$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft File: Wlb4n1CBKoEP8t6EVHDxCSckoas.mft (raw, json) Hash identifier: nCmB1FUMSvhotyB19pXIJRHv0tmBZkvYYAVLwrt4c+8= Subject key identifier: 77:A6:34:90:39:1F:8F:D0:9E:97:AE:7E:FA:69:AF:D7:86:3A:75:73 Authority key identifier: 5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB Certificate issuer: /CN=A9193235/serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft Manifest number: 076C Signing time: Mon 30 Jun 2025 23:07:11 +0000 Manifest this update: Mon 30 Jun 2025 23:07:11 +0000 Manifest next update: Mon 07 Jul 2025 23:07:11 +0000 Files and hashes: 1: Wlb4n1CBKoEP8t6EVHDxCSckoas.crl (hash: KO3t2LXB2mAidaXASRTookUE7b5n44rv5AQLQA9bSJg=) 2: 105A1F50778211EE997FD552C4F9AE02.roa (hash: aQsHMdafTipMWqWSV46rK02/G7PlIH4QrZ4xAvLOfVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193235, serialNumber=5A56F89F50812A810FF2DE845470F1092724A1AB Validity Not Before: Jun 30 23:07:11 2025 GMT Not After : Jul 7 23:07:11 2025 GMT Subject: CN=6863189f-f4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:35:72:9c:10:04:fa:b0:05:f4:d2:df:17: eb:af:89:64:a5:47:34:a3:07:37:55:a0:a9:3e:22: fb:51:7f:9c:d6:b5:8e:ce:bb:7f:b0:6c:d0:2c:f6: bf:59:f1:d9:1f:4a:4a:3b:49:9f:68:7e:5c:2c:50: 4e:45:9c:7c:3b:50:a2:78:57:e0:68:75:d2:d7:10: 99:0a:4f:83:9d:b1:0d:2f:a3:de:5e:81:f5:70:88: 07:98:af:38:1f:6d:b4:2f:bb:c5:1c:ff:17:3e:f1: e9:20:39:3e:95:30:bc:15:26:34:51:f1:aa:51:31: ba:96:88:bd:49:20:42:ac:d2:55:24:b8:f2:e2:0b: 30:64:0e:2c:f5:58:66:79:d4:12:b4:d2:70:b8:61: 71:11:f8:3d:0a:62:c4:57:24:ea:c0:78:f8:36:92: 1f:51:ec:ed:44:43:0b:54:16:04:d3:9b:c3:23:f2: d3:29:78:57:f1:8b:f3:37:bd:b1:29:14:18:1e:7d: 87:e7:0c:7d:8a:37:1f:84:bc:d5:64:d4:fb:08:10: 3d:0a:c2:6c:c8:3e:b5:72:ed:b6:7d:ba:90:e6:a9: 41:e7:70:57:ba:67:7a:98:4c:38:23:87:a1:51:05: ab:f1:07:c3:1b:58:27:f4:e9:4c:99:ad:24:ba:ec: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A6:34:90:39:1F:8F:D0:9E:97:AE:7E:FA:69:AF:D7:86:3A:75:73 X509v3 Authority Key Identifier: keyid:5A:56:F8:9F:50:81:2A:81:0F:F2:DE:84:54:70:F1:09:27:24:A1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wlb4n1CBKoEP8t6EVHDxCSckoas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/Wlb4n1CBKoEP8t6EVHDxCSckoas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:36:78:99:c7:08:ca:06:73:c1:06:0f:fc:ae:9f:8f:0b:6e: f2:96:25:fd:a0:15:12:f7:ab:96:e0:b3:31:a5:6b:f4:ef:ff: 34:2e:ae:e8:3d:d6:4e:25:b5:92:6f:e3:f1:66:8e:af:6f:b3: 2b:af:27:71:64:cd:93:0f:83:5e:48:9a:86:de:00:f2:c1:5e: c0:c7:f8:04:e0:9f:d4:b4:32:e4:f5:84:94:e5:77:e5:9b:d3: 8f:80:58:37:50:bd:34:25:62:df:6d:ee:7a:0b:23:86:11:cc: 9b:3e:f5:44:70:1e:b7:08:fb:58:f4:c0:0c:a3:bf:07:ad:3a: 44:65:ba:2f:42:af:b6:55:c7:e0:c8:e5:3b:27:ce:6f:44:04: 71:0d:62:bd:8d:50:51:96:44:71:b8:4d:b8:aa:87:bb:ae:a5: fc:cf:d7:dd:8a:86:ae:ef:b3:c9:d2:67:b0:c4:d6:62:28:03: 78:52:06:19:8d:6a:ad:62:b0:a9:2c:1c:25:ee:f0:e9:7f:68: 3c:76:42:06:21:eb:a1:c3:d3:5b:16:19:97:bf:f5:f9:b0:cb: 6c:7f:c4:ee:86:6e:e2:e7:92:07:5a:63:9b:15:3b:66:5b:4d: 7f:e1:ab:90:3b:c2:fb:97:87:66:d9:42:9f:77:5f:f2:06:9c: ce:13:8f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMyMzUxMTAvBgNVBAUTKDVBNTZGODlGNTA4MTJBODEwRkYyREU4NDU0NzBGMTA5 MjcyNEExQUIwHhcNMjUwNjMwMjMwNzExWhcNMjUwNzA3MjMwNzExWjAYMRYwFAYD VQQDEw02ODYzMTg5Zi1mNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupo1cpwQBPqwBfTS3xfrr4lkpUc0owc3VaCpPiL7UX+c1rWOzrt/sGzQLPa/ WfHZH0pKO0mfaH5cLFBORZx8O1CieFfgaHXS1xCZCk+DnbENL6PeXoH1cIgHmK84 H220L7vFHP8XPvHpIDk+lTC8FSY0UfGqUTG6loi9SSBCrNJVJLjy4gswZA4s9Vhm edQStNJwuGFxEfg9CmLEVyTqwHj4NpIfUeztREMLVBYE05vDI/LTKXhX8YvzN72x KRQYHn2H5wx9ijcfhLzVZNT7CBA9CsJsyD61cu22fbqQ5qlB53BXumd6mEw4I4eh UQWr8QfDG1gn9OlMma0kuuwMTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHemNJA5 H4/Qnpeufvppr9eGOnVzMB8GA1UdIwQYMBaAFFpW+J9QgSqBD/LehFRw8QknJKGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzIzNS9BNEZDM0I1QTlG QTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktvRVA4dDZFVkhEeENTY2tv YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsYjRuMUNCS29FUDh0NkVWSER4Q1Nja29hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzIzNS9BNEZDM0I1QTlGQTAxMUVCODA0MkQ1MzdDNEY5QUUwMi9XbGI0bjFDQktv RVA4dDZFVkhEeENTY2tvYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyNniZxwjKBnPBBg/8rp+PC27yliX9oBUS96uW4LMxpWv07/80Lq7o PdZOJbWSb+PxZo6vb7MrrydxZM2TD4NeSJqG3gDywV7Ax/gE4J/UtDLk9YSU5Xfl m9OPgFg3UL00JWLfbe56CyOGEcybPvVEcB63CPtY9MAMo78HrTpEZbovQq+2Vcfg yOU7J85vRARxDWK9jVBRlkRxuE24qoe7rqX8z9fdioau77PJ0mewxNZiKAN4UgYZ jWqtYrCpLBwl7vDpf2g8dkIGIeuhw9NbFhmXv/X5sMtsf8Tuhm7i55IHWmObFTtm W01/4auQO8L7l4dm2UKfd1/yBpzOE4+u -----END CERTIFICATE-----Generated at Wed Jul 2 07:35:10 2025 by rpki-client