$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: E9np3aNcZ76mcaorWl+SXLYF+3U+lJ2DAmlNoyYWXBA= Subject key identifier: 2B:61:D3:46:0F:D7:32:3E:39:CB:25:F3:48:03:1F:C7:F8:62:04:39 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 0125 Signing time: Thu 19 Jun 2025 04:20:27 +0000 Manifest this update: Thu 19 Jun 2025 04:20:27 +0000 Manifest next update: Thu 26 Jun 2025 04:20:27 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: oMCUV4J5+p4OqfYKRGH8aFsWUYwdvmsM35/CpiJJCvs=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: 5Uer3p+UX/po6o30wmY0vuoN+A26JLu6gVA8EPsZ9Lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Jun 19 04:20:27 2025 GMT Not After : Jun 26 04:20:27 2025 GMT Subject: CN=6853900b-5cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:e3:78:56:9a:60:f1:78:d6:e0:b2:a0:93: 8e:9b:00:4f:f1:ee:fa:ea:d2:7a:12:7b:90:c5:e9: fa:05:d2:db:eb:b4:f9:5b:86:25:a7:56:a4:ba:a0: a7:c2:85:a7:11:93:0a:c0:a1:78:fc:76:23:e2:a6: dd:80:63:84:aa:b9:a5:94:36:8c:49:66:b5:ac:5d: df:8b:d5:13:d1:61:75:78:38:1a:a6:d6:a7:9e:93: 91:0f:f0:2a:e4:33:4e:a5:40:33:4f:b4:9f:3b:61: 18:41:9f:c3:16:8b:3a:a6:50:1d:7b:15:7b:f4:80: 55:fd:06:3b:3b:b9:4f:9a:98:11:1f:de:9d:dc:52: dd:e3:b1:cb:37:82:39:48:4f:5a:33:d5:d5:7a:24: 07:cf:d4:b1:c6:8c:1a:b3:3f:30:58:7c:93:a4:a6: 3f:89:6a:ab:95:75:cf:68:bf:78:32:ed:a6:5a:2c: e5:80:72:c4:75:3e:7e:e4:be:1f:3f:03:e1:58:8f: 1c:83:5b:2e:f2:2e:97:a3:c7:18:e0:1c:90:fa:ec: a6:35:ca:61:f9:bd:3b:c5:13:a9:28:52:c8:48:d3: 1f:4b:d7:80:86:7b:e3:48:5f:49:3f:07:19:ca:6f: ae:d9:82:0b:79:50:aa:05:df:3f:8a:c5:8f:bd:b1: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:61:D3:46:0F:D7:32:3E:39:CB:25:F3:48:03:1F:C7:F8:62:04:39 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:0f:cf:4e:d1:02:61:0a:f2:c2:91:66:5d:f9:1d:05:19: 4a:54:a0:2d:f5:bb:d2:ea:81:4d:d3:1d:d8:0e:58:ce:6b:50: 68:a6:2c:f6:08:7b:86:7f:60:f4:26:6e:6f:bb:8b:08:41:b4: 12:6b:97:4c:45:34:a8:90:34:86:72:81:81:f5:ab:a9:33:6d: fb:c3:6a:a1:7b:4a:dd:45:db:09:0f:19:44:7a:3f:ed:e3:32: 2f:1a:79:dd:d2:b3:b3:bb:7e:a0:4e:a9:87:90:8f:53:85:e4: da:9d:cc:09:77:02:cf:dc:c8:b1:a8:a6:f5:5d:d7:54:0d:58: f0:f2:87:c3:99:92:95:e0:35:c5:6a:47:e4:e5:f3:b3:da:fd: ad:27:65:d4:a6:0e:28:d8:32:4b:d8:a3:fb:80:4b:21:42:28: d0:83:a1:54:be:41:e6:15:29:e8:6d:66:d7:40:cd:36:64:06: 66:ac:1c:e0:68:ae:d5:26:0b:19:67:d4:a4:fe:02:3d:51:ac: cd:5d:6a:c8:48:be:21:e1:78:82:de:b9:6e:9e:e1:b2:b6:98: 17:1d:d3:64:cc:79:99:a2:85:47:c4:85:79:c0:9e:cc:42:3d: 32:0b:61:9d:b5:4c:53:40:e8:b1:df:24:da:91:61:3f:2a:ca: e6:ea:29:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjUwNjE5MDQyMDI3WhcNMjUwNjI2MDQyMDI3WjAYMRYwFAYD VQQDEw02ODUzOTAwYi01Y2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulvjeFaaYPF41uCyoJOOmwBP8e766tJ6EnuQxen6BdLb67T5W4Ylp1akuqCn woWnEZMKwKF4/HYj4qbdgGOEqrmllDaMSWa1rF3fi9UT0WF1eDgaptannpORD/Aq 5DNOpUAzT7SfO2EYQZ/DFos6plAdexV79IBV/QY7O7lPmpgRH96d3FLd47HLN4I5 SE9aM9XVeiQHz9Sxxowasz8wWHyTpKY/iWqrlXXPaL94Mu2mWizlgHLEdT5+5L4f PwPhWI8cg1su8i6Xo8cY4ByQ+uymNcph+b07xROpKFLISNMfS9eAhnvjSF9JPwcZ ym+u2YILeVCqBd8/isWPvbHoOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCth00YP 1zI+Ocsl80gDH8f4YgQ5MB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBICw/PTtECYQrywpFmXfkdBRlKVKAt9bvS6oFN0x3YDljOa1Bopiz2 CHuGf2D0Jm5vu4sIQbQSa5dMRTSokDSGcoGB9aupM237w2qhe0rdRdsJDxlEej/t 4zIvGnnd0rOzu36gTqmHkI9TheTancwJdwLP3MixqKb1XddUDVjw8ofDmZKV4DXF akfk5fOz2v2tJ2XUpg4o2DJL2KP7gEshQijQg6FUvkHmFSnobWbXQM02ZAZmrBzg aK7VJgsZZ9Sk/gI9UazNXWrISL4h4XiC3rlunuGytpgXHdNkzHmZooVHxIV5wJ7M Qj0yC2GdtUxTQOix3yTakWE/Ksrm6imO -----END CERTIFICATE-----Generated at Fri Jun 20 08:21:22 2025 by rpki-client