$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft File: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft (raw, json) Hash identifier: hN7C3Ys7u7DsqObAiwuS3CIGqeGj9eFnZECbtodC3yw= Subject key identifier: 4E:DB:79:68:4A:D9:68:11:5A:15:33:74:21:86:E3:85:E0:D1:BF:15 Authority key identifier: C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 Certificate issuer: /CN=A91B0BA1/serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft Manifest number: 0179 Signing time: Thu 03 Jul 2025 03:48:35 +0000 Manifest this update: Thu 03 Jul 2025 03:48:34 +0000 Manifest next update: Thu 10 Jul 2025 03:48:34 +0000 Files and hashes: 1: wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl (hash: 09cJeZOKYjgQiXZixxbcZQLQAh+wsANEVCQ/N57tdy8=) 2: 8839CA50174911EEB005A134C4F9AE02.roa (hash: Y/z+QgJxgPtT6JyUNYql0fBvgzOIBrxa3aegmRUI5GU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0BA1, serialNumber=C1CB08AD3EB866D3CD647C135D0F52FAED2546C4 Validity Not Before: Jul 3 03:48:34 2025 GMT Not After : Jul 10 03:48:34 2025 GMT Subject: CN=6865fd93-f2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:ac:ed:1c:6d:7b:48:6a:af:fb:87:0b:eb: 3c:dc:82:40:c5:ae:3f:44:2f:de:3b:97:c2:3e:9b: 84:cc:c8:5e:c5:45:5f:48:04:59:80:fb:a4:58:6b: 2e:f2:5a:dd:6f:1c:e1:79:3b:f3:b3:75:1b:36:3d: 46:0c:fd:da:49:7d:8c:53:a0:db:ea:50:86:17:06: 2d:57:ec:16:14:81:37:4d:84:f7:ef:1e:c3:74:59: 1f:ad:ce:9a:f9:de:75:7b:e0:07:67:6a:7e:75:15: e7:26:6c:15:a7:59:7d:55:b4:99:ac:a7:63:13:54: 8f:e8:d8:f8:ca:4e:5e:97:da:79:6a:30:a0:31:f7: 99:fa:d5:87:02:d2:8e:20:2b:ba:e7:40:80:37:c0: eb:43:af:8e:81:c6:45:be:af:de:a3:36:19:ae:c1: 3c:c7:f1:d8:c5:3d:e6:ea:93:72:81:61:14:c7:c4: 32:8f:88:b1:90:87:e4:08:3f:d2:32:df:ca:4e:51: 07:7a:fc:ad:96:15:33:ec:96:71:7f:e2:ad:96:be: 68:6a:74:c8:b6:0f:11:b1:09:4a:f9:1f:f3:30:c0: 84:6e:4c:5b:21:de:30:a4:47:10:ba:89:da:81:01: a1:70:eb:aa:53:8e:b5:97:b7:84:55:8c:ea:1d:76: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:79:68:4A:D9:68:11:5A:15:33:74:21:86:E3:85:E0:D1:BF:15 X509v3 Authority Key Identifier: keyid:C1:CB:08:AD:3E:B8:66:D3:CD:64:7C:13:5D:0F:52:FA:ED:25:46:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BA1/8CCE3EDA174311EE89A8FD2FC4F9AE02/wcsIrT64ZtPNZHwTXQ9S-u0lRsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:7f:40:98:90:dc:bd:04:af:3b:0e:4e:5f:4f:e6:22:e4: c0:c6:75:d1:a0:44:35:d9:9a:7b:3b:9a:aa:e1:2e:55:a0:9f: 3f:3c:27:5d:95:59:6e:67:3b:39:c0:61:ba:e8:16:88:d2:e4: 71:aa:1f:9d:dd:8e:81:3a:d4:9c:7f:9a:d6:66:95:d7:84:53: 43:04:68:ef:cf:aa:69:73:1b:32:b4:78:4a:d4:b3:1e:85:a3: f8:15:39:b0:44:0e:ea:3d:fd:25:8f:81:4d:c1:ee:61:67:00: df:22:95:3a:6e:4a:34:c3:de:5a:c3:c7:9a:08:a7:5a:9b:19: 19:7d:b7:b4:e4:5d:40:3d:ef:8f:09:d9:7d:62:46:38:48:45: 59:f8:db:87:71:94:ca:71:d1:95:f9:6e:05:f6:3c:02:ef:c6: 52:e4:50:c7:ab:a3:4b:96:6a:d5:16:6f:fb:0d:e9:cf:e2:4f: ba:ad:f6:b3:0f:f9:9e:c0:78:12:88:58:00:ee:f5:56:29:40: 44:77:0f:f1:b2:2e:23:b4:92:8c:24:e6:3a:44:1d:7c:22:52: d7:c1:08:95:75:66:ac:cd:a6:a0:5e:b5:06:75:54:cd:44:85: 9e:68:01:3e:15:85:b8:6e:e8:ea:af:2c:b8:1c:3a:60:db:e8: 99:e3:a3:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCQTExMTAvBgNVBAUTKEMxQ0IwOEFEM0VCODY2RDNDRDY0N0MxMzVEMEY1MkZB RUQyNTQ2QzQwHhcNMjUwNzAzMDM0ODM0WhcNMjUwNzEwMDM0ODM0WjAYMRYwFAYD VQQDEw02ODY1ZmQ5My1mMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdSs7Rxte0hqr/uHC+s83IJAxa4/RC/eO5fCPpuEzMhexUVfSARZgPukWGsu 8lrdbxzheTvzs3UbNj1GDP3aSX2MU6Db6lCGFwYtV+wWFIE3TYT37x7DdFkfrc6a +d51e+AHZ2p+dRXnJmwVp1l9VbSZrKdjE1SP6Nj4yk5el9p5ajCgMfeZ+tWHAtKO ICu650CAN8DrQ6+OgcZFvq/eozYZrsE8x/HYxT3m6pNygWEUx8Qyj4ixkIfkCD/S Mt/KTlEHevytlhUz7JZxf+Ktlr5oanTItg8RsQlK+R/zMMCEbkxbId4wpEcQuona gQGhcOuqU461l7eEVYzqHXY4nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7beWhK 2WgRWhUzdCGG44Xg0b8VMB8GA1UdIwQYMBaAFMHLCK0+uGbTzWR8E10PUvrtJUbE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEJBMS84Q0NFM0VEQTE3 NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0UE5aSHdUWFE5Uy11MGxS c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djc0lyVDY0WnRQTlpId1RYUTlTLXUwbFJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEJBMS84Q0NFM0VEQTE3NDMxMUVFODlBOEZEMkZDNEY5QUUwMi93Y3NJclQ2NFp0 UE5aSHdUWFE5Uy11MGxSc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSpH9AmJDcvQSvOw5OX0/mIuTAxnXRoEQ12Zp7O5qq4S5VoJ8/PCdd lVluZzs5wGG66BaI0uRxqh+d3Y6BOtScf5rWZpXXhFNDBGjvz6ppcxsytHhK1LMe haP4FTmwRA7qPf0lj4FNwe5hZwDfIpU6bko0w95aw8eaCKdamxkZfbe05F1APe+P Cdl9YkY4SEVZ+NuHcZTKcdGV+W4F9jwC78ZS5FDHq6NLlmrVFm/7DenP4k+6rfaz D/mewHgSiFgA7vVWKUBEdw/xsi4jtJKMJOY6RB18IlLXwQiVdWaszaagXrUGdVTN RIWeaAE+FYW4bujqryy4HDpg2+iZ46Pp -----END CERTIFICATE-----Generated at Thu Jul 3 06:48:31 2025 by rpki-client