$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: JyJKWSKC94DMbnkO+FkksI4ACKxW4rVN0fTYV994NxA= Subject key identifier: 61:2E:09:48:7A:82:DC:43:88:6A:BB:DF:7B:29:E3:A5:14:F0:AB:88 Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0AE8 Signing time: Wed 02 Jul 2025 19:37:31 +0000 Manifest this update: Wed 02 Jul 2025 19:37:30 +0000 Manifest next update: Wed 09 Jul 2025 19:37:30 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: qf527UUDqPTOZFuY8kzHDRVx6DHSUtWsRtFpGFirxxM=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2802 (0xaf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Jul 2 19:37:30 2025 GMT Not After : Jul 9 19:37:30 2025 GMT Subject: CN=68658a7a-fe6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:42:ae:a8:ff:a0:3b:1c:d2:50:cd:c5:52: 41:ee:c4:42:cd:8f:7e:83:e7:11:9e:9e:2f:85:5f: 14:11:a4:2a:88:49:a5:16:8d:a7:04:7a:e2:8d:1b: 3b:68:73:d7:d9:c4:82:0b:ec:1e:8e:f2:b0:92:11: 45:0b:3c:06:2e:86:28:65:16:85:67:67:37:59:4c: 07:91:2e:f1:b7:86:30:c8:86:bf:a8:1a:63:73:21: bf:92:e1:20:94:00:97:04:25:0e:da:be:21:0d:99: c8:4d:33:8c:bd:fd:1e:5c:33:a3:5b:69:4b:a0:63: 40:2e:cd:d2:13:92:69:10:fb:ae:93:a0:83:c4:34: d9:55:c3:7a:03:39:1b:ef:61:ef:b1:c9:eb:a1:43: c9:12:dd:6c:d8:b2:75:63:5a:90:19:01:85:f7:0f: 41:41:97:ab:fd:d8:0e:08:87:04:7d:51:a4:df:57: a8:bf:24:91:b7:56:7d:a2:8f:84:30:5d:77:e5:29: 51:d6:cd:c5:93:37:dd:83:48:b8:c7:00:4d:1f:e0: 60:1b:00:68:eb:e4:49:0e:3d:7c:7c:74:1c:00:a4: 8d:0e:3b:bd:6c:34:d2:b8:b4:ff:f4:06:66:ec:18: e2:69:be:d0:7b:c8:69:c9:36:97:b9:d3:a4:97:b7: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2E:09:48:7A:82:DC:43:88:6A:BB:DF:7B:29:E3:A5:14:F0:AB:88 X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:fd:66:a4:eb:88:59:b8:b6:c0:2d:a7:c2:da:46:38:bb:ee: 30:c2:1a:30:2e:d6:64:44:af:d4:00:16:12:83:fd:60:4e:8a: cd:9a:23:50:cf:22:0d:3b:b2:23:b1:41:cf:44:0b:f7:d0:d4: a1:68:33:31:0e:8e:0a:5a:d2:50:ec:0c:0d:ed:3b:1c:49:de: cd:c9:97:ce:62:0f:47:24:02:82:a4:c0:82:2c:50:97:fd:e1: d9:79:34:e6:e9:c8:01:bc:34:5c:36:a6:c1:ae:c2:97:7b:73: 78:19:52:e7:d9:3c:f5:ac:fa:a0:c1:c8:ca:a4:e6:10:91:dc: 91:d5:58:2e:a8:e9:5a:64:14:ea:66:c5:16:bf:01:d3:e0:c3: 36:f1:0d:81:1b:6b:87:e1:f9:6a:65:29:a8:01:9e:fe:f5:e7: 32:34:7b:ba:de:f6:26:c5:4f:90:ab:4b:28:3f:06:60:1c:b9: fd:aa:32:66:35:e4:65:12:c5:0a:5e:86:02:6b:72:86:39:e1: e4:ca:0f:c8:52:f4:fc:24:da:aa:6f:69:2f:39:f7:46:21:80: 33:95:b3:85:ee:45:16:81:87:d0:de:db:1b:cc:f9:e6:62:a2: c3:be:08:f3:7f:09:ab:ef:83:3e:92:a3:46:35:87:19:e5:8b: 3a:46:3c:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUwNzAyMTkzNzMwWhcNMjUwNzA5MTkzNzMwWjAYMRYwFAYD VQQDEw02ODY1OGE3YS1mZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+FCrqj/oDsc0lDNxVJB7sRCzY9+g+cRnp4vhV8UEaQqiEmlFo2nBHrijRs7 aHPX2cSCC+wejvKwkhFFCzwGLoYoZRaFZ2c3WUwHkS7xt4YwyIa/qBpjcyG/kuEg lACXBCUO2r4hDZnITTOMvf0eXDOjW2lLoGNALs3SE5JpEPuuk6CDxDTZVcN6Azkb 72HvscnroUPJEt1s2LJ1Y1qQGQGF9w9BQZer/dgOCIcEfVGk31eovySRt1Z9oo+E MF135SlR1s3Fkzfdg0i4xwBNH+BgGwBo6+RJDj18fHQcAKSNDju9bDTSuLT/9AZm 7Bjiab7Qe8hpyTaXudOkl7cc+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEuCUh6 gtxDiGq733sp46UU8KuIMB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp/Wak64hZuLbALafC2kY4u+4wwhowLtZkRK/UABYSg/1gTorNmiNQ zyINO7IjsUHPRAv30NShaDMxDo4KWtJQ7AwN7TscSd7NyZfOYg9HJAKCpMCCLFCX /eHZeTTm6cgBvDRcNqbBrsKXe3N4GVLn2Tz1rPqgwcjKpOYQkdyR1VguqOlaZBTq ZsUWvwHT4MM28Q2BG2uH4flqZSmoAZ7+9ecyNHu63vYmxU+Qq0soPwZgHLn9qjJm NeRlEsUKXoYCa3KGOeHkyg/IUvT8JNqqb2kvOfdGIYAzlbOF7kUWgYfQ3tsbzPnm YqLDvgjzfwmr74M+kqNGNYcZ5Ys6Rjyw -----END CERTIFICATE-----Generated at Fri Jul 4 15:54:12 2025 by rpki-client