$ rpki-client -vvf rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft File: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft (raw, json) Hash identifier: dN5z5yjC2jmwvCIOw5Qfdsbjy+3LB44D5tGyPFoTdA0= Subject key identifier: 97:68:95:08:16:89:2A:0A:97:E9:1F:D5:C4:D7:AA:CE:B7:47:81:ED Authority key identifier: 5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 Certificate issuer: /CN=A9158322/serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft Manifest number: 0106 Signing time: Sun 03 Aug 2025 05:22:08 +0000 Manifest this update: Sun 03 Aug 2025 05:22:07 +0000 Manifest next update: Sun 10 Aug 2025 05:22:07 +0000 Files and hashes: 1: WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl (hash: R5JdkGF38wIDUwwTjiUgeybIbhN+8dU1wcKSnQfo1jM=) 2: 90D6EB20DF5811EE9A25765FC4F9AE02.roa (hash: 9yKuVeku78GalBmu1IDdWmb+Ncr/r5STqW93UMJtxuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158322, serialNumber=5AF345C222B09A555C7E6AA5A57361030B9317A6 Validity Not Before: Aug 3 05:22:07 2025 GMT Not After : Aug 10 05:22:07 2025 GMT Subject: CN=688ef200-ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:42:2a:54:be:74:cc:12:c3:42:82:e5:00: a4:56:ff:d6:2d:56:23:69:c9:e6:af:f5:ee:fa:61: b1:2e:69:fd:4c:87:18:21:4b:4f:81:ec:7d:44:95: 8d:33:6e:64:cf:09:34:85:cf:51:1e:99:fe:0e:45: 3b:89:68:ac:74:e5:10:75:0f:d5:f2:ea:92:11:02: ab:7b:9b:d0:e4:b8:7d:f2:1a:b9:d0:e5:60:66:a5: ff:3d:ec:20:0d:04:42:fb:ed:43:9a:b8:0f:f9:86: 3b:b8:fe:a4:83:fa:e1:2a:30:32:8e:ff:71:3e:0a: 60:1b:35:19:ac:c2:fd:f1:44:34:e5:b0:4c:2d:ec: 7a:ce:ae:df:1d:8b:0d:81:8c:c8:f9:4d:ff:5a:a3: 99:0d:e4:9b:6a:fa:fb:eb:44:ce:c9:06:b7:91:1a: c9:65:75:0a:95:77:7e:8b:bf:60:0d:b2:ac:23:af: 71:b2:16:e1:ae:c1:e3:d8:74:a0:e2:9d:65:80:9b: e7:a1:0f:c8:31:22:e8:23:71:89:5d:2e:06:15:68: 3a:1f:cb:b0:bc:fe:dd:f0:4f:e3:c4:aa:17:05:35: 1f:09:65:36:70:4a:18:7d:cc:d6:92:39:6d:bf:b3: 95:b9:52:1e:d2:1c:68:ac:f3:ad:8c:73:6d:c3:78: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:95:08:16:89:2A:0A:97:E9:1F:D5:C4:D7:AA:CE:B7:47:81:ED X509v3 Authority Key Identifier: keyid:5A:F3:45:C2:22:B0:9A:55:5C:7E:6A:A5:A5:73:61:03:0B:93:17:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158322/55AC0666DF5811EE9F4CCF5EC4F9AE02/WvNFwiKwmlVcfmqlpXNhAwuTF6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cc:9e:2c:da:3b:d1:d1:67:2d:c6:74:00:d4:ba:42:d9:11: d5:d9:4d:06:74:3f:57:27:8a:aa:e8:1b:ef:85:ec:14:bb:88: 3d:aa:06:2c:e9:a9:2b:5e:ef:ad:ec:11:5a:e3:0c:24:1e:82: c7:bd:2e:a2:ed:a8:cb:15:eb:f5:2f:42:69:e3:99:04:3b:bc: 12:d8:3a:e9:a1:20:a3:ae:6e:70:9c:fd:17:d9:76:ae:8b:70: 69:68:27:c5:86:b7:11:6b:47:d3:71:06:16:4d:6f:67:64:2e: aa:80:e9:40:9a:10:b1:49:63:d8:40:a5:e8:b5:54:f4:fe:90: 02:97:f1:41:bf:eb:20:ce:17:3d:1a:74:d6:c7:7c:8b:a4:a5: 7a:49:31:3f:96:9d:ad:57:2f:4b:b3:31:7d:b2:24:3c:61:13: 66:b0:b4:70:fe:01:0b:eb:b4:05:3c:07:99:af:61:cb:39:ad: 5e:69:ca:15:67:af:ee:85:9a:3b:0b:12:ce:c9:01:8f:40:e3: f2:ed:14:5d:9f:0c:1c:fd:79:e4:b9:15:03:ad:72:e1:db:7e: 87:95:3e:84:f8:80:0b:9e:ea:9b:f0:09:bf:aa:27:7c:f5:1f: 37:99:90:b3:c6:8d:22:26:35:b4:e3:35:c8:a2:12:d9:27:9a: 38:88:7f:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzMjIxMTAvBgNVBAUTKDVBRjM0NUMyMjJCMDlBNTU1QzdFNkFBNUE1NzM2MTAz MEI5MzE3QTYwHhcNMjUwODAzMDUyMjA3WhcNMjUwODEwMDUyMjA3WjAYMRYwFAYD VQQDEw02ODhlZjIwMC1lYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfFCKlS+dMwSw0KC5QCkVv/WLVYjacnmr/Xu+mGxLmn9TIcYIUtPgex9RJWN M25kzwk0hc9RHpn+DkU7iWisdOUQdQ/V8uqSEQKre5vQ5Lh98hq50OVgZqX/Pewg DQRC++1DmrgP+YY7uP6kg/rhKjAyjv9xPgpgGzUZrML98UQ05bBMLex6zq7fHYsN gYzI+U3/WqOZDeSbavr760TOyQa3kRrJZXUKlXd+i79gDbKsI69xshbhrsHj2HSg 4p1lgJvnoQ/IMSLoI3GJXS4GFWg6H8uwvP7d8E/jxKoXBTUfCWU2cEoYfczWkjlt v7OVuVIe0hxorPOtjHNtw3guEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdolQgW iSoKl+kf1cTXqs63R4HtMB8GA1UdIwQYMBaAFFrzRcIisJpVXH5qpaVzYQMLkxem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODMyMi81NUFDMDY2NkRG NTgxMUVFOUY0Q0NGNUVDNEY5QUUwMi9Xdk5Gd2lLd21sVmNmbXFscFhOaEF3dVRG NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d2TkZ3aUt3bWxWY2ZtcWxwWE5oQXd1VEY2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODMyMi81NUFDMDY2NkRGNTgxMUVFOUY0Q0NGNUVDNEY5QUUwMi9Xdk5Gd2lLd21s VmNmbXFscFhOaEF3dVRGNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5zJ4s2jvR0WctxnQA1LpC2RHV2U0GdD9XJ4qq6BvvhewUu4g9qgYs 6akrXu+t7BFa4wwkHoLHvS6i7ajLFev1L0Jp45kEO7wS2DrpoSCjrm5wnP0X2Xau i3BpaCfFhrcRa0fTcQYWTW9nZC6qgOlAmhCxSWPYQKXotVT0/pACl/FBv+sgzhc9 GnTWx3yLpKV6STE/lp2tVy9LszF9siQ8YRNmsLRw/gEL67QFPAeZr2HLOa1eacoV Z6/uhZo7CxLOyQGPQOPy7RRdnwwc/XnkuRUDrXLh236HlT6E+IALnuqb8Am/qid8 9R83mZCzxo0iJjW04zXIohLZJ5o4iH+P -----END CERTIFICATE-----Generated at Mon Aug 4 11:15:24 2025 by rpki-client