$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: j/XucdukjkKJfdxSlAKJyULMXjVzJgX93i1R9jgm+04= Subject key identifier: 70:07:10:0C:E2:E3:C5:C2:0B:CB:91:36:EC:53:C9:B5:6B:9C:10:C9 Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: 01C0 Signing time: Sat 23 Aug 2025 03:07:37 +0000 Manifest this update: Sat 23 Aug 2025 03:07:36 +0000 Manifest next update: Sat 30 Aug 2025 03:07:36 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: 27qZT2dfvGqDeFwcdvBgKgFDQHU8o04xo/WXzPPEBbQ=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: Aug 23 03:07:36 2025 GMT Not After : Aug 30 03:07:36 2025 GMT Subject: CN=68a93079-02f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:a5:b7:4b:7d:aa:16:6c:4e:ba:67:8b:25: 3e:d7:47:f2:41:cf:b8:a7:9e:e7:09:52:a0:e3:5d: 10:53:94:1e:5a:1c:3f:c7:ab:c4:5a:a0:fa:77:d1: a2:14:37:05:5c:2b:33:6d:bf:db:87:87:aa:be:a0: 6b:5a:10:f3:bf:8e:e0:65:6a:55:09:99:13:43:02: d4:0f:32:9a:83:62:c8:ae:72:fa:51:ce:c2:d3:1f: 6c:6b:41:54:06:c2:2f:f1:5c:f4:f1:f6:38:9e:89: 18:de:04:d2:71:ad:58:f6:e0:22:59:ff:25:ca:83: be:f6:03:cd:e7:6d:7f:cf:8f:17:f7:5e:36:e0:c5: 1b:3e:92:85:9b:17:3b:ba:83:fc:b9:c6:d0:ad:11: 3a:ea:15:07:6b:ba:c4:a6:fb:12:67:14:2e:66:33: 31:2b:9b:a6:bc:1f:60:15:fc:1b:a2:1f:b1:9c:ee: 2a:70:a9:3f:ce:8c:89:1c:f9:cd:57:5c:aa:63:db: af:71:d0:4a:26:65:3d:81:8d:a6:94:a9:73:cd:87: 22:4b:2b:fb:e5:a6:f8:fe:67:33:7a:78:46:d9:2e: 72:fa:e4:d6:c6:1d:8b:92:99:eb:fe:7c:6e:73:df: 3c:e6:29:3a:99:8d:f3:fa:6f:42:fd:0e:4c:f0:fc: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:07:10:0C:E2:E3:C5:C2:0B:CB:91:36:EC:53:C9:B5:6B:9C:10:C9 X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d1:e5:f7:ee:f5:47:a5:71:d9:da:18:65:db:51:7b:15:e9: 5c:1d:20:d3:76:fa:38:b4:ce:67:22:6d:53:d3:22:3b:bd:11: c5:86:03:7c:b7:34:4c:99:36:e4:6a:cb:23:bd:e4:72:02:e1: 08:c1:76:f0:4b:d5:b3:b2:5d:c9:d2:63:8f:7e:3e:06:f6:97: fe:35:ed:45:96:f2:2b:5c:df:33:b9:23:ff:33:95:a3:8e:ab: 18:38:a4:da:f4:bd:b7:ef:36:7a:d7:63:c4:ab:4a:11:a8:78: ad:ce:eb:fe:3b:93:06:00:39:8c:3b:c7:b5:e5:c1:c3:03:a9: 29:ef:71:3e:81:c8:f7:7e:f8:fa:70:94:47:a3:aa:3e:1c:28: 5a:d1:ff:84:e8:57:38:6d:cc:7e:84:87:41:46:7c:e0:e0:88: 4f:a1:47:d0:b9:07:79:c6:6b:fd:b4:65:5d:10:30:a8:8b:60: a5:18:93:ab:de:4f:f2:b7:8f:0f:1a:1e:21:07:c7:94:e5:6f: e4:6e:8a:05:90:d3:47:67:d6:2d:1e:b9:40:7f:1d:9f:58:af: 76:54:d2:16:da:9c:a4:8a:20:d1:ce:a6:36:a6:46:0a:e0:8c: 5f:24:8d:75:d2:94:84:66:ac:a7:03:6a:f8:ee:aa:3a:17:73: 77:87:f4:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjUwODIzMDMwNzM2WhcNMjUwODMwMDMwNzM2WjAYMRYwFAYD VQQDEw02OGE5MzA3OS0wMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArESlt0t9qhZsTrpniyU+10fyQc+4p57nCVKg410QU5QeWhw/x6vEWqD6d9Gi FDcFXCszbb/bh4eqvqBrWhDzv47gZWpVCZkTQwLUDzKag2LIrnL6Uc7C0x9sa0FU BsIv8Vz08fY4nokY3gTSca1Y9uAiWf8lyoO+9gPN521/z48X91424MUbPpKFmxc7 uoP8ucbQrRE66hUHa7rEpvsSZxQuZjMxK5umvB9gFfwboh+xnO4qcKk/zoyJHPnN V1yqY9uvcdBKJmU9gY2mlKlzzYciSyv75ab4/mczenhG2S5y+uTWxh2Lkpnr/nxu c9885ik6mY3z+m9C/Q5M8PyRvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAHEAzi 48XCC8uRNuxTybVrnBDJMB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN0eX37vVHpXHZ2hhl21F7FelcHSDTdvo4tM5nIm1T0yI7vRHFhgN8 tzRMmTbkassjveRyAuEIwXbwS9Wzsl3J0mOPfj4G9pf+Ne1FlvIrXN8zuSP/M5Wj jqsYOKTa9L237zZ612PEq0oRqHitzuv+O5MGADmMO8e15cHDA6kp73E+gcj3fvj6 cJRHo6o+HCha0f+E6Fc4bcx+hIdBRnzg4IhPoUfQuQd5xmv9tGVdEDCoi2ClGJOr 3k/yt48PGh4hB8eU5W/kbooFkNNHZ9YtHrlAfx2fWK92VNIW2pykiiDRzqY2pkYK 4IxfJI110pSEZqynA2r47qo6F3N3h/R2 -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:44 2025 by rpki-client