$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: dty35s4MHMllHeGv2rFQjcQw/0175OJXGWed7paaAds= Subject key identifier: 37:BC:EA:96:BA:90:DC:69:0C:30:BB:C1:38:1E:7F:CF:BB:1B:EE:A3 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0997 Signing time: Wed 02 Jul 2025 20:21:23 +0000 Manifest this update: Wed 02 Jul 2025 20:21:22 +0000 Manifest next update: Wed 09 Jul 2025 20:21:22 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: RZuIMOYbNAbdAmZAdSaRUHAchAfLHAlmqBHAL+utPnw=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Jul 2 20:21:22 2025 GMT Not After : Jul 9 20:21:22 2025 GMT Subject: CN=686594c2-b2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:53:ce:f2:55:d6:f5:fb:aa:01:78:79:a1: c7:8c:13:82:d5:03:0f:50:ce:e5:0b:2d:4d:7e:ec: 0a:f8:c1:e8:0f:58:4c:b4:73:a0:48:6d:85:7f:24: a1:ac:2c:06:09:58:54:55:cb:76:5d:c0:1a:83:77: a7:8b:1d:dd:62:fc:1e:97:b6:da:34:61:f1:40:10: 80:1f:ac:a5:ca:04:ed:fb:42:3f:b7:90:11:81:4f: bc:7e:c0:09:87:5e:ec:aa:51:53:a1:df:6c:83:7a: 75:be:ce:e7:3c:8a:1e:f1:d4:43:08:19:97:17:60: d1:d1:59:fa:d2:a7:db:d2:7c:34:b6:4d:54:39:0f: d5:f2:19:de:ad:6e:31:e4:e5:f3:36:d4:1e:58:c9: a2:b8:0e:e7:71:0f:8a:02:3a:22:c2:8a:ea:8d:75: b2:eb:4d:a9:1b:07:e4:b9:f3:e9:4e:44:f6:c7:2b: fe:80:96:82:80:b6:c6:e5:56:cc:a6:92:d4:9e:75: 0c:c8:50:fa:20:14:bc:65:be:01:f7:fa:f7:42:91: 4f:eb:bb:5e:3d:b5:d5:52:9b:3d:8e:f2:00:ca:f1: 3d:15:fa:c9:e2:df:be:8d:db:98:8e:a0:a3:5e:7d: fc:6d:56:5d:a4:61:5c:88:c0:21:a8:e2:ea:5f:1b: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:EA:96:BA:90:DC:69:0C:30:BB:C1:38:1E:7F:CF:BB:1B:EE:A3 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:d0:73:8e:b5:1b:db:ef:42:83:b0:47:e7:36:63:35:6b:00: 00:0b:7a:bf:1e:cb:8a:f8:e2:9f:63:6d:2f:be:7f:f8:d0:70: 5e:34:97:cb:22:a0:71:c1:bc:8c:9c:03:3b:2a:eb:cc:70:65: ca:e4:6f:cb:3a:88:91:d8:ca:85:3b:d8:86:c9:ed:4e:4e:81: d8:0c:e3:98:3b:87:93:18:46:b5:4e:49:ec:ba:53:88:95:b3: 57:f6:07:60:59:84:5e:64:81:dd:ae:e4:ce:8c:0f:8e:76:23: 8f:1f:36:dd:3b:eb:f2:ff:3e:8d:61:8c:19:c3:81:eb:7a:fb: 8a:9c:6c:1d:fa:47:f6:1c:96:6b:bf:af:26:7f:df:f2:dd:0a: 6a:92:0e:27:f7:b4:35:5a:81:95:7e:c5:7b:c2:ee:f2:5b:2e: 40:82:57:a4:29:30:9c:87:0a:42:bf:87:c2:2f:8c:c8:79:3d: 46:33:c2:7d:55:36:70:97:69:33:7e:da:e3:61:27:74:36:12: 1c:0c:3c:45:66:1a:b0:a7:57:a2:01:39:dd:1e:de:67:15:66: 64:2c:59:7a:da:77:e7:6b:42:51:c9:b8:19:04:f9:14:30:f8: 44:d4:4c:1e:00:03:d0:3d:8a:91:99:88:e6:16:eb:bd:39:1e: 43:4c:18:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwNzAyMjAyMTIyWhcNMjUwNzA5MjAyMTIyWjAYMRYwFAYD VQQDEw02ODY1OTRjMi1iMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AZTzvJV1vX7qgF4eaHHjBOC1QMPUM7lCy1NfuwK+MHoD1hMtHOgSG2FfySh rCwGCVhUVct2XcAag3enix3dYvwel7baNGHxQBCAH6ylygTt+0I/t5ARgU+8fsAJ h17sqlFTod9sg3p1vs7nPIoe8dRDCBmXF2DR0Vn60qfb0nw0tk1UOQ/V8hnerW4x 5OXzNtQeWMmiuA7ncQ+KAjoiworqjXWy602pGwfkufPpTkT2xyv+gJaCgLbG5VbM ppLUnnUMyFD6IBS8Zb4B9/r3QpFP67tePbXVUps9jvIAyvE9FfrJ4t++jduYjqCj Xn38bVZdpGFciMAhqOLqXxsGjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe86pa6 kNxpDDC7wTgef8+7G+6jMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB0HOOtRvb70KDsEfnNmM1awAAC3q/HsuK+OKfY20vvn/40HBeNJfL IqBxwbyMnAM7KuvMcGXK5G/LOoiR2MqFO9iGye1OToHYDOOYO4eTGEa1TknsulOI lbNX9gdgWYReZIHdruTOjA+OdiOPHzbdO+vy/z6NYYwZw4HrevuKnGwd+kf2HJZr v68mf9/y3Qpqkg4n97Q1WoGVfsV7wu7yWy5AglekKTCchwpCv4fCL4zIeT1GM8J9 VTZwl2kzftrjYSd0NhIcDDxFZhqwp1eiATndHt5nFWZkLFl62nfna0JRybgZBPkU MPhE1EweAAPQPYqRmYjmFuu9OR5DTBiV -----END CERTIFICATE-----Generated at Thu Jul 3 04:30:44 2025 by rpki-client