$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: pW6lCHNT6pj5Wz4GbWBgI6yc6GU08mWzJvPVJ/DCO3o= Subject key identifier: CA:3C:F9:B3:A3:C0:BA:C4:C7:D6:53:4A:14:CA:2A:BF:E8:C6:2F:0A Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 0454 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0452 Signing time: Thu 19 Jun 2025 00:01:32 +0000 Manifest this update: Thu 19 Jun 2025 00:01:32 +0000 Manifest next update: Thu 26 Jun 2025 00:01:32 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: J5v+Zt5Xh6VRIuS6kNC8YMHQ40ZmX+edKIkCic7C2Ug=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1108 (0x454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Jun 19 00:01:32 2025 GMT Not After : Jun 26 00:01:32 2025 GMT Subject: CN=6853535c-89fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:89:46:82:86:b7:b8:22:8b:04:21:96:81: a6:fc:7a:b3:c9:1e:0d:9b:ac:f2:72:6a:08:9e:0e: 51:bd:f7:f5:3e:3c:c8:a6:a1:69:ad:99:20:3d:9f: 1e:8f:ef:c0:49:52:39:f0:a4:7e:86:88:ac:bb:08: bb:bf:9b:37:9a:dd:47:f1:49:21:97:c9:14:33:1e: c5:71:32:38:b9:fc:a3:83:5a:45:b8:8e:07:4d:65: 52:20:d2:17:34:a1:e1:0b:ac:01:e8:e9:83:d8:85: 1f:ed:f7:23:c1:76:58:d7:58:0f:af:5c:a4:32:24: b5:c2:72:93:f8:b2:1c:94:c3:0e:10:ab:e3:06:c1: 0c:97:91:1a:ef:28:e8:e3:5a:2b:1e:7e:5d:08:85: 98:5f:44:8b:d1:08:33:d0:60:6a:da:fe:ee:37:95: ca:31:77:52:c2:6d:5f:53:a8:9f:56:fe:9d:07:36: 7a:26:b7:c3:5c:8f:26:04:6d:6f:d2:da:b8:a1:90: 0e:8f:5a:ec:98:aa:b8:0f:13:c9:ae:66:d8:7c:c3: a3:39:ad:7d:c0:ba:fe:04:4c:32:c8:98:43:95:e5: 9d:44:4a:25:25:9d:2d:9f:7f:36:98:d6:27:aa:2d: 11:e3:dd:0e:f4:87:42:06:0a:91:b3:b9:70:f1:de: 7b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3C:F9:B3:A3:C0:BA:C4:C7:D6:53:4A:14:CA:2A:BF:E8:C6:2F:0A X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d2:c2:32:8a:ec:d2:ba:9f:82:34:2d:e5:82:b4:d6:9e:00: 2c:33:e1:c2:40:5c:26:7e:f2:17:c5:c7:70:d5:87:9a:e0:3b: eb:e5:31:50:ae:42:b8:76:b2:97:6f:36:dd:36:b3:13:ea:5c: 41:e9:2b:34:9b:8e:a4:8c:e2:d6:36:9d:4f:eb:7d:41:87:c0: 59:b0:4d:44:5d:9a:e6:fa:e8:aa:df:98:e7:83:0a:63:7c:08: 9c:9b:82:6f:6d:ec:4a:e1:57:61:12:94:82:0b:4d:3e:8a:e7: 8e:6b:a1:8e:18:8c:30:a4:1d:02:ac:c1:12:70:e0:fc:f9:a6: ba:4d:cd:6b:02:52:67:e8:37:08:ec:8c:65:3f:ae:ac:20:0d: 62:f0:45:b6:b2:11:b0:ca:7b:0d:60:66:b6:37:0c:71:1f:0e: f6:c8:d4:bb:a8:ee:1f:92:77:40:9e:c1:64:40:24:04:ea:d4: 0e:d0:37:5d:9a:87:fe:3c:eb:ed:57:14:24:6e:6f:b7:07:8d: a8:54:7e:fa:8a:71:3b:f2:d8:df:be:60:23:34:db:91:64:9b: 32:fc:b3:12:a3:e3:fe:10:1f:10:58:e8:63:b6:c9:37:9f:c5: 42:55:d3:7b:75:af:14:e4:28:1f:67:10:3a:23:0c:81:6b:a9: 9f:25:65:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUwNjE5MDAwMTMyWhcNMjUwNjI2MDAwMTMyWjAYMRYwFAYD VQQDEw02ODUzNTM1Yy04OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu6JRoKGt7giiwQhloGm/HqzyR4Nm6zycmoIng5Rvff1PjzIpqFprZkgPZ8e j+/ASVI58KR+hoisuwi7v5s3mt1H8Ukhl8kUMx7FcTI4ufyjg1pFuI4HTWVSINIX NKHhC6wB6OmD2IUf7fcjwXZY11gPr1ykMiS1wnKT+LIclMMOEKvjBsEMl5Ea7yjo 41orHn5dCIWYX0SL0Qgz0GBq2v7uN5XKMXdSwm1fU6ifVv6dBzZ6JrfDXI8mBG1v 0tq4oZAOj1rsmKq4DxPJrmbYfMOjOa19wLr+BEwyyJhDleWdREolJZ0tn382mNYn qi0R490O9IdCBgqRs7lw8d570wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo8+bOj wLrEx9ZTShTKKr/oxi8KMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK0sIyiuzSup+CNC3lgrTWngAsM+HCQFwmfvIXxcdw1Yea4Dvr5TFQ rkK4drKXbzbdNrMT6lxB6Ss0m46kjOLWNp1P631Bh8BZsE1EXZrm+uiq35jngwpj fAicm4JvbexK4VdhEpSCC00+iueOa6GOGIwwpB0CrMEScOD8+aa6Tc1rAlJn6DcI 7IxlP66sIA1i8EW2shGwynsNYGa2NwxxHw72yNS7qO4fkndAnsFkQCQE6tQO0Ddd mof+POvtVxQkbm+3B42oVH76inE78tjfvmAjNNuRZJsy/LMSo+P+EB8QWOhjtsk3 n8VCVdN7da8U5CgfZxA6IwyBa6mfJWVf -----END CERTIFICATE-----Generated at Thu Jun 19 18:58:23 2025 by rpki-client