$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json) Hash identifier: AgQcapI1terWHNN4IFnoyjJv8smdexj9LvKBNmAHDNI= Subject key identifier: 5C:B5:F5:8E:62:01:B2:79:AA:98:53:BC:0C:4C:5B:1B:5D:17:37:FA Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 05F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft Manifest number: 05EC Signing time: Wed 02 Jul 2025 23:14:02 +0000 Manifest this update: Wed 02 Jul 2025 23:14:01 +0000 Manifest next update: Wed 09 Jul 2025 23:14:01 +0000 Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: PpXuC9KluZYkm4ZdhbSpizwnBfec7ki7VXatsJjGvqE=) 2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: 3oYf4D2aeCXu56f8mNAcOhJ4M4El8ji8s2gDvwvZjUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: Jul 2 23:14:01 2025 GMT Not After : Jul 9 23:14:01 2025 GMT Subject: CN=6865bd3a-f005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e4:dc:b3:49:a4:ab:bd:24:28:06:b3:9c:a9: d8:c2:49:2e:69:a5:18:3d:8a:87:03:a5:15:df:a5: 61:30:1e:a8:9e:94:cf:52:47:db:6a:6d:a8:f0:1b: eb:9a:15:d8:97:52:f6:d7:fd:87:5b:99:8a:07:af: d5:b6:8a:42:e9:50:f5:3f:5e:17:95:7e:b8:5f:cf: 9b:2f:d1:d5:d9:9b:19:b4:86:ad:0e:1c:ec:ae:31: 1e:68:83:d6:ab:c8:9b:bd:cf:d8:20:57:e8:1b:b6: f5:8f:06:1a:e4:7e:a7:99:c0:24:8f:65:67:01:ef: f7:ef:8a:c4:8d:36:d6:fa:f6:f0:26:d6:ad:1b:06: d4:2f:29:d6:0d:78:7b:91:67:4b:73:9b:5c:6a:3f: 95:f5:cf:38:2d:5d:36:9b:a1:ec:2b:56:75:60:68: db:31:af:8c:98:70:39:be:d9:1f:74:21:5f:8b:05: 8f:b1:b3:8e:ce:6b:f1:c3:4e:08:aa:e1:a6:a7:59: ab:89:73:a6:54:a9:ac:fa:c0:44:86:99:24:8a:70: d9:61:9e:94:96:81:a2:94:4c:e2:05:97:a7:89:8a: 91:fe:c6:5c:ed:7c:08:89:49:d3:f6:fc:c5:dd:55: 62:2c:29:07:be:8e:77:8f:c5:1c:cd:bc:1c:c6:05: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:F5:8E:62:01:B2:79:AA:98:53:BC:0C:4C:5B:1B:5D:17:37:FA X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cc:1a:9d:91:50:77:bc:8e:fd:d1:d4:a8:c6:5e:5b:4b:2d: 59:76:3a:db:ec:dc:b3:7a:e6:d9:13:0f:26:bd:83:49:c4:a3: ed:2c:1b:e9:81:b5:2c:6c:01:82:e3:6a:bd:be:3a:cf:2b:c3: c7:af:12:37:f3:04:c5:3d:72:11:0b:b6:8a:4f:2a:25:9a:61: 2e:f7:aa:f0:ff:3d:51:84:fc:7d:09:10:b8:c5:4e:0c:22:09: 00:f1:da:05:6a:b2:0f:2f:3f:97:cb:86:95:ad:01:bd:d3:e5: 0b:37:a8:f2:88:0e:a8:f8:89:6b:26:4c:dd:4d:2e:eb:6f:e0: 45:18:a7:d6:4d:36:89:82:5f:c3:b3:de:42:35:80:97:6b:18: 04:9c:6b:70:a0:96:a2:8b:f7:1b:8a:2b:eb:14:5b:f8:46:ff: c2:47:0f:13:88:f8:ae:eb:73:0c:21:66:b1:06:73:8a:5d:97: 6d:e4:96:6e:57:ad:5b:2c:ba:08:f3:ea:f2:83:70:db:ec:b4: 7d:86:8a:f8:f7:71:ed:a6:32:77:e4:6f:61:6f:1d:fc:58:62: f5:61:c8:77:af:59:aa:38:9a:49:93:63:2b:45:ea:59:ef:73: f5:0a:da:bf:de:05:be:11:b7:6a:06:65:c3:9b:64:be:a6:f7: 8e:b2:85:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjUwNzAyMjMxNDAxWhcNMjUwNzA5MjMxNDAxWjAYMRYwFAYD VQQDEw02ODY1YmQzYS1mMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+Tcs0mkq70kKAaznKnYwkkuaaUYPYqHA6UV36VhMB6onpTPUkfbam2o8Bvr mhXYl1L21/2HW5mKB6/VtopC6VD1P14XlX64X8+bL9HV2ZsZtIatDhzsrjEeaIPW q8ibvc/YIFfoG7b1jwYa5H6nmcAkj2VnAe/374rEjTbW+vbwJtatGwbULynWDXh7 kWdLc5tcaj+V9c84LV02m6HsK1Z1YGjbMa+MmHA5vtkfdCFfiwWPsbOOzmvxw04I quGmp1mriXOmVKms+sBEhpkkinDZYZ6UloGilEziBZeniYqR/sZc7XwIiUnT9vzF 3VViLCkHvo53j8UczbwcxgUgLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFy19Y5i AbJ5qphTvAxMWxtdFzf6MB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARzBqdkVB3vI790dSoxl5bSy1Zdjrb7NyzeubZEw8mvYNJxKPtLBvp gbUsbAGC42q9vjrPK8PHrxI38wTFPXIRC7aKTyolmmEu96rw/z1RhPx9CRC4xU4M IgkA8doFarIPLz+Xy4aVrQG90+ULN6jyiA6o+IlrJkzdTS7rb+BFGKfWTTaJgl/D s95CNYCXaxgEnGtwoJaii/cbiivrFFv4Rv/CRw8TiPiu63MMIWaxBnOKXZdt5JZu V61bLLoI8+ryg3Db7LR9hor493HtpjJ35G9hbx38WGL1Ych3r1mqOJpJk2MrRepZ 73P1Ctq/3gW+EbdqBmXDm2S+pveOsoVP -----END CERTIFICATE-----Generated at Fri Jul 4 02:54:33 2025 by rpki-client