$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: y9F30RONzWaOLwpLr97rCuG5WasTFg/9DDfXM6Xppro= Subject key identifier: 34:44:AA:AD:11:3F:8B:31:8B:F1:56:AE:99:2F:4C:A0:50:EF:CD:22 Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04BE Signing time: Thu 12 Jun 2025 23:27:08 +0000 Manifest this update: Thu 12 Jun 2025 23:27:08 +0000 Manifest next update: Thu 19 Jun 2025 23:27:07 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: 4QQAzkxKn2SFgLg1HNtzbj/VGBnBgss6UYHzUXv7JQc=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Jun 12 23:27:08 2025 GMT Not After : Jun 19 23:27:07 2025 GMT Subject: CN=684b624c-a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:28:80:31:9b:0d:8f:85:81:85:6c:cf:8d: b5:89:00:58:cf:cb:06:d3:f1:d5:0b:9f:ed:ec:cd: d5:cb:9d:72:8b:ac:c1:22:61:5d:f7:83:0c:b4:42: a6:92:5e:d5:79:ad:fb:05:09:5e:81:94:d8:8d:69: 9e:26:7e:0c:69:15:f4:4d:13:b2:63:b6:c0:88:e2: 94:02:09:7b:7f:9a:2a:52:e9:32:1e:e7:cd:94:6b: 72:35:53:5e:1a:c8:06:51:cc:dd:e1:94:7f:06:96: fa:99:65:10:fc:9e:81:ff:91:22:8b:e7:34:d4:9c: e2:50:1e:5f:e8:68:fd:c9:2a:e3:2a:1f:c4:e7:d3: b1:2f:e1:ec:17:bd:24:d8:83:2d:0d:00:3f:a5:40: cb:d2:84:04:c0:59:56:8e:d9:a2:37:3e:4a:86:e4: 02:7a:5e:93:f8:b0:a1:44:af:9f:59:a8:bb:b7:b6: af:76:00:2a:1e:a9:6a:96:20:ce:b6:88:25:dc:3e: 54:29:ac:7b:f6:db:60:71:c2:7e:38:6d:6a:f8:b5: 7b:04:f5:a2:ee:4a:a3:6a:e7:52:83:82:4a:3b:2a: 21:81:ee:86:6c:2d:f6:73:e4:aa:b1:ba:7a:8a:f5: 64:b9:c8:87:33:c2:40:67:ec:64:91:41:42:35:a9: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:44:AA:AD:11:3F:8B:31:8B:F1:56:AE:99:2F:4C:A0:50:EF:CD:22 X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:86:95:26:39:7f:55:29:e0:14:8d:ba:9a:d1:7b:fa:f0:c4: e2:68:a4:00:aa:4c:f8:a2:80:7a:38:2e:d8:f3:f9:f2:60:8b: 59:ac:61:a5:b1:c3:6a:79:91:45:d4:46:89:2c:37:54:da:74: f3:b1:19:73:11:3f:ae:2f:fd:7f:01:4f:2f:36:9a:0b:d9:1d: fb:cf:5d:de:3d:bc:4f:29:e7:98:2e:be:8e:ea:01:f7:50:da: c7:cf:ec:28:96:b0:b7:ce:e6:08:82:7a:3f:51:3a:b1:e9:db: 4b:3a:b6:34:3b:c1:d1:b3:45:9c:c7:e9:f1:f5:57:b9:1d:6d: 14:05:3a:a6:7d:3a:a9:16:c7:0f:0f:62:35:e1:ce:64:62:16: f9:1f:6d:36:b3:73:24:e0:b1:b6:1d:a8:e5:55:09:fc:db:87: 1e:0b:ee:d5:c4:d5:30:91:b5:67:38:df:5c:16:c0:e8:7b:03: 27:66:18:31:a1:02:dd:c1:31:4a:e4:7a:05:e5:94:f1:13:60: a5:cb:71:d2:4f:39:b3:8b:5f:ad:ba:ba:d6:bd:2a:9a:21:cd: 08:cd:29:8b:25:bd:b7:d6:a4:5f:80:c0:41:06:e6:5d:98:f4: ea:b2:66:a5:98:f3:4b:2f:37:83:51:54:0c:84:32:40:b1:ef: d6:d5:d3:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUwNjEyMjMyNzA4WhcNMjUwNjE5MjMyNzA3WjAYMRYwFAYD VQQDEw02ODRiNjI0Yy1hNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRkogDGbDY+FgYVsz421iQBYz8sG0/HVC5/t7M3Vy51yi6zBImFd94MMtEKm kl7Vea37BQlegZTYjWmeJn4MaRX0TROyY7bAiOKUAgl7f5oqUukyHufNlGtyNVNe GsgGUczd4ZR/Bpb6mWUQ/J6B/5Eii+c01JziUB5f6Gj9ySrjKh/E59OxL+HsF70k 2IMtDQA/pUDL0oQEwFlWjtmiNz5KhuQCel6T+LChRK+fWai7t7avdgAqHqlqliDO togl3D5UKax79ttgccJ+OG1q+LV7BPWi7kqjaudSg4JKOyohge6GbC32c+Sqsbp6 ivVkuciHM8JAZ+xkkUFCNamxZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDREqq0R P4sxi/FWrpkvTKBQ780iMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrhpUmOX9VKeAUjbqa0Xv68MTiaKQAqkz4ooB6OC7Y8/nyYItZrGGl scNqeZFF1EaJLDdU2nTzsRlzET+uL/1/AU8vNpoL2R37z13ePbxPKeeYLr6O6gH3 UNrHz+wolrC3zuYIgno/UTqx6dtLOrY0O8HRs0Wcx+nx9Ve5HW0UBTqmfTqpFscP D2I14c5kYhb5H202s3Mk4LG2HajlVQn824ceC+7VxNUwkbVnON9cFsDoewMnZhgx oQLdwTFK5HoF5ZTxE2Cly3HSTzmzi1+turrWvSqaIc0IzSmLJb231qRfgMBBBuZd mPTqsmalmPNLLzeDUVQMhDJAse/W1dOX -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:25 2025 by rpki-client