$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: dOmVFtY+VFOXpeGBV4ZtyCnVCkL2f356FzVMpQUpCUE= Subject key identifier: AE:92:BC:32:1B:5B:AD:50:B9:8A:85:9E:48:0A:9E:C8:0A:B9:6C:D8 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 19D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 19CA Signing time: Wed 02 Jul 2025 16:30:28 +0000 Manifest this update: Wed 02 Jul 2025 16:30:28 +0000 Manifest next update: Wed 09 Jul 2025 16:30:28 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: g0C1jmQ8SshHx6VHtLYa6g65F7vdWncrlC/p8T6ZuMU=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6613 (0x19d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Jul 2 16:30:28 2025 GMT Not After : Jul 9 16:30:28 2025 GMT Subject: CN=68655ea4-91cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:82:e3:ba:28:f3:99:b3:ce:f0:45:94:41: 32:d7:c4:22:b5:7e:9c:b9:ba:99:9b:65:c6:7c:56: 93:66:88:98:91:10:cc:e0:76:ca:ab:d5:f3:a3:2a: 96:04:8d:41:a6:b5:47:fb:79:e4:94:e5:d5:a7:32: 04:42:91:26:1a:65:62:3a:84:41:f2:61:88:ef:d0: 72:96:44:84:3e:6b:fc:b7:55:e5:5a:3d:f6:67:89: 47:3b:0b:ce:2a:58:c4:78:6d:78:eb:60:ab:68:95: 66:34:53:dd:29:94:f8:f9:44:ea:70:64:ba:10:89: fd:8f:74:ea:78:0a:20:a7:ba:83:d8:bc:f0:61:b0: 9b:f9:52:a0:aa:e8:e0:3c:72:06:1c:4f:33:03:4b: f3:fc:6e:da:90:f6:8e:17:b2:5c:14:52:88:a3:35: e5:1e:a4:c1:e6:22:4e:0a:1c:f3:63:9a:9b:c2:2f: cc:5f:2d:2f:9f:a5:d3:46:8b:9a:54:bc:b0:b4:a6: f6:fe:b4:82:9a:58:18:ad:2d:79:29:c8:6e:da:32: ac:ba:01:8f:98:45:1e:b6:63:82:12:f1:26:34:89: 27:b6:12:cd:b0:c4:8e:cc:db:1a:48:fe:0f:89:52: 22:74:03:3c:65:8f:c3:72:53:35:2b:9f:99:9c:72: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:92:BC:32:1B:5B:AD:50:B9:8A:85:9E:48:0A:9E:C8:0A:B9:6C:D8 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:43:78:e7:bc:5c:30:5c:20:9e:37:c0:94:98:30:6a:3b:ea: e5:d6:bd:7d:f4:74:84:66:92:98:3b:ba:d9:98:52:5f:2a:fc: e8:8e:9f:fc:c7:42:d7:6b:8e:20:74:6b:43:68:6c:ac:41:df: 53:1c:d9:1c:1b:94:83:df:81:a7:58:cc:e4:36:99:54:fb:82: 60:ed:a5:3f:d7:75:64:35:b4:aa:1e:20:f8:63:8e:f6:bc:91: 88:9c:27:d2:08:56:09:a6:7a:f6:95:e8:55:7d:e7:a6:7d:9b: e7:e3:c2:53:34:08:39:6c:c8:c1:0a:7e:6e:1c:d3:0a:df:df: 82:11:d5:6a:10:a4:65:e4:39:a4:63:21:ae:29:f1:83:b2:53: 2b:be:ab:0c:2e:82:4c:d2:56:94:71:41:15:ed:fb:c1:94:12: 3e:94:6a:c4:0d:ad:d2:91:30:f5:a2:09:69:87:ec:17:34:5a: 0a:6a:93:06:ec:19:55:e9:88:41:5d:00:1d:b4:42:26:79:0e: b4:c7:db:9a:95:1c:b2:b3:f9:85:91:cb:cf:a4:4e:c6:38:40: 8d:84:ff:70:4c:0d:c9:b5:56:1d:ef:42:60:31:d2:c5:9d:7d: 97:de:61:19:d0:92:63:87:04:99:88:83:f5:61:a3:cd:a9:14: 78:47:78:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUwNzAyMTYzMDI4WhcNMjUwNzA5MTYzMDI4WjAYMRYwFAYD VQQDEw02ODY1NWVhNC05MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i6C47oo85mzzvBFlEEy18QitX6cubqZm2XGfFaTZoiYkRDM4HbKq9XzoyqW BI1BprVH+3nklOXVpzIEQpEmGmViOoRB8mGI79BylkSEPmv8t1XlWj32Z4lHOwvO KljEeG1462CraJVmNFPdKZT4+UTqcGS6EIn9j3TqeAogp7qD2LzwYbCb+VKgqujg PHIGHE8zA0vz/G7akPaOF7JcFFKIozXlHqTB5iJOChzzY5qbwi/MXy0vn6XTRoua VLywtKb2/rSCmlgYrS15Kchu2jKsugGPmEUetmOCEvEmNIknthLNsMSOzNsaSP4P iVIidAM8ZY/DclM1K5+ZnHLYWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6SvDIb W61QuYqFnkgKnsgKuWzYMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZQ3jnvFwwXCCeN8CUmDBqO+rl1r199HSEZpKYO7rZmFJfKvzojp/8 x0LXa44gdGtDaGysQd9THNkcG5SD34GnWMzkNplU+4Jg7aU/13VkNbSqHiD4Y472 vJGInCfSCFYJpnr2lehVfeemfZvn48JTNAg5bMjBCn5uHNMK39+CEdVqEKRl5Dmk YyGuKfGDslMrvqsMLoJM0laUcUEV7fvBlBI+lGrEDa3SkTD1oglph+wXNFoKapMG 7BlV6YhBXQAdtEImeQ60x9ualRyys/mFkcvPpE7GOECNhP9wTA3JtVYd70JgMdLF nX2X3mEZ0JJjhwSZiIP1YaPNqRR4R3gZ -----END CERTIFICATE-----Generated at Thu Jul 3 02:23:34 2025 by rpki-client