$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft File: wlVOkccHDswx5jeOpDvPrzyCE8A.mft (raw, json) Hash identifier: vjZdh1TnyNqeKiLuHIQ4MfcglsJzqaUSbYH7pcCAIUU= Subject key identifier: 84:E4:D5:36:1B:FA:EB:6C:FC:D3:55:34:4B:F4:BB:63:50:3D:FA:97 Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 Certificate issuer: /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft Manifest number: 59 Signing time: Thu 03 Jul 2025 07:25:21 +0000 Manifest this update: Thu 03 Jul 2025 07:25:21 +0000 Manifest next update: Thu 10 Jul 2025 07:25:21 +0000 Files and hashes: 1: wlVOkccHDswx5jeOpDvPrzyCE8A.crl (hash: P7k4TZMQgbtEpisdGnbY4SLl0dnmENXEQ13CEENMZis=) 2: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (hash: KHoPbgNVtZT0OwKjaJvVWJ02MeB3Fx2ZKzMa6yBJHMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Validity Not Before: Jul 3 07:25:21 2025 GMT Not After : Jul 10 07:25:21 2025 GMT Subject: CN=68663061-bf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:32:83:58:3e:c8:ff:19:9c:35:4a:60:c6: 61:7f:d9:24:a6:82:dd:24:01:b9:cb:b0:33:84:1c: 70:2d:2b:5a:d6:86:b2:d9:76:8a:c8:4c:1f:aa:cd: a9:7f:cf:cd:30:de:70:21:c5:75:77:0e:72:95:9c: 86:7c:8d:56:d9:9b:d5:62:a8:b6:77:9d:9c:b3:b9: 4c:53:7f:76:e3:56:a2:da:0b:8a:8c:a2:cf:66:2c: d6:4e:07:91:c9:1b:7d:03:89:1e:0a:4d:e0:94:63: e1:6d:10:15:03:b9:97:6b:da:0a:6c:a0:0f:27:86: ba:be:f8:9a:75:61:6c:14:8d:29:5b:9b:82:29:05: 19:bc:40:51:a2:7c:80:f3:05:ba:c7:6d:50:fb:82: 78:0d:54:91:34:b0:bb:3b:65:77:68:f3:32:4d:20: 9a:6b:d2:93:d8:e2:d1:b8:8b:65:fd:be:2f:d9:4b: ed:16:94:ab:71:34:2c:bd:9c:d3:31:37:b5:96:97: 21:f8:3d:54:10:d6:b8:9e:ae:a7:68:77:ef:8b:af: a8:5a:b3:68:98:d8:bd:85:56:58:6b:d0:11:76:b7: 50:fa:36:86:e4:1b:c6:ae:1b:76:51:8a:ff:43:e0: 74:27:6f:ca:8f:bf:29:9e:3c:65:ee:fa:c3:19:83: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E4:D5:36:1B:FA:EB:6C:FC:D3:55:34:4B:F4:BB:63:50:3D:FA:97 X509v3 Authority Key Identifier: keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ce:15:5e:0b:28:a2:51:be:97:e9:17:88:a9:12:52:b0:bf: bf:ca:ae:3a:a1:3c:97:79:67:70:c0:44:e2:8f:de:43:89:af: 4c:63:1b:1f:d1:50:ac:a1:0d:5c:94:58:fe:8a:08:34:54:c5: c3:b8:20:83:98:7a:0b:9a:70:36:35:c7:84:6b:43:31:85:4f: e4:26:41:06:31:2c:dd:2d:94:34:c4:7a:4e:ac:21:8b:c3:26: 68:b7:5b:5c:b8:53:d1:ad:95:47:84:58:ab:cf:c1:a3:87:43: 38:0a:4e:96:6e:36:cc:a4:1a:da:57:3d:49:08:81:1d:56:c0: 2d:f9:9c:2d:4b:8f:7d:6e:fe:70:db:1f:8f:45:86:22:bb:f5: ca:0c:48:d5:06:13:d7:35:60:56:a0:f3:87:ec:13:c5:44:eb: ad:76:02:ad:62:72:ba:2a:9e:3b:f4:93:9b:7f:7c:65:ca:1f: ed:cd:1e:8d:4e:90:24:37:7b:cb:59:f2:70:05:43:ac:30:ea: 39:92:f0:99:8c:fe:4f:fb:32:78:02:d8:7b:47:bb:e5:aa:96: 95:a6:3b:13:1c:bb:89:14:ad:31:49:58:a0:cb:67:ab:11:1e: 92:a8:42:09:ec:09:8d:38:88:3c:e7:b0:bf:a2:e1:5a:a8:04: 8f:45:e0:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoQzI1NTRFOTFDNzA3MEVDQzMxRTYzNzhFQTQzQkNGQUYz QzgyMTNDMDAeFw0yNTA3MDMwNzI1MjFaFw0yNTA3MTAwNzI1MjFaMBgxFjAUBgNV BAMTDTY4NjYzMDYxLWJmOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqdTKDWD7I/xmcNUpgxmF/2SSmgt0kAbnLsDOEHHAtK1rWhrLZdorITB+qzal/ z80w3nAhxXV3DnKVnIZ8jVbZm9ViqLZ3nZyzuUxTf3bjVqLaC4qMos9mLNZOB5HJ G30DiR4KTeCUY+FtEBUDuZdr2gpsoA8nhrq++Jp1YWwUjSlbm4IpBRm8QFGifIDz BbrHbVD7gngNVJE0sLs7ZXdo8zJNIJpr0pPY4tG4i2X9vi/ZS+0WlKtxNCy9nNMx N7WWlyH4PVQQ1rierqdod++Lr6has2iY2L2FVlhr0BF2t1D6NobkG8auG3ZRiv9D 4HQnb8qPvymePGXu+sMZg3VVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhOTVNhv6 62z801U0S/S7Y1A9+pcwHwYDVR0jBBgwFoAUwlVOkccHDswx5jeOpDvPrzyCE8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0FFOTJEQzFDRDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL3dsVk9rY2NIRHN3eDVqZU9wRHZQcnp5Q0U4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2xWT2tjY0hEc3d4NWplT3BEdlByenlDRThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0FFOTJEQzFDRDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL3dsVk9rY2NIRHN3 eDVqZU9wRHZQcnp5Q0U4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPOFV4LKKJRvpfpF4ipElKwv7/KrjqhPJd5Z3DAROKP3kOJr0xjGx/R UKyhDVyUWP6KCDRUxcO4IIOYeguacDY1x4RrQzGFT+QmQQYxLN0tlDTEek6sIYvD Jmi3W1y4U9GtlUeEWKvPwaOHQzgKTpZuNsykGtpXPUkIgR1WwC35nC1Lj31u/nDb H49FhiK79coMSNUGE9c1YFag84fsE8VE6612Aq1icroqnjv0k5t/fGXKH+3NHo1O kCQ3e8tZ8nAFQ6ww6jmS8JmM/k/7MngC2HtHu+WqlpWmOxMcu4kUrTFJWKDLZ6sR HpKoQgnsCY04iDznsL+i4VqoBI9F4Ow= -----END CERTIFICATE-----Generated at Fri Jul 4 00:11:05 2025 by rpki-client