$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft File: WIXKbgzHteUyD6ckc-5zljP17CY.mft (raw, json) Hash identifier: VLvsD2Vu19xBGKSmLRD5ft7DQoceagstaS8lEAEkTVU= Subject key identifier: 6A:89:F6:D5:D7:26:C8:4E:FF:FA:F2:BA:38:16:5E:B3:E1:1E:70:F4 Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft Manifest number: 01D4 Signing time: Sat 05 Jul 2025 03:04:41 +0000 Manifest this update: Sat 05 Jul 2025 03:04:41 +0000 Manifest next update: Sat 12 Jul 2025 03:04:41 +0000 Files and hashes: 1: WIXKbgzHteUyD6ckc-5zljP17CY.crl (hash: rC8qP4lRSCbkTe4GOHunj4ZsWuwXdjwVr3cyaKZfxHk=) 2: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (hash: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB34A, serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26 Validity Not Before: Jul 5 03:04:41 2025 GMT Not After : Jul 12 03:04:41 2025 GMT Subject: CN=68689649-fa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:d8:22:3e:bb:c6:98:99:50:87:ce:73:5e: 38:ef:c9:20:80:e6:5d:6f:34:3d:22:cf:2f:d0:20: e6:12:24:47:b9:22:18:17:df:07:2f:c0:90:95:76: f9:3d:ba:6c:46:93:6c:b8:98:2f:6f:1a:73:34:84: bd:c9:f2:da:7c:f4:ea:6d:36:b3:02:88:b5:61:aa: 37:51:dd:94:e1:62:d0:9a:b8:b1:93:c2:72:32:e1: ec:09:49:2a:41:d3:dc:bf:03:9c:5b:f9:af:7b:57: af:d9:ba:4a:15:0a:22:25:29:59:58:58:3d:08:29: 10:b7:be:0f:ac:4e:8a:e0:65:f9:97:dd:ce:72:ab: a3:0b:43:35:3c:59:96:ec:ff:40:e9:b0:04:cb:17: 6e:59:f9:19:86:5e:9e:a6:03:99:ab:15:17:12:2f: aa:6c:2f:c6:f9:d8:a4:2a:64:e0:ca:79:45:aa:69: bf:f7:5b:73:47:f6:39:31:c0:d3:e2:fc:d6:87:0b: 19:c6:9a:bd:80:5c:77:f8:4e:92:a9:29:2c:fd:cb: 49:10:34:48:03:25:b4:94:61:74:4b:8e:42:41:9e: 4f:a0:c6:d2:e2:4c:58:ed:96:21:b7:d0:90:e9:7a: 88:74:42:5a:3c:91:4f:61:89:c5:d2:5f:51:52:bc: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:89:F6:D5:D7:26:C8:4E:FF:FA:F2:BA:38:16:5E:B3:E1:1E:70:F4 X509v3 Authority Key Identifier: keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6c:6a:10:36:e6:9d:ed:a5:4e:8a:0b:72:43:23:40:4a:e8: 5c:8b:de:9a:27:fe:c2:c7:0a:7e:52:43:d6:28:91:bf:09:0a: 41:c6:cb:8f:c9:00:05:b9:f7:54:84:01:fe:b0:1e:4f:62:df: a9:a8:5f:38:98:92:2a:f5:c2:06:fa:ff:1b:93:98:dc:61:56: ae:e3:52:ea:ec:de:cf:f5:42:21:c4:68:79:ac:a9:17:1c:bf: f1:cf:90:2f:08:20:0c:b5:83:3b:ec:01:04:91:a2:6e:31:6f: f7:3b:c0:dc:b4:da:65:93:8f:a6:da:36:43:e1:24:86:4c:61: 2b:20:0d:46:43:38:86:e0:a4:fa:84:5d:b7:33:75:0a:f8:25: 97:ea:f5:b3:30:dd:69:15:4f:33:a6:c6:24:e8:8b:a1:42:a9: 81:f5:4a:48:0b:c2:49:cb:e5:39:fd:7e:ec:aa:51:92:37:50: 61:3e:48:d5:b1:55:7d:10:f3:a0:85:7c:ff:7d:d6:f6:d9:5a: 72:22:89:93:a4:a0:bc:f1:56:dc:00:5d:70:65:c6:09:49:42: d7:10:e9:b0:1f:e6:f6:d8:5b:37:9b:62:d7:9a:1b:97:0b:5d: 62:cb:4c:ef:3f:6d:b4:e1:43:8f:13:c7:0e:c3:58:18:95:ba: 0e:54:8c:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzNEExMTAvBgNVBAUTKDU4ODVDQTZFMENDN0I1RTUzMjBGQTcyNDczRUU3Mzk2 MzNGNUVDMjYwHhcNMjUwNzA1MDMwNDQxWhcNMjUwNzEyMDMwNDQxWjAYMRYwFAYD VQQDEw02ODY4OTY0OS1mYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmTYIj67xpiZUIfOc14478kggOZdbzQ9Is8v0CDmEiRHuSIYF98HL8CQlXb5 PbpsRpNsuJgvbxpzNIS9yfLafPTqbTazAoi1Yao3Ud2U4WLQmrixk8JyMuHsCUkq QdPcvwOcW/mve1ev2bpKFQoiJSlZWFg9CCkQt74PrE6K4GX5l93OcqujC0M1PFmW 7P9A6bAEyxduWfkZhl6epgOZqxUXEi+qbC/G+dikKmTgynlFqmm/91tzR/Y5McDT 4vzWhwsZxpq9gFx3+E6SqSks/ctJEDRIAyW0lGF0S45CQZ5PoMbS4kxY7ZYht9CQ 6XqIdEJaPJFPYYnF0l9RUry65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqJ9tXX JshO//ryujgWXrPhHnD0MB8GA1UdIwQYMBaAFFiFym4Mx7XlMg+nJHPuc5Yz9ewm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM0QS84QTMwRjczNDhB ODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRlVXlENmNrYy01emxqUDE3 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dJWEtiZ3pIdGVVeUQ2Y2tjLTV6bGpQMTdDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjM0QS84QTMwRjczNDhBODYxMUVEOTExNkQ3M0ZDNEY5QUUwMi9XSVhLYmd6SHRl VXlENmNrYy01emxqUDE3Q1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLbGoQNuad7aVOigtyQyNASuhci96aJ/7Cxwp+UkPWKJG/CQpBxsuP yQAFufdUhAH+sB5PYt+pqF84mJIq9cIG+v8bk5jcYVau41Lq7N7P9UIhxGh5rKkX HL/xz5AvCCAMtYM77AEEkaJuMW/3O8DctNplk4+m2jZD4SSGTGErIA1GQziG4KT6 hF23M3UK+CWX6vWzMN1pFU8zpsYk6IuhQqmB9UpIC8JJy+U5/X7sqlGSN1BhPkjV sVV9EPOghXz/fdb22VpyIomTpKC88VbcAF1wZcYJSULXEOmwH+b22Fs3m2LXmhuX C11iy0zvP2204UOPE8cOw1gYlboOVIzM -----END CERTIFICATE-----Generated at Sun Jul 6 00:25:09 2025 by rpki-client