$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: KxmU68qJLEdkTxAo9ZJbAISNxhu1u78Ruuhj/UO3vvs= Subject key identifier: A2:31:1F:67:0C:77:76:26:CC:DD:CC:5A:6B:58:A6:B1:C9:60:C1:30 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0627 Signing time: Wed 18 Jun 2025 22:37:15 +0000 Manifest this update: Wed 18 Jun 2025 22:37:14 +0000 Manifest next update: Wed 25 Jun 2025 22:37:14 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: TB7SqU3dLoEYLKA0BzRMFoGGqgkZm4LLOxe5uFz+s2c=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: +9NJjEZlHqkxwGJezaqZvNw38PXtW0zuO81yVZ8rOEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1584 (0x630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Jun 18 22:37:14 2025 GMT Not After : Jun 25 22:37:14 2025 GMT Subject: CN=68533f9a-07a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a8:ac:3f:05:a1:50:b6:0f:9d:9c:0a:51:e6: 1f:83:a7:e8:0e:1b:c8:3f:1a:9c:1c:cb:55:73:46: 50:05:96:f6:9b:ce:42:17:94:48:e3:e3:45:8d:af: 47:7f:a5:b5:04:5d:dd:5d:47:f3:c2:2d:df:91:06: eb:0b:5a:ee:a1:ab:37:b9:ac:d4:f4:51:2b:b4:43: 9c:c5:8b:bc:17:29:16:1c:2a:55:1a:de:64:da:75: 93:9f:49:4d:8c:db:97:ec:88:99:c4:50:f3:7c:0e: f3:d4:5d:f1:46:bc:d1:f1:f7:12:42:68:f0:1e:ff: 60:e3:30:49:43:68:36:86:85:33:1d:65:22:a1:c4: ef:2e:72:44:31:e2:ff:98:8f:f6:e0:6c:4b:53:ca: 46:ee:cb:f8:dd:6d:33:18:6d:79:c7:34:ae:a4:41: ef:38:8d:d8:4e:18:5a:1f:77:20:64:2a:4a:26:fd: e8:81:ed:d5:28:11:ef:7e:05:6a:cd:3c:fe:cc:c1: 20:37:71:b2:18:ef:f4:67:27:33:01:a9:12:dc:74: 99:ca:0d:38:66:0b:48:cf:5e:f6:c8:ba:40:a3:7d: 37:19:c0:b7:19:88:dc:69:95:b0:9c:09:71:01:8c: 73:c3:37:9a:45:28:9c:ac:26:f7:23:c9:66:64:98: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:1F:67:0C:77:76:26:CC:DD:CC:5A:6B:58:A6:B1:C9:60:C1:30 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8e:9e:34:4d:08:51:2e:b6:ee:ed:de:12:c7:51:14:4f:c2: 5f:e9:d0:43:4b:31:1d:68:84:2a:e9:47:6d:4e:67:37:c0:2a: 6a:da:a8:61:df:ff:df:25:4e:2c:fc:02:06:9a:ae:e0:56:c7: f2:05:24:69:a5:0f:d9:43:87:d6:02:2d:ac:63:56:17:ed:a4: 74:96:e9:7d:81:76:ae:e1:27:6e:67:7f:e9:00:bf:cb:f2:80: c0:ee:3b:b7:f1:db:79:65:f7:83:8a:ce:71:67:ff:42:fb:2d: c1:73:9a:a8:7d:3a:9d:cc:54:3f:f8:f4:04:7f:c8:c3:5d:de: aa:8e:d4:eb:0e:6b:f8:51:64:f0:c0:e1:b4:7f:c4:6b:e8:fb: c7:24:3a:60:2a:c8:f0:4f:d7:6a:68:d1:b4:e0:44:33:14:0e: d6:83:c2:9b:81:1d:21:74:54:65:ed:96:3f:5f:3d:32:04:d4: 32:33:b4:23:25:33:60:cd:54:cb:00:05:10:38:2c:eb:a3:d4: 07:53:1d:7a:f1:9b:e8:c2:c9:1c:b5:0e:0d:e1:c8:59:9e:06: e9:a0:18:d2:61:85:95:35:66:25:c8:02:53:7a:84:b6:c1:5b: b9:c9:5b:62:da:77:b3:01:8a:91:43:83:17:d3:6a:f7:39:91: f6:39:15:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUwNjE4MjIzNzE0WhcNMjUwNjI1MjIzNzE0WjAYMRYwFAYD VQQDEw02ODUzM2Y5YS0wN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aisPwWhULYPnZwKUeYfg6foDhvIPxqcHMtVc0ZQBZb2m85CF5RI4+NFja9H f6W1BF3dXUfzwi3fkQbrC1ruoas3uazU9FErtEOcxYu8FykWHCpVGt5k2nWTn0lN jNuX7IiZxFDzfA7z1F3xRrzR8fcSQmjwHv9g4zBJQ2g2hoUzHWUiocTvLnJEMeL/ mI/24GxLU8pG7sv43W0zGG15xzSupEHvOI3YThhaH3cgZCpKJv3oge3VKBHvfgVq zTz+zMEgN3GyGO/0ZyczAakS3HSZyg04ZgtIz172yLpAo303GcC3GYjcaZWwnAlx AYxzwzeaRSicrCb3I8lmZJjp4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIxH2cM d3YmzN3MWmtYprHJYMEwMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQjp40TQhRLrbu7d4Sx1EUT8Jf6dBDSzEdaIQq6UdtTmc3wCpq2qhh 3//fJU4s/AIGmq7gVsfyBSRppQ/ZQ4fWAi2sY1YX7aR0lul9gXau4SduZ3/pAL/L 8oDA7ju38dt5ZfeDis5xZ/9C+y3Bc5qofTqdzFQ/+PQEf8jDXd6qjtTrDmv4UWTw wOG0f8Rr6PvHJDpgKsjwT9dqaNG04EQzFA7Wg8KbgR0hdFRl7ZY/Xz0yBNQyM7Qj JTNgzVTLAAUQOCzro9QHUx168ZvowskctQ4N4chZngbpoBjSYYWVNWYlyAJTeoS2 wVu5yVti2nezAYqRQ4MX02r3OZH2ORXP -----END CERTIFICATE-----Generated at Thu Jun 19 06:48:14 2025 by rpki-client