$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: JcRoy4qIdCnp0J6wISxSVZjEbpLyGTbFLxLD99cBCzk= Subject key identifier: FC:32:A2:90:F5:0A:48:9C:CC:FD:E6:CB:24:FE:9F:F6:30:89:55:27 Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: 01A5 Signing time: Tue 01 Jul 2025 03:41:54 +0000 Manifest this update: Tue 01 Jul 2025 03:41:54 +0000 Manifest next update: Tue 08 Jul 2025 03:41:54 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: ywi05fPXjJMrOxyctFKjp+cAfP51E5ElniGhaDMOwcA=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: Jul 1 03:41:54 2025 GMT Not After : Jul 8 03:41:54 2025 GMT Subject: CN=68635902-3666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:aa:ea:00:e3:ac:40:3e:8f:3b:f6:ea:65:56: f3:1e:30:5c:a0:73:4e:51:62:62:52:ea:f5:6a:9b: 71:f9:c2:d7:97:d8:1c:5b:46:32:29:67:08:87:c8: a0:59:a4:f8:4b:39:f0:56:91:28:c6:90:c7:a8:79: 1c:b4:e1:12:e8:33:28:db:0b:66:7a:3d:c6:e3:97: ce:ad:87:ff:36:ec:3c:80:39:88:64:a4:bc:5b:3e: be:cc:51:44:c0:de:5c:fe:5c:65:0c:b1:29:dd:8e: 50:90:b1:b2:9b:09:70:90:27:d2:2c:8c:c0:23:32: 41:82:d4:49:88:84:9c:3f:eb:a4:d3:fc:13:c8:d7: 87:5b:ff:46:50:9a:ff:16:aa:a6:b2:51:7f:ad:8e: a1:d0:c8:0c:1d:dd:65:96:15:73:28:28:a8:3d:c5: fb:29:f1:f3:b7:b1:73:50:0f:5e:3a:7e:84:b8:76: 58:d1:44:26:db:1c:79:c5:bc:1b:51:3f:be:00:8c: d4:71:eb:9b:c6:e9:9b:93:ca:b3:c9:f2:6d:58:b4: d3:35:20:c6:68:4c:87:f6:50:0e:af:26:8c:33:66: f3:f1:e6:73:a3:d8:7c:26:10:31:26:f0:b0:e0:b7: 39:f5:33:ca:2c:e7:23:b5:99:0a:cb:fd:49:1a:08: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:32:A2:90:F5:0A:48:9C:CC:FD:E6:CB:24:FE:9F:F6:30:89:55:27 X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fc:f4:72:66:da:21:2e:f8:76:83:b8:c0:bc:e2:16:07:a4: 16:51:bb:14:4e:96:a4:1a:72:a1:58:4d:6c:b3:26:4e:a0:01: 12:28:e6:25:d6:17:bd:6a:c4:5b:81:c9:13:1e:9c:f3:bc:2a: 2a:57:e2:55:60:8e:ba:7b:9e:e8:ad:33:02:c7:72:a5:97:b7: 5a:c0:48:06:86:0c:cf:42:90:6e:a4:9f:90:71:dc:b4:72:54: 22:43:51:ad:22:07:9e:c0:0e:bf:2a:a8:cd:eb:4d:3c:0b:4b: 1d:e6:50:70:a9:31:86:eb:94:8a:91:68:2d:a0:ab:ee:0d:ed: d3:77:41:f5:ba:8a:a7:38:6c:0a:e3:52:74:b7:9f:ed:90:a3: 17:6c:49:24:c6:e4:ba:c8:06:45:34:7f:8e:ea:09:64:fb:01: bc:4e:0d:a9:c5:ad:c5:36:ce:ce:97:3b:3f:c5:0a:e5:c7:2b: 88:ac:cc:84:7f:bb:21:a8:17:9d:f5:77:d3:ef:82:6c:1c:75: fb:5f:08:c2:c6:d2:21:ac:53:ed:7a:c5:bf:88:9e:57:76:4a: 29:92:6a:b2:9f:a6:a7:50:8d:d8:00:66:ff:2e:34:6c:c1:2b: 54:31:ca:83:41:1c:ff:21:07:62:c5:4d:e1:d7:3c:47:8c:c7: 60:f0:a8:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjUwNzAxMDM0MTU0WhcNMjUwNzA4MDM0MTU0WjAYMRYwFAYD VQQDEw02ODYzNTkwMi0zNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26rqAOOsQD6PO/bqZVbzHjBcoHNOUWJiUur1aptx+cLXl9gcW0YyKWcIh8ig WaT4SznwVpEoxpDHqHkctOES6DMo2wtmej3G45fOrYf/Nuw8gDmIZKS8Wz6+zFFE wN5c/lxlDLEp3Y5QkLGymwlwkCfSLIzAIzJBgtRJiIScP+uk0/wTyNeHW/9GUJr/ FqqmslF/rY6h0MgMHd1llhVzKCioPcX7KfHzt7FzUA9eOn6EuHZY0UQm2xx5xbwb UT++AIzUceubxumbk8qzyfJtWLTTNSDGaEyH9lAOryaMM2bz8eZzo9h8JhAxJvCw 4Lc59TPKLOcjtZkKy/1JGgiouQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwyopD1 CkiczP3myyT+n/YwiVUnMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl/PRyZtohLvh2g7jAvOIWB6QWUbsUTpakGnKhWE1ssyZOoAESKOYl 1he9asRbgckTHpzzvCoqV+JVYI66e57orTMCx3Kll7dawEgGhgzPQpBupJ+Qcdy0 clQiQ1GtIgeewA6/KqjN6008C0sd5lBwqTGG65SKkWgtoKvuDe3Td0H1uoqnOGwK 41J0t5/tkKMXbEkkxuS6yAZFNH+O6glk+wG8Tg2pxa3FNs7Olzs/xQrlxyuIrMyE f7shqBed9XfT74JsHHX7XwjCxtIhrFPtesW/iJ5Xdkopkmqyn6anUI3YAGb/LjRs wStUMcqDQRz/IQdixU3h1zxHjMdg8Kh9 -----END CERTIFICATE-----Generated at Tue Jul 1 05:31:55 2025 by rpki-client