$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: tVYLSNkMTycvXi3cOvryzVl/AHemVZSB3i1j2N/oH/k= Subject key identifier: BB:0B:6C:9F:66:27:5D:63:BD:92:DD:8D:4A:7A:1A:8F:B0:C7:41:74 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: F5 Signing time: Thu 03 Jul 2025 05:37:31 +0000 Manifest this update: Thu 03 Jul 2025 05:37:30 +0000 Manifest next update: Thu 10 Jul 2025 05:37:30 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: eLnoCaAX3gq/grTS1bQXta3wk7NkLQs5mmjaoa9kiX0=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Jul 3 05:37:30 2025 GMT Not After : Jul 10 05:37:30 2025 GMT Subject: CN=6866171a-e07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:d5:51:08:e5:58:57:ab:07:fd:ab:a9:45: 9c:6d:19:ce:49:61:61:23:a5:b0:8b:34:74:2c:15: 86:f5:77:94:de:e2:e8:f8:4c:5f:5a:51:1c:94:34: 3d:98:1d:45:a0:95:e2:b7:bb:ac:14:f1:dd:d9:5b: 91:f0:a5:0e:b8:cb:7b:9d:cd:b6:a3:7e:bc:e2:69: a2:22:30:a1:f3:dc:aa:cc:52:d9:bc:59:c7:9d:4c: 99:6c:63:fd:45:99:8f:c8:d4:ab:54:3f:10:0a:b9: fc:05:f8:be:e6:68:2b:ab:85:67:b5:b9:b0:56:f8: 49:ac:b9:37:67:42:6e:35:8c:48:d4:36:b9:79:58: b7:b5:28:76:e9:29:63:48:f0:58:1e:2b:44:02:95: d5:19:d4:61:8f:41:db:7d:9b:af:c3:51:21:4c:6f: e5:3c:43:8e:75:71:89:7e:5e:ff:57:75:1b:66:f9: 95:05:31:b4:61:75:5b:e7:22:61:c9:8b:fa:60:0b: a6:dd:0b:67:a7:49:33:9f:a1:54:df:64:3d:01:56: 66:46:fc:6a:58:71:74:aa:ad:93:42:2c:db:dd:cc: f8:47:fe:81:58:e6:44:af:97:6c:9e:bc:51:28:d1: b1:bd:fd:dd:95:ff:8d:dd:9a:85:a5:22:0b:46:e2: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0B:6C:9F:66:27:5D:63:BD:92:DD:8D:4A:7A:1A:8F:B0:C7:41:74 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c6:14:e5:3d:45:bf:07:bc:d9:03:28:35:40:f6:45:ff:61: e3:c8:92:29:d0:ad:95:e7:e0:30:66:55:b3:8e:f6:9f:94:bb: b8:3d:c7:09:93:a4:1e:4c:4c:6b:42:c3:d5:f9:f7:82:e6:de: 58:6d:72:c2:5d:a9:5e:9a:fc:aa:01:e7:cb:a2:66:a9:8d:ba: b5:6f:93:44:2c:ec:c0:f0:7e:33:b0:55:c3:5f:e9:91:d1:ae: fa:f9:06:14:fc:d2:8c:b5:7e:16:fb:44:d4:40:a8:25:fc:50: 0f:de:8e:1f:d3:24:63:1d:e2:a3:aa:30:49:7f:02:14:bb:f7: ae:52:50:de:7f:f9:e7:0e:29:93:45:d7:a5:a5:62:3e:7d:16: 2b:98:57:52:10:75:28:fc:7e:c2:72:81:01:5e:2f:8d:55:83: c4:9a:2c:4b:5e:a0:08:b2:8e:d4:90:56:c3:36:72:f6:78:15: c1:77:3d:8d:bf:b3:cd:53:fa:48:70:cf:c1:9f:db:b8:d0:43: 2d:46:b9:45:1d:5e:86:a4:5c:88:a5:62:7b:7a:f0:76:97:36: 41:6e:c5:c0:90:a2:ca:86:46:11:69:06:83:93:b8:ca:2b:24: c6:c9:bd:9d:b0:43:9c:07:8e:19:4c:6f:c6:6b:cc:b5:56:56: b9:5c:3e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwNzAzMDUzNzMwWhcNMjUwNzEwMDUzNzMwWjAYMRYwFAYD VQQDEw02ODY2MTcxYS1lMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnl7VUQjlWFerB/2rqUWcbRnOSWFhI6WwizR0LBWG9XeU3uLo+ExfWlEclDQ9 mB1FoJXit7usFPHd2VuR8KUOuMt7nc22o3684mmiIjCh89yqzFLZvFnHnUyZbGP9 RZmPyNSrVD8QCrn8Bfi+5mgrq4VntbmwVvhJrLk3Z0JuNYxI1Da5eVi3tSh26Slj SPBYHitEApXVGdRhj0HbfZuvw1EhTG/lPEOOdXGJfl7/V3UbZvmVBTG0YXVb5yJh yYv6YAum3Qtnp0kzn6FU32Q9AVZmRvxqWHF0qq2TQizb3cz4R/6BWOZEr5dsnrxR KNGxvf3dlf+N3ZqFpSILRuJz0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsLbJ9m J11jvZLdjUp6Go+wx0F0MB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxhTlPUW/B7zZAyg1QPZF/2HjyJIp0K2V5+AwZlWzjvaflLu4PccJ k6QeTExrQsPV+feC5t5YbXLCXalemvyqAefLomapjbq1b5NELOzA8H4zsFXDX+mR 0a76+QYU/NKMtX4W+0TUQKgl/FAP3o4f0yRjHeKjqjBJfwIUu/euUlDef/nnDimT RdelpWI+fRYrmFdSEHUo/H7CcoEBXi+NVYPEmixLXqAIso7UkFbDNnL2eBXBdz2N v7PNU/pIcM/Bn9u40EMtRrlFHV6GpFyIpWJ7evB2lzZBbsXAkKLKhkYRaQaDk7jK KyTGyb2dsEOcB44ZTG/Ga8y1Vla5XD4a -----END CERTIFICATE-----Generated at Fri Jul 4 11:09:03 2025 by rpki-client