$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: J6p8JrPnEW4rvr9uy1aPNz+EJY3OAapUBg6bRNYTFbE= Subject key identifier: EB:0E:4F:EE:82:E1:96:D6:22:9A:4F:70:F5:99:48:38:2C:8F:0F:13 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 09AD Signing time: Wed 02 Jul 2025 20:18:22 +0000 Manifest this update: Wed 02 Jul 2025 20:18:22 +0000 Manifest next update: Wed 09 Jul 2025 20:18:22 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: SEOrFhodd6ERfeNv0XwIQslAfbV+wEbl56wYMs9tY84=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2501 (0x9c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Jul 2 20:18:22 2025 GMT Not After : Jul 9 20:18:22 2025 GMT Subject: CN=6865940e-b133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bd:c9:91:e9:fe:39:0c:61:b8:ca:8f:6e:e0: c7:e3:fd:f5:d2:e8:dd:b0:29:73:e3:49:f7:e1:e7: 77:9c:19:22:2f:db:66:0d:d0:79:99:62:01:15:18: 97:a0:68:f8:23:07:8c:f4:94:ea:f5:28:9f:e3:be: 8a:4a:78:9a:05:0f:2a:a6:29:b8:45:9d:11:e7:58: 56:60:c8:de:41:dd:86:9f:01:df:57:26:56:e2:59: d6:79:f5:ed:0c:12:3a:80:9f:82:6b:37:1c:92:24: 33:bd:5b:cf:f8:21:40:45:35:9d:11:68:b3:a0:f8: d0:3e:1e:d3:26:54:30:90:9d:1f:db:2d:6b:32:ea: 19:4f:22:43:8f:ab:f8:03:5e:ee:fd:46:43:5e:fe: 4a:55:b3:78:9e:df:07:4e:d9:94:e8:ab:cd:58:5d: 86:09:fd:d5:70:83:e1:54:a0:0c:c6:d3:f9:5b:a0: 16:24:cc:2d:d4:d2:68:23:86:73:5e:96:cf:bd:e1: 66:b3:45:bd:9e:5d:27:1c:a1:1c:49:0c:3f:6a:39: 9a:14:33:3a:08:94:3f:c2:28:16:54:8f:ec:e2:1f: c7:b4:29:e9:22:fb:54:df:66:3c:a8:40:5c:38:58: e0:aa:22:8b:35:8f:31:49:f5:a7:13:13:fb:5b:4c: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0E:4F:EE:82:E1:96:D6:22:9A:4F:70:F5:99:48:38:2C:8F:0F:13 X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f2:b7:85:71:2a:26:98:f0:bf:79:56:d2:94:e2:d7:4f:86: d9:ee:6f:31:11:8c:c8:8e:a1:6c:aa:1b:61:50:3a:05:30:1c: 02:69:34:88:cb:04:74:fa:9e:63:e8:22:17:56:b7:00:8d:d3: d0:b7:aa:2e:18:17:c4:7d:fa:4c:9d:76:5b:58:ba:a7:87:62: 89:90:e0:98:da:b7:94:c4:99:61:63:e5:68:71:c9:a2:d4:9a: 1c:51:a2:16:8f:22:cd:89:89:ea:c8:20:c2:2d:6e:a0:69:63: 53:1e:ee:54:54:f2:b0:fe:14:5c:02:b0:34:52:79:7d:ec:d1: 56:f9:c9:b9:3c:6f:41:93:29:f5:f8:07:18:3e:8a:a7:1a:50: 2d:79:ae:57:2f:84:f1:ce:b2:f8:14:ef:53:03:0f:2d:a2:ba: 9c:7f:b5:c3:44:bd:64:95:77:d3:d9:a8:aa:8e:60:38:f1:31: 7a:bc:9f:6c:e6:18:b9:3a:05:db:bf:56:90:63:d3:37:bc:3d: 80:69:83:24:82:75:da:78:41:4c:da:0e:ab:2b:8a:80:0f:82: 22:76:0a:63:ed:00:0a:9e:87:9e:79:87:d6:bd:c2:ff:06:ef: c1:b2:08:e5:f5:f9:76:79:4d:67:14:0e:0b:32:82:a3:91:58: 27:4d:38:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwNzAyMjAxODIyWhcNMjUwNzA5MjAxODIyWjAYMRYwFAYD VQQDEw02ODY1OTQwZS1iMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r3Jken+OQxhuMqPbuDH4/310ujdsClz40n34ed3nBkiL9tmDdB5mWIBFRiX oGj4IweM9JTq9Sif476KSniaBQ8qpim4RZ0R51hWYMjeQd2GnwHfVyZW4lnWefXt DBI6gJ+CazcckiQzvVvP+CFARTWdEWizoPjQPh7TJlQwkJ0f2y1rMuoZTyJDj6v4 A17u/UZDXv5KVbN4nt8HTtmU6KvNWF2GCf3VcIPhVKAMxtP5W6AWJMwt1NJoI4Zz XpbPveFms0W9nl0nHKEcSQw/ajmaFDM6CJQ/wigWVI/s4h/HtCnpIvtU32Y8qEBc OFjgqiKLNY8xSfWnExP7W0zlRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsOT+6C 4ZbWIppPcPWZSDgsjw8TMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe8reFcSommPC/eVbSlOLXT4bZ7m8xEYzIjqFsqhthUDoFMBwCaTSI ywR0+p5j6CIXVrcAjdPQt6ouGBfEffpMnXZbWLqnh2KJkOCY2reUxJlhY+Voccmi 1JocUaIWjyLNiYnqyCDCLW6gaWNTHu5UVPKw/hRcArA0Unl97NFW+cm5PG9Bkyn1 +AcYPoqnGlAtea5XL4TxzrL4FO9TAw8torqcf7XDRL1klXfT2aiqjmA48TF6vJ9s 5hi5OgXbv1aQY9M3vD2AaYMkgnXaeEFM2g6rK4qAD4Iidgpj7QAKnoeeeYfWvcL/ Bu/Bsgjl9fl2eU1nFA4LMoKjkVgnTTjJ -----END CERTIFICATE-----Generated at Fri Jul 4 08:02:13 2025 by rpki-client