$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft File: wOMbX0XP5SusXO243MahoyL0cF0.mft (raw, json) Hash identifier: JxefNG/t1CvpwXdPVXkzxZ/TNNYsEMB/OfIXu4WEst4= Subject key identifier: 20:39:71:D7:A3:41:AE:FA:64:CA:23:41:1B:EC:7A:FC:A4:47:D6:B6 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft Manifest number: EB Signing time: Thu 19 Jun 2025 04:53:29 +0000 Manifest this update: Thu 19 Jun 2025 04:53:28 +0000 Manifest next update: Thu 26 Jun 2025 04:53:28 +0000 Files and hashes: 1: wOMbX0XP5SusXO243MahoyL0cF0.crl (hash: glF9j9875MiGmzXKjlfDQt9sl38znsgPw9vBgG3c/MI=) 2: E37CCF70718911EFA0C30257C4F9AE02.roa (hash: 4VMmTh43Ie+WC2FsSYbscWpgEd2iZVkcSnXyHvFog5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Jun 19 04:53:28 2025 GMT Not After : Jun 26 04:53:28 2025 GMT Subject: CN=685397c8-5c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b4:50:96:9d:1a:ce:cd:79:a5:ef:42:31:be: e8:d0:67:67:47:05:40:13:e4:a9:f7:83:ab:cf:87: 20:14:3f:05:e3:3e:88:dc:8e:f0:b3:20:73:d4:30: 09:1c:e7:a0:2d:b8:a6:5d:ca:de:a1:2d:cf:45:21: 44:69:59:e5:51:d6:21:9c:c2:3f:ae:9f:e8:f1:d3: 47:a3:2e:5c:c6:eb:e6:f4:d3:bd:af:62:7f:ba:7b: d2:e7:41:9c:7d:33:cb:9a:43:32:1e:dd:bf:00:5e: 0b:ec:db:75:36:64:b8:49:4a:c0:5e:4b:29:99:01: f8:12:48:76:ee:df:02:3b:3a:64:3b:88:9e:33:ee: d7:c3:f3:c4:21:86:c7:10:e2:13:64:e9:45:7f:f1: 23:a8:be:bd:21:8b:91:e7:56:6b:7f:9e:e5:ac:20: 2a:a7:5c:73:8a:9b:c1:0b:68:dc:a5:19:9a:a4:6c: 17:f9:6d:a2:7d:a9:46:46:2b:05:4c:f2:73:82:b6: f0:1c:97:56:74:ee:df:93:0b:97:be:d0:82:31:30: 81:ca:23:ce:81:cf:7a:26:a7:81:cc:c9:96:ea:55: 47:20:80:03:24:f6:30:2e:d2:5c:06:ca:26:8a:b5: 5f:b6:72:85:9a:ed:41:79:94:0d:2f:8f:d5:1b:df: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:71:D7:A3:41:AE:FA:64:CA:23:41:1B:EC:7A:FC:A4:47:D6:B6 X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6d:29:c0:18:b3:de:9d:a7:04:99:78:b8:ab:d1:5c:e7:76: 6f:72:69:3b:3b:bb:cf:e4:d5:3c:6a:52:24:41:c8:52:8b:e7: a6:09:ff:1e:3f:c5:50:4f:17:20:f0:84:fb:e6:7d:5a:d0:59: af:43:14:6a:a2:33:b7:c2:98:11:2f:17:71:1e:22:32:e7:44: 35:be:16:72:1b:e5:eb:ef:59:96:5f:1f:4f:b0:f3:4c:6b:ee: 12:11:0b:88:15:0a:35:5a:26:4a:f5:dd:63:6e:dd:a8:ab:44: b7:d0:ed:fc:21:79:6d:a9:99:0d:48:10:43:7c:a1:13:cf:8a: 39:d9:58:54:b6:84:27:cc:dd:8b:22:e6:10:13:fe:37:86:70: 79:fe:b0:2d:1f:5f:bc:5e:53:cd:0a:cc:d0:6b:a3:ec:db:35: 39:6e:b8:2b:3b:b3:59:e0:fb:3b:59:b8:ea:97:17:f4:46:05: 84:52:83:ce:76:71:72:27:10:f9:d4:a9:3a:d7:fa:7e:b0:71: 53:13:e9:e6:23:44:68:55:ad:b1:78:db:3b:8c:04:e5:32:e5: 44:9b:48:ef:69:f1:83:af:59:ae:d6:03:10:15:80:54:f5:cb: 20:55:57:4e:3d:c3:9b:6a:69:20:1d:51:9d:04:34:3d:c9:13: 50:91:de:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwNjE5MDQ1MzI4WhcNMjUwNjI2MDQ1MzI4WjAYMRYwFAYD VQQDEw02ODUzOTdjOC01YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bRQlp0azs15pe9CMb7o0GdnRwVAE+Sp94Orz4cgFD8F4z6I3I7wsyBz1DAJ HOegLbimXcreoS3PRSFEaVnlUdYhnMI/rp/o8dNHoy5cxuvm9NO9r2J/unvS50Gc fTPLmkMyHt2/AF4L7Nt1NmS4SUrAXkspmQH4Ekh27t8COzpkO4ieM+7Xw/PEIYbH EOITZOlFf/EjqL69IYuR51Zrf57lrCAqp1xzipvBC2jcpRmapGwX+W2ifalGRisF TPJzgrbwHJdWdO7fkwuXvtCCMTCByiPOgc96JqeBzMmW6lVHIIADJPYwLtJcBsom irVftnKFmu1BeZQNL4/VG9/1CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA5cdej Qa76ZMojQRvsevykR9a2MB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkY3Qy84NkY5MTYxQ0ZDNUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVT dXNYTzI0M01haG95TDBjRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9bSnAGLPenacEmXi4q9Fc53Zvcmk7O7vP5NU8alIkQchSi+emCf8e P8VQTxcg8IT75n1a0FmvQxRqojO3wpgRLxdxHiIy50Q1vhZyG+Xr71mWXx9PsPNM a+4SEQuIFQo1WiZK9d1jbt2oq0S30O38IXltqZkNSBBDfKETz4o52VhUtoQnzN2L IuYQE/43hnB5/rAtH1+8XlPNCszQa6Ps2zU5brgrO7NZ4Ps7Wbjqlxf0RgWEUoPO dnFyJxD51Kk61/p+sHFTE+nmI0RoVa2xeNs7jATlMuVEm0jvafGDr1mu1gMQFYBU 9csgVVdOPcObamkgHVGdBDQ9yRNQkd6f -----END CERTIFICATE-----Generated at Fri Jun 20 17:35:41 2025 by rpki-client