$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: pzjRHcR3VO+G160mB9PZsHs8qenvD14y9gYlaFfAJH8= Subject key identifier: 87:DF:9F:FE:55:5C:5B:5C:F0:38:3F:70:A5:B7:23:79:AB:1C:96:26 Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 02CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 02C8 Signing time: Tue 17 Jun 2025 00:58:55 +0000 Manifest this update: Tue 17 Jun 2025 00:58:55 +0000 Manifest next update: Tue 24 Jun 2025 00:58:55 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: CPp4avDcYoL3bxgPYoOdKij7ej1V1kB8VgioUcCV6rc=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: AUauGFsDFbTkxG/ElUZSjeF53FqLNbIQuI1Fh9dzIQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Jun 17 00:58:55 2025 GMT Not After : Jun 24 00:58:55 2025 GMT Subject: CN=6850bdcf-a14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:bb:ea:e2:8e:55:02:0b:a9:3f:92:28:41: 82:6e:82:e9:10:ea:c2:b9:33:5f:00:65:e0:79:27: 3c:d9:43:72:a7:ba:a4:5b:1f:ae:a1:3c:ff:d9:c7: 77:0a:2b:26:71:bf:f6:4b:7a:ec:bb:c8:c3:35:57: 3b:01:a7:58:4a:79:db:0a:1c:65:4e:68:17:6f:35: 1c:89:22:43:17:60:1e:b9:f6:71:07:7a:22:e5:d9: ce:f5:d5:da:86:cd:bc:17:88:68:de:75:ab:4e:20: cd:dc:89:67:29:4e:2d:08:2c:33:f7:20:cb:f5:48: ef:72:63:19:28:94:59:a8:34:74:30:2c:a6:d7:e8: 1e:97:28:2f:ff:a0:4e:88:1b:5f:27:fd:44:91:ae: 91:59:8d:4f:c2:8f:e6:c0:9e:63:6a:5b:cb:98:1e: 2a:70:fe:8a:c2:dd:6f:ff:05:21:26:20:61:72:55: 3b:7d:76:16:a9:73:fe:76:4a:0f:f5:bb:43:e5:51: a9:dd:b3:13:69:4a:3c:68:07:c2:de:19:58:34:90: 1d:b4:65:d7:50:91:cf:13:d5:2d:a7:ab:0a:e0:70: bc:17:ef:4a:99:5b:4c:46:8e:94:09:46:40:fd:b5: c1:ec:2c:b5:be:5e:cd:18:29:be:bc:a2:30:7b:6f: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:9F:FE:55:5C:5B:5C:F0:38:3F:70:A5:B7:23:79:AB:1C:96:26 X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:20:8c:58:87:2e:9e:67:c8:0b:62:40:40:10:ba:c6:07:8d: 88:7c:68:59:95:91:df:10:cd:c5:8a:fe:04:a9:b9:dc:f9:55: fa:82:49:6b:ad:68:76:cb:f6:19:a7:c3:0c:31:95:ec:6f:7d: fe:79:a3:92:db:b1:54:8c:21:cb:7b:d8:3c:dd:ad:4c:a2:09: 48:7f:9f:f3:31:1a:43:6a:17:b4:0d:3c:c4:54:4a:9e:65:0f: 6a:8b:67:e9:f9:8e:60:2f:b7:ba:a3:69:19:4b:c5:c3:e9:20: 11:82:0b:35:20:21:07:94:f7:a5:40:a2:e5:66:36:0f:e1:4e: 96:81:21:e8:b4:c9:bf:ec:d5:d5:d0:da:b5:96:26:6f:94:88: f0:12:b1:e1:b0:44:2c:16:b7:8e:2c:1e:e5:07:d6:fc:3a:92: d9:ff:f1:e1:dd:da:4e:56:fe:90:43:40:4f:33:21:c6:86:cf: 52:9d:54:72:f5:59:44:53:cb:f2:3f:7a:10:e7:df:db:86:76: 78:ef:7b:7c:16:68:ad:de:38:86:25:2f:a3:aa:a9:95:f5:fe: 12:b0:fa:04:4d:f7:0e:01:6d:f8:af:fa:98:7e:08:67:9b:df: 04:f4:68:d9:fc:d3:eb:34:77:0e:07:4b:5a:ed:9b:cd:bd:a2: d8:2a:6d:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjUwNjE3MDA1ODU1WhcNMjUwNjI0MDA1ODU1WjAYMRYwFAYD VQQDEw02ODUwYmRjZi1hMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYS76uKOVQILqT+SKEGCboLpEOrCuTNfAGXgeSc82UNyp7qkWx+uoTz/2cd3 Cismcb/2S3rsu8jDNVc7AadYSnnbChxlTmgXbzUciSJDF2AeufZxB3oi5dnO9dXa hs28F4ho3nWrTiDN3IlnKU4tCCwz9yDL9UjvcmMZKJRZqDR0MCym1+gelygv/6BO iBtfJ/1Eka6RWY1Pwo/mwJ5jalvLmB4qcP6Kwt1v/wUhJiBhclU7fXYWqXP+dkoP 9btD5VGp3bMTaUo8aAfC3hlYNJAdtGXXUJHPE9Utp6sK4HC8F+9KmVtMRo6UCUZA /bXB7Cy1vl7NGCm+vKIwe28wfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIffn/5V XFtc8Dg/cKW3I3mrHJYmMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIIxYhy6eZ8gLYkBAELrGB42IfGhZlZHfEM3Fiv4Eqbnc+VX6gklr rWh2y/YZp8MMMZXsb33+eaOS27FUjCHLe9g83a1MoglIf5/zMRpDahe0DTzEVEqe ZQ9qi2fp+Y5gL7e6o2kZS8XD6SARggs1ICEHlPelQKLlZjYP4U6WgSHotMm/7NXV 0Nq1liZvlIjwErHhsEQsFreOLB7lB9b8OpLZ//Hh3dpOVv6QQ0BPMyHGhs9SnVRy 9VlEU8vyP3oQ59/bhnZ473t8Fmit3jiGJS+jqqmV9f4SsPoETfcOAW34r/qYfghn m98E9GjZ/NPrNHcOB0ta7ZvNvaLYKm0O -----END CERTIFICATE-----Generated at Tue Jun 17 07:55:23 2025 by rpki-client