$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: 20ugmCut9GhnYbuEzBcdxLtwxh16La0E9Ea7eZh8AHM= Subject key identifier: 35:01:66:2E:4D:5A:83:A2:4F:30:E6:1F:51:91:04:E5:C1:6C:AA:35 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 071D Signing time: Sun 06 Jul 2025 21:57:09 +0000 Manifest this update: Sun 06 Jul 2025 21:57:08 +0000 Manifest next update: Sun 13 Jul 2025 21:57:08 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: yVRBBWV1JlRMN9R3DN8UUeM7gPJ0B2hPH5p8g+Jj+yI=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: Ze9P8zUvpUUuNDb2f6jUuTz0IuEk5HXo9HL8O2n8v1w=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: cENNW/nbgAC9wITEnAsu2/v6Nt+Sg/6ucMETk/SBbPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: Jul 6 21:57:08 2025 GMT Not After : Jul 13 21:57:08 2025 GMT Subject: CN=686af134-2fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:bc:49:16:11:91:c1:6a:06:4f:23:8e:0c: 61:eb:cf:da:90:6b:1e:d6:e1:a3:c9:15:5d:a8:d5: 50:6d:4e:ee:46:9c:47:a7:73:26:a2:f7:06:32:83: 51:80:f7:98:4f:4b:a8:78:8e:2e:dc:33:98:db:c1: 79:05:34:60:41:26:b8:94:43:9d:b0:82:9b:21:ed: e0:09:b9:f8:7c:3c:f7:86:cc:78:7d:20:f7:f6:9f: d1:c3:83:db:0d:48:f7:31:34:fe:68:95:f7:1d:2b: 42:a4:7a:97:b2:3f:8d:08:1e:97:b0:9f:e4:bf:74: 5f:56:89:a3:df:5a:c9:27:1b:ac:44:66:f7:a5:49: b7:f8:42:6d:04:5a:ae:db:fd:18:7e:ba:c8:eb:69: fd:dd:38:99:ed:1f:29:cb:53:24:6e:9e:23:7f:91: ca:bc:02:bf:df:1d:5a:54:38:de:58:8a:4b:91:5f: 96:0a:e5:12:0d:17:b5:4b:94:39:83:22:3f:27:cc: 2a:48:3c:61:31:f6:cc:5d:d3:aa:62:39:1d:f0:d0: 75:f7:f5:ae:d6:9e:c6:ab:f0:67:5e:1f:ce:c6:a8: 9e:a6:1f:db:42:e9:ac:6e:bd:38:b4:33:e9:37:a1: 58:50:2a:52:8b:0e:e8:89:2c:73:6f:2b:79:bd:c2: 37:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:01:66:2E:4D:5A:83:A2:4F:30:E6:1F:51:91:04:E5:C1:6C:AA:35 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:8d:72:16:a6:6d:fc:54:e8:0c:ed:52:be:12:44:c6:79:51: cb:5d:ee:53:9e:e7:74:fa:45:b3:b9:72:cb:30:d9:e7:39:1a: 95:84:4d:82:ab:f4:c3:4d:23:89:3d:bf:ee:9f:11:75:c3:3a: e0:47:44:44:20:27:be:21:dd:d0:ba:cc:39:0f:58:17:0f:31: 65:bb:64:29:62:4d:ea:db:4b:32:12:47:a3:5e:10:84:01:a1: dc:a7:f2:09:da:12:54:73:4f:12:79:4a:cb:d1:1c:a3:67:cb: b1:c5:4b:2a:f0:e3:b6:e8:40:1e:4c:66:a5:b4:5e:0d:ec:b2: 9a:fc:1d:15:20:da:9e:01:cb:29:14:50:b3:fd:ab:d3:1b:3f: fb:bf:8b:a9:6b:ea:54:27:f8:e1:d0:ca:80:51:59:29:b9:0b: 70:87:1d:ee:ee:d5:a2:97:68:ff:3a:82:ee:43:2b:1c:e8:e2: cf:5b:2e:e2:f7:e8:7b:1b:2f:12:55:2a:3b:bb:a2:13:d5:fd: c3:3a:8f:33:9c:0e:a4:f4:de:31:3f:6e:ed:c3:be:42:43:d7: cf:84:1f:07:8e:7d:f7:75:19:f0:66:be:c4:42:72:e1:5f:53: 18:82:59:d9:05:c1:7b:08:aa:03:32:5c:a4:d7:45:5a:95:a1: e9:3f:d9:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjUwNzA2MjE1NzA4WhcNMjUwNzEzMjE1NzA4WjAYMRYwFAYD VQQDEw02ODZhZjEzNC0yZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYe8SRYRkcFqBk8jjgxh68/akGse1uGjyRVdqNVQbU7uRpxHp3MmovcGMoNR gPeYT0uoeI4u3DOY28F5BTRgQSa4lEOdsIKbIe3gCbn4fDz3hsx4fSD39p/Rw4Pb DUj3MTT+aJX3HStCpHqXsj+NCB6XsJ/kv3RfVomj31rJJxusRGb3pUm3+EJtBFqu 2/0YfrrI62n93TiZ7R8py1Mkbp4jf5HKvAK/3x1aVDjeWIpLkV+WCuUSDRe1S5Q5 gyI/J8wqSDxhMfbMXdOqYjkd8NB19/Wu1p7Gq/BnXh/Oxqieph/bQumsbr04tDPp N6FYUCpSiw7oiSxzbyt5vcI3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUBZi5N WoOiTzDmH1GRBOXBbKo1MB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5jXIWpm38VOgM7VK+EkTGeVHLXe5Tnud0+kWzuXLLMNnnORqVhE2C q/TDTSOJPb/unxF1wzrgR0REICe+Id3Qusw5D1gXDzFlu2QpYk3q20syEkejXhCE AaHcp/IJ2hJUc08SeUrL0RyjZ8uxxUsq8OO26EAeTGaltF4N7LKa/B0VINqeAcsp FFCz/avTGz/7v4upa+pUJ/jh0MqAUVkpuQtwhx3u7tWil2j/OoLuQysc6OLPWy7i 9+h7Gy8SVSo7u6IT1f3DOo8znA6k9N4xP27tw75CQ9fPhB8Hjn33dRnwZr7EQnLh X1MYglnZBcF7CKoDMlyk10ValaHpP9m9 -----END CERTIFICATE-----Generated at Mon Jul 7 03:36:12 2025 by rpki-client