$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json) Hash identifier: bncL4whworMvG/vT/9I1eWV4JPaNRXeiZQ94yVdymvg= Subject key identifier: 14:05:4D:90:BA:99:9A:96:9F:F5:48:DD:4F:65:0E:26:4A:D4:9B:40 Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft Manifest number: 01CC Signing time: Fri 13 Jun 2025 02:02:40 +0000 Manifest this update: Fri 13 Jun 2025 02:02:39 +0000 Manifest next update: Fri 20 Jun 2025 02:02:39 +0000 Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: VEkQrybhK07yIFG7BbnukwkAcAglJ2PXwbSnzZs8m4w=) 2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: IXWkWs++k8QNiBEV5gRLUUd6hmjdG0gw9M6G9nB2OC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Validity Not Before: Jun 13 02:02:39 2025 GMT Not After : Jun 20 02:02:39 2025 GMT Subject: CN=684b86c0-3083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:04:9a:a9:68:80:49:91:e4:36:76:11:2d: 5f:c5:23:fe:c4:aa:4e:63:5c:fc:2a:f2:72:4d:81: 08:44:4b:71:57:26:32:0a:25:5a:ed:69:e8:2f:3b: af:08:d7:22:81:79:73:4a:a3:a0:e4:1a:eb:3e:3a: 72:72:0e:bd:2d:11:b2:07:50:b7:76:58:d1:da:77: 3d:91:66:50:44:d1:87:fd:be:a8:7d:92:c0:79:95: 7c:29:7b:ca:f5:e8:96:f8:b9:43:f6:ac:5e:55:2d: fc:56:9b:76:bd:7d:5a:6c:6f:bc:41:c0:86:7c:44: c2:4d:b5:9e:7a:d1:ab:4d:1c:0f:0a:54:54:14:28: d4:53:aa:dd:e7:74:81:a6:2d:20:4f:bc:6f:fd:a2: bc:e3:1e:d6:7c:a1:d2:50:77:41:78:f1:0c:f5:33: f4:43:0e:07:bf:d5:fe:ce:c0:0d:5b:73:8c:e7:b4: cf:25:87:11:f5:f8:77:6f:35:7a:2a:54:d9:74:38: 31:ff:a9:4e:ba:a0:9d:70:c3:81:27:af:3f:cb:4d: 27:82:81:f9:16:87:c2:ee:b8:36:41:82:9b:98:b7: 97:0e:6d:0d:9d:de:0b:4b:89:5a:9c:f6:20:37:7e: d3:da:d8:a8:14:6f:6d:10:f2:8f:a9:c4:5a:fd:40: 6c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:05:4D:90:BA:99:9A:96:9F:F5:48:DD:4F:65:0E:26:4A:D4:9B:40 X509v3 Authority Key Identifier: keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:ba:4e:f0:8c:b8:1b:e9:27:9b:a1:04:24:a5:eb:92:84:2f: 35:39:d9:70:c5:8a:30:0a:60:8d:1b:36:84:bd:0b:58:7a:36: 72:d0:a0:e2:bb:74:ad:c0:22:97:1a:1c:c4:b5:8d:75:56:36: c0:8c:bc:5c:64:95:d8:9d:f2:4e:28:fa:ea:28:51:80:c9:f7: 4d:ce:32:37:f7:ab:04:1b:83:02:9b:03:1f:6b:09:0b:e8:94: 9a:3d:20:3c:51:94:38:0a:1d:00:91:47:ca:da:67:a5:4f:0f: cb:2e:e4:91:86:a4:e9:d4:53:f7:8d:ff:eb:af:7a:29:6c:16: e0:ba:35:88:f6:fc:37:4b:fe:4e:3d:5d:bd:c6:75:35:a4:75: 5c:55:bd:8c:60:b0:fa:be:13:c3:31:47:37:14:24:09:b5:b0: 8c:92:03:6c:90:d4:3e:3b:c4:4f:2b:6c:85:05:50:98:c4:1a: a7:04:eb:00:37:32:b4:26:a1:77:6a:cd:ba:c2:09:03:44:a0: e7:fd:b0:a1:8a:6b:67:e7:9f:78:62:2b:9e:3c:ec:1b:2f:b7: ae:4a:e2:0e:c8:6a:0d:5e:4a:f3:29:cb:ee:63:1e:78:93:d3: 0a:2e:6b:54:59:7e:33:41:be:5a:1a:c3:c3:ef:dc:26:8f:45: 4d:ae:d9:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2 OUM5MDAzRjQwHhcNMjUwNjEzMDIwMjM5WhcNMjUwNjIwMDIwMjM5WjAYMRYwFAYD VQQDEw02ODRiODZjMC0zMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SsEmqlogEmR5DZ2ES1fxSP+xKpOY1z8KvJyTYEIREtxVyYyCiVa7WnoLzuv CNcigXlzSqOg5BrrPjpycg69LRGyB1C3dljR2nc9kWZQRNGH/b6ofZLAeZV8KXvK 9eiW+LlD9qxeVS38Vpt2vX1abG+8QcCGfETCTbWeetGrTRwPClRUFCjUU6rd53SB pi0gT7xv/aK84x7WfKHSUHdBePEM9TP0Qw4Hv9X+zsANW3OM57TPJYcR9fh3bzV6 KlTZdDgx/6lOuqCdcMOBJ68/y00ngoH5FofC7rg2QYKbmLeXDm0Nnd4LS4lanPYg N37T2tioFG9tEPKPqcRa/UBsJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQFTZC6 mZqWn/VI3U9lDiZK1JtAMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF cm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCuk7wjLgb6SeboQQkpeuShC81OdlwxYowCmCNGzaEvQtYejZy0KDi u3StwCKXGhzEtY11VjbAjLxcZJXYnfJOKPrqKFGAyfdNzjI396sEG4MCmwMfawkL 6JSaPSA8UZQ4Ch0AkUfK2melTw/LLuSRhqTp1FP3jf/rr3opbBbgujWI9vw3S/5O PV29xnU1pHVcVb2MYLD6vhPDMUc3FCQJtbCMkgNskNQ+O8RPK2yFBVCYxBqnBOsA NzK0JqF3as26wgkDRKDn/bChimtn5594YiuePOwbL7euSuIOyGoNXkrzKcvuYx54 k9MKLmtUWX4zQb5aGsPD79wmj0VNrtl5 -----END CERTIFICATE-----Generated at Sat Jun 14 17:55:11 2025 by rpki-client