$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: ydJjm8wzpSVeaw+8KpIIcISZLPJWWcMC4S/POngJuBw= Subject key identifier: 0F:24:57:B8:42:41:F0:22:48:83:E8:A6:89:6C:1B:E3:EE:E0:56:58 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 78 Signing time: Sat 09 Aug 2025 07:16:29 +0000 Manifest this update: Sat 09 Aug 2025 07:16:29 +0000 Manifest next update: Sat 16 Aug 2025 07:16:29 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: Ukcm8AJyOIkrkC1PD218ZKz+eX70yXRj0wmCl1DOne0=) 2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Aug 9 07:16:29 2025 GMT Not After : Aug 16 07:16:29 2025 GMT Subject: CN=6896f5cd-c90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:e7:e4:fb:3d:8d:9c:fb:05:0b:b4:8a:ec: 2b:80:0c:f2:aa:ef:cf:4b:43:a3:1e:e8:ef:df:dc: 26:16:43:85:f7:eb:c6:87:a6:e4:14:30:fc:4a:9d: 10:ba:18:89:7d:f0:e8:2f:a3:ac:77:c1:d8:8b:a0: 2c:bd:81:af:c8:c4:b4:1d:97:bc:31:fe:87:e2:93: 09:d4:76:c2:d7:80:da:94:8d:74:3a:04:5b:ce:4e: b2:1a:7b:4e:b0:0c:19:e5:a9:c5:e2:76:24:36:f8: b9:ff:e1:a8:98:e5:cb:48:b7:79:52:1b:96:2b:d0: 4e:35:55:35:f2:a9:e0:63:a6:4a:c6:fc:f9:8e:63: 46:76:a3:04:a8:0e:7c:b8:f1:a2:87:16:ac:ff:c2: ee:29:f0:0e:93:73:18:51:de:72:2d:00:5e:19:f7: ee:0a:a9:be:32:83:d7:55:f8:ba:25:62:86:ad:13: 0e:50:e0:a6:af:9f:41:00:82:00:f0:58:d8:47:c6: 88:d1:f2:53:c1:8a:99:0b:23:1a:ba:3f:6e:ac:25: ec:34:d5:01:d5:b5:34:3c:71:6b:27:eb:93:5c:59: 4c:01:c7:ca:ac:84:36:a5:0e:a1:9a:c5:c6:16:62: 01:ce:7a:0f:97:48:6d:23:50:04:50:4d:8b:95:29: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:24:57:B8:42:41:F0:22:48:83:E8:A6:89:6C:1B:E3:EE:E0:56:58 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:58:2e:57:80:64:71:6f:26:e0:a5:93:e2:74:92:af:c5:0e: 93:50:39:c3:68:10:0e:0b:31:82:47:6d:49:4f:5f:be:42:c8: 39:8d:90:4d:c7:7f:b7:34:dc:5f:64:76:2e:3f:ff:70:46:92: 1f:0c:ad:12:80:85:51:16:ce:e4:08:fc:b9:bd:5b:d9:0e:21: c4:a6:79:8c:b1:a9:e1:c7:3f:c3:d0:58:f0:c4:91:d8:1e:82: e9:71:8d:6f:46:0a:c0:bb:95:07:cd:66:6f:37:e0:7c:5d:9f: 0d:57:96:af:e4:58:5e:f6:3d:57:b6:2f:e1:e0:a7:94:f8:9f: 51:9e:16:de:84:27:b8:93:29:76:09:c8:d4:f1:eb:60:37:b2: 4b:02:19:62:83:8c:c4:06:67:ce:be:33:2d:5d:60:6d:b4:b7: f9:61:e8:5f:70:89:1d:74:6d:d5:7f:85:f2:fe:0f:6b:df:34: c9:4b:37:f6:fc:3a:77:62:74:3a:9d:16:8e:40:90:1d:2e:99: 75:44:50:bd:43:ac:9c:f4:7b:91:4a:0a:dd:65:50:1d:bb:0f: d5:30:f9:3d:47:25:33:62:8f:0a:2d:41:ab:82:64:94:42:e2: 0f:6a:33:cc:82:aa:be:de:76:1d:88:15:d5:f9:c1:f9:36:f1: 20:1f:e8:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTA4MDkwNzE2MjlaFw0yNTA4MTYwNzE2MjlaMBgxFjAUBgNV BAMTDTY4OTZmNWNkLWM5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsqufk+z2NnPsFC7SK7CuADPKq789LQ6Me6O/f3CYWQ4X368aHpuQUMPxKnRC6 GIl98Ogvo6x3wdiLoCy9ga/IxLQdl7wx/ofikwnUdsLXgNqUjXQ6BFvOTrIae06w DBnlqcXidiQ2+Ln/4aiY5ctIt3lSG5Yr0E41VTXyqeBjpkrG/PmOY0Z2owSoDny4 8aKHFqz/wu4p8A6TcxhR3nItAF4Z9+4Kqb4yg9dV+LolYoatEw5Q4Kavn0EAggDw WNhHxojR8lPBipkLIxq6P26sJew01QHVtTQ8cWsn65NcWUwBx8qshDalDqGaxcYW YgHOeg+XSG0jUARQTYuVKUKJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDyRXuEJB 8CJIg+imiWwb4+7gVlgwHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5L0ZGN0M1RkRDQzBEQjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0pl RDR4ZHgySzEteXpEY082SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF5YLleAZHFvJuClk+J0kq/FDpNQOcNoEA4LMYJHbUlPX75CyDmNkE3H f7c03F9kdi4//3BGkh8MrRKAhVEWzuQI/Lm9W9kOIcSmeYyxqeHHP8PQWPDEkdge gulxjW9GCsC7lQfNZm834Hxdnw1Xlq/kWF72PVe2L+Hgp5T4n1GeFt6EJ7iTKXYJ yNTx62A3sksCGWKDjMQGZ86+My1dYG20t/lh6F9wiR10bdV/hfL+D2vfNMlLN/b8 OndidDqdFo5AkB0umXVEUL1DrJz0e5FKCt1lUB27D9Uw+T1HJTNijwotQauCZJRC 4g9qM8yCqr7edh2IFdX5wfk28SAf6FQ= -----END CERTIFICATE-----Generated at Sat Aug 9 14:18:43 2025 by rpki-client