$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft File: WTnpc8iL_GpBqjWondhG-w0Wi8w.mft (raw, json) Hash identifier: ED7Jyyxn1NfEH2rJmFR+GrBY6sXBhAtWPYCNXEdUt4M= Subject key identifier: 2F:0F:BE:88:BE:D2:1C:E7:13:9D:F2:01:95:4B:6C:E2:AD:EE:F8:8C Authority key identifier: 59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC Certificate issuer: /CN=A91E6776/serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Certificate serial: 0ED2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft Manifest number: 0ECC Signing time: Wed 02 Jul 2025 17:52:06 +0000 Manifest this update: Wed 02 Jul 2025 17:52:06 +0000 Manifest next update: Wed 09 Jul 2025 17:52:06 +0000 Files and hashes: 1: WTnpc8iL_GpBqjWondhG-w0Wi8w.crl (hash: Kcbi09lclZiHPujzg7M5NeVuu8nOn5YuA8KYvtAk2EA=) 2: 7DAD1584881811E99CA76437C4F9AE02.roa (hash: kQ1ecN3du3BFvR7/Vwlq9mllQVMxIS/rTwYJnbfcfck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3794 (0xed2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6776, serialNumber=5939E973C88BFC6A41AA35A89DD846FB0D168BCC Validity Not Before: Jul 2 17:52:06 2025 GMT Not After : Jul 9 17:52:06 2025 GMT Subject: CN=686571c6-07c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:04:55:5e:9f:3a:2f:db:7b:60:70:cb:db: 04:b1:7f:a6:a8:4f:f9:d8:f4:9b:03:c0:89:8e:08: 2d:db:25:87:db:fd:26:be:7f:b0:66:d7:49:76:fa: 0c:78:28:a2:1d:de:64:5c:c1:55:8d:73:1f:c4:99: 96:12:2b:16:fc:12:96:b6:fe:96:37:6f:ad:05:80: 48:90:85:ee:87:9c:de:44:57:e9:7a:9f:56:48:ad: 24:6c:a5:ed:37:00:2f:ef:5c:3a:67:43:41:d2:60: 6e:1f:d6:dc:a6:4a:1d:0c:8a:e6:79:d6:9e:99:fc: 05:22:1b:9d:25:78:41:5a:81:54:9b:d9:71:a1:0a: f2:7e:26:54:94:e6:b0:4d:97:42:14:62:1c:16:f9: 81:39:cd:66:f0:0e:52:8b:c7:b0:b4:85:dc:88:4a: 40:a1:68:88:2f:37:a5:a4:d6:b3:74:4f:fd:9f:68: f9:38:0c:95:c6:b2:56:70:2b:70:fe:4f:81:dd:50: 1a:74:f7:6f:18:02:17:32:5a:6e:74:57:14:c7:a1: 90:3b:4c:91:db:c7:06:15:4a:40:6b:f2:5b:a2:18: 29:be:4e:6a:58:58:49:2b:cb:b4:25:c1:ea:62:a4: 39:68:d1:58:fe:15:24:58:07:db:3a:f4:c1:78:83: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:BE:88:BE:D2:1C:E7:13:9D:F2:01:95:4B:6C:E2:AD:EE:F8:8C X509v3 Authority Key Identifier: keyid:59:39:E9:73:C8:8B:FC:6A:41:AA:35:A8:9D:D8:46:FB:0D:16:8B:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WTnpc8iL_GpBqjWondhG-w0Wi8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6776/3E117484881711E9ADC4D335C4F9AE02/WTnpc8iL_GpBqjWondhG-w0Wi8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:01:22:3a:b2:7a:6e:f9:14:f7:ae:ad:ad:8d:f4:13:6c:1a: 65:0b:b9:6b:ac:58:0a:43:ef:92:01:4d:a3:57:39:57:4b:82: c2:52:50:f4:27:b9:20:d1:1d:a1:3d:d8:8e:26:f6:b3:f2:9c: 5e:ff:6a:54:e5:8e:60:57:68:1b:25:99:bf:85:07:6f:38:13: fd:2c:58:d2:63:5a:71:77:51:00:56:22:80:47:78:b6:01:c6: 6d:92:bb:08:13:8e:54:64:30:9c:9d:0d:72:45:0a:20:e2:9b: 4a:07:e6:94:f8:4f:31:ea:b5:9e:4c:1b:6a:81:79:cd:25:98: 29:5c:08:a0:31:b9:ff:5e:5c:48:6d:a1:d3:22:a8:dd:91:68: ed:8a:15:47:11:d9:20:46:26:20:ad:2a:14:f4:62:46:c2:01: 87:4c:be:40:f4:5d:5a:b0:d1:92:bd:64:57:2d:51:2c:59:22: 7a:64:9f:24:de:aa:7d:51:0b:71:28:09:9e:3c:95:2c:d4:36: 1f:3e:41:80:3f:4e:b8:ac:83:82:ce:7d:bc:96:8c:7e:9a:af: db:7c:2c:f8:d5:16:e1:ad:86:e2:e4:31:62:c4:5a:47:3a:80: f2:eb:a4:cd:aa:22:28:4e:2a:1f:26:0e:3a:c0:21:75:21:7c: 59:c8:97:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY3NzYxMTAvBgNVBAUTKDU5MzlFOTczQzg4QkZDNkE0MUFBMzVBODlERDg0NkZC MEQxNjhCQ0MwHhcNMjUwNzAyMTc1MjA2WhcNMjUwNzA5MTc1MjA2WjAYMRYwFAYD VQQDEw02ODY1NzFjNi0wN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3MEVV6fOi/be2Bwy9sEsX+mqE/52PSbA8CJjggt2yWH2/0mvn+wZtdJdvoM eCiiHd5kXMFVjXMfxJmWEisW/BKWtv6WN2+tBYBIkIXuh5zeRFfpep9WSK0kbKXt NwAv71w6Z0NB0mBuH9bcpkodDIrmedaemfwFIhudJXhBWoFUm9lxoQryfiZUlOaw TZdCFGIcFvmBOc1m8A5Si8ewtIXciEpAoWiILzelpNazdE/9n2j5OAyVxrJWcCtw /k+B3VAadPdvGAIXMlpudFcUx6GQO0yR28cGFUpAa/Jbohgpvk5qWFhJK8u0JcHq YqQ5aNFY/hUkWAfbOvTBeINNmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8Pvoi+ 0hznE53yAZVLbOKt7viMMB8GA1UdIwQYMBaAFFk56XPIi/xqQao1qJ3YRvsNFovM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjc3Ni8zRTExNzQ4NDg4 MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9HcEJxaldvbmRoRy13MFdp OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dUbnBjOGlMX0dwQnFqV29uZGhHLXcwV2k4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njc3Ni8zRTExNzQ4NDg4MTcxMUU5QURDNEQzMzVDNEY5QUUwMi9XVG5wYzhpTF9H cEJxaldvbmRoRy13MFdpOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoASI6snpu+RT3rq2tjfQTbBplC7lrrFgKQ++SAU2jVzlXS4LCUlD0 J7kg0R2hPdiOJvaz8pxe/2pU5Y5gV2gbJZm/hQdvOBP9LFjSY1pxd1EAViKAR3i2 AcZtkrsIE45UZDCcnQ1yRQog4ptKB+aU+E8x6rWeTBtqgXnNJZgpXAigMbn/XlxI baHTIqjdkWjtihVHEdkgRiYgrSoU9GJGwgGHTL5A9F1asNGSvWRXLVEsWSJ6ZJ8k 3qp9UQtxKAmePJUs1DYfPkGAP064rIOCzn28lox+mq/bfCz41RbhrYbi5DFixFpH OoDy66TNqiIoTiofJg46wCF1IXxZyJcc -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:23 2025 by rpki-client