$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: aTk285PM81Pp3AvGHoCx8ZW6ItcH59sd806oM6hTgt4= Subject key identifier: F5:90:8B:63:CB:CA:F8:DC:A8:11:64:0B:27:D4:1D:95:07:62:23:11 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 69 Signing time: Tue 15 Jul 2025 07:14:23 +0000 Manifest this update: Tue 15 Jul 2025 07:14:22 +0000 Manifest next update: Tue 22 Jul 2025 07:14:22 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: RMyg9OFl9OdrnTTGIeVxQqShd6bFFr4YDhC42EgxJws=) 2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Jul 15 07:14:22 2025 GMT Not After : Jul 22 07:14:22 2025 GMT Subject: CN=6875ffcf-f081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:20:a7:37:fd:5e:67:bb:06:cf:c0:91:b4: ea:0a:dd:10:24:9e:7a:04:4b:d2:27:46:20:81:5d: 2b:d7:76:1e:55:48:df:67:e9:ea:d1:ac:92:5c:dd: fd:70:19:68:ba:87:85:e9:22:b0:81:a3:9c:80:fd: b1:8f:38:62:56:db:e8:8e:1e:4a:7a:36:b3:1d:fa: 85:64:5e:4b:b0:9d:a0:b2:6f:48:d2:c7:7d:1d:45: 32:ba:fc:e6:d3:c8:a3:81:ae:cb:db:70:78:31:00: 0c:25:88:f7:37:2d:1a:b6:f6:fd:78:ef:13:bb:63: ad:16:97:d8:9c:a4:db:56:0f:e8:e7:2e:bd:46:4f: bc:4c:ff:d6:9d:09:c8:2e:c9:15:cb:b8:92:ac:23: db:bf:f5:11:a2:5e:e1:c8:0a:ea:fc:d5:86:aa:46: a5:9e:5d:f5:47:89:01:85:73:3a:3c:bc:a7:8f:87: bc:3c:47:7e:da:2b:7c:9d:59:7c:c8:03:45:87:ac: 41:5d:84:11:b0:44:3d:f6:5b:e4:43:8f:c1:76:a6: b8:50:b8:41:45:e4:5a:99:66:12:86:d5:14:12:55: 7e:68:cf:b1:fc:70:cf:24:34:c4:5d:6d:e0:2b:7d: 84:a5:12:e5:09:62:35:fc:f0:ab:64:45:13:2e:df: 8f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:8B:63:CB:CA:F8:DC:A8:11:64:0B:27:D4:1D:95:07:62:23:11 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:af:73:44:50:0c:f3:fa:f0:45:1b:47:31:ae:5e:f7:71:ec: be:95:25:81:8f:71:2e:07:27:7b:ba:1d:11:28:ab:e2:68:51: 74:4d:5d:3e:a0:28:e6:97:44:2c:7e:23:00:98:6e:17:50:c1: 4f:9b:70:a1:09:23:c1:93:b5:1f:c9:bf:82:8f:dd:11:8c:98: f0:39:3e:1d:92:48:e6:06:76:da:11:76:99:3c:1f:c9:e1:b7: c5:1e:98:59:9e:a1:41:31:c4:24:06:aa:c4:df:b5:28:68:8a: 4d:c5:f2:34:b1:48:a2:47:00:fa:1b:72:2c:bf:42:0b:9a:54: 25:46:cd:ee:e6:9a:92:f5:dd:fb:8a:04:1c:f9:46:88:56:33: 2a:0e:0c:79:30:f0:a6:ca:8e:aa:ea:1e:51:31:9a:26:04:19: d1:2d:e4:ab:21:4d:3b:c6:6a:2f:e0:a2:d5:6c:7c:6b:5c:0c: 1e:3c:eb:97:ce:21:54:95:44:f6:8b:7a:b4:0a:02:a9:46:d3: 64:7e:a7:61:01:cc:44:59:d4:c8:96:74:6d:7b:a6:af:55:da: e2:d0:a1:77:05:e0:e3:90:65:a4:52:70:9f:01:40:2f:10:4b: 67:ac:45:40:2b:cf:0b:79:dd:54:eb:7f:22:8b:0c:5a:95:f5: 48:29:df:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTA3MTUwNzE0MjJaFw0yNTA3MjIwNzE0MjJaMBgxFjAUBgNV BAMTDTY4NzVmZmNmLWYwODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH7yCnN/1eZ7sGz8CRtOoK3RAknnoES9InRiCBXSvXdh5VSN9n6erRrJJc3f1w GWi6h4XpIrCBo5yA/bGPOGJW2+iOHkp6NrMd+oVkXkuwnaCyb0jSx30dRTK6/ObT yKOBrsvbcHgxAAwliPc3LRq29v147xO7Y60Wl9icpNtWD+jnLr1GT7xM/9adCcgu yRXLuJKsI9u/9RGiXuHICur81YaqRqWeXfVHiQGFczo8vKePh7w8R37aK3ydWXzI A0WHrEFdhBGwRD32W+RDj8F2prhQuEFF5FqZZhKG1RQSVX5oz7H8cM8kNMRdbeAr fYSlEuUJYjX88KtkRRMu34+vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9ZCLY8vK +NyoEWQLJ9QdlQdiIxEwHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5L0ZGN0M1RkRDQzBEQjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0pl RDR4ZHgySzEteXpEY082SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMKvc0RQDPP68EUbRzGuXvdx7L6VJYGPcS4HJ3u6HREoq+JoUXRNXT6g KOaXRCx+IwCYbhdQwU+bcKEJI8GTtR/Jv4KP3RGMmPA5Ph2SSOYGdtoRdpk8H8nh t8UemFmeoUExxCQGqsTftShoik3F8jSxSKJHAPobciy/QguaVCVGze7mmpL13fuK BBz5RohWMyoODHkw8KbKjqrqHlExmiYEGdEt5KshTTvGai/gotVsfGtcDB4865fO IVSVRPaLerQKAqlG02R+p2EBzERZ1MiWdG17pq9V2uLQoXcF4OOQZaRScJ8BQC8Q S2esRUArzwt53VTrfyKLDFqV9Ugp3zg= -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:46 2025 by rpki-client