$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft File: Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft (raw, json) Hash identifier: vGr8v8F9nbpdSddST+b7h7hosLfNophFHn9dR+PfRSg= Subject key identifier: C9:4E:E5:5E:A9:94:E9:6C:91:47:8D:A8:32:4E:C3:40:77:90:5A:4D Authority key identifier: 5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94 Certificate issuer: /CN=A9181CB2/serialNumber=5A86FED84155BBE475894ACAC52AA76566944094 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft Manifest number: 25 Signing time: Tue 01 Jul 2025 08:40:34 +0000 Manifest this update: Tue 01 Jul 2025 08:40:34 +0000 Manifest next update: Tue 08 Jul 2025 08:40:34 +0000 Files and hashes: 1: Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl (hash: 5oB4Ujf2PUkpRizZR9OAcKSlQRSWIei9XH1PdmPYnHQ=) 2: 45A63E5E34C911F09E00523CC4F9AE02.roa (hash: UgHJ4HCtUSU7Mhsy3F8cs/81Xi5bIE2mJ11AdKYHzQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181CB2, serialNumber=5A86FED84155BBE475894ACAC52AA76566944094 Validity Not Before: Jul 1 08:40:34 2025 GMT Not After : Jul 8 08:40:34 2025 GMT Subject: CN=68639f02-a016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:77:6b:6b:8a:68:3a:c0:75:df:ff:f0:2f:3f: d7:54:cb:d9:db:4d:be:a2:8f:d8:c6:92:dc:01:02: 53:06:3a:8a:15:42:e0:6f:a2:fe:1a:33:21:62:ac: d0:05:2e:4d:98:28:7a:cc:72:a0:98:c0:88:6c:67: a7:7e:b0:52:56:fb:ed:72:5f:1e:25:65:5d:17:fd: 91:5d:69:1e:c6:c8:f7:0e:57:10:3a:05:d2:84:7a: f8:7e:8c:0f:bb:6f:14:c5:cd:3d:35:25:cd:07:81: 41:94:59:11:61:de:bf:ff:81:21:57:d4:85:49:e5: 57:62:a8:ef:d4:3e:68:e3:ec:fe:2f:05:39:65:a2: 5b:31:04:06:fd:3c:a5:f4:e7:d0:e7:31:67:a3:93: 38:9f:93:d8:fd:aa:1c:dc:45:01:e8:2a:5c:38:ed: 80:9e:c9:31:12:64:18:26:90:bf:8a:2d:00:08:f1: 39:3c:b1:31:9b:ea:c2:b3:d4:92:e2:45:44:36:7a: 28:97:89:0f:8d:70:a3:d4:c0:72:f4:d7:b0:f9:ff: f8:7f:eb:c0:1a:ea:f1:b1:f2:8e:e7:6e:4d:90:dd: 06:f3:f8:f9:d2:5c:6d:4d:f3:84:93:ba:40:37:c9: 94:4a:27:e2:0d:72:1b:63:b0:0e:92:99:14:7c:87: d9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:E5:5E:A9:94:E9:6C:91:47:8D:A8:32:4E:C3:40:77:90:5A:4D X509v3 Authority Key Identifier: keyid:5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:71:f3:43:b2:cc:a3:19:09:3b:e9:da:eb:6c:da:4e:78:9d: dc:ad:32:88:58:45:bb:33:0c:68:69:e8:77:e9:2f:3b:61:a5: 4e:83:07:2f:1f:49:92:7b:d8:a1:c9:83:6e:09:bc:2b:f8:2d: de:fd:9d:8e:c5:22:9e:55:4d:73:81:89:46:6b:11:93:4b:cb: 06:29:7e:d7:b9:fd:86:9a:92:59:85:a9:ac:84:5d:1e:d3:72: 8d:e8:fd:f8:40:1c:3a:34:2c:60:e7:a1:5d:96:60:c7:16:45: a9:48:51:53:33:73:20:56:af:fc:61:d2:f9:c5:a7:47:4b:d9: 33:56:ec:3c:fc:75:b8:02:08:2d:21:f9:78:b8:47:31:fd:79: fc:1e:b8:13:9f:1d:ec:21:2c:20:4d:cb:fb:7d:6b:03:35:37: 84:5c:5d:62:23:48:19:0e:ec:b4:cb:ec:00:09:bb:9e:39:c2: c5:8c:37:b7:e9:ba:15:92:c9:a8:c1:e0:a8:49:10:67:24:af: ac:71:7e:80:cd:4f:19:b0:81:88:12:dd:b2:7e:50:aa:b6:64: 3f:32:e8:49:f7:52:1a:24:a3:2d:a7:9f:a7:b4:ea:ff:fb:06: b4:3f:81:29:59:5b:d0:63:83:cf:67:e5:ef:f7:c1:0c:67:26: 77:49:45:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MUNCMjExMC8GA1UEBRMoNUE4NkZFRDg0MTU1QkJFNDc1ODk0QUNBQzUyQUE3NjU2 Njk0NDA5NDAeFw0yNTA3MDEwODQwMzRaFw0yNTA3MDgwODQwMzRaMBgxFjAUBgNV BAMTDTY4NjM5ZjAyLWEwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYd2trimg6wHXf//AvP9dUy9nbTb6ij9jGktwBAlMGOooVQuBvov4aMyFirNAF Lk2YKHrMcqCYwIhsZ6d+sFJW++1yXx4lZV0X/ZFdaR7GyPcOVxA6BdKEevh+jA+7 bxTFzT01Jc0HgUGUWRFh3r//gSFX1IVJ5VdiqO/UPmjj7P4vBTllolsxBAb9PKX0 59DnMWejkzifk9j9qhzcRQHoKlw47YCeyTESZBgmkL+KLQAI8Tk8sTGb6sKz1JLi RUQ2eiiXiQ+NcKPUwHL017D5//h/68Aa6vGx8o7nbk2Q3Qbz+PnSXG1N84STukA3 yZRKJ+INchtjsA6SmRR8h9mlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyU7lXqmU 6WyRR42oMk7DQHeQWk0wHwYDVR0jBBgwFoAUWob+2EFVu+R1iUrKxSqnZWaUQJQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxQ0IyL0RDOUE3ODFFMjhF MTExRjBBMjMwNDE2OEM0RjlBRTAyL1dvYi0yRUZWdS1SMWlVckt4U3FuWldhVVFK US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV29iLTJFRlZ1LVIxaVVyS3hTcW5aV2FVUUpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx Q0IyL0RDOUE3ODFFMjhFMTExRjBBMjMwNDE2OEM0RjlBRTAyL1dvYi0yRUZWdS1S MWlVckt4U3FuWldhVVFKUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFxx80OyzKMZCTvp2uts2k54ndytMohYRbszDGhp6HfpLzthpU6DBy8f SZJ72KHJg24JvCv4Ld79nY7FIp5VTXOBiUZrEZNLywYpfte5/YaaklmFqayEXR7T co3o/fhAHDo0LGDnoV2WYMcWRalIUVMzcyBWr/xh0vnFp0dL2TNW7Dz8dbgCCC0h +Xi4RzH9efweuBOfHewhLCBNy/t9awM1N4RcXWIjSBkO7LTL7AAJu545wsWMN7fp uhWSyajB4KhJEGckr6xxfoDNTxmwgYgS3bJ+UKq2ZD8y6En3Uhokoy2nn6e06v/7 BrQ/gSlZW9Bjg89n5e/3wQxnJndJRaU= -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:48 2025 by rpki-client