$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: H8yoH33ZB3qTzb4XlVOMx3zpHJ6RB8ZIgC2nSoAIJjQ= Subject key identifier: 45:E1:4F:19:02:4C:94:24:2D:21:09:43:41:C6:6E:B7:39:F9:9A:B3 Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 0563 Signing time: Wed 18 Jun 2025 23:11:35 +0000 Manifest this update: Wed 18 Jun 2025 23:11:35 +0000 Manifest next update: Wed 25 Jun 2025 23:11:35 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: v1YnK3p4T+ZGPvKVxl3GFJqhM0DKPZ7P5mqE/QG8I5w=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Jun 18 23:11:35 2025 GMT Not After : Jun 25 23:11:35 2025 GMT Subject: CN=685347a7-8729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:4d:d0:9e:ef:e1:ff:3b:f8:87:8e:b4:0a: 67:88:a7:11:eb:fd:05:33:b1:b0:2b:0c:29:50:c3: 3d:6c:55:12:21:b4:69:22:16:12:a7:85:74:cf:00: 0f:87:78:aa:70:5f:43:5c:8e:81:06:33:22:7d:7e: d3:4f:17:04:58:66:33:52:c4:81:a0:fa:4c:db:d9: 79:0e:db:bb:f6:25:08:0d:40:d1:c6:89:c2:7d:34: 62:d9:aa:37:84:e4:4b:4c:c5:8e:31:a3:5d:35:24: 38:5f:bf:c2:a9:96:90:cc:b0:9d:c0:dc:aa:a0:35: 74:b7:85:eb:6a:0b:5d:94:bc:bd:cd:cd:3a:11:89: 45:b1:33:4a:00:e7:e2:88:a5:63:23:d5:48:78:35: b2:05:26:dd:b0:a7:cc:93:f5:10:73:fc:ec:d2:1d: 76:e8:0d:26:91:8d:a2:52:46:23:ea:90:70:e1:b9: 4d:62:9d:d1:87:6d:d6:c4:db:5c:ca:23:a3:97:e1: 7c:3b:58:1b:3e:5c:ad:78:4d:a1:2e:0e:0a:93:16: 2a:f0:ea:ac:12:8f:85:f0:39:22:17:8d:34:ed:c9: 04:c2:04:d7:f2:4b:8f:8c:0d:19:88:a7:a2:f8:49: 9e:d3:83:df:42:e2:7d:ad:4f:12:34:85:e7:d1:44: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:4F:19:02:4C:94:24:2D:21:09:43:41:C6:6E:B7:39:F9:9A:B3 X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0b:a2:67:e7:25:c8:f7:53:81:16:26:f4:76:f1:1e:e5:a4: 43:64:62:c1:f7:29:49:07:07:9c:17:32:46:f7:89:36:34:84: 7c:e1:63:16:5e:c9:55:6d:91:c8:b0:37:20:8e:bc:2f:6a:db: ff:34:05:20:d9:29:c2:ea:a7:c5:9c:6e:16:42:72:f7:e0:3b: 4a:be:30:64:41:20:b5:16:62:d3:b1:3b:f0:93:b7:5d:8c:b3: b6:f5:93:cb:36:3f:d7:c3:5a:c0:f9:f1:72:38:99:e4:c8:1e: e4:16:d3:46:7c:88:42:0d:a3:35:9d:08:03:35:5f:dc:f5:c5: 09:3f:92:07:b7:55:d7:5e:aa:07:17:4d:ff:67:f0:10:db:28: ee:9c:5e:7e:33:4d:5a:bb:14:5c:27:de:78:44:f7:52:13:28: a3:bf:ff:8b:63:3e:fe:11:4a:b6:87:40:c3:4a:dd:7a:8e:92: a7:3e:00:48:6f:55:f9:83:55:f1:8f:be:43:af:aa:7a:b7:3b: f7:b2:8c:3c:d0:ed:69:1d:4f:22:48:1a:d7:76:c0:6e:03:32: 5b:a6:81:d6:55:59:7c:72:e9:4f:59:84:eb:31:86:50:95:ec: 2e:30:0d:bf:3a:49:99:f4:13:ac:37:08:9d:bd:87:1b:4c:1c: 55:a0:d7:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjUwNjE4MjMxMTM1WhcNMjUwNjI1MjMxMTM1WjAYMRYwFAYD VQQDEw02ODUzNDdhNy04NzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKlN0J7v4f87+IeOtApniKcR6/0FM7GwKwwpUMM9bFUSIbRpIhYSp4V0zwAP h3iqcF9DXI6BBjMifX7TTxcEWGYzUsSBoPpM29l5Dtu79iUIDUDRxonCfTRi2ao3 hORLTMWOMaNdNSQ4X7/CqZaQzLCdwNyqoDV0t4XragtdlLy9zc06EYlFsTNKAOfi iKVjI9VIeDWyBSbdsKfMk/UQc/zs0h126A0mkY2iUkYj6pBw4blNYp3Rh23WxNtc yiOjl+F8O1gbPlyteE2hLg4KkxYq8OqsEo+F8DkiF4007ckEwgTX8kuPjA0ZiKei +Eme04PfQuJ9rU8SNIXn0UQp8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXhTxkC TJQkLSEJQ0HGbrc5+ZqzMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHC6Jn5yXI91OBFib0dvEe5aRDZGLB9ylJBwecFzJG94k2NIR84WMW XslVbZHIsDcgjrwvatv/NAUg2SnC6qfFnG4WQnL34DtKvjBkQSC1FmLTsTvwk7dd jLO29ZPLNj/Xw1rA+fFyOJnkyB7kFtNGfIhCDaM1nQgDNV/c9cUJP5IHt1XXXqoH F03/Z/AQ2yjunF5+M01auxRcJ954RPdSEyijv/+LYz7+EUq2h0DDSt16jpKnPgBI b1X5g1Xxj75Dr6p6tzv3sow80O1pHU8iSBrXdsBuAzJbpoHWVVl8culPWYTrMYZQ lewuMA2/OkmZ9BOsNwidvYcbTBxVoNdl -----END CERTIFICATE-----Generated at Fri Jun 20 23:45:31 2025 by rpki-client