$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: 3QQL9g8eDR0zvbs0g6X00mi5UkxbOczV7DHt+aBuJp8= Subject key identifier: D4:7D:94:49:04:8C:5D:C4:A6:0D:82:99:A3:E7:22:2A:F7:5B:96:72 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0DB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0DAF Signing time: Sun 10 Aug 2025 17:55:15 +0000 Manifest this update: Sun 10 Aug 2025 17:55:14 +0000 Manifest next update: Sun 17 Aug 2025 17:55:14 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: s1iWcYhvzJu3z9Bju71Yt+WivwLS/rosoGfWfhPcwsk=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 17:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3511 (0xdb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Aug 10 17:55:14 2025 GMT Not After : Aug 17 17:55:14 2025 GMT Subject: CN=6898dd03-1f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:4d:34:45:35:04:59:dd:53:ca:65:5a:06: 4b:d0:1f:bc:d3:03:0c:ee:88:c8:9b:8f:b0:3b:31: 46:73:ae:f0:ad:f0:a5:15:bd:46:9b:1f:dc:5c:c6: 52:08:75:a5:3c:9c:3a:a1:cd:23:6a:9d:8a:76:b5: 2c:a4:1c:c4:d0:1e:76:2f:67:a3:da:8c:c3:d2:2a: 92:1a:13:d1:e6:77:c0:d3:94:8a:50:8d:f1:57:a4: 25:f1:bc:4d:f8:c2:14:3c:3f:ca:98:58:8b:97:56: a8:a4:25:f1:06:de:02:9f:f6:29:bc:b4:30:ea:69: 0e:6c:5f:85:c5:09:5d:4f:86:f2:28:27:8c:11:3c: 85:d9:20:62:76:e2:40:31:09:46:4e:12:73:08:ca: 74:d7:c7:49:b2:5f:f7:75:8a:3d:e3:87:f6:db:2d: c9:07:df:0f:e2:b6:e1:5c:74:a4:49:86:4a:f1:3e: c7:b3:e8:13:55:8e:50:6a:85:11:43:5c:0f:30:75: 27:b9:3f:cc:05:fe:27:09:f3:a5:92:52:a4:8c:1e: 6d:d9:cf:98:eb:40:91:65:cd:9d:36:a3:34:d4:1a: 7f:c2:c6:ce:79:dd:6c:40:27:da:6d:de:6a:89:7b: 3c:4c:8f:63:b6:e0:d8:e4:15:08:d4:dc:27:bf:6e: ee:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:94:49:04:8C:5D:C4:A6:0D:82:99:A3:E7:22:2A:F7:5B:96:72 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:24:7c:2e:24:a8:32:1a:c0:8c:fe:c2:99:2f:a9:d1:90:20: 51:c0:c2:7c:da:40:a8:e0:73:36:d5:88:cb:cf:69:67:0d:32: 35:6f:9a:e2:66:c7:d7:28:65:da:9d:c1:f9:ec:d1:81:f9:66: b7:16:9a:1a:6f:a4:62:30:f0:05:1f:61:e9:20:de:43:4c:0c: 34:98:68:7a:75:48:dd:77:a6:b4:c2:b9:ad:e4:73:b7:74:83: bd:a5:fb:30:ea:25:18:5f:41:2e:6d:0d:f3:9e:71:32:2b:fb: f4:b8:85:46:f4:f8:f1:98:1f:7b:78:51:f3:4f:5d:52:1b:3d: 4a:2d:bb:d9:80:32:d3:35:b4:ba:64:ce:ac:52:8e:02:a2:3f: 6e:89:ab:fd:01:f3:b8:10:69:9f:04:43:11:15:63:81:33:a9: e1:ad:79:e2:8b:a7:4e:bc:d7:34:86:89:c4:0d:d0:ae:0d:69: 33:45:a2:02:2f:67:85:32:d6:ba:67:66:38:1e:b4:80:db:12: cc:56:92:54:20:c7:9e:1a:17:76:f3:fd:85:b3:c1:aa:dd:94: 6b:5e:7a:8f:17:c3:ea:45:fa:59:ee:3f:4f:26:81:96:69:2b: 87:74:ee:38:50:4b:54:75:c7:5f:59:d9:ee:7b:d4:63:ef:49: be:66:18:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUwODEwMTc1NTE0WhcNMjUwODE3MTc1NTE0WjAYMRYwFAYD VQQDEw02ODk4ZGQwMy0xZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AxNNEU1BFndU8plWgZL0B+80wMM7ojIm4+wOzFGc67wrfClFb1Gmx/cXMZS CHWlPJw6oc0jap2KdrUspBzE0B52L2ej2ozD0iqSGhPR5nfA05SKUI3xV6Ql8bxN +MIUPD/KmFiLl1aopCXxBt4Cn/YpvLQw6mkObF+FxQldT4byKCeMETyF2SBiduJA MQlGThJzCMp018dJsl/3dYo944f22y3JB98P4rbhXHSkSYZK8T7Hs+gTVY5QaoUR Q1wPMHUnuT/MBf4nCfOlklKkjB5t2c+Y60CRZc2dNqM01Bp/wsbOed1sQCfabd5q iXs8TI9jtuDY5BUI1Nwnv27uzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR9lEkE jF3Epg2CmaPnIir3W5ZyMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjJHwuJKgyGsCM/sKZL6nRkCBRwMJ82kCo4HM21YjLz2lnDTI1b5ri ZsfXKGXancH57NGB+Wa3Fpoab6RiMPAFH2HpIN5DTAw0mGh6dUjdd6a0wrmt5HO3 dIO9pfsw6iUYX0EubQ3znnEyK/v0uIVG9PjxmB97eFHzT11SGz1KLbvZgDLTNbS6 ZM6sUo4Coj9uiav9AfO4EGmfBEMRFWOBM6nhrXnii6dOvNc0honEDdCuDWkzRaIC L2eFMta6Z2Y4HrSA2xLMVpJUIMeeGhd28/2Fs8Gq3ZRrXnqPF8PqRfpZ7j9PJoGW aSuHdO44UEtUdcdfWdnue9Rj70m+ZhiB -----END CERTIFICATE-----Generated at Tue Aug 12 14:49:06 2025 by rpki-client