$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: 5/OpyuKCW0MAakQGNciwNiG/Ztw4Hh3zgB+NMiSZTo0= Subject key identifier: 46:B0:E7:44:23:95:39:F7:41:0E:76:2B:C0:EA:B3:81:BD:2F:5A:44 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 011B Signing time: Fri 13 Jun 2025 03:47:35 +0000 Manifest this update: Fri 13 Jun 2025 03:47:34 +0000 Manifest next update: Fri 20 Jun 2025 03:47:34 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: 4wQt4W+JYqanj09ZsGwQVm2DhOamis0OXMB5bFPLcz4=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Jun 13 03:47:34 2025 GMT Not After : Jun 20 03:47:34 2025 GMT Subject: CN=684b9f57-12b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f0:84:11:c4:69:a5:25:5a:01:cb:77:fa:50: 34:56:5d:be:83:b5:61:28:0a:b0:3b:73:c5:a6:13: e7:e4:ee:f8:00:ef:4b:ff:2d:d9:74:95:59:6f:03: 6f:48:4d:5e:4d:fb:d0:1b:53:17:6f:1a:d3:31:c5: 51:e3:35:73:91:1f:2d:21:29:26:23:91:4f:47:08: 01:67:8a:da:98:26:92:85:cc:54:4b:0b:54:bb:55: da:ec:83:fa:4b:6c:e7:fd:5a:41:1a:00:10:8b:3c: 4d:1a:69:5f:61:8b:7c:70:cf:55:94:3e:b7:80:19: 90:57:d5:dc:50:88:cd:c9:a5:22:70:90:40:d8:f1: e8:c9:bf:79:ab:56:61:d7:c2:34:52:3a:b5:da:66: 36:51:8f:49:f3:f2:62:ea:89:02:f3:cd:b0:0f:53: 52:93:8c:ff:c1:fc:dc:d0:8e:43:3a:43:14:bc:5c: 4d:ae:fb:c1:95:48:e0:0e:e8:94:00:d1:d7:eb:b2: ff:e8:7c:70:02:c3:7b:b6:fb:b0:c2:c4:a2:29:ad: 08:8a:a2:09:49:b3:a2:93:07:66:f5:c2:52:b9:24: ac:cf:b7:0b:80:3a:f6:1e:c7:65:63:38:1a:0f:81: 0b:a5:c6:23:08:e3:41:2a:18:71:88:a6:6b:a9:86: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:E7:44:23:95:39:F7:41:0E:76:2B:C0:EA:B3:81:BD:2F:5A:44 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f7:73:de:5a:64:26:a9:25:cb:49:62:fc:97:70:9a:99:c3: fe:69:ed:a8:99:28:6a:a3:16:53:76:14:ce:f7:58:37:7a:01: 65:6b:15:e4:cf:30:85:c6:06:3a:b7:e6:4d:a4:ae:e3:11:74: b3:bb:38:b9:0a:0d:39:60:36:c6:f6:d2:aa:b9:b8:8b:b9:96: 86:01:b0:f5:63:47:21:72:b3:81:f9:08:64:0d:18:2f:27:9d: 44:5c:5d:a7:da:95:74:fe:5a:26:0c:10:bc:b4:20:31:60:56: 0d:1e:e1:d1:56:17:54:bb:7e:f5:13:fd:8d:58:4b:de:00:a5: 87:ff:43:eb:a8:64:32:3a:69:84:d0:6e:5b:46:03:de:9c:c7: 91:91:7c:4f:93:30:ae:32:b6:18:f2:87:a9:7a:1a:cb:d0:14: 75:37:38:cc:8b:f9:18:a3:ae:38:23:fa:89:95:a9:95:37:00: de:0b:0f:9d:6c:80:7a:56:a4:2a:d5:f3:e3:db:5c:c4:97:ee: 4f:57:6a:08:c0:7b:9b:53:f3:80:02:72:3d:c4:ec:60:10:ef: 77:be:db:ed:60:c0:2e:07:51:21:00:4c:28:8a:95:e9:f6:c2: 58:c4:91:a0:49:49:81:d7:90:d2:f8:a2:d0:fb:3e:83:11:81: 2c:11:b2:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwNjEzMDM0NzM0WhcNMjUwNjIwMDM0NzM0WjAYMRYwFAYD VQQDEw02ODRiOWY1Ny0xMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/CEEcRppSVaAct3+lA0Vl2+g7VhKAqwO3PFphPn5O74AO9L/y3ZdJVZbwNv SE1eTfvQG1MXbxrTMcVR4zVzkR8tISkmI5FPRwgBZ4ramCaShcxUSwtUu1Xa7IP6 S2zn/VpBGgAQizxNGmlfYYt8cM9VlD63gBmQV9XcUIjNyaUicJBA2PHoyb95q1Zh 18I0Ujq12mY2UY9J8/Ji6okC882wD1NSk4z/wfzc0I5DOkMUvFxNrvvBlUjgDuiU ANHX67L/6HxwAsN7tvuwwsSiKa0IiqIJSbOikwdm9cJSuSSsz7cLgDr2HsdlYzga D4ELpcYjCONBKhhxiKZrqYbqBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaw50Qj lTn3QQ52K8Dqs4G9L1pEMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR93PeWmQmqSXLSWL8l3CamcP+ae2omShqoxZTdhTO91g3egFlaxXk zzCFxgY6t+ZNpK7jEXSzuzi5Cg05YDbG9tKqubiLuZaGAbD1Y0chcrOB+QhkDRgv J51EXF2n2pV0/lomDBC8tCAxYFYNHuHRVhdUu371E/2NWEveAKWH/0PrqGQyOmmE 0G5bRgPenMeRkXxPkzCuMrYY8oepehrL0BR1NzjMi/kYo644I/qJlamVNwDeCw+d bIB6VqQq1fPj21zEl+5PV2oIwHubU/OAAnI9xOxgEO93vtvtYMAuB1EhAEwoipXp 9sJYxJGgSUmB15DS+KLQ+z6DEYEsEbL8 -----END CERTIFICATE-----Generated at Sun Jun 15 05:52:21 2025 by rpki-client