$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: qggdsSLE6a50QAN/eVjMujPJAvgBiGAvYQtFw8Q9Ch0= Subject key identifier: FF:54:AC:50:91:4A:53:A6:04:5F:B6:D5:82:8E:6E:07:A5:88:95:B3 Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 0176 Signing time: Sun 15 Jun 2025 03:05:09 +0000 Manifest this update: Sun 15 Jun 2025 03:05:08 +0000 Manifest next update: Sun 22 Jun 2025 03:05:08 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: GbD+mQGcpSjTrVuYhzIslqjjM+JD93ryBaWNa0bwIZk=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: S8YNNTIIBrTPm8ymERHQ4CPzLan04br8iQE6kJBXXTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Jun 15 03:05:08 2025 GMT Not After : Jun 22 03:05:08 2025 GMT Subject: CN=684e3864-e61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:d5:84:e0:53:d1:e5:6d:dc:b3:6b:43:68: 95:17:78:a8:1c:d5:22:21:4c:e8:c7:51:2d:bb:0d: 57:ec:18:96:71:03:de:e7:63:0e:0a:42:c9:3a:be: f5:3c:dd:c0:28:72:6c:b3:19:93:b3:eb:e6:60:c1: 77:a3:db:5e:46:6c:c3:ec:65:89:4e:1f:55:10:01: ed:1b:0f:69:82:e6:a8:50:06:bc:c7:f5:a8:53:e9: 25:fa:51:c9:c9:4b:e4:27:bd:d9:10:31:79:94:40: 9a:ae:d1:44:48:f6:e3:94:63:f7:bb:ca:9a:46:7e: b9:7b:af:ef:b4:a3:c3:52:8b:8a:7c:a6:dc:3e:fc: 48:41:47:7c:7b:4d:38:2b:89:17:2b:df:c5:b7:fa: 88:a1:cf:20:26:0b:ae:8a:37:75:f8:84:f1:41:ea: 26:95:9a:91:64:58:f5:fd:b2:95:5c:1b:4a:13:98: 0d:23:2b:6a:18:eb:82:a4:4d:0c:d6:f1:2a:14:68: a7:ec:9b:ca:57:d5:fe:79:0b:c8:74:b5:ed:fb:3a: 86:91:76:c6:17:fe:7f:bb:af:42:91:cd:ac:cc:d0: d9:4c:de:07:5e:95:0b:cf:da:4b:ec:d5:52:3b:63: 58:0a:33:60:89:ea:93:70:e8:08:8f:b5:28:21:a0: 13:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:54:AC:50:91:4A:53:A6:04:5F:B6:D5:82:8E:6E:07:A5:88:95:B3 X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:4a:73:80:36:b1:6b:fa:06:cf:15:8a:98:d8:f8:ea:42:c3: a4:ec:f1:63:53:78:21:bd:c9:08:f7:15:43:6d:d9:0a:18:a1: 40:b9:38:5e:3b:9d:a2:1e:e6:50:cd:ca:ef:c7:a4:e3:43:1e: a7:d3:4d:f5:6e:00:f9:23:ef:50:cc:72:af:37:ce:c2:2c:ad: 31:98:dd:d2:37:c2:5a:f5:e3:4e:9e:e7:e9:c5:b1:20:e3:f3: f8:fa:42:8d:2b:eb:f3:0b:af:ad:5a:b1:0f:4c:88:c6:35:4c: e2:4f:94:dc:35:ef:b7:6e:b7:14:20:01:e6:86:65:47:dd:85: 01:96:f6:6d:44:c9:c2:ea:a8:92:05:97:1b:ef:57:1d:81:1e: 32:60:27:29:5e:82:de:e6:3a:ec:cf:d8:ad:57:b8:29:58:2f: 65:60:64:97:9c:21:7e:62:a1:7c:83:f1:d9:bb:9c:6e:d2:fb: af:d2:de:24:33:2e:d0:9c:b9:d1:14:87:ce:24:ef:97:44:92: 7b:8e:07:d4:94:c8:a0:45:35:7e:e3:92:95:67:e9:7a:7f:55: f6:1c:92:dc:a9:90:09:46:12:5c:63:13:e2:84:fc:4a:ac:31: af:fa:87:3d:45:dc:e9:17:97:e3:03:23:e0:40:60:70:cb:24: 13:5e:0f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUwNjE1MDMwNTA4WhcNMjUwNjIyMDMwNTA4WjAYMRYwFAYD VQQDEw02ODRlMzg2NC1lNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWfVhOBT0eVt3LNrQ2iVF3ioHNUiIUzox1Etuw1X7BiWcQPe52MOCkLJOr71 PN3AKHJssxmTs+vmYMF3o9teRmzD7GWJTh9VEAHtGw9pguaoUAa8x/WoU+kl+lHJ yUvkJ73ZEDF5lECartFESPbjlGP3u8qaRn65e6/vtKPDUouKfKbcPvxIQUd8e004 K4kXK9/Ft/qIoc8gJguuijd1+ITxQeomlZqRZFj1/bKVXBtKE5gNIytqGOuCpE0M 1vEqFGin7JvKV9X+eQvIdLXt+zqGkXbGF/5/u69Ckc2szNDZTN4HXpULz9pL7NVS O2NYCjNgieqTcOgIj7UoIaATZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9UrFCR SlOmBF+21YKObgeliJWzMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjSnOANrFr+gbPFYqY2PjqQsOk7PFjU3ghvckI9xVDbdkKGKFAuThe O52iHuZQzcrvx6TjQx6n0031bgD5I+9QzHKvN87CLK0xmN3SN8Ja9eNOnufpxbEg 4/P4+kKNK+vzC6+tWrEPTIjGNUziT5TcNe+3brcUIAHmhmVH3YUBlvZtRMnC6qiS BZcb71cdgR4yYCcpXoLe5jrsz9itV7gpWC9lYGSXnCF+YqF8g/HZu5xu0vuv0t4k My7QnLnRFIfOJO+XRJJ7jgfUlMigRTV+45KVZ+l6f1X2HJLcqZAJRhJcYxPihPxK rDGv+oc9RdzpF5fjAyPgQGBwyyQTXg8k -----END CERTIFICATE-----Generated at Sun Jun 15 08:52:42 2025 by rpki-client