$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: sVBg+j+K5b5TtjVAVOr4ogbCvB0QAKCklX6rFXxVXFQ= Subject key identifier: 4B:C2:17:15:A3:4C:8D:82:B7:D3:FA:E4:A9:B0:69:7F:21:1B:46:B1 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 040B Signing time: Tue 05 Aug 2025 01:53:23 +0000 Manifest this update: Tue 05 Aug 2025 01:53:22 +0000 Manifest next update: Tue 12 Aug 2025 01:53:22 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: J0jSgi5IAGKnhdl2fGvmjYdz4d+YJYiH9hx0E0WWXx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Aug 5 01:53:22 2025 GMT Not After : Aug 12 01:53:22 2025 GMT Subject: CN=68916412-914a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:a8:a8:cb:57:8b:8b:29:dd:da:ea:a0:a6: 4c:dd:b0:94:03:2b:eb:cd:18:ca:43:d2:d4:23:88: b4:70:3a:7b:6a:ae:75:ac:1a:b3:6c:16:6a:32:ce: 50:69:7a:b8:47:ea:58:d3:d5:1e:63:6a:90:d8:71: e9:d6:39:7e:69:22:76:3a:7d:d7:24:b6:fc:90:2f: 42:9f:fc:50:4c:8d:8e:3e:6e:ec:2b:96:63:90:3f: 21:43:e9:77:8a:6b:c7:a5:e8:d5:b4:34:dc:b8:48: b2:87:34:10:93:50:f0:0a:dc:ab:c8:a4:e9:c4:06: d2:7e:fb:f3:34:d5:1d:2a:57:a7:1c:29:23:65:4d: fb:8c:28:c1:ab:a6:4a:53:1a:ce:d9:25:f4:53:0d: 56:9a:c8:5e:22:e3:29:7f:70:a1:c8:03:6a:eb:2b: ab:1e:e3:ab:75:8b:0e:07:91:b2:b0:74:6a:99:62: 62:5d:6b:0b:2d:f7:c8:b7:c3:58:d2:f4:ae:59:34: 8f:42:f1:6a:c7:cd:49:76:7e:a9:f5:80:eb:37:13: 4f:85:71:00:f2:93:5b:f4:c4:e8:61:4d:08:78:fb: b4:b2:22:33:72:95:0c:36:21:48:e5:50:0c:cb:e0: 02:d2:9a:a8:f3:4d:f8:78:8b:f1:3b:4f:72:94:c8: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:17:15:A3:4C:8D:82:B7:D3:FA:E4:A9:B0:69:7F:21:1B:46:B1 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:5f:ae:d9:02:61:cb:19:ba:2e:01:47:10:c1:4d:11:ae:e3: 79:7a:f3:16:a7:ec:7e:e2:06:c8:02:24:7e:e1:ad:37:c7:a6: 5a:d3:b3:ec:fb:e5:07:02:be:d4:86:ec:fd:d4:2d:3a:ed:40: 84:5a:8e:f3:3e:77:0f:cc:af:0c:27:f5:89:1f:35:a4:a7:5f: 38:74:a5:22:7a:c2:07:8b:4f:d2:3e:3b:df:c4:91:bb:13:f6: a7:d4:c5:2f:22:32:de:fb:39:2b:a8:db:8e:bb:e2:7d:83:b0: 21:c9:f5:84:18:53:8f:13:06:55:a0:ea:fa:cb:f5:b8:7d:ab: 74:ee:0d:67:c0:e9:24:86:8f:57:91:60:64:68:96:82:f1:92: bd:91:ff:58:fc:50:0b:24:1a:31:9e:b2:c9:af:ec:b6:e5:a3: df:73:6c:a6:a2:02:68:04:27:49:d8:6e:7c:7f:19:28:61:c4: ff:2d:23:b6:f2:e9:c7:3a:b3:40:26:10:a2:02:2c:13:9f:67: 14:b1:d9:af:99:a6:40:c3:16:40:fc:f3:1e:20:b7:03:e6:b4: e8:cc:ab:00:e1:ac:5f:b9:2a:52:27:08:36:85:4f:a4:81:b0: 6b:04:c6:b8:b1:5f:b0:91:af:78:4e:57:39:51:7c:d2:2e:5e: 21:e0:4e:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjUwODA1MDE1MzIyWhcNMjUwODEyMDE1MzIyWjAYMRYwFAYD VQQDEw02ODkxNjQxMi05MTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UGoqMtXi4sp3drqoKZM3bCUAyvrzRjKQ9LUI4i0cDp7aq51rBqzbBZqMs5Q aXq4R+pY09UeY2qQ2HHp1jl+aSJ2On3XJLb8kC9Cn/xQTI2OPm7sK5ZjkD8hQ+l3 imvHpejVtDTcuEiyhzQQk1DwCtyryKTpxAbSfvvzNNUdKlenHCkjZU37jCjBq6ZK UxrO2SX0Uw1WmsheIuMpf3ChyANq6yurHuOrdYsOB5GysHRqmWJiXWsLLffIt8NY 0vSuWTSPQvFqx81Jdn6p9YDrNxNPhXEA8pNb9MToYU0IePu0siIzcpUMNiFI5VAM y+AC0pqo8034eIvxO09ylMj0tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvCFxWj TI2Ct9P65KmwaX8hG0axMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZX67ZAmHLGbouAUcQwU0RruN5evMWp+x+4gbIAiR+4a03x6Za07Ps ++UHAr7Uhuz91C067UCEWo7zPncPzK8MJ/WJHzWkp184dKUiesIHi0/SPjvfxJG7 E/an1MUvIjLe+zkrqNuOu+J9g7AhyfWEGFOPEwZVoOr6y/W4fat07g1nwOkkho9X kWBkaJaC8ZK9kf9Y/FALJBoxnrLJr+y25aPfc2ymogJoBCdJ2G58fxkoYcT/LSO2 8unHOrNAJhCiAiwTn2cUsdmvmaZAwxZA/PMeILcD5rTozKsA4axfuSpSJwg2hU+k gbBrBMa4sV+wka94Tlc5UXzSLl4h4E78 -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:32 2025 by rpki-client