb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: Jul 2 19:11:28 2025 GMT Not After : Jul 9 19:11:28 2025 GMT Subject: CN=68658460-513d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ae:66:12:94:e3:6f:c4:96:e7:28:a9:86:75: 2c:4d:83:fa:2d:26:a5:e0:b4:6d:e9:1b:ef:63:6f: 42:c6:bf:f0:82:d7:f3:34:c8:06:e7:ac:73:ca:97: e0:5f:d3:cc:14:0e:9d:dc:56:f3:7c:4d:64:1e:e6: a6:df:a9:be:b8:6e:48:c3:c7:38:66:73:ae:f1:99: 72:3c:3a:19:39:2b:39:e7:58:6d:01:bc:e8:8a:aa: e6:64:41:44:66:ee:bb:5a:90:ea:73:03:5c:48:52: e9:f3:57:2f:ce:8a:b7:4f:6f:ad:86:5d:36:da:31: 13:c9:4c:14:56:3d:76:64:84:e6:cd:a2:46:cb:cb: 3c:0f:7d:d1:f1:50:e6:78:f9:37:27:04:89:72:cc: 90:f2:7f:19:9d:d6:c1:57:07:4c:da:aa:3d:63:56: 83:88:a6:89:f5:a9:8f:37:53:f9:8e:46:d0:b4:0c: ec:d2:8c:99:fe:84:f9:f7:56:9f:a5:fc:5b:fc:9a: 68:f4:c9:53:f1:85:3d:44:a1:fc:12:ae:e7:f4:f6: c8:ed:01:14:fe:ff:df:6f:c0:85:3f:b4:70:97:93: e9:cb:1e:bb:75:9c:3c:b4:15:0d:8b:3e:8c:0b:2c: df:b9:fd:b4:d1:84:23:81:11:23:cf:d5:b7:d0:41: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8A:26:49:5A:FD:43:7B:DA:6C:BE:77:F4:3E:4D:BD:88:8A:C8:19 X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:29:93:ec:fc:5a:c0:93:d0:fa:af:9f:31:a7:87:05:6d: 8a:30:ec:68:83:47:a6:04:bb:e4:d7:d0:af:ca:c5:97:9e:43: 3e:e4:5c:19:2d:e9:32:19:56:61:73:50:41:e9:e8:e5:b5:cb: d4:be:07:0e:cf:79:7a:c6:65:83:ea:30:ea:86:c0:63:4c:d4: 8e:e1:04:3b:6e:6e:40:a1:a4:5b:14:28:4e:0d:f4:ed:37:04: 9e:7c:24:b1:89:4b:28:03:27:86:91:52:49:fa:69:70:0d:c1: 6b:94:29:2c:a4:a0:e7:65:11:a4:a0:e9:fc:58:41:d2:74:41: 2e:ab:a9:0c:ac:e0:d8:36:73:c5:b8:c6:2b:55:6e:c8:73:8b: 45:e2:2e:d5:f9:f1:d3:14:a4:09:da:6c:26:1c:04:c2:50:7e: fe:cf:95:81:b7:27:2a:7e:9f:f1:43:3a:b7:2a:09:a7:d3:b9: de:f2:ca:aa:08:a3:f0:55:b5:cc:53:de:13:31:0f:57:25:13: 34:dc:cc:90:87:60:2c:18:04:5f:1c:26:6b:12:94:c5:7d:b0: cb:9f:73:50:c0:7b:91:66:4a:bc:f7:56:72:36:04:cd:d6:23: b4:62:8a:8e:a1:8c:4a:8d:27:5c:68:45:42:99:d6:22:dd:4c: be:4e:6f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjUwNzAyMTkxMTI4WhcNMjUwNzA5MTkxMTI4WjAYMRYwFAYD VQQDEw02ODY1ODQ2MC01MTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA565mEpTjb8SW5yiphnUsTYP6LSal4LRt6RvvY29Cxr/wgtfzNMgG56xzypfg X9PMFA6d3FbzfE1kHuam36m+uG5Iw8c4ZnOu8ZlyPDoZOSs551htAbzoiqrmZEFE Zu67WpDqcwNcSFLp81cvzoq3T2+thl022jETyUwUVj12ZITmzaJGy8s8D33R8VDm ePk3JwSJcsyQ8n8ZndbBVwdM2qo9Y1aDiKaJ9amPN1P5jkbQtAzs0oyZ/oT591af pfxb/Jpo9MlT8YU9RKH8Eq7n9PbI7QEU/v/fb8CFP7Rwl5Ppyx67dZw8tBUNiz6M Cyzfuf200YQjgREjz9W30EFthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaKJkla /UN72my+d/Q+Tb2IisgZMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiHCmT7PxawJPQ+q+fMaeHBW2KMOxog0emBLvk19CvysWXnkM+5FwZ LekyGVZhc1BB6ejltcvUvgcOz3l6xmWD6jDqhsBjTNSO4QQ7bm5AoaRbFChODfTt NwSefCSxiUsoAyeGkVJJ+mlwDcFrlCkspKDnZRGkoOn8WEHSdEEuq6kMrODYNnPF uMYrVW7Ic4tF4i7V+fHTFKQJ2mwmHATCUH7+z5WBtycqfp/xQzq3Kgmn07ne8sqq CKPwVbXMU94TMQ9XJRM03MyQh2AsGARfHCZrEpTFfbDLn3NQwHuRZkq891ZyNgTN 1iO0YoqOoYxKjSdcaEVCmdYi3Uy+Tm/d -----END CERTIFICATE-----Generated at Thu Jul 3 19:57:40 2025 by rpki-client