$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft File: WothvFOjJNeitPQVPQd0bsKjNdI.mft (raw, json) Hash identifier: nYjsly5p+WLGzMw+GrLURGkrf/ftUZ/9ue6YJiO0wcg= Subject key identifier: D3:A9:FB:0E:C5:67:EA:E3:9B:E4:DF:FF:B4:48:B9:F8:5F:EA:74:61 Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft Manifest number: BE Signing time: Tue 05 Aug 2025 06:22:58 +0000 Manifest this update: Tue 05 Aug 2025 06:22:57 +0000 Manifest next update: Tue 12 Aug 2025 06:22:57 +0000 Files and hashes: 1: WothvFOjJNeitPQVPQd0bsKjNdI.crl (hash: rKiswhQ/d5xoQgqQgSedT0DfmfaTg4FjmNVgdNgPAMk=) 2: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (hash: 5XjH5jYQNGqgzAYgO3kN1PD7Sd1lEpbAQIK2Gn00Jgc=) 3: AE51756A556B11EFA5FB1569C4F9AE02.roa (hash: Bt9vGqi9TgbZdaX+9C2xi9dkPbVYKmUnDkvJSbxIGtE=) 4: 014A2E90BC5C11EF9108934FC4F9AE02.roa (hash: HHG06rbqXUGTVwCC0t+f2pu30l3PoUzNu4BfvZ/sQwE=) 5: 02A3523ABC5C11EF9108934FC4F9AE02.roa (hash: tOqCLeToyx3OlovnhW3Ug6iPrFYH9Umb6yvHYh2Zk9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Validity Not Before: Aug 5 06:22:57 2025 GMT Not After : Aug 12 06:22:57 2025 GMT Subject: CN=6891a341-8eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:5d:8f:5f:f0:0e:43:02:d6:55:1a:c7:71: 12:8e:10:0a:49:5a:0d:a2:0a:2b:56:8e:b7:ec:60: 43:84:a0:62:e8:f2:2d:4f:5b:ca:3e:0c:57:c6:a8: db:4c:73:8a:6b:7c:a9:85:e7:85:38:b5:ee:23:df: 5c:27:a3:1b:e7:e6:f7:1e:d0:b3:01:5a:c1:f5:43: 49:73:4e:67:9a:68:ed:9b:e0:4e:25:75:fd:5e:fb: 35:ce:fa:59:52:cd:7d:dc:ce:d0:6e:d5:e8:ab:4a: ef:05:bb:62:cd:5d:5d:59:77:65:cf:79:29:ff:c1: e2:2e:6b:46:9a:8c:5f:0f:7d:49:82:a1:28:ae:b0: fd:8b:a1:4b:2a:8a:5f:ab:f4:66:a4:6c:9a:6c:a3: 65:e9:d7:33:ba:99:23:0f:f8:e1:27:87:0d:38:e3: ac:a6:ef:a9:ff:02:6e:93:11:a7:83:bf:dc:63:49: 8e:d7:fc:9a:c9:3e:a7:ba:16:6f:b8:82:43:aa:87: 3e:39:4d:d0:39:f1:1a:0e:51:94:3d:a5:53:18:7c: d2:3e:14:4a:c2:c7:48:2b:cb:70:10:c8:c3:dd:2f: 27:05:51:27:1e:06:57:81:96:90:ac:f4:ff:b0:a7: 0f:7e:9f:cb:14:03:94:72:7d:98:41:8b:19:9b:77: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A9:FB:0E:C5:67:EA:E3:9B:E4:DF:FF:B4:48:B9:F8:5F:EA:74:61 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6c:20:7d:ef:03:a9:18:d6:7b:7f:2d:d5:6e:f7:f5:93:6d: 1d:97:ec:f6:6a:95:e1:d6:2d:d8:bf:04:e7:b8:56:76:fb:f4: 94:03:8f:56:9f:03:19:bd:4c:c7:0d:b9:29:6b:f4:11:8d:3f: 16:01:0d:08:af:9e:1f:32:f9:c5:de:40:18:17:aa:2f:b5:d0: 43:fd:3c:01:c2:3c:01:b4:24:3a:6d:bb:5c:d4:4c:97:b8:2c: 6e:c8:90:d3:bb:ca:9b:f0:ea:f9:a3:83:b3:ae:06:d5:1a:f0: 3a:bb:b2:ff:f8:9d:2c:a4:f6:59:90:77:36:a2:9a:b0:c5:7a: 92:77:72:35:66:85:c9:91:56:65:79:97:b4:e5:e8:0f:78:c8: 1d:74:4b:ad:e4:89:16:de:e2:17:67:20:5c:45:3f:ca:f5:16: 33:8c:1f:c3:7b:f7:74:0f:db:23:0c:e7:fb:c6:e0:a1:3d:96: b4:5b:df:b4:a8:74:bd:4d:07:31:84:23:4e:b5:b4:2e:ef:e0: aa:5b:e0:36:c4:f9:f2:c2:7d:ba:f8:9e:df:3a:a2:bf:07:46: 6f:38:cc:68:6d:a0:8d:ea:e4:f7:e4:73:1d:63:08:08:93:8b: 6b:b4:50:05:a1:d7:68:40:d6:2c:30:d8:dc:87:94:c5:a6:71: 93:5b:be:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEMTIxMTAvBgNVBAUTKDVBOEI2MUJDNTNBMzI0RDdBMkI0RjQxNTNEMDc3NDZF QzJBMzM1RDIwHhcNMjUwODA1MDYyMjU3WhcNMjUwODEyMDYyMjU3WjAYMRYwFAYD VQQDEw02ODkxYTM0MS04ZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdldj1/wDkMC1lUax3ESjhAKSVoNogorVo637GBDhKBi6PItT1vKPgxXxqjb THOKa3ypheeFOLXuI99cJ6Mb5+b3HtCzAVrB9UNJc05nmmjtm+BOJXX9Xvs1zvpZ Us193M7QbtXoq0rvBbtizV1dWXdlz3kp/8HiLmtGmoxfD31JgqEorrD9i6FLKopf q/RmpGyabKNl6dczupkjD/jhJ4cNOOOspu+p/wJukxGng7/cY0mO1/yayT6nuhZv uIJDqoc+OU3QOfEaDlGUPaVTGHzSPhRKwsdIK8twEMjD3S8nBVEnHgZXgZaQrPT/ sKcPfp/LFAOUcn2YQYsZm3czMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOp+w7F Z+rjm+Tf/7RIufhf6nRhMB8GA1UdIwQYMBaAFFqLYbxToyTXorT0FT0HdG7CozXS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0QxMi9BQjg5MzRGMjUy QzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpOZWl0UFFWUFFkMGJzS2pO ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5kSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QxMi9BQjg5MzRGMjUyQzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9Xb3RodkZPakpO ZWl0UFFWUFFkMGJzS2pOZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhbCB97wOpGNZ7fy3Vbvf1k20dl+z2apXh1i3YvwTnuFZ2+/SUA49W nwMZvUzHDbkpa/QRjT8WAQ0Ir54fMvnF3kAYF6ovtdBD/TwBwjwBtCQ6bbtc1EyX uCxuyJDTu8qb8Or5o4OzrgbVGvA6u7L/+J0spPZZkHc2opqwxXqSd3I1ZoXJkVZl eZe05egPeMgddEut5IkW3uIXZyBcRT/K9RYzjB/De/d0D9sjDOf7xuChPZa0W9+0 qHS9TQcxhCNOtbQu7+CqW+A2xPnywn26+J7fOqK/B0ZvOMxobaCN6uT35HMdYwgI k4trtFAFoddoQNYsMNjch5TFpnGTW74r -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:58 2025 by rpki-client