$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: JdvMlniPAxkCF2LuMDsd4L+yRU1S5aN3ixY/iQ6N0RM= Subject key identifier: 26:62:B2:B4:59:EE:1B:EC:46:7E:65:F2:C6:84:CC:2A:47:0A:D9:29 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 03D5 Signing time: Fri 13 Jun 2025 00:53:30 +0000 Manifest this update: Fri 13 Jun 2025 00:53:29 +0000 Manifest next update: Fri 20 Jun 2025 00:53:29 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: Op37d51yCDvCVjPN0dmA9qHMgTmsmhOdJCyc3DyIWiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Jun 13 00:53:29 2025 GMT Not After : Jun 20 00:53:29 2025 GMT Subject: CN=684b7689-c975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:70:99:32:4d:cd:11:d3:30:53:44:5c:50:60: cf:d5:dc:c0:68:0a:4e:a2:9f:ad:62:08:82:97:e2: dc:1c:75:3b:12:ab:dd:dc:96:e6:8e:43:ba:9e:de: 23:ad:82:32:1b:8d:9b:a8:60:4c:5a:14:5b:d7:dd: 10:1a:86:57:43:3d:ec:05:cf:13:48:9d:f8:0a:6f: b4:d0:20:51:e6:2d:e4:ea:2d:1c:00:eb:99:4c:8a: 46:eb:f8:8c:f0:00:54:c7:c3:40:91:00:98:d5:27: 36:05:d6:2c:83:b0:86:80:6e:28:60:35:9b:31:85: 20:68:d0:bd:77:da:bf:20:d7:aa:93:ac:db:3e:b5: 98:25:8f:4e:d3:cd:8d:e0:66:60:6a:13:fe:2d:9b: e0:3b:63:27:e0:f3:90:e0:5f:87:07:b2:6a:80:b8: 7e:b5:e5:12:69:5e:c8:6f:c1:6c:48:6d:8f:f7:ca: 63:48:73:4f:e8:62:3d:d5:06:50:9d:b3:b8:95:8a: 9f:7e:8d:d7:8e:4e:07:2a:20:59:82:32:36:4f:ab: a1:f8:47:b4:f8:0d:89:44:04:83:e9:f0:ad:60:c6: da:70:b0:b2:5e:68:c8:73:63:f8:0c:70:77:4f:50: f6:17:8c:05:43:09:16:2e:cd:63:d8:02:ed:b4:8d: 3a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:62:B2:B4:59:EE:1B:EC:46:7E:65:F2:C6:84:CC:2A:47:0A:D9:29 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d2:ab:af:46:55:fe:e5:2a:a0:25:a9:08:5b:91:dc:81:8a: 9b:d1:49:f4:f3:af:a5:79:3a:5c:8b:8a:7f:11:d6:83:1a:96: e5:51:ad:72:ca:5f:5a:a9:23:11:97:83:68:32:07:74:c4:3f: a2:ae:bd:39:fd:45:e1:c1:29:c2:d7:f1:3d:32:20:1a:b2:7c: 60:16:9b:52:b4:38:39:89:df:65:36:9d:18:f2:89:75:ed:be: b3:30:57:e5:2b:ce:56:e9:4a:43:86:b2:64:3e:28:dd:8e:78: 9c:84:7d:d2:f5:2a:a2:68:bd:8e:be:2a:95:a1:13:f8:07:06: db:b1:9e:ad:ea:3d:f8:75:c2:da:69:41:dd:ba:12:7f:cf:2c: 21:dc:6f:1f:4e:98:7e:a3:5e:2b:3b:a2:f5:40:ed:bd:3b:46: 33:56:25:de:a4:2b:9a:de:0d:79:bb:f2:ac:25:87:07:1f:de: 04:e9:1b:e4:9e:09:69:44:5c:60:7d:fa:8b:7a:ff:c6:cf:d4: aa:66:fb:50:69:b6:c0:46:9b:0d:3b:07:c0:19:c7:09:5e:16: cb:13:08:4f:7a:78:39:44:36:24:e9:43:b4:df:28:1c:d8:b5: 23:2b:cf:d2:2f:36:41:34:bf:80:23:d0:12:53:51:72:57:e3: b9:4c:25:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjUwNjEzMDA1MzI5WhcNMjUwNjIwMDA1MzI5WjAYMRYwFAYD VQQDEw02ODRiNzY4OS1jOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/XCZMk3NEdMwU0RcUGDP1dzAaApOop+tYgiCl+LcHHU7Eqvd3JbmjkO6nt4j rYIyG42bqGBMWhRb190QGoZXQz3sBc8TSJ34Cm+00CBR5i3k6i0cAOuZTIpG6/iM 8ABUx8NAkQCY1Sc2BdYsg7CGgG4oYDWbMYUgaNC9d9q/INeqk6zbPrWYJY9O082N 4GZgahP+LZvgO2Mn4POQ4F+HB7JqgLh+teUSaV7Ib8FsSG2P98pjSHNP6GI91QZQ nbO4lYqffo3Xjk4HKiBZgjI2T6uh+Ee0+A2JRASD6fCtYMbacLCyXmjIc2P4DHB3 T1D2F4wFQwkWLs1j2ALttI06XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZisrRZ 7hvsRn5l8saEzCpHCtkpMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl0quvRlX+5SqgJakIW5HcgYqb0Un086+leTpci4p/EdaDGpblUa1y yl9aqSMRl4NoMgd0xD+irr05/UXhwSnC1/E9MiAasnxgFptStDg5id9lNp0Y8ol1 7b6zMFflK85W6UpDhrJkPijdjnichH3S9SqiaL2OviqVoRP4BwbbsZ6t6j34dcLa aUHduhJ/zywh3G8fTph+o14rO6L1QO29O0YzViXepCua3g15u/KsJYcHH94E6Rvk nglpRFxgffqLev/Gz9SqZvtQabbARpsNOwfAGccJXhbLEwhPeng5RDYk6UO03ygc 2LUjK8/SLzZBNL+AI9ASU1FyV+O5TCXy -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:56 2025 by rpki-client