$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft File: WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft (raw, json) Hash identifier: K//sZ28d/vshSNYBchKEraGgwcfs4+GVkfi2TP+lz8I= Subject key identifier: 34:F6:99:C0:F7:C7:60:DF:84:16:0A:03:C7:2A:5A:C3:8B:FD:CB:33 Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D Certificate issuer: /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft Manifest number: 02FD Signing time: Thu 03 Jul 2025 01:39:51 +0000 Manifest this update: Thu 03 Jul 2025 01:39:51 +0000 Manifest next update: Thu 10 Jul 2025 01:39:50 +0000 Files and hashes: 1: WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl (hash: jHZAtOVQygAEA3XzEvKMQZ+HF3HV29cPNRylq6Kvs04=) 2: A1C11FC2D18411EFBBD4971AC4F9AE02.roa (hash: xZ7YqIDaoUd+RzHbOlkF6x1jlcucQQ6yGO7tO0froi4=) 3: B370AF6CD18411EF960DE726C4F9AE02.roa (hash: 9iKSHz86/EIZlRAE/OwM+VXopdTWIKeDLhef41MF2CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D Validity Not Before: Jul 3 01:39:51 2025 GMT Not After : Jul 10 01:39:50 2025 GMT Subject: CN=6865df67-1db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:dc:68:b2:d5:09:39:0a:d8:24:22:07:f8: 31:b2:1b:50:90:c9:13:a9:5b:53:f0:4c:30:3b:9b: 3d:b7:56:68:37:d2:0f:ae:48:4f:11:48:da:77:9c: 08:79:db:52:77:c0:72:a5:0e:9c:be:43:df:80:3e: ff:6b:a6:1b:c5:1a:44:3c:02:83:a9:47:a4:7f:33: e5:e4:68:2d:00:b7:a3:5b:66:3e:98:c2:6d:75:65: ea:c0:64:0a:41:44:8f:fe:3c:87:34:37:9e:0a:c0: 46:2d:a3:52:72:fc:60:1c:22:05:3a:42:21:33:14: bb:b7:cd:fd:22:e9:fa:6d:34:9c:ef:a2:21:ff:0d: 3e:56:39:ad:33:91:c1:bc:92:cf:c9:2f:38:75:a7: d3:df:0c:8a:6f:93:4d:11:17:46:3f:10:65:20:30: e0:03:ad:46:a4:00:a7:fc:7d:73:48:1f:a2:c5:be: ac:68:1e:c9:e8:bb:57:f1:7e:e7:85:17:32:84:dc: 6f:df:fb:db:88:68:97:c6:4b:be:59:9a:2f:69:df: 73:56:bc:de:5f:3e:78:d6:28:b8:8d:ad:3f:2d:24: 6f:a1:7b:b2:32:3c:6a:37:1c:bf:c2:1d:10:73:f3: 2f:b9:72:10:fd:4a:2f:be:eb:2e:d0:27:e0:f3:e3: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F6:99:C0:F7:C7:60:DF:84:16:0A:03:C7:2A:5A:C3:8B:FD:CB:33 X509v3 Authority Key Identifier: keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:fb:95:73:72:49:8b:77:1f:45:3f:d7:30:e1:fa:5e:74:32: f4:ad:d4:32:96:af:4c:b2:5f:14:06:e9:2e:6f:90:e0:b3:6a: c5:97:5d:31:17:38:7a:02:49:dd:77:f9:2e:1e:e8:85:27:5b: c8:41:73:d4:ed:94:2e:cb:94:7b:df:0c:af:8a:c0:ab:54:ed: b7:00:73:e1:86:bb:13:c2:c5:63:e5:a4:5d:c4:5a:e4:63:5c: 85:25:9b:77:7a:d9:46:f6:1a:47:63:db:ce:e3:8f:0a:41:e0: 4c:54:1a:1a:3d:bd:b2:f2:28:ce:65:29:38:7c:55:5a:43:d4: 90:28:dc:ef:02:78:4f:60:49:0b:1c:e1:50:e1:db:cb:07:e0: 75:91:20:d4:5c:d9:94:d3:34:56:be:70:ec:21:3e:fb:04:d7: 6e:df:8a:f6:e3:4f:29:77:09:e5:59:13:a4:ac:30:7e:aa:aa: 95:25:29:33:13:2d:67:d4:8e:5f:3d:f3:d6:d9:8d:33:f2:7d: d5:67:91:b6:a8:2b:03:c0:4d:87:65:31:1b:40:52:83:cb:a9: 43:ba:31:95:8e:f7:43:81:ad:00:fd:4a:e1:5a:37:8a:1b:5a: 24:0b:b2:a8:c1:4a:cf:e5:68:0b:fe:5d:3d:b0:c8:c8:ac:fe: ed:c3:78:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD QzY2NjQ4OEQwHhcNMjUwNzAzMDEzOTUxWhcNMjUwNzEwMDEzOTUwWjAYMRYwFAYD VQQDEw02ODY1ZGY2Ny0xZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjPcaLLVCTkK2CQiB/gxshtQkMkTqVtT8EwwO5s9t1ZoN9IPrkhPEUjad5wI edtSd8BypQ6cvkPfgD7/a6YbxRpEPAKDqUekfzPl5GgtALejW2Y+mMJtdWXqwGQK QUSP/jyHNDeeCsBGLaNScvxgHCIFOkIhMxS7t839Iun6bTSc76Ih/w0+VjmtM5HB vJLPyS84dafT3wyKb5NNERdGPxBlIDDgA61GpACn/H1zSB+ixb6saB7J6LtX8X7n hRcyhNxv3/vbiGiXxku+WZovad9zVrzeXz541ii4ja0/LSRvoXuyMjxqNxy/wh0Q c/MvuXIQ/Uovvusu0Cfg8+NciwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT2mcD3 x2DfhBYKA8cqWsOL/cszMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IxRC9CQTY0RDA2NkUzMzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2 ZzNjUHF1Rk5kWFhNWm1TSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz+5VzckmLdx9FP9cw4fpedDL0rdQylq9Msl8UBukub5Dgs2rFl10x Fzh6Akndd/kuHuiFJ1vIQXPU7ZQuy5R73wyvisCrVO23AHPhhrsTwsVj5aRdxFrk Y1yFJZt3etlG9hpHY9vO448KQeBMVBoaPb2y8ijOZSk4fFVaQ9SQKNzvAnhPYEkL HOFQ4dvLB+B1kSDUXNmU0zRWvnDsIT77BNdu34r2408pdwnlWROkrDB+qqqVJSkz Ey1n1I5fPfPW2Y0z8n3VZ5G2qCsDwE2HZTEbQFKDy6lDujGVjvdDga0A/UrhWjeK G1okC7KowUrP5WgL/l09sMjIrP7tw3gA -----END CERTIFICATE-----Generated at Fri Jul 4 18:02:18 2025 by rpki-client