$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: q2joHJKUWGw5/3B1bVkXgOkrvU4lgStnZZae5znFLp0= Subject key identifier: 22:EE:C4:ED:E1:AC:EE:2E:9B:47:63:8E:02:D8:3C:75:3E:6F:76:94 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C20 Signing time: Wed 02 Jul 2025 18:52:48 +0000 Manifest this update: Wed 02 Jul 2025 18:52:47 +0000 Manifest next update: Wed 09 Jul 2025 18:52:47 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: UkqY8jQd1q7KdSD2w+6lTlvucJCd0oqea1Pj0SYbViM=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Jul 2 18:52:47 2025 GMT Not After : Jul 9 18:52:47 2025 GMT Subject: CN=68657fff-f906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:68:7e:3e:a8:77:c8:43:2c:0f:2f:00:93: 73:a3:69:5d:64:2c:f0:09:a0:80:56:e1:25:85:fb: 94:ae:f9:fd:f3:20:e6:fc:a0:6e:5a:08:13:93:ef: 58:15:c2:b8:92:fc:ab:58:20:b4:9a:33:f9:f8:1d: 72:19:b6:69:d9:9e:04:e7:12:bc:46:62:3b:1d:30: c8:99:22:a6:f0:b2:63:42:af:9d:75:0a:d6:95:7f: 44:3f:4c:8a:d1:b4:d6:be:1e:64:f0:39:da:f0:00: ca:cf:ee:c3:51:75:a2:48:7d:d6:6f:0f:25:98:47: e4:17:a5:65:a4:a2:a0:e9:3c:96:7b:46:96:71:28: b6:14:53:ce:c0:18:21:a2:25:29:b5:59:2d:85:7a: 26:f4:e2:ee:72:2c:2c:a3:fe:e3:75:55:5a:54:7d: d7:1d:f6:ef:24:8e:fd:48:97:5a:eb:eb:72:e1:63: 88:35:13:41:9f:47:6c:04:e5:9e:f7:0c:8f:d5:3d: 8e:00:75:4a:da:d6:d7:79:a9:a2:1d:04:65:5c:05: e0:1f:d2:14:21:72:e8:c5:b5:b1:10:9c:29:f5:80: 68:fe:29:e5:25:fe:92:42:de:67:65:0a:7a:88:b8: 4a:53:e0:e4:e3:8c:6a:d6:a5:2a:94:4d:93:4b:d8: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:C4:ED:E1:AC:EE:2E:9B:47:63:8E:02:D8:3C:75:3E:6F:76:94 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:93:00:85:bd:4a:6e:13:aa:5f:be:87:f5:ac:24:5f:db:ee: 94:17:9f:95:b0:4b:fa:ec:ac:d5:ac:7f:fa:f8:b1:11:af:50: 8a:a1:55:89:96:04:c9:de:7b:fc:c4:f4:ed:3a:4b:d0:ae:40: 8b:c2:67:47:4c:e1:cb:69:ad:83:7e:42:3c:16:12:96:0a:05: c1:69:17:2a:b9:50:f4:98:ed:ed:a9:11:89:1a:63:3f:40:f6: d2:e1:7f:46:e5:46:2b:8a:8e:80:a3:ed:d3:92:fa:ab:52:0e: a6:be:2b:12:05:dc:14:da:19:04:cf:d1:a8:98:28:07:7d:3a: 19:8d:43:6d:ba:7b:93:09:b3:67:ba:ca:c4:fe:96:34:9a:2c: ca:33:19:3e:f5:a7:52:86:7f:14:89:82:ce:ea:66:09:1f:d5: b1:c4:1f:ad:57:22:39:5d:2e:12:e7:c2:c4:e9:eb:0f:31:70: 29:62:2b:3c:d7:c7:9d:97:d9:af:9f:56:3e:73:0d:cb:27:e5: 54:88:21:09:dd:3b:39:9d:cd:d0:2b:86:15:85:bb:ce:42:19: 64:cb:74:69:71:fb:62:8b:db:21:be:ec:45:f2:64:4c:34:de: 9e:ab:23:4a:5c:aa:c0:76:ce:2a:0b:2f:3e:fb:c9:b2:19:ad: bc:12:e2:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwNzAyMTg1MjQ3WhcNMjUwNzA5MTg1MjQ3WjAYMRYwFAYD VQQDEw02ODY1N2ZmZi1mOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJRofj6od8hDLA8vAJNzo2ldZCzwCaCAVuElhfuUrvn98yDm/KBuWggTk+9Y FcK4kvyrWCC0mjP5+B1yGbZp2Z4E5xK8RmI7HTDImSKm8LJjQq+ddQrWlX9EP0yK 0bTWvh5k8Dna8ADKz+7DUXWiSH3Wbw8lmEfkF6VlpKKg6TyWe0aWcSi2FFPOwBgh oiUptVkthXom9OLuciwso/7jdVVaVH3XHfbvJI79SJda6+ty4WOINRNBn0dsBOWe 9wyP1T2OAHVK2tbXeamiHQRlXAXgH9IUIXLoxbWxEJwp9YBo/inlJf6SQt5nZQp6 iLhKU+Dk44xq1qUqlE2TS9gPvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLuxO3h rO4um0djjgLYPHU+b3aUMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCikwCFvUpuE6pfvof1rCRf2+6UF5+VsEv67KzVrH/6+LERr1CKoVWJ lgTJ3nv8xPTtOkvQrkCLwmdHTOHLaa2DfkI8FhKWCgXBaRcquVD0mO3tqRGJGmM/ QPbS4X9G5UYrio6Ao+3TkvqrUg6mvisSBdwU2hkEz9GomCgHfToZjUNtunuTCbNn usrE/pY0mizKMxk+9adShn8UiYLO6mYJH9WxxB+tVyI5XS4S58LE6esPMXApYis8 18edl9mvn1Y+cw3LJ+VUiCEJ3Ts5nc3QK4YVhbvOQhlky3Rpcftii9shvuxF8mRM NN6eqyNKXKrAds4qCy8++8myGa28EuKK -----END CERTIFICATE-----Generated at Thu Jul 3 01:25:39 2025 by rpki-client