$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json) Hash identifier: y6BsRIdbjyVczRBO1JAmA5twuib8aF5KeJz52VY4VC8= Subject key identifier: 32:F0:2B:1B:8F:E6:A0:A6:24:5D:13:EB:9D:8A:8B:2F:C7:D2:93:29 Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft Manifest number: 1C5F Signing time: Fri 08 Aug 2025 16:20:29 +0000 Manifest this update: Fri 08 Aug 2025 16:20:29 +0000 Manifest next update: Fri 15 Aug 2025 16:20:29 +0000 Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: nRDfSo4+O5N+JQCCbDtoM3jVb61OAj/po6FpMhB4DI8=) 2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7280 (0x1c70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Aug 8 16:20:29 2025 GMT Not After : Aug 15 16:20:29 2025 GMT Subject: CN=689623cd-7ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:73:02:31:bc:0a:b8:89:f1:b6:3a:73:d2: 83:c1:39:67:10:ad:94:fe:1f:ef:1c:21:f9:32:64: 83:25:a5:11:0e:f8:0f:d6:f9:d5:19:41:f1:f2:3b: 43:d2:9f:81:d9:cd:6a:17:da:3d:bd:19:8e:e8:31: 0d:40:3e:3a:82:bb:fa:8a:21:5e:c3:9b:8c:a9:4c: 9f:8f:e5:d5:72:52:d0:29:bf:74:d9:9f:4f:49:01: 36:ad:3c:a5:39:ad:ca:31:38:e2:11:d8:89:fc:fa: c1:6b:ee:bc:bb:ee:db:1b:60:7f:d3:bd:35:c7:21: a8:62:ce:77:99:59:12:0f:51:f1:0c:5a:91:9d:07: 69:76:3a:1a:95:43:e7:6b:54:b6:7c:eb:ad:38:0b: 2e:e4:eb:be:ac:1b:13:e2:d2:32:ce:fd:68:44:6a: 4f:e3:d1:21:d2:8a:47:1e:35:4f:26:6f:41:b7:14: 4c:e9:21:4a:aa:4a:b8:06:cd:25:39:7a:c5:15:98: 0f:d0:fb:7f:22:c5:e2:e4:65:03:40:12:f7:de:09: d9:b7:c8:90:53:f8:05:4f:5e:90:0e:0b:3f:e3:3b: 77:e2:78:3c:4b:a6:16:85:e5:6d:c3:19:f3:68:ec: 37:6e:d4:6d:fa:57:1c:08:ea:58:ab:2b:da:73:61: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F0:2B:1B:8F:E6:A0:A6:24:5D:13:EB:9D:8A:8B:2F:C7:D2:93:29 X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5c:a5:2f:55:7d:2f:41:ec:2a:64:57:52:fe:b8:0f:a1:a6: cb:1c:f1:59:4d:3f:23:6d:ae:c2:80:d2:5a:48:2b:a3:3a:94: af:75:ca:a9:67:6f:41:d5:b0:28:15:84:2e:dd:bc:ec:ec:e7: e2:3f:6f:5e:8d:8c:8c:2f:82:42:8b:10:f1:e9:6f:4d:d1:db: 8b:b3:a0:6d:e9:e9:c7:be:70:79:d2:a7:ad:80:54:6a:27:16: f0:0a:8c:58:0a:d1:f3:fc:cf:ed:e7:d2:d1:8f:b2:23:ba:78: 9d:00:74:e3:05:6f:4b:4f:e1:8e:08:40:50:9b:85:f9:a3:87: 6f:1a:68:4f:f0:f0:df:9b:61:54:86:74:dd:f8:16:77:e3:47: b1:ac:f5:dd:06:a4:f3:6c:9e:19:8d:d0:99:fc:7a:b5:c4:15: 10:63:d2:66:6d:80:5f:e8:c8:2b:f4:b2:5e:ed:c1:bc:be:73: 42:2c:e7:15:02:df:8a:20:4f:2a:c8:69:d7:c3:fa:0b:98:2b: 71:9e:e0:fe:b9:5c:46:89:ce:e5:06:78:3c:54:1b:17:1e:b7: 86:b7:39:9e:c6:f1:79:9f:4a:46:06:d6:f7:5f:08:d7:ec:37: 5a:cd:a9:e7:4e:18:d6:fb:67:40:c9:b0:55:30:e7:14:13:4c: 4c:58:2f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjUwODA4MTYyMDI5WhcNMjUwODE1MTYyMDI5WjAYMRYwFAYD VQQDEw02ODk2MjNjZC03ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQFzAjG8CriJ8bY6c9KDwTlnEK2U/h/vHCH5MmSDJaURDvgP1vnVGUHx8jtD 0p+B2c1qF9o9vRmO6DENQD46grv6iiFew5uMqUyfj+XVclLQKb902Z9PSQE2rTyl Oa3KMTjiEdiJ/PrBa+68u+7bG2B/0701xyGoYs53mVkSD1HxDFqRnQdpdjoalUPn a1S2fOutOAsu5Ou+rBsT4tIyzv1oRGpP49Eh0opHHjVPJm9BtxRM6SFKqkq4Bs0l OXrFFZgP0Pt/IsXi5GUDQBL33gnZt8iQU/gFT16QDgs/4zt34ng8S6YWheVtwxnz aOw3btRt+lccCOpYqyvac2HDNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLwKxuP 5qCmJF0T652Kiy/H0pMpMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BRDA4QUYyNkU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpK UW54X3lkM2R6MHFDaDJDd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnXKUvVX0vQewqZFdS/rgPoabLHPFZTT8jba7CgNJaSCujOpSvdcqp Z29B1bAoFYQu3bzs7OfiP29ejYyML4JCixDx6W9N0duLs6Bt6enHvnB50qetgFRq JxbwCoxYCtHz/M/t59LRj7IjunidAHTjBW9LT+GOCEBQm4X5o4dvGmhP8PDfm2FU hnTd+BZ340exrPXdBqTzbJ4ZjdCZ/Hq1xBUQY9JmbYBf6Mgr9LJe7cG8vnNCLOcV At+KIE8qyGnXw/oLmCtxnuD+uVxGic7lBng8VBsXHreGtzmexvF5n0pGBtb3XwjX 7DdazannThjW+2dAybBVMOcUE0xMWC/h -----END CERTIFICATE-----Generated at Sat Aug 9 01:16:34 2025 by rpki-client