$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft File: wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json) Hash identifier: oiQIV3U6OUo0+9GGNn73OIZ5NDxc3M+qI9qZUD28Vss= Subject key identifier: B8:D1:73:8B:F2:F5:97:B3:D1:74:44:64:E0:81:F5:C2:E5:15:34:38 Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D Certificate issuer: /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft Manifest number: 068F Signing time: Mon 16 Jun 2025 21:55:26 +0000 Manifest this update: Mon 16 Jun 2025 21:55:25 +0000 Manifest next update: Mon 23 Jun 2025 21:55:25 +0000 Files and hashes: 1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: 9qz8xvbVEVulAKvoWy9a12xAG18vLKhCyMxC516ENb0=) 2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: qtAk8oTZDrgTWNBm9Xz8I2B3TKuJD5JEiZtJXgjDA28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Validity Not Before: Jun 16 21:55:25 2025 GMT Not After : Jun 23 21:55:25 2025 GMT Subject: CN=685092cd-a0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:63:60:23:1d:8f:82:db:c6:63:65:8e:d9: 1e:dd:3d:e3:7f:ce:a0:9b:6c:57:81:28:12:98:8e: e8:cf:29:8d:a6:7a:e7:68:02:90:fc:76:54:f6:f9: 5b:e8:cb:5b:ab:b6:36:ca:0e:a6:f0:72:16:45:f0: 72:67:63:2f:6a:d9:b1:2f:a3:fa:92:bd:73:d8:28: fb:ec:da:5c:a0:a6:4b:6e:a5:27:75:89:76:c1:dd: 6f:59:b4:ec:e1:2f:66:42:37:e9:82:bf:cf:de:1c: d3:fe:e5:f2:5e:da:63:1a:36:47:b7:95:fc:cc:f8: f4:41:fa:0a:a6:53:a6:e8:a3:1b:8a:ac:2b:3f:b7: 38:e9:b3:d5:f1:7d:2c:de:53:0a:68:61:49:2a:9e: e7:5a:c0:9d:4b:62:e7:62:8f:97:57:b8:11:82:f3: 7d:7d:59:be:90:60:44:70:ed:c2:de:fe:05:39:9c: 2c:32:38:14:b5:88:f1:9e:a2:20:74:04:2f:9c:7a: 26:11:82:6b:14:7a:4a:01:3d:0f:1d:5b:a2:8d:cd: 11:ec:60:a3:9e:9d:6a:68:dd:55:3e:a1:a9:98:da: d8:7a:65:25:8f:5e:1a:ae:d8:04:4a:1d:06:fe:6a: a3:9c:03:f1:9b:b8:6b:44:b1:9c:ec:d8:c3:8b:85: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:73:8B:F2:F5:97:B3:D1:74:44:64:E0:81:F5:C2:E5:15:34:38 X509v3 Authority Key Identifier: keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e6:34:8d:4d:74:05:af:c0:77:a9:5e:81:d8:4c:da:32:d4: cf:c5:a5:1e:52:45:0e:70:83:b4:32:e8:fb:95:56:0c:59:ca: 27:1b:d2:98:80:4c:be:b4:4b:61:cb:15:da:88:f4:fc:29:95: de:97:8d:9f:11:80:74:8a:3e:c4:91:d3:84:1d:94:5a:85:63: 6a:1f:2b:3e:b5:34:4a:ec:6e:13:f5:76:a3:01:5e:52:13:4e: cd:f2:96:b4:59:9c:de:a9:78:42:0c:05:51:9e:86:9e:de:ce: 65:62:83:2b:59:95:64:17:47:5f:6a:c6:2f:fa:e6:3c:f2:71: fb:cb:61:20:50:f6:3d:e3:d3:58:ad:c6:9c:7e:d5:a9:62:fd: 6f:59:f9:0d:27:fa:c7:bf:41:97:6c:ad:84:d9:a9:fd:5f:e2: 28:0b:11:32:25:c0:4d:cb:5e:3e:9c:c1:d5:f2:ee:d4:0e:de: fe:7a:ab:d3:aa:d9:c3:4a:e7:68:e0:0b:94:ca:85:65:3a:9a: ff:4d:1c:f0:da:7d:de:5b:06:07:d0:c0:74:69:de:27:e3:8a: 18:c6:a6:46:6f:bd:3d:88:03:ba:62:dd:bb:57:42:51:19:ba: 27:67:67:09:ef:5c:f4:42:b9:24:66:63:36:69:f2:92:36:b1: 0c:af:b5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBM0UxMTAvBgNVBAUTKEMxM0Q4RjgyQjNEM0NFNDc0NjUzNTQwRTUzNjVDNEM5 MDg5NEMwM0QwHhcNMjUwNjE2MjE1NTI1WhcNMjUwNjIzMjE1NTI1WjAYMRYwFAYD VQQDEw02ODUwOTJjZC1hMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDJjYCMdj4LbxmNljtke3T3jf86gm2xXgSgSmI7ozymNpnrnaAKQ/HZU9vlb 6Mtbq7Y2yg6m8HIWRfByZ2MvatmxL6P6kr1z2Cj77NpcoKZLbqUndYl2wd1vWbTs 4S9mQjfpgr/P3hzT/uXyXtpjGjZHt5X8zPj0QfoKplOm6KMbiqwrP7c46bPV8X0s 3lMKaGFJKp7nWsCdS2LnYo+XV7gRgvN9fVm+kGBEcO3C3v4FOZwsMjgUtYjxnqIg dAQvnHomEYJrFHpKAT0PHVuijc0R7GCjnp1qaN1VPqGpmNrYemUlj14artgESh0G /mqjnAPxm7hrRLGc7NjDi4UA8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjRc4vy 9Zez0XREZOCB9cLlFTQ4MB8GA1UdIwQYMBaAFME9j4Kz085HRlNUDlNlxMkIlMA9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREEzRS80MjI2ODc0ODcz NDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHprZEdVMVFPVTJYRXlRaVV3 RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUMlBnclBUemtkR1UxUU9VMlhFeVFpVXdEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REEzRS80MjI2ODc0ODczNDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHpr ZEdVMVFPVTJYRXlRaVV3RDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj5jSNTXQFr8B3qV6B2EzaMtTPxaUeUkUOcIO0Muj7lVYMWconG9KY gEy+tEthyxXaiPT8KZXel42fEYB0ij7EkdOEHZRahWNqHys+tTRK7G4T9XajAV5S E07N8pa0WZzeqXhCDAVRnoae3s5lYoMrWZVkF0dfasYv+uY88nH7y2EgUPY949NY rcacftWpYv1vWfkNJ/rHv0GXbK2E2an9X+IoCxEyJcBNy14+nMHV8u7UDt7+eqvT qtnDSudo4AuUyoVlOpr/TRzw2n3eWwYH0MB0ad4n44oYxqZGb709iAO6Yt27V0JR GbonZ2cJ71z0QrkkZmM2afKSNrEMr7XK -----END CERTIFICATE-----Generated at Tue Jun 17 12:25:09 2025 by rpki-client