$ rpki-client -vvf rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft File: Wl89PDwn7yXPbEA1MxiBYClqEGg.mft (raw, json) Hash identifier: +aF0AZbCn2wCf8Sv/rGBvErbQ0BIGwwRXwMNgqaXNnw= Subject key identifier: 32:BC:B0:A4:00:3F:67:F1:47:C6:4F:85:81:F6:8A:6F:91:FD:46:EA Authority key identifier: 5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 Certificate issuer: /CN=A9164215/serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft Manifest number: 0604 Signing time: Wed 18 Jun 2025 22:42:13 +0000 Manifest this update: Wed 18 Jun 2025 22:42:13 +0000 Manifest next update: Wed 25 Jun 2025 22:42:13 +0000 Files and hashes: 1: Wl89PDwn7yXPbEA1MxiBYClqEGg.crl (hash: Wv2aC3Tg5SXUJd99PoMYlQ5kgz/tBTwHBCDYeMSnKgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164215, serialNumber=5A5F3D3C3C27EF25CF6C403533188160296A1068 Validity Not Before: Jun 18 22:42:13 2025 GMT Not After : Jun 25 22:42:13 2025 GMT Subject: CN=685340c5-96a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c8:26:46:f7:25:2a:58:a5:58:41:33:35:a9: 3b:f2:f9:6c:3e:90:7d:0a:73:ac:85:56:de:23:1e: 59:cb:07:b7:63:1e:31:fb:b3:62:c0:15:aa:be:1a: 8b:89:a5:b2:f2:c8:8f:f5:36:40:9e:f1:66:cf:b5: 2f:ea:93:a7:5f:34:31:b6:c6:9d:aa:89:33:2b:9b: 28:64:20:3d:1c:b9:2b:05:34:df:cb:ba:42:75:c2: 3c:66:14:aa:af:50:5f:22:8e:64:ab:8e:3f:aa:ad: 2b:f2:7f:6f:18:b0:bb:be:43:33:d6:33:cb:45:6c: a4:bd:91:37:75:1b:c7:3a:93:80:06:8e:3c:bb:2e: 0b:c4:88:4b:2b:fe:ce:a8:bc:0a:0d:a8:76:6e:54: fe:7e:9d:74:22:eb:f0:a2:a1:d8:54:ce:f2:77:b5: c5:42:57:fa:c8:a2:fd:96:1a:75:44:22:64:d9:6e: 7a:35:96:af:46:92:3f:31:3d:4f:dc:8f:7b:50:d3: f5:62:f2:be:2f:0b:d7:b0:e4:8f:23:a2:f4:80:05: 35:c8:fe:b0:69:a8:3a:61:3f:82:ad:02:22:6f:d7: e7:2f:82:d8:b9:21:29:2e:33:b5:6c:fc:17:c5:13: b4:b8:63:8c:77:b7:6d:ad:08:e2:c7:59:ad:97:f3: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BC:B0:A4:00:3F:67:F1:47:C6:4F:85:81:F6:8A:6F:91:FD:46:EA X509v3 Authority Key Identifier: keyid:5A:5F:3D:3C:3C:27:EF:25:CF:6C:40:35:33:18:81:60:29:6A:10:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wl89PDwn7yXPbEA1MxiBYClqEGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164215/D6DA1396A95E11EBA549E653C4F9AE02/Wl89PDwn7yXPbEA1MxiBYClqEGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:be:0f:71:73:1d:bf:ee:f4:05:fa:a4:5a:75:9e:2b:a2:a0: d4:e5:4a:6d:3b:4a:07:e6:43:51:5a:12:5c:2c:94:f0:29:53: e6:75:51:f9:62:c9:29:d6:fa:d1:52:c2:6e:51:e7:24:e3:bd: bd:ac:fe:73:a4:b7:6e:c8:a5:03:68:0f:7e:e9:da:70:8d:8f: 7f:41:f8:8b:72:b0:d1:d3:b9:9c:78:e3:e0:e1:19:63:ee:55: f1:0b:81:68:f4:1f:6c:43:24:95:30:ce:7d:0f:b6:6d:ad:94: fa:35:7b:f6:5f:98:20:4f:ed:e9:29:85:ac:83:ee:00:71:b9: c6:df:31:d2:a6:b4:a3:c4:99:62:dc:a3:aa:64:86:f6:62:35: 1f:ce:01:70:1c:a3:53:eb:32:29:8d:9e:b1:d0:5c:2b:b9:27: e8:af:ca:e7:92:18:ce:ea:6d:08:84:49:b2:44:fe:9c:e4:76: 0c:dc:ec:16:d0:70:73:27:47:55:38:d9:d8:a7:a4:de:60:b6: 5e:e3:22:62:59:83:e4:20:a6:5d:d9:df:c9:23:c7:21:2c:80: d2:47:55:0a:2d:8a:fa:80:a7:e6:4e:7b:f1:ef:f8:d6:0f:d8: 8a:79:00:6a:98:13:c1:66:1a:c3:a4:d7:e8:40:49:84:fc:62: d1:22:bb:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyMTUxMTAvBgNVBAUTKDVBNUYzRDNDM0MyN0VGMjVDRjZDNDAzNTMzMTg4MTYw Mjk2QTEwNjgwHhcNMjUwNjE4MjI0MjEzWhcNMjUwNjI1MjI0MjEzWjAYMRYwFAYD VQQDEw02ODUzNDBjNS05NmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sgmRvclKlilWEEzNak78vlsPpB9CnOshVbeIx5Zywe3Yx4x+7NiwBWqvhqL iaWy8siP9TZAnvFmz7Uv6pOnXzQxtsadqokzK5soZCA9HLkrBTTfy7pCdcI8ZhSq r1BfIo5kq44/qq0r8n9vGLC7vkMz1jPLRWykvZE3dRvHOpOABo48uy4LxIhLK/7O qLwKDah2blT+fp10IuvwoqHYVM7yd7XFQlf6yKL9lhp1RCJk2W56NZavRpI/MT1P 3I97UNP1YvK+LwvXsOSPI6L0gAU1yP6waag6YT+CrQIib9fnL4LYuSEpLjO1bPwX xRO0uGOMd7dtrQjix1mtl/MuPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK8sKQA P2fxR8ZPhYH2im+R/UbqMB8GA1UdIwQYMBaAFFpfPTw8J+8lz2xANTMYgWApahBo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIxNS9ENkRBMTM5NkE5 NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5WFBiRUExTXhpQllDbHFF R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dsODlQRHduN3lYUGJFQTFNeGlCWUNscUVHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDIxNS9ENkRBMTM5NkE5NUUxMUVCQTU0OUU2NTNDNEY5QUUwMi9XbDg5UER3bjd5 WFBiRUExTXhpQllDbHFFR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFvg9xcx2/7vQF+qRadZ4roqDU5UptO0oH5kNRWhJcLJTwKVPmdVH5 Yskp1vrRUsJuUeck4729rP5zpLduyKUDaA9+6dpwjY9/QfiLcrDR07mceOPg4Rlj 7lXxC4Fo9B9sQySVMM59D7ZtrZT6NXv2X5ggT+3pKYWsg+4AcbnG3zHSprSjxJli 3KOqZIb2YjUfzgFwHKNT6zIpjZ6x0FwruSfor8rnkhjO6m0IhEmyRP6c5HYM3OwW 0HBzJ0dVONnYp6TeYLZe4yJiWYPkIKZd2d/JI8chLIDSR1UKLYr6gKfmTnvx7/jW D9iKeQBqmBPBZhrDpNfoQEmE/GLRIruL -----END CERTIFICATE-----Generated at Thu Jun 19 01:01:15 2025 by rpki-client