$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft File: wvw-GxtUPr1I39pZHcJRgiT5W38.mft (raw, json) Hash identifier: vwRfCKZocUAD6a9Cs/n4RbakJKFVscKwmaPBjjt4U7U= Subject key identifier: FC:A9:7D:25:F3:1C:3A:CD:31:2D:15:09:04:8D:CF:77:C4:56:B5:8C Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F Certificate issuer: /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft Manifest number: 0235 Signing time: Thu 19 Jun 2025 01:43:56 +0000 Manifest this update: Thu 19 Jun 2025 01:43:55 +0000 Manifest next update: Thu 26 Jun 2025 01:43:55 +0000 Files and hashes: 1: wvw-GxtUPr1I39pZHcJRgiT5W38.crl (hash: VRQKZYcaDfA/8MNyKrXY9JrSXHtCCVd2/SM3P+wlV6I=) 2: 6B0DCABA80D111EFA7138B77C4F9AE02.roa (hash: XrzD9gHCwm8eB2YxyR3P7eTPrT9KRU3rPXHkNDhO2w8=) 3: B0EBD14E80D111EFABEC5878C4F9AE02.roa (hash: KwzZR+D6Yo3n0RMq2SPd2PCh/+pc1niACNwCgSeZryU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Validity Not Before: Jun 19 01:43:55 2025 GMT Not After : Jun 26 01:43:55 2025 GMT Subject: CN=68536b5b-1d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:fe:f7:23:d8:7d:5b:e0:19:2c:27:31:28: 9f:13:ae:81:b1:0b:b2:11:4a:fa:b5:d4:72:87:55: 58:08:5c:0a:a4:48:2f:d3:f2:96:63:ac:24:4d:2b: f1:90:c9:83:4c:0a:81:69:c4:02:29:f8:e2:84:09: 99:f4:0a:97:5a:b7:17:71:10:05:a8:79:2b:67:91: ed:72:f4:04:76:c6:7e:8e:b0:f3:4d:b0:40:90:39: 44:2b:ad:0f:4f:6f:67:dc:e1:70:78:e7:e4:0a:1e: 12:f1:e4:dc:23:3f:57:90:54:28:11:4d:e0:59:bd: 35:cb:27:38:32:69:d4:e7:4f:4e:43:69:cb:a9:c6: 84:bb:e1:df:f5:ea:69:1f:00:2b:b7:6c:cb:b9:a5: 98:85:9b:17:73:79:9e:59:de:14:2a:99:4d:2a:d5: f5:6a:9c:47:a1:46:bc:4f:8e:90:2c:1d:6c:74:1e: 11:ff:cf:f2:28:69:9d:c3:56:72:55:22:5b:55:44: 53:e9:cf:2b:af:86:40:ba:9e:1b:c6:bf:6d:a9:20: 4e:b1:c8:9c:da:2a:eb:f1:34:5a:e3:95:f8:4d:f2: 46:5b:aa:4b:80:cb:f1:f7:3f:bc:89:16:19:16:fd: f6:90:28:53:5e:cb:ac:55:3a:37:4f:af:68:d8:77: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A9:7D:25:F3:1C:3A:CD:31:2D:15:09:04:8D:CF:77:C4:56:B5:8C X509v3 Authority Key Identifier: keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b6:79:d3:77:b9:8f:48:a7:94:ff:e6:57:ac:7e:ec:16:19: 8d:5b:7c:e0:53:c9:92:32:06:fc:76:25:1a:15:50:ce:87:fa: 66:3d:95:10:39:1c:76:9c:5c:ab:77:e7:4c:d8:a5:30:2b:cc: f0:e3:0f:4e:16:31:d7:11:27:0c:2f:eb:30:30:93:c6:07:c1: 3c:5e:e0:44:c4:58:7e:28:8e:6f:1b:af:d9:af:d2:e5:ed:be: a5:21:84:6f:50:30:48:eb:3f:fb:20:bf:f3:b7:a6:cd:30:8a: 7f:7d:13:6f:a2:4b:2d:ad:1e:d9:e5:03:97:c7:1d:f7:7d:23: f7:9f:4d:ac:a5:6c:bd:ac:80:bc:09:c2:e8:00:59:5e:f9:a0: 54:c7:73:46:a6:59:ff:a9:ac:d5:e1:d5:20:1e:7b:06:27:45: 12:1b:19:97:d8:84:64:9d:b7:6d:ab:7f:c3:9b:95:5a:48:22: 2e:15:ec:9c:4f:d2:34:63:dc:95:ee:5f:b8:e2:83:61:73:d9: 5e:57:f1:f3:55:41:ff:d4:f2:72:fd:1b:6e:6b:32:0e:0a:62: ba:38:27:3e:0d:60:d1:96:80:cc:37:fe:62:f2:74:c8:65:b3: 32:2b:32:7d:70:5e:cd:c7:dc:b3:75:46:c6:0d:89:80:0a:d0: b7:8e:20:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy MjRGOTVCN0YwHhcNMjUwNjE5MDE0MzU1WhcNMjUwNjI2MDE0MzU1WjAYMRYwFAYD VQQDEw02ODUzNmI1Yi0xZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6j+9yPYfVvgGSwnMSifE66BsQuyEUr6tdRyh1VYCFwKpEgv0/KWY6wkTSvx kMmDTAqBacQCKfjihAmZ9AqXWrcXcRAFqHkrZ5HtcvQEdsZ+jrDzTbBAkDlEK60P T29n3OFweOfkCh4S8eTcIz9XkFQoEU3gWb01yyc4MmnU509OQ2nLqcaEu+Hf9epp HwArt2zLuaWYhZsXc3meWd4UKplNKtX1apxHoUa8T46QLB1sdB4R/8/yKGmdw1Zy VSJbVURT6c8rr4ZAup4bxr9tqSBOscic2irr8TRa45X4TfJGW6pLgMvx9z+8iRYZ Fv32kChTXsusVTo3T69o2Hf9iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPypfSXz HDrNMS0VCQSNz3fEVrWMMB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTUyNC80OTFGMDJERTJDNzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVBy MUkzOXBaSGNKUmdpVDVXMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZtnnTd7mPSKeU/+ZXrH7sFhmNW3zgU8mSMgb8diUaFVDOh/pmPZUQ ORx2nFyrd+dM2KUwK8zw4w9OFjHXEScML+swMJPGB8E8XuBExFh+KI5vG6/Zr9Ll 7b6lIYRvUDBI6z/7IL/zt6bNMIp/fRNvokstrR7Z5QOXxx33fSP3n02spWy9rIC8 CcLoAFle+aBUx3NGpln/qazV4dUgHnsGJ0USGxmX2IRknbdtq3/Dm5VaSCIuFeyc T9I0Y9yV7l+44oNhc9leV/HzVUH/1PJy/RtuazIOCmK6OCc+DWDRloDMN/5i8nTI ZbMyKzJ9cF7Nx9yzdUbGDYmACtC3jiBR -----END CERTIFICATE-----Generated at Fri Jun 20 17:14:34 2025 by rpki-client