$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: bf1vD/qnSnKlpL74rTBVvfmWjD93LiKz+fMDyM+m0Lk= Subject key identifier: 33:AA:71:EF:B7:DA:AD:BF:A1:E1:F4:32:99:E5:8E:F5:9A:6D:6A:F0 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 059D Signing time: Sat 14 Jun 2025 22:56:08 +0000 Manifest this update: Sat 14 Jun 2025 22:56:07 +0000 Manifest next update: Sat 21 Jun 2025 22:56:07 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: Ebi9u/94z5C/MXhNKN0Ma9v3tsluPf/eFanINuTVoQQ=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Jun 14 22:56:07 2025 GMT Not After : Jun 21 22:56:07 2025 GMT Subject: CN=684dfe08-6587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:f9:47:02:9f:69:d1:16:9a:5b:d5:c3:b3: 8d:1a:41:72:04:06:68:90:0e:03:18:eb:4c:76:c7: 04:2a:fa:2c:ec:82:42:9b:15:48:4e:d0:e1:a8:dc: 10:82:97:ef:0c:12:47:59:1e:01:9a:3c:1e:e6:82: 66:28:9b:26:5a:e2:9b:4b:36:68:46:52:f5:23:db: 92:5c:14:72:b6:2c:bb:8a:0d:fd:25:4f:32:62:3e: d9:8a:88:f9:27:0a:f1:34:7e:6a:6a:3b:c2:30:04: 1e:36:e1:a7:32:ac:5b:0b:9d:86:45:15:10:e8:e6: 15:5d:e8:56:d4:f2:98:33:d2:03:17:0c:0d:12:8e: 1a:f3:b6:15:e9:ce:65:35:a7:d2:28:35:d0:d9:37: 91:15:c6:51:94:f5:2b:99:97:fc:b0:27:05:1a:c5: 25:bd:99:dc:ca:cd:ef:d9:51:ed:e2:56:7c:dd:38: f5:f7:54:83:f6:b8:1b:0d:40:62:24:8a:95:79:8f: 24:cd:b4:93:57:2f:30:c7:b0:6a:81:b2:a9:93:d4: 0f:29:2d:00:f7:81:47:c4:0a:fe:e9:8e:7a:f4:af: 14:2a:0f:0a:b6:2d:5c:bb:51:3c:75:04:99:cb:d9: f5:75:e9:03:3d:2d:14:ef:0e:f2:27:83:4f:c1:33: 39:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AA:71:EF:B7:DA:AD:BF:A1:E1:F4:32:99:E5:8E:F5:9A:6D:6A:F0 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:fc:5a:50:4a:e7:f4:ae:18:49:e4:cf:4c:df:ae:03:1d:b1: 2e:8a:9e:ab:f4:54:dc:34:2b:f7:4e:df:5a:e9:7c:f5:2d:5b: 8a:64:ae:23:c6:de:c5:72:c6:91:9e:6a:ad:a6:aa:4f:bd:2d: 1b:d3:cf:2a:f0:92:38:5b:38:9d:2a:eb:49:22:7f:5f:ce:57: 61:46:16:da:ce:2b:a2:e8:8b:e0:ae:ba:6c:9d:e4:c7:50:f5: 23:00:a3:0b:9e:44:bf:dd:46:04:e6:ff:42:14:a2:f4:3e:d1: fb:46:ad:bf:06:39:5e:92:dd:6d:dd:20:f7:9d:62:db:0e:ac: 36:9a:cb:82:be:5d:07:7c:e6:77:04:0f:08:b5:3a:40:cd:2f: 78:a3:a6:c9:b7:76:45:be:88:b6:0e:76:fe:03:92:1b:67:18: 21:7e:24:22:a8:3c:a1:f2:3b:cd:15:9e:f8:9a:25:a0:d9:b3: 8c:5d:e4:b7:5b:0b:22:e1:2f:3e:35:fe:41:ac:02:69:67:19: 70:24:15:75:53:62:39:61:6e:30:f7:c3:bf:b8:7e:79:98:47: d2:e4:ab:d5:94:9d:61:0d:d2:ab:06:59:e0:07:29:e0:1d:94: ee:b7:0c:dc:46:fc:cd:76:50:cc:b0:48:cd:4c:72:94:d0:ba: c1:ec:59:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNjE0MjI1NjA3WhcNMjUwNjIxMjI1NjA3WjAYMRYwFAYD VQQDEw02ODRkZmUwOC02NTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7n5RwKfadEWmlvVw7ONGkFyBAZokA4DGOtMdscEKvos7IJCmxVITtDhqNwQ gpfvDBJHWR4Bmjwe5oJmKJsmWuKbSzZoRlL1I9uSXBRytiy7ig39JU8yYj7Zioj5 JwrxNH5qajvCMAQeNuGnMqxbC52GRRUQ6OYVXehW1PKYM9IDFwwNEo4a87YV6c5l NafSKDXQ2TeRFcZRlPUrmZf8sCcFGsUlvZncys3v2VHt4lZ83Tj191SD9rgbDUBi JIqVeY8kzbSTVy8wx7BqgbKpk9QPKS0A94FHxAr+6Y569K8UKg8Kti1cu1E8dQSZ y9n1dekDPS0U7w7yJ4NPwTM5FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOqce+3 2q2/oeH0MpnljvWabWrwMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ/FpQSuf0rhhJ5M9M364DHbEuip6r9FTcNCv3Tt9a6Xz1LVuKZK4j xt7FcsaRnmqtpqpPvS0b088q8JI4WzidKutJIn9fzldhRhbaziui6IvgrrpsneTH UPUjAKMLnkS/3UYE5v9CFKL0PtH7Rq2/Bjlekt1t3SD3nWLbDqw2msuCvl0HfOZ3 BA8ItTpAzS94o6bJt3ZFvoi2Dnb+A5IbZxghfiQiqDyh8jvNFZ74miWg2bOMXeS3 Wwsi4S8+Nf5BrAJpZxlwJBV1U2I5YW4w98O/uH55mEfS5KvVlJ1hDdKrBlngByng HZTutwzcRvzNdlDMsEjNTHKU0LrB7FmV -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:20 2025 by rpki-client