$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: 9hlz3PmNExBDwusqeukz6x9s+H8782mXe5n8nb8UfKg= Subject key identifier: 51:FF:EB:79:1A:B9:09:01:70:06:AF:F0:E4:6E:11:DF:BF:CB:DE:8D Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: C2 Signing time: Thu 19 Jun 2025 05:09:43 +0000 Manifest this update: Thu 19 Jun 2025 05:09:43 +0000 Manifest next update: Thu 26 Jun 2025 05:09:43 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: 34YuMWlrZzotvP5IW6KTyM6vG1L5MK+zxTsLsdxI51Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Jun 19 05:09:43 2025 GMT Not After : Jun 26 05:09:43 2025 GMT Subject: CN=68539b97-0fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:87:72:4e:db:45:e0:c4:39:09:01:69:4e: 40:3a:bc:10:f7:e8:d5:10:fc:ba:19:44:9c:33:55: ed:4a:c8:37:ee:0a:e8:21:5d:de:73:f1:4c:fa:ff: a9:48:34:18:da:c0:13:0c:40:29:1a:2f:48:b4:54: b5:9f:4a:0a:01:80:fe:06:f2:cd:e9:79:e2:c5:6c: 14:36:98:76:f8:70:7c:2d:8f:bb:56:90:5a:47:0f: db:2d:0b:7a:fd:83:30:2a:a8:62:ae:91:8e:07:40: e1:41:18:0c:d1:d1:37:e8:13:2d:ce:45:4e:bf:08: bc:5e:3e:d5:27:62:5f:9b:46:ab:2c:a8:11:dd:28: 76:d3:3b:11:fd:d9:99:79:70:93:78:c1:39:6b:60: 88:94:e4:b8:c4:7e:fc:01:48:a0:92:ab:4f:8c:f1: 42:87:c4:9f:2b:9b:17:01:ea:2f:b1:f0:0d:14:fa: 2b:0a:79:b2:67:06:5e:df:9e:00:23:c1:89:53:53: 10:1b:0c:86:2a:d7:08:b7:76:94:bf:5f:2e:3b:c1: 5d:1d:af:2f:2d:eb:0e:6f:1d:9a:66:ad:ca:b9:c2: b4:cb:57:8f:ad:e5:ec:fa:37:04:c8:79:96:0a:69: 7c:b7:56:bc:87:b3:9e:29:6c:45:44:03:b0:99:d4: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:EB:79:1A:B9:09:01:70:06:AF:F0:E4:6E:11:DF:BF:CB:DE:8D X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:be:30:37:80:99:15:e2:57:d5:a5:c3:64:c0:b9:2d:42:b7: af:87:11:0f:49:ef:0f:df:8c:75:3c:73:3d:b4:b9:36:50:ff: b0:df:e1:37:6a:e1:92:2f:1d:59:12:d4:6e:3d:b6:b1:e4:a4: 60:79:3f:6b:87:de:70:79:66:c2:f1:a5:90:01:e1:f8:03:96: e0:b0:7a:4a:d1:56:bd:e9:07:e5:96:4b:4e:ea:a1:3b:af:dc: 75:20:72:9a:5c:bb:fd:90:35:aa:18:7c:0b:cd:4e:f4:d0:31: 9e:da:cb:cf:ce:11:3d:ff:24:3c:f2:a9:1d:81:b2:7a:e1:74: a8:a0:a2:20:78:f0:26:78:55:1d:99:81:bb:28:3f:a0:11:bb: 7e:46:fb:d1:e3:7e:4b:6a:ee:25:c3:f3:aa:70:d3:fd:12:2f: 27:88:4d:7a:b6:53:91:48:92:35:cb:a6:72:81:2d:23:8b:c5: 52:ef:e0:70:aa:d5:98:2b:6c:55:18:76:d8:d2:5a:89:b4:f5: 03:4f:42:04:d5:26:1e:9a:ca:9c:b2:9a:91:e3:37:8b:54:27: a1:f4:8f:50:66:94:c0:96:a7:cd:fe:0d:8c:02:27:b0:40:ce: 1a:56:db:e6:3d:4b:0b:47:95:39:73:4f:9a:4b:22:ac:e8:e3: c3:5e:68:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUwNjE5MDUwOTQzWhcNMjUwNjI2MDUwOTQzWjAYMRYwFAYD VQQDEw02ODUzOWI5Ny0wZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEuHck7bReDEOQkBaU5AOrwQ9+jVEPy6GUScM1XtSsg37groIV3ec/FM+v+p SDQY2sATDEApGi9ItFS1n0oKAYD+BvLN6XnixWwUNph2+HB8LY+7VpBaRw/bLQt6 /YMwKqhirpGOB0DhQRgM0dE36BMtzkVOvwi8Xj7VJ2Jfm0arLKgR3Sh20zsR/dmZ eXCTeME5a2CIlOS4xH78AUigkqtPjPFCh8SfK5sXAeovsfANFPorCnmyZwZe354A I8GJU1MQGwyGKtcIt3aUv18uO8FdHa8vLesObx2aZq3KucK0y1ePreXs+jcEyHmW Cml8t1a8h7OeKWxFRAOwmdRrvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH/63ka uQkBcAav8ORuEd+/y96NMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlvjA3gJkV4lfVpcNkwLktQrevhxEPSe8P34x1PHM9tLk2UP+w3+E3 auGSLx1ZEtRuPbax5KRgeT9rh95weWbC8aWQAeH4A5bgsHpK0Va96QfllktO6qE7 r9x1IHKaXLv9kDWqGHwLzU700DGe2svPzhE9/yQ88qkdgbJ64XSooKIgePAmeFUd mYG7KD+gEbt+RvvR435Lau4lw/OqcNP9Ei8niE16tlORSJI1y6ZygS0ji8VS7+Bw qtWYK2xVGHbY0lqJtPUDT0IE1SYemsqcspqR4zeLVCeh9I9QZpTAlqfN/g2MAiew QM4aVtvmPUsLR5U5c0+aSyKs6OPDXmgM -----END CERTIFICATE-----Generated at Fri Jun 20 20:54:50 2025 by rpki-client