$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft File: wFrpU0_TnWSMKEQ8SNURu6moyv4.mft (raw, json) Hash identifier: 2twZKt2d7RAu/qkw/u1l23BMrv1uxEwi0gJ0X+RGhV8= Subject key identifier: B2:3F:A5:FD:05:8F:4C:1C:1F:00:01:53:E8:5A:FE:E6:3A:08:E0:06 Authority key identifier: C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE Certificate issuer: /CN=A917C11F/serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft Manifest number: 0620 Signing time: Fri 22 Aug 2025 22:57:09 +0000 Manifest this update: Fri 22 Aug 2025 22:57:08 +0000 Manifest next update: Fri 29 Aug 2025 22:57:08 +0000 Files and hashes: 1: wFrpU0_TnWSMKEQ8SNURu6moyv4.crl (hash: 6mSzVDMNMp2cxKghde7So/OltkqP6yx2GKsqD313YIg=) 2: 2E7B4D90ACD411EBA8C2F944C4F9AE02.roa (hash: MwOY3BipT7r/AeBZi7pm11RmpGFzpmYVKaT5s//Pc50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11F, serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Validity Not Before: Aug 22 22:57:08 2025 GMT Not After : Aug 29 22:57:08 2025 GMT Subject: CN=68a8f5c5-af00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ba:c7:01:c5:ad:10:26:43:9d:9d:36:15:88: 3c:95:ac:b2:bb:c4:3b:43:d4:69:47:97:da:01:08: d2:9d:82:41:0f:7d:6b:6f:01:17:06:72:36:fb:ec: 68:f6:8b:15:26:2d:1f:43:e8:35:ff:74:ef:79:32: f2:93:07:3d:2d:74:5e:90:d9:4f:c4:d7:4b:78:9e: 00:5b:44:5a:54:ef:24:45:53:b2:ff:81:15:38:6f: 62:e4:ba:a2:ba:f7:5a:01:9c:b8:15:1c:ee:41:2f: a9:ca:be:d3:a9:b8:d5:9e:80:7f:ac:cf:74:2f:2b: fe:7b:66:07:77:de:c6:a9:a8:fb:67:f3:34:aa:79: f5:69:a1:62:a3:e1:6f:a9:8f:db:9e:e4:bf:a4:1c: 66:13:e0:3a:fb:9a:53:9a:07:2a:4f:43:ba:f2:8e: ad:d2:0a:41:c2:df:af:1d:fc:50:a0:a3:12:58:0c: b0:fc:62:28:90:df:43:4d:77:19:06:79:ef:ee:48: 54:62:1c:ca:61:f4:11:41:ea:cd:b2:11:5d:e4:7c: e5:51:5f:ae:c9:d0:ab:4e:a4:cb:7c:3e:b5:b6:6f: 0f:0a:ec:8a:dc:f0:c6:3a:dc:99:8e:a2:4f:63:8e: 5d:ef:ab:b5:58:80:a1:cc:ab:de:b6:b2:8f:32:e8: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3F:A5:FD:05:8F:4C:1C:1F:00:01:53:E8:5A:FE:E6:3A:08:E0:06 X509v3 Authority Key Identifier: keyid:C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:20:1d:1b:3a:b7:74:a4:69:38:04:ee:9f:b5:0b:09:86:62: 1e:fc:b4:cf:03:6e:8b:79:3b:ac:ac:3f:4b:cf:6c:3c:0c:48: 02:e7:d8:84:44:aa:37:29:05:30:03:31:0a:c8:6e:e5:6d:25: 55:7e:6b:c8:c8:56:ab:99:e2:21:3c:c3:4d:0c:0b:52:2f:0c: 72:46:61:62:82:91:fa:b7:56:02:9e:98:dd:49:cf:86:72:16: 15:2a:4d:4c:3a:87:94:f4:f7:7c:e1:6d:2c:98:48:ab:f9:fa: 61:e7:af:e9:de:09:13:dd:5d:4e:fb:bc:04:d6:f8:a7:c7:86: bb:13:7b:8e:36:d8:b8:b4:d7:1c:4d:39:25:b2:8f:ea:04:a0: c9:a9:6a:59:e1:46:89:a0:eb:43:34:97:99:3d:8e:5a:ef:64: b5:0f:bb:8f:92:1d:92:98:f9:4d:25:92:47:1c:df:e9:bf:0d: b1:a9:53:49:37:33:3b:fb:a1:48:67:38:66:55:b4:a9:f2:77: 02:43:7d:7c:d2:e5:e3:32:b6:00:a2:75:45:fe:78:01:8b:6b: 28:be:b9:ba:57:e7:e3:b2:8c:79:7b:ce:b1:04:26:f5:3f:c6: 55:0b:1e:8a:58:ea:a4:b4:0f:8d:b7:e3:7d:3a:38:9f:c5:89: 87:30:d8:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUYxMTAvBgNVBAUTKEMwNUFFOTUzNEZEMzlENjQ4QzI4NDQzQzQ4RDUxMUJC QTlBOENBRkUwHhcNMjUwODIyMjI1NzA4WhcNMjUwODI5MjI1NzA4WjAYMRYwFAYD VQQDEw02OGE4ZjVjNS1hZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LrHAcWtECZDnZ02FYg8layyu8Q7Q9RpR5faAQjSnYJBD31rbwEXBnI2++xo 9osVJi0fQ+g1/3TveTLykwc9LXRekNlPxNdLeJ4AW0RaVO8kRVOy/4EVOG9i5Lqi uvdaAZy4FRzuQS+pyr7TqbjVnoB/rM90Lyv+e2YHd97Gqaj7Z/M0qnn1aaFio+Fv qY/bnuS/pBxmE+A6+5pTmgcqT0O68o6t0gpBwt+vHfxQoKMSWAyw/GIokN9DTXcZ Bnnv7khUYhzKYfQRQerNshFd5HzlUV+uydCrTqTLfD61tm8PCuyK3PDGOtyZjqJP Y45d76u1WIChzKvetrKPMujvAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI/pf0F j0wcHwABU+ha/uY6COAGMB8GA1UdIwQYMBaAFMBa6VNP051kjChEPEjVEbupqMr+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExRi85RTg4QUUxOEFD RDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5XU01LRVE4U05VUnU2bW95 djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGcnBVMF9UbldTTUtFUThTTlVSdTZtb3l2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExRi85RTg4QUUxOEFDRDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5X U01LRVE4U05VUnU2bW95djQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxIB0bOrd0pGk4BO6ftQsJhmIe/LTPA26LeTusrD9Lz2w8DEgC59iE RKo3KQUwAzEKyG7lbSVVfmvIyFarmeIhPMNNDAtSLwxyRmFigpH6t1YCnpjdSc+G chYVKk1MOoeU9Pd84W0smEir+fph56/p3gkT3V1O+7wE1vinx4a7E3uONti4tNcc TTklso/qBKDJqWpZ4UaJoOtDNJeZPY5a72S1D7uPkh2SmPlNJZJHHN/pvw2xqVNJ NzM7+6FIZzhmVbSp8ncCQ3180uXjMrYAonVF/ngBi2sovrm6V+fjsox5e86xBCb1 P8ZVCx6KWOqktA+Nt+N9OjifxYmHMNiV -----END CERTIFICATE-----Generated at Sat Aug 23 20:42:22 2025 by rpki-client