$ rpki-client -vvf rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft File: wj38Jpc5QY-leSH40pBboWdC_E0.mft (raw, json) Hash identifier: zqI/rOA2N8bzA8AnbcE3y8ZgK5YLrPuiNFCs5h+gqJI= Subject key identifier: 4A:7D:45:0D:2F:D3:37:FC:CE:7E:5D:6C:43:58:A9:F3:AC:B1:94:81 Authority key identifier: C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D Certificate issuer: /CN=A913F3A2/serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft Manifest number: 69 Signing time: Thu 19 Jun 2025 06:21:25 +0000 Manifest this update: Thu 19 Jun 2025 06:21:24 +0000 Manifest next update: Thu 26 Jun 2025 06:21:24 +0000 Files and hashes: 1: wj38Jpc5QY-leSH40pBboWdC_E0.crl (hash: 0S1YD0ZP5o1TvQZ1ksm8N856b3H72baed2b3zohPBOw=) 2: 0136C13EAE4C11EFACFD730EC4F9AE02.roa (hash: ScWyAFX8IZVuqT/OkOtoT9rz8/7+EBsMEJn2VwqrRCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F3A2, serialNumber=C23DFC269739418FA57921F8D2905BA16742FC4D Validity Not Before: Jun 19 06:21:24 2025 GMT Not After : Jun 26 06:21:24 2025 GMT Subject: CN=6853ac65-cecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:0e:d9:d6:6a:e8:6c:d4:60:7b:ad:5f:f9: 35:e0:92:d8:53:b0:b8:3b:dd:52:50:76:11:d4:0d: 6b:97:9e:71:ee:f5:04:99:1d:6b:6a:ae:2d:e7:5e: 1d:44:ff:e4:3c:bd:d4:9f:e9:d0:1e:85:53:48:2c: 8d:73:68:2d:c1:07:a4:a8:f2:36:47:c5:f5:20:ce: 81:10:e7:00:0b:14:3a:0a:4f:f1:e1:81:c7:09:50: 17:62:d1:be:e8:6a:59:90:ab:47:33:40:74:d7:ab: 49:53:39:12:f0:67:ed:7c:ef:05:a6:fd:f3:c6:98: 4f:a0:ca:1b:0e:b8:1d:52:d0:38:09:42:e3:96:f9: 15:99:82:da:ad:75:1d:c6:94:84:66:de:4c:d8:9f: 5f:45:c8:39:8b:0e:29:b2:52:5d:47:de:c3:1d:c8: ee:3c:58:4a:e2:b1:b0:c6:90:ac:2e:3a:a2:90:33: 30:0a:d5:3d:41:05:0b:e0:1f:d3:c8:6e:35:99:9f: bf:3d:b8:8b:f3:b0:32:99:fc:7a:40:2d:9f:04:c6: 41:49:ff:13:cf:c8:2c:ce:36:61:1c:1e:fe:01:18: fc:18:93:40:d5:c4:71:99:a6:b8:d8:c0:5e:6d:76: 17:5a:64:be:0d:56:39:59:ac:00:c3:7d:9f:77:73: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7D:45:0D:2F:D3:37:FC:CE:7E:5D:6C:43:58:A9:F3:AC:B1:94:81 X509v3 Authority Key Identifier: keyid:C2:3D:FC:26:97:39:41:8F:A5:79:21:F8:D2:90:5B:A1:67:42:FC:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wj38Jpc5QY-leSH40pBboWdC_E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F3A2/5F845CEAAE4911EF9B295239C4F9AE02/wj38Jpc5QY-leSH40pBboWdC_E0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:26:26:b4:bb:ff:ed:2a:bb:e4:db:21:48:b6:fa:a2:2c:3c: 38:4a:fd:75:40:c6:10:75:a9:83:9b:79:03:72:fb:c6:26:19: 14:8b:d4:d1:2c:33:38:d5:ab:49:1d:59:6c:83:20:25:12:c3: dc:e9:8a:a5:1d:e0:11:64:ec:f5:84:37:b9:39:33:1f:11:f0: 6a:72:91:6f:32:c9:b0:cf:d6:14:30:a0:62:6a:6b:b0:08:7c: df:64:fa:b8:61:37:9b:61:65:7a:f1:d4:bc:44:7b:6a:5d:13: 96:65:e1:d5:59:41:e8:35:6d:7d:0c:15:d9:48:50:34:04:97: da:0a:b4:fd:c5:4d:c9:14:7d:90:3a:3d:b7:9d:84:7e:1a:db: 3c:e3:12:95:46:64:64:fe:39:83:80:bb:0d:bc:92:e6:33:34: 4b:96:7d:11:ec:a2:e7:ed:6f:61:4b:c8:23:57:68:78:c2:35: 2f:c8:73:5e:b4:74:7c:ef:57:25:60:28:62:d4:58:92:7b:81: 00:63:f9:57:6f:30:d4:31:6d:5a:f7:5c:b1:bc:fd:d4:23:d6: d8:92:52:22:e8:ca:54:ae:cc:a4:1a:70:18:19:9f:98:71:82: 74:1d:78:a7:44:41:7a:24:7d:83:4f:c0:34:6c:89:e0:90:a8: d6:dd:e5:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjNBMjExMC8GA1UEBRMoQzIzREZDMjY5NzM5NDE4RkE1NzkyMUY4RDI5MDVCQTE2 NzQyRkM0RDAeFw0yNTA2MTkwNjIxMjRaFw0yNTA2MjYwNjIxMjRaMBgxFjAUBgNV BAMTDTY4NTNhYzY1LWNlY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCKg7Z1mrobNRge61f+TXgkthTsLg73VJQdhHUDWuXnnHu9QSZHWtqri3nXh1E /+Q8vdSf6dAehVNILI1zaC3BB6So8jZHxfUgzoEQ5wALFDoKT/HhgccJUBdi0b7o almQq0czQHTXq0lTORLwZ+187wWm/fPGmE+gyhsOuB1S0DgJQuOW+RWZgtqtdR3G lIRm3kzYn19FyDmLDimyUl1H3sMdyO48WErisbDGkKwuOqKQMzAK1T1BBQvgH9PI bjWZn789uIvzsDKZ/HpALZ8ExkFJ/xPPyCzONmEcHv4BGPwYk0DVxHGZprjYwF5t dhdaZL4NVjlZrADDfZ93c0yXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSn1FDS/T N/zOfl1sQ1ip86yxlIEwHwYDVR0jBBgwFoAUwj38Jpc5QY+leSH40pBboWdC/E0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGM0EyLzVGODQ1Q0VBQUU0 OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVktbGVTSDQwcEJib1dkQ19F MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2ozOEpwYzVRWS1sZVNINDBwQmJvV2RDX0UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG M0EyLzVGODQ1Q0VBQUU0OTExRUY5QjI5NTIzOUM0RjlBRTAyL3dqMzhKcGM1UVkt bGVTSDQwcEJib1dkQ19FMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJUmJrS7/+0qu+TbIUi2+qIsPDhK/XVAxhB1qYObeQNy+8YmGRSL1NEs MzjVq0kdWWyDICUSw9zpiqUd4BFk7PWEN7k5Mx8R8GpykW8yybDP1hQwoGJqa7AI fN9k+rhhN5thZXrx1LxEe2pdE5Zl4dVZQeg1bX0MFdlIUDQEl9oKtP3FTckUfZA6 PbedhH4a2zzjEpVGZGT+OYOAuw28kuYzNEuWfRHsouftb2FLyCNXaHjCNS/Ic160 dHzvVyVgKGLUWJJ7gQBj+VdvMNQxbVr3XLG8/dQj1tiSUiLoylSuzKQacBgZn5hx gnQdeKdEQXokfYNPwDRsieCQqNbd5Zw= -----END CERTIFICATE-----Generated at Thu Jun 19 12:25:53 2025 by rpki-client