$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: FFjuQVH+f4AcbWQWkK5IjgSNPSd5sAaQ1nAwN0eYVJw= Subject key identifier: A1:FA:5D:2F:C0:D1:19:15:27:98:4E:30:39:04:64:BB:61:92:B2:63 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C34 Signing time: Sun 10 Aug 2025 18:37:40 +0000 Manifest this update: Sun 10 Aug 2025 18:37:40 +0000 Manifest next update: Sun 17 Aug 2025 18:37:40 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: oStNvAYnvLpDmX+pzo15z3cw3f8FZnbURbyzr1AGFXU=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Aug 10 18:37:40 2025 GMT Not After : Aug 17 18:37:40 2025 GMT Subject: CN=6898e6f4-7b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:3d:b0:59:b6:eb:87:48:61:f2:d2:71:8c: 63:fd:19:a1:5c:14:8b:11:66:45:38:c5:df:95:00: c9:a9:73:35:53:1e:9f:29:64:32:90:d2:da:af:dd: e5:b4:a1:c3:b6:67:f5:7c:62:04:9b:24:99:1b:ab: 8c:93:e5:13:4c:fb:73:82:31:97:b4:ab:53:e2:5c: 91:9f:4b:45:d9:f0:24:45:7f:f1:09:a7:3a:83:3e: 06:8a:2f:37:38:2f:6d:3a:86:07:12:1f:8e:64:1d: 3b:34:36:11:fa:19:43:79:70:e4:dc:37:dd:d6:01: c6:a9:5f:2b:7a:50:df:cd:c4:34:fd:ea:11:24:17: db:cc:f6:e9:88:f6:c5:54:7c:1f:b4:4c:4c:19:a7: b2:03:10:28:80:7e:a8:4b:b3:5f:0c:c3:69:a4:c0: 41:93:40:4c:af:f0:ac:b6:a7:7b:99:fe:8a:9c:4f: 30:6f:0f:96:ec:d8:60:71:e8:0b:ed:20:3a:c2:43: 8d:9b:b0:93:d3:0f:fc:ee:70:0a:20:bb:51:1c:38: 00:73:95:2a:98:ba:6d:ca:b3:9c:d5:60:1f:81:c0: dc:ef:ff:9e:3e:50:8f:83:84:00:c3:1c:65:dd:11: 4a:94:73:4d:f0:ea:93:f4:45:e4:9f:5e:cd:87:ca: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FA:5D:2F:C0:D1:19:15:27:98:4E:30:39:04:64:BB:61:92:B2:63 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:9c:88:60:61:a0:95:1e:d3:fc:52:d9:c3:13:94:9f:96:bf: 6d:d4:46:03:2f:92:2a:54:cd:48:d7:9a:27:1f:8a:56:95:e5: 2f:53:07:c9:2e:f8:5f:41:28:dc:67:dc:49:63:86:8d:cc:2b: 58:01:d3:97:1a:2f:c3:d0:de:cb:b9:21:5f:1e:96:bc:95:64: 6b:3a:6a:70:ff:5b:36:29:4a:93:7f:e5:55:ee:0b:be:c9:1e: 36:86:0a:62:e8:75:fd:6d:61:7b:c3:3a:fe:07:44:c7:bb:bf: bb:c8:d7:9f:f3:a6:ed:e7:cf:fa:d9:47:03:d6:41:e3:28:f3: 77:b5:c7:e1:df:0b:8d:89:12:18:91:77:10:bd:6c:56:c7:ba: c7:e6:ec:c4:fe:22:81:7c:a0:c6:c5:c6:c9:67:c1:9d:b1:c1: 15:3e:45:60:75:38:aa:df:06:14:96:ca:fb:52:e2:13:91:3c: c6:3a:d5:24:53:22:ad:b3:7a:22:a7:e4:04:6b:42:98:27:69: 88:b7:09:9b:f0:e9:b3:59:96:3d:0c:31:dd:ae:b0:dc:66:8d: 68:b9:53:e3:49:c7:c2:f3:0e:57:d1:87:91:07:e3:1f:df:9b: d9:41:1e:4b:d7:6a:cc:ce:18:32:78:df:6a:d6:80:f5:9b:38: 43:15:a4:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwODEwMTgzNzQwWhcNMjUwODE3MTgzNzQwWjAYMRYwFAYD VQQDEw02ODk4ZTZmNC03YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDs9sFm264dIYfLScYxj/RmhXBSLEWZFOMXflQDJqXM1Ux6fKWQykNLar93l tKHDtmf1fGIEmySZG6uMk+UTTPtzgjGXtKtT4lyRn0tF2fAkRX/xCac6gz4Gii83 OC9tOoYHEh+OZB07NDYR+hlDeXDk3Dfd1gHGqV8relDfzcQ0/eoRJBfbzPbpiPbF VHwftExMGaeyAxAogH6oS7NfDMNppMBBk0BMr/Cstqd7mf6KnE8wbw+W7NhgcegL 7SA6wkONm7CT0w/87nAKILtRHDgAc5UqmLptyrOc1WAfgcDc7/+ePlCPg4QAwxxl 3RFKlHNN8OqT9EXkn17Nh8r3RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH6XS/A 0RkVJ5hOMDkEZLthkrJjMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDonIhgYaCVHtP8UtnDE5Sflr9t1EYDL5IqVM1I15onH4pWleUvUwfJ LvhfQSjcZ9xJY4aNzCtYAdOXGi/D0N7LuSFfHpa8lWRrOmpw/1s2KUqTf+VV7gu+ yR42hgpi6HX9bWF7wzr+B0THu7+7yNef86bt58/62UcD1kHjKPN3tcfh3wuNiRIY kXcQvWxWx7rH5uzE/iKBfKDGxcbJZ8GdscEVPkVgdTiq3wYUlsr7UuITkTzGOtUk UyKts3oip+QEa0KYJ2mItwmb8OmzWZY9DDHdrrDcZo1ouVPjScfC8w5X0YeRB+Mf 35vZQR5L12rMzhgyeN9q1oD1mzhDFaRW -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:28 2025 by rpki-client