$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: MUIcP/mZB8pNse+/HDB2Kk1AIpGiztoavNi6riG5rvk= Subject key identifier: 7D:C7:7D:DD:68:71:37:08:EB:99:F8:40:88:A5:85:69:93:CB:87:8D Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 58 Signing time: Tue 17 Jun 2025 06:02:39 +0000 Manifest this update: Tue 17 Jun 2025 06:02:38 +0000 Manifest next update: Tue 24 Jun 2025 06:02:38 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: es8iEIMWPjYKJj/LP3qcz6bkLtyOfaDw53vAZ+ypiN8=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Jun 17 06:02:38 2025 GMT Not After : Jun 24 06:02:38 2025 GMT Subject: CN=685104ff-0d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:a5:46:cd:17:a0:ca:a0:df:04:fd:21:0b: d4:b2:a9:df:a9:d3:a6:7e:3b:11:8c:d1:d4:31:90: c2:a8:f9:81:bc:83:6d:df:18:13:62:ad:c1:58:df: c2:4b:a2:a4:41:82:87:3f:7e:16:93:c2:eb:cd:32: 14:9a:91:16:24:a8:0d:3f:7b:26:1e:0e:78:05:77: 14:dc:ef:9d:1e:3e:a0:f9:1a:d3:b6:df:5e:1c:5e: 30:f5:9f:20:6c:2e:ba:90:7b:44:59:44:b7:c3:e3: fa:73:58:b2:b2:d9:50:9a:d1:92:07:80:f0:e8:ff: f2:34:34:6f:b1:ce:96:cb:0d:20:bb:19:30:1b:0d: 7a:35:93:da:6a:5b:26:3e:00:b9:df:23:84:58:fb: e6:f8:a1:cd:06:57:ab:73:0d:fd:95:38:3a:84:33: f4:84:b8:6d:da:95:60:94:d0:ce:2e:91:31:34:40: 63:9e:54:36:a8:63:55:4f:d7:7d:b7:9c:42:4b:61: b9:cc:a0:75:06:82:32:c3:d1:6a:5b:b3:7f:f2:be: 66:6f:57:14:eb:19:3b:4a:87:6f:45:84:56:d6:ea: a5:56:a8:59:d3:f0:b0:ee:76:34:0d:95:08:4d:2e: 42:9e:c0:05:5d:52:85:31:10:23:7e:9c:7b:00:bd: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:7D:DD:68:71:37:08:EB:99:F8:40:88:A5:85:69:93:CB:87:8D X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:40:dd:1c:72:11:ea:bf:97:d7:ef:f5:4f:1e:68:d1:a3:ef: 38:f2:35:70:9d:86:aa:72:e8:5a:64:32:18:a2:ab:97:8d:66: ad:b0:12:64:82:f7:5d:c9:3c:a2:64:f4:1b:a2:59:71:ab:fc: 79:f7:3e:ea:75:57:4b:84:c9:0e:a2:a3:90:8b:5a:d2:d0:75: 97:fa:fc:f0:37:05:e8:00:c6:e7:e1:46:3a:c2:04:2a:8c:69: 7a:1f:e5:63:df:bc:e6:a3:43:58:9a:ee:5e:dd:94:f1:c7:c3: 15:b0:3f:53:3a:be:cf:24:3e:56:59:37:93:bb:37:ec:63:58: 5c:c3:e3:ac:8d:c3:c3:88:dd:86:82:09:d3:7d:83:43:27:11: 7a:d6:08:e4:f7:dd:9e:78:18:1d:86:b5:05:99:1e:cb:58:9e: e4:89:e9:a5:41:f3:6d:53:5f:96:5e:a3:67:42:a6:40:c6:08: 4d:75:c4:fa:87:df:fe:64:47:ca:9b:e5:ee:de:b6:39:2b:52: fe:60:87:65:ef:80:84:87:af:09:b1:51:7e:a7:59:b9:61:e6: 23:dd:6b:0a:60:8f:d4:a9:ac:86:91:c5:28:10:e5:5d:ef:21: f0:e7:ae:97:96:bd:91:5b:56:15:92:e9:d4:d2:07:07:d3:68: 21:eb:3c:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQzFCNzY2REEyOUVEMjkzRERGQTVDQ0VCMEFFNDI5NzQ1 NDQ0RDYxNTAeFw0yNTA2MTcwNjAyMzhaFw0yNTA2MjQwNjAyMzhaMBgxFjAUBgNV BAMTDTY4NTEwNGZmLTBkN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlqaVGzRegyqDfBP0hC9Syqd+p06Z+OxGM0dQxkMKo+YG8g23fGBNircFY38JL oqRBgoc/fhaTwuvNMhSakRYkqA0/eyYeDngFdxTc750ePqD5GtO2314cXjD1nyBs LrqQe0RZRLfD4/pzWLKy2VCa0ZIHgPDo//I0NG+xzpbLDSC7GTAbDXo1k9pqWyY+ ALnfI4RY++b4oc0GV6tzDf2VODqEM/SEuG3alWCU0M4ukTE0QGOeVDaoY1VP1323 nEJLYbnMoHUGgjLD0Wpbs3/yvmZvVxTrGTtKh29FhFbW6qVWqFnT8LDudjQNlQhN LkKewAVdUoUxECN+nHsAvfNNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfcd93Whx NwjrmfhAiKWFaZPLh40wHwYDVR0jBBgwFoAUwbdm2intKT3fpczrCuQpdFRE1hUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzFBRjdERjZBQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFo VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2JkbTJpbnRLVDNmcGN6ckN1UXBkRlJFMWhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzFBRjdERjZBQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3diZG0yaW50S1Qz ZnBjenJDdVFwZEZSRTFoVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdA3RxyEeq/l9fv9U8eaNGj7zjyNXCdhqpy6FpkMhiiq5eNZq2wEmSC 913JPKJk9BuiWXGr/Hn3Pup1V0uEyQ6io5CLWtLQdZf6/PA3BegAxufhRjrCBCqM aXof5WPfvOajQ1ia7l7dlPHHwxWwP1M6vs8kPlZZN5O7N+xjWFzD46yNw8OI3YaC CdN9g0MnEXrWCOT33Z54GB2GtQWZHstYnuSJ6aVB821TX5Zeo2dCpkDGCE11xPqH 3/5kR8qb5e7etjkrUv5gh2XvgISHrwmxUX6nWblh5iPdawpgj9SprIaRxSgQ5V3v IfDnrpeWvZFbVhWS6dTSBwfTaCHrPDo= -----END CERTIFICATE-----Generated at Tue Jun 17 15:19:36 2025 by rpki-client