$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: 7hT2KOQDWULRHw6Q3PxdBs/2o0t1nBHJqbuoKyWqTxY= Subject key identifier: C5:E4:62:48:25:84:C9:08:3C:55:5C:19:1C:6C:7B:91:B2:D4:F2:65 Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0B68 Signing time: Wed 02 Jul 2025 19:18:45 +0000 Manifest this update: Wed 02 Jul 2025 19:18:44 +0000 Manifest next update: Wed 09 Jul 2025 19:18:44 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: MuzGW+nTu1OhNlx6GQx+HSiFqzJbSZeaLwBqOtHJRrg=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: BNtUgizLuW7VE24IioUopOhcnv7kySphvSn8ooQaevk=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: E4bzrx7poQwdk1jQHWl7doZB/UzexRVv4xP96OZmdAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2941 (0xb7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Jul 2 19:18:44 2025 GMT Not After : Jul 9 19:18:44 2025 GMT Subject: CN=68658615-842a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:f0:8c:2d:d5:37:59:6a:de:e3:42:27:29: 31:63:fd:15:5b:b1:71:94:2c:81:5f:14:74:86:2b: 7c:d4:b0:08:c6:d5:17:dd:44:d7:31:12:0f:28:8e: 7b:16:d6:29:36:20:16:b0:0d:4a:8e:4d:e5:5e:fc: 2c:8c:d7:9c:bc:0d:5d:d6:36:41:b6:2d:ed:3a:0d: 17:1e:a1:e7:1b:85:d1:1d:ce:0c:c0:c9:be:a4:7e: 45:7a:03:29:f6:f8:ba:62:57:91:55:a0:2c:8b:8f: c8:3d:fc:65:8f:11:4d:56:d8:8c:66:75:3b:01:82: 67:a0:75:dd:be:f8:ab:81:d6:78:88:51:1c:0a:eb: 23:2b:cb:c8:13:b0:d9:b3:db:6d:35:2f:40:47:b7: b3:6e:92:f3:5d:e6:2f:19:f1:62:6a:89:13:7b:e6: 8c:23:3b:71:90:04:49:fa:65:20:d6:f4:37:6a:23: 3f:9e:f8:5a:e0:8a:d3:3f:40:63:a8:fd:c6:19:d2: ae:3f:ed:64:89:40:c0:d7:a1:10:0d:8a:6e:d7:d6: 1c:58:42:54:8b:53:31:45:5f:31:c4:f2:79:50:87: 7c:29:ca:86:7f:86:f5:42:22:9d:83:03:19:0c:6d: c3:72:57:0a:3b:9f:47:99:e5:74:a1:d9:92:7b:fa: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:62:48:25:84:C9:08:3C:55:5C:19:1C:6C:7B:91:B2:D4:F2:65 X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6d:b4:08:70:11:f1:ae:5e:76:e4:96:ad:a3:53:6c:58:a8: 7c:fe:85:c6:94:ad:09:4c:e4:ef:ff:43:78:7f:a9:00:c8:dd: 02:29:93:22:69:d5:30:9d:2c:43:f1:1d:1c:e2:1c:3e:22:21: 2b:89:a5:19:6b:83:34:81:f0:d0:16:3f:ed:df:72:18:68:6c: 62:8a:55:c1:61:7b:7b:5f:c8:5f:9d:fd:e6:8c:01:19:c2:b4: cc:08:48:f1:09:b1:d2:da:d0:00:32:10:f4:d1:6f:87:a3:50: e2:24:c1:2c:87:1c:66:cd:ed:07:27:e1:6f:cd:d5:13:08:fb: 2b:20:a6:84:1e:7c:90:09:e1:49:29:c6:dc:5f:31:3c:bd:69: 1d:13:e5:ed:77:0e:a6:b0:ad:6c:9d:50:2a:01:f8:fe:7c:0c: 4d:54:aa:6f:aa:40:29:f0:b9:29:e6:f0:96:f5:39:84:43:0c: 9f:aa:6e:0a:72:84:5d:b6:b5:9f:94:57:f0:74:4c:b5:48:be: 99:8e:70:ae:7f:4a:59:68:13:2b:53:84:8e:fc:67:c5:45:53: 1b:5a:1f:50:1a:55:31:03:a1:9a:4e:24:b8:41:de:a7:1b:d8: 4c:f3:5a:83:3c:f3:1d:24:8b:95:95:b9:f1:3c:21:83:68:34: ae:31:07:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwNzAyMTkxODQ0WhcNMjUwNzA5MTkxODQ0WjAYMRYwFAYD VQQDEw02ODY1ODYxNS04NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgPwjC3VN1lq3uNCJykxY/0VW7FxlCyBXxR0hit81LAIxtUX3UTXMRIPKI57 FtYpNiAWsA1Kjk3lXvwsjNecvA1d1jZBti3tOg0XHqHnG4XRHc4MwMm+pH5FegMp 9vi6YleRVaAsi4/IPfxljxFNVtiMZnU7AYJnoHXdvvirgdZ4iFEcCusjK8vIE7DZ s9ttNS9AR7ezbpLzXeYvGfFiaokTe+aMIztxkARJ+mUg1vQ3aiM/nvha4IrTP0Bj qP3GGdKuP+1kiUDA16EQDYpu19YcWEJUi1MxRV8xxPJ5UId8KcqGf4b1QiKdgwMZ DG3DclcKO59HmeV0odmSe/o/1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXkYkgl hMkIPFVcGRxse5Gy1PJlMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvbbQIcBHxrl525Jato1NsWKh8/oXGlK0JTOTv/0N4f6kAyN0CKZMi adUwnSxD8R0c4hw+IiEriaUZa4M0gfDQFj/t33IYaGxiilXBYXt7X8hfnf3mjAEZ wrTMCEjxCbHS2tAAMhD00W+Ho1DiJMEshxxmze0HJ+FvzdUTCPsrIKaEHnyQCeFJ KcbcXzE8vWkdE+Xtdw6msK1snVAqAfj+fAxNVKpvqkAp8Lkp5vCW9TmEQwyfqm4K coRdtrWflFfwdEy1SL6ZjnCuf0pZaBMrU4SO/GfFRVMbWh9QGlUxA6GaTiS4Qd6n G9hM81qDPPMdJIuVlbnxPCGDaDSuMQdg -----END CERTIFICATE-----Generated at Thu Jul 3 02:54:47 2025 by rpki-client