$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json) Hash identifier: t8owdcMkjJ6/ho8+raotx5Mbd0J3FRU73ZrfPKpuT6k= Subject key identifier: 8C:67:6B:F6:14:0B:AA:96:95:BF:67:B1:70:99:15:DA:A9:38:88:AE Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft Manifest number: 045F Signing time: Sat 14 Jun 2025 23:53:29 +0000 Manifest this update: Sat 14 Jun 2025 23:53:28 +0000 Manifest next update: Sat 21 Jun 2025 23:53:28 +0000 Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: CDq2+Unr6UB1W53QUSdS30OOUckhJzSJlEvthnt6fLE=) 2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Validity Not Before: Jun 14 23:53:28 2025 GMT Not After : Jun 21 23:53:28 2025 GMT Subject: CN=684e0b78-9429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:78:00:79:ef:0c:1f:a2:4f:78:d9:a8:a9: 39:7f:b6:02:96:4b:c7:57:9f:3b:f4:ed:d6:43:5d: 86:a8:9c:f9:b1:98:6f:dc:09:bd:da:06:ba:c1:1b: 23:bb:09:94:e3:be:bd:bd:c0:4b:a7:2b:dd:40:ce: 4d:ed:5b:80:5e:5c:2c:7c:41:03:20:b2:1f:5a:8b: 29:1f:66:49:92:fd:6c:c7:b5:40:5a:22:3f:e5:f6: 3e:54:df:a9:76:66:36:66:51:6b:12:0d:53:60:40: e1:60:2a:31:3b:9c:5c:bc:32:3d:e0:eb:83:d1:c2: db:6f:0b:33:26:9a:d9:b5:5d:d7:70:34:f0:66:c5: 58:93:dd:79:e2:e7:85:e1:90:20:1d:31:51:50:96: 7d:aa:75:78:c9:3f:34:e2:88:63:91:c4:eb:46:35: cb:72:0f:12:fd:d9:37:b7:57:a7:99:e7:eb:c9:d4: 7b:11:25:0e:ee:bd:71:c2:a9:66:38:14:c8:c4:c9: fe:61:53:79:2c:b3:e5:6f:af:9b:f0:86:fa:05:6e: ef:b8:bd:7a:a6:aa:2d:2a:1c:0c:63:05:c1:96:84: 60:f7:7f:59:92:b3:87:6a:ae:1e:a2:8c:5c:7a:06: 06:95:c1:57:04:93:f8:cf:24:05:01:2d:b3:ca:f6: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:67:6B:F6:14:0B:AA:96:95:BF:67:B1:70:99:15:DA:A9:38:88:AE X509v3 Authority Key Identifier: keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:22:9a:1d:e5:de:7c:6f:37:7e:d7:c7:21:21:73:aa:0f:bc: 4f:f8:0e:26:19:17:e5:77:01:54:45:74:a8:db:92:f7:9a:7d: 21:f3:88:3f:52:01:e0:b2:e0:11:02:0e:3e:28:e5:47:a3:b9: b8:38:53:a9:45:9b:99:f7:09:55:80:92:78:78:a3:8a:85:b5: 8c:fb:d1:01:a3:99:bc:2d:3b:2f:70:2c:4e:c7:9a:a8:4c:09: 4b:de:6a:ce:9e:3b:3c:73:c3:35:4f:87:26:ea:d4:c6:f6:e8: 31:30:f0:0a:e8:5f:ec:42:69:54:59:a7:f2:60:a3:76:b6:20: 65:62:5c:34:32:5f:1f:a2:35:33:c1:b8:11:9d:11:6d:03:4d: fb:cf:a7:0c:ee:bc:e8:6d:cc:65:a5:9a:dc:30:9a:81:a8:31: 15:a8:82:72:f4:a8:19:4a:4b:f3:89:36:cb:51:b5:2d:c6:cb: 40:c2:81:6b:c8:ea:10:e5:e3:ab:d2:68:e9:de:ff:f9:ce:6d: 5d:0a:db:40:74:cf:99:cb:83:f0:7b:03:43:6d:d4:7d:ca:64: bb:21:b1:48:55:b2:89:50:98:a1:24:e0:77:1b:bf:fd:ed:91: 70:5c:89:46:7b:4c:2c:67:f9:84:41:fe:90:34:1b:b9:b4:f6: be:fc:36:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF NjgyNDlERUIwHhcNMjUwNjE0MjM1MzI4WhcNMjUwNjIxMjM1MzI4WjAYMRYwFAYD VQQDEw02ODRlMGI3OC05NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26F4AHnvDB+iT3jZqKk5f7YClkvHV5879O3WQ12GqJz5sZhv3Am92ga6wRsj uwmU4769vcBLpyvdQM5N7VuAXlwsfEEDILIfWospH2ZJkv1sx7VAWiI/5fY+VN+p dmY2ZlFrEg1TYEDhYCoxO5xcvDI94OuD0cLbbwszJprZtV3XcDTwZsVYk9154ueF 4ZAgHTFRUJZ9qnV4yT804ohjkcTrRjXLcg8S/dk3t1enmefrydR7ESUO7r1xwqlm OBTIxMn+YVN5LLPlb6+b8Ib6BW7vuL16pqotKhwMYwXBloRg939ZkrOHaq4eooxc egYGlcFXBJP4zyQFAS2zyvZPTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxna/YU C6qWlb9nsXCZFdqpOIiuMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4 UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXIpod5d58bzd+18chIXOqD7xP+A4mGRfldwFURXSo25L3mn0h84g/ UgHgsuARAg4+KOVHo7m4OFOpRZuZ9wlVgJJ4eKOKhbWM+9EBo5m8LTsvcCxOx5qo TAlL3mrOnjs8c8M1T4cm6tTG9ugxMPAK6F/sQmlUWafyYKN2tiBlYlw0Ml8fojUz wbgRnRFtA037z6cM7rzobcxlpZrcMJqBqDEVqIJy9KgZSkvziTbLUbUtxstAwoFr yOoQ5eOr0mjp3v/5zm1dCttAdM+Zy4PwewNDbdR9ymS7IbFIVbKJUJihJOB3G7/9 7ZFwXIlGe0wsZ/mEQf6QNBu5tPa+/DYa -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:06 2025 by rpki-client