$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: /CW44/0XEmED01Bv1/HFrWLMmN3ASz9myz0dPvHIuuE= Subject key identifier: 0D:52:82:81:1B:6D:F2:5D:DE:83:14:55:8A:D9:05:3F:86:61:70:42 Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 12 Signing time: Fri 13 Jun 2025 06:59:29 +0000 Manifest this update: Fri 13 Jun 2025 06:59:29 +0000 Manifest next update: Fri 20 Jun 2025 06:59:29 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: TInejOs69S1BLoYOBMWSvIOFDd+evPbIYYh4/o58DB8=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Jun 13 06:59:29 2025 GMT Not After : Jun 20 06:59:29 2025 GMT Subject: CN=684bcc51-d675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:91:42:85:01:68:b2:6c:55:ef:65:2e:b4: 52:f9:6c:66:e4:0a:5a:74:da:68:0c:13:73:f8:e4: a5:c1:1a:cc:4a:0a:8c:28:24:0c:a8:fa:e8:39:bc: e7:30:0f:56:f3:8d:4f:42:66:45:fe:6a:18:ac:59: 29:ae:11:df:30:86:5d:de:8d:f6:6c:9e:8c:20:3e: 2b:51:b7:1e:77:78:d5:2f:53:18:ab:0a:34:3a:61: 2d:20:9f:0c:66:71:72:43:c6:6d:5e:c5:87:7f:63: d9:54:04:2f:c8:8a:cf:05:83:fb:b5:4e:75:9d:15: 44:2d:bc:ba:d2:81:4b:ed:87:10:d7:2f:c5:eb:9f: 11:21:af:b6:8d:6d:89:77:90:ef:e6:29:ef:82:e6: 1c:42:7e:3e:ec:42:01:54:f9:aa:b9:88:b4:0f:bc: 5c:ee:bf:22:ba:66:9c:dd:cc:2c:7f:0b:06:c5:b7: 73:e8:41:39:77:af:46:27:d0:a1:23:e9:1c:76:31: b2:50:fc:e8:5b:eb:70:41:85:61:b7:8d:6c:ed:ce: 37:22:fd:a8:18:34:89:6e:24:7c:8d:2b:d6:74:5d: e0:4a:a8:c1:ef:8d:44:fc:fd:6c:6e:fb:a8:7f:38: a9:20:92:b8:29:cc:3e:59:4e:18:56:d4:f9:6d:fa: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:52:82:81:1B:6D:F2:5D:DE:83:14:55:8A:D9:05:3F:86:61:70:42 X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:44:cb:1a:1c:d5:a1:ac:2d:bc:82:06:76:28:03:88:80:dd: 85:d6:13:99:1f:98:6c:0a:c8:61:76:e1:b7:d9:e4:e4:1e:95: 2e:89:41:21:bb:ac:df:bd:74:a2:76:d0:e2:7d:cf:ed:68:e0: 9d:9e:5c:ac:39:03:d8:2a:c8:d8:08:24:eb:62:86:53:62:14: 72:30:0d:34:d4:48:fa:85:27:5f:55:af:7f:23:b6:16:05:9d: 47:b8:dc:42:b3:71:12:50:c0:a0:7b:5b:d7:c4:e0:e1:18:29: 23:18:99:18:d2:5b:e7:6c:2e:f4:93:52:7f:df:c5:55:66:09: 01:8d:24:a7:95:ce:f3:0b:f1:0c:c9:ef:8a:d7:f9:eb:97:f8: 89:ec:70:65:38:14:b8:c1:4e:3e:e2:35:82:57:10:38:14:67: 51:e3:5a:6c:d6:f7:19:64:37:10:88:07:07:fc:0a:70:08:58: 05:43:1a:b5:99:90:cd:3e:5a:45:2d:d9:5a:83:f3:a0:24:d3: 9d:d7:75:17:24:ca:f5:bf:6e:cb:9c:75:d1:6d:1b:04:e4:c0: 9e:e2:31:c7:84:dd:94:04:ce:eb:53:8d:87:11:d1:6d:0a:57: a6:77:a9:88:10:90:7b:55:b4:29:f5:ea:f4:ad:23:c6:de:e4: d7:37:ca:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTA2MTMwNjU5MjlaFw0yNTA2MjAwNjU5MjlaMBgxFjAUBgNV BAMTDTY4NGJjYzUxLWQ2NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp/JFChQFosmxV72UutFL5bGbkClp02mgME3P45KXBGsxKCowoJAyo+ug5vOcw D1bzjU9CZkX+ahisWSmuEd8whl3ejfZsnowgPitRtx53eNUvUxirCjQ6YS0gnwxm cXJDxm1exYd/Y9lUBC/Iis8Fg/u1TnWdFUQtvLrSgUvthxDXL8XrnxEhr7aNbYl3 kO/mKe+C5hxCfj7sQgFU+aq5iLQPvFzuvyK6ZpzdzCx/CwbFt3PoQTl3r0Yn0KEj 6Rx2MbJQ/Ohb63BBhWG3jWztzjci/agYNIluJHyNK9Z0XeBKqMHvjUT8/Wxu+6h/ OKkgkrgpzD5ZThhW1Plt+teRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDVKCgRtt 8l3egxRVitkFP4ZhcEIwHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlEyxoc1aGsLbyCBnYoA4iA3YXWE5kfmGwKyGF24bfZ5OQelS6JQSG7 rN+9dKJ20OJ9z+1o4J2eXKw5A9gqyNgIJOtihlNiFHIwDTTUSPqFJ19Vr38jthYF nUe43EKzcRJQwKB7W9fE4OEYKSMYmRjSW+dsLvSTUn/fxVVmCQGNJKeVzvML8QzJ 74rX+euX+InscGU4FLjBTj7iNYJXEDgUZ1HjWmzW9xlkNxCIBwf8CnAIWAVDGrWZ kM0+WkUt2VqD86Ak053XdRckyvW/bsucddFtGwTkwJ7iMceE3ZQEzutTjYcR0W0K V6Z3qYgQkHtVtCn16vStI8be5Nc3yvI= -----END CERTIFICATE-----Generated at Sun Jun 15 08:28:36 2025 by rpki-client