$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: XpoCr4U2gd5pGxCRcrNjnxSfpb1O1KQR5dZDOnOzLQ8= Subject key identifier: EC:9F:81:B6:25:E1:27:9F:AD:06:4C:5D:5D:A0:54:EA:04:08:10:0E Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0AE2 Signing time: Fri 20 Jun 2025 19:20:22 +0000 Manifest this update: Fri 20 Jun 2025 19:20:21 +0000 Manifest next update: Fri 27 Jun 2025 19:20:21 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: FKF21A0UHCqFSoHZ06SP4A4WXb8R0lqackZwLpAFjcE=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Jun 20 19:20:21 2025 GMT Not After : Jun 27 19:20:21 2025 GMT Subject: CN=6855b476-7bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:88:fc:fe:1c:66:31:96:1f:a0:9f:8f:73: bd:70:53:a0:a2:86:7e:00:83:4d:48:4f:be:80:0d: 9d:a5:47:28:c3:96:fc:58:e9:bc:89:ae:a3:d9:d9: 7d:90:f9:86:85:ff:a6:dc:68:c8:97:13:60:a6:a3: 91:5c:c9:fc:5f:7d:11:42:2b:d5:3a:4c:f7:8f:ab: 55:78:b1:ae:a5:b8:71:c8:44:b9:fd:89:9b:df:55: 58:f3:fc:73:18:5c:94:49:70:84:47:22:3a:7e:eb: 7f:fa:54:54:be:8d:68:5d:e0:f6:c7:38:92:61:bf: e5:65:e0:e6:dd:e0:bb:43:ef:5a:02:97:1b:59:9f: cc:97:45:e7:56:01:dd:ab:06:ba:a9:0e:0c:78:35: 76:fd:91:37:ee:4e:3e:a8:cb:51:21:0d:60:37:ff: 05:2a:8b:d9:2a:3e:12:c2:8b:b6:2d:fe:07:b8:8d: a9:09:08:bb:30:55:71:08:5c:53:02:ec:ac:2e:45: ff:66:84:70:2d:6c:b1:62:e3:c3:fc:86:9d:8c:4a: f4:64:a7:f8:09:2f:ac:31:3a:73:48:5c:0b:8f:16: ec:26:5c:30:26:91:36:ac:cf:12:7e:db:bf:70:a0: 85:64:17:02:92:89:1f:f5:c1:0b:b9:42:a3:f0:79: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9F:81:B6:25:E1:27:9F:AD:06:4C:5D:5D:A0:54:EA:04:08:10:0E X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:ac:49:ab:c9:60:62:5f:00:8e:e0:13:7f:9a:be:25:d3:1a: 12:7f:15:ff:2d:1e:b1:32:a7:40:24:8d:82:cb:bf:0d:5d:72: 7b:9f:03:ac:71:e7:70:f2:2b:78:c5:90:ff:47:3b:58:46:60: 30:b4:c9:31:52:22:d0:f8:e9:5c:3c:c1:68:60:5d:58:20:81: c6:aa:c8:22:cf:03:6d:2c:bf:30:f7:68:8f:b0:26:b2:c0:81: a5:18:03:76:13:ef:62:ab:d8:08:de:53:bb:c5:6f:df:18:2a: 16:3a:09:6d:4c:fe:0e:90:6a:9d:62:35:0c:1d:37:ac:58:78: 76:0f:ca:ea:ad:22:e0:aa:16:16:d3:45:c0:04:a8:2c:64:b7: 58:ed:04:53:71:12:58:09:fc:92:16:98:85:4e:4d:69:9e:74: bc:c0:8c:03:0e:03:18:03:20:63:c8:59:9a:a7:46:4a:a6:70: 2c:38:4e:98:01:76:ae:b1:47:1a:7b:3c:ad:cd:eb:5d:01:78: 49:c5:c7:06:7d:e2:23:39:3d:72:6b:ce:3e:cf:0c:e9:31:7a: 9c:4f:e0:0b:84:b9:7d:31:9b:1f:73:e6:a2:a2:87:74:f4:8b: 61:d5:a5:2d:24:a5:9e:48:c6:56:73:13:69:89:75:0d:d8:9c: 1b:ac:8d:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUwNjIwMTkyMDIxWhcNMjUwNjI3MTkyMDIxWjAYMRYwFAYD VQQDEw02ODU1YjQ3Ni03YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35SI/P4cZjGWH6Cfj3O9cFOgooZ+AINNSE++gA2dpUcow5b8WOm8ia6j2dl9 kPmGhf+m3GjIlxNgpqORXMn8X30RQivVOkz3j6tVeLGupbhxyES5/Ymb31VY8/xz GFyUSXCERyI6fut/+lRUvo1oXeD2xziSYb/lZeDm3eC7Q+9aApcbWZ/Ml0XnVgHd qwa6qQ4MeDV2/ZE37k4+qMtRIQ1gN/8FKovZKj4Swou2Lf4HuI2pCQi7MFVxCFxT AuysLkX/ZoRwLWyxYuPD/IadjEr0ZKf4CS+sMTpzSFwLjxbsJlwwJpE2rM8Sftu/ cKCFZBcCkokf9cELuUKj8HkF2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyfgbYl 4SefrQZMXV2gVOoECBAOMB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1rEmryWBiXwCO4BN/mr4l0xoSfxX/LR6xMqdAJI2Cy78NXXJ7nwOs cedw8it4xZD/RztYRmAwtMkxUiLQ+OlcPMFoYF1YIIHGqsgizwNtLL8w92iPsCay wIGlGAN2E+9iq9gI3lO7xW/fGCoWOgltTP4OkGqdYjUMHTesWHh2D8rqrSLgqhYW 00XABKgsZLdY7QRTcRJYCfySFpiFTk1pnnS8wIwDDgMYAyBjyFmap0ZKpnAsOE6Y AXausUcaezytzetdAXhJxccGfeIjOT1ya84+zwzpMXqcT+ALhLl9MZsfc+aiood0 9Ith1aUtJKWeSMZWcxNpiXUN2JwbrI3P -----END CERTIFICATE-----Generated at Sat Jun 21 00:49:58 2025 by rpki-client