$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: AWBhq4d0XwfiKBPYAhIQos8rmAhXqoTPMAXjjv8otlM= Subject key identifier: 23:6B:12:E3:C6:4F:14:AC:A4:1D:67:97:6C:F8:B6:8B:B8:BC:01:5F Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: E2 Signing time: Thu 19 Jun 2025 04:48:43 +0000 Manifest this update: Thu 19 Jun 2025 04:48:42 +0000 Manifest next update: Thu 26 Jun 2025 04:48:42 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: nF5qxUKOROM7tPRbgmwtAN36Sp+QsNY3eYnUNNDapT0=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Jun 19 04:48:42 2025 GMT Not After : Jun 26 04:48:42 2025 GMT Subject: CN=685396ab-d2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:fa:97:95:67:2b:43:c3:31:fc:1f:81:25: 21:9b:95:d0:59:e7:b2:9e:3a:1c:9d:8c:c3:c9:49: 7b:08:d3:4f:e4:e9:cb:ef:09:22:8f:23:31:e4:5f: 2c:f5:f7:04:ff:94:86:6a:96:02:d3:d9:b7:76:08: 2f:1a:aa:cd:e2:7d:e9:63:85:96:24:7a:79:16:2d: f6:1f:ab:31:19:27:82:e0:21:6a:af:7c:df:26:db: b2:ca:b0:23:09:50:4d:48:6b:66:1d:8e:29:69:e4: 49:83:c2:03:ed:45:3b:c2:56:c3:40:95:97:e0:ea: d4:c9:ef:92:d0:20:d3:94:a9:ca:73:6f:60:df:1f: 84:20:1e:2f:64:a2:e8:0f:62:de:8f:4e:31:8d:57: bf:d7:aa:7e:75:1a:4e:76:12:9e:24:f9:71:47:6a: 97:20:08:a0:11:58:45:2d:9b:7f:f6:72:24:42:09: 81:5c:86:91:75:28:a0:90:5c:d2:21:8c:b9:f3:7d: b5:13:9e:dd:dd:ef:a2:ce:a2:96:11:71:c5:92:28: dd:52:e0:e6:52:4f:8a:fd:fa:cd:2b:54:fa:ad:fe: 0e:c8:cf:7d:10:db:56:c3:f6:ce:99:9a:f8:d2:0a: b9:b9:ea:dd:22:7f:59:33:88:10:56:48:c6:ac:a2: 9c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6B:12:E3:C6:4F:14:AC:A4:1D:67:97:6C:F8:B6:8B:B8:BC:01:5F X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fc:47:a0:f0:44:aa:c0:73:c2:db:a1:e1:83:ae:37:c1:32: da:3c:c9:da:19:9b:2b:3f:5f:e6:e4:d6:58:e6:47:fc:ae:c4: 3d:45:97:b7:9a:c6:04:9f:f4:46:12:48:97:35:41:56:4e:4d: bc:41:ab:77:27:ca:83:00:2c:d2:bf:55:f5:3e:be:d9:68:99: 4c:19:d9:c0:5d:3b:e6:cd:92:56:dc:b3:39:d5:46:dd:a2:64: a5:2a:45:b7:d6:cb:09:bd:05:9e:27:9c:21:b6:ab:82:21:2a: 9d:9f:5b:a8:3b:79:42:40:b7:4e:07:de:53:18:d0:3b:08:a9: 98:fe:2c:6d:00:1e:11:c1:aa:b5:7f:25:2f:7f:85:5b:4c:eb: 64:97:f8:b8:2c:bf:65:5e:79:67:0a:57:09:4b:8c:6c:ab:7b: c0:5f:e8:9e:6f:ea:1b:d6:f9:7b:17:39:63:6d:2e:bc:7d:8c: dc:c8:93:cc:da:ce:53:7b:ca:cb:bc:1d:76:3b:34:72:36:1e: 9c:8d:19:36:de:31:cd:c0:ab:9b:95:2f:d4:cb:55:4b:de:75: b5:3f:f5:0b:2f:65:bf:65:40:8a:1a:68:51:1c:4d:bc:d7:09: 6a:34:4e:a0:f8:d9:90:99:83:45:db:3e:65:ac:83:d1:49:37: d6:ab:5c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUwNjE5MDQ0ODQyWhcNMjUwNjI2MDQ0ODQyWjAYMRYwFAYD VQQDEw02ODUzOTZhYi1kMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Yf6l5VnK0PDMfwfgSUhm5XQWeeynjocnYzDyUl7CNNP5OnL7wkijyMx5F8s 9fcE/5SGapYC09m3dggvGqrN4n3pY4WWJHp5Fi32H6sxGSeC4CFqr3zfJtuyyrAj CVBNSGtmHY4paeRJg8ID7UU7wlbDQJWX4OrUye+S0CDTlKnKc29g3x+EIB4vZKLo D2Lej04xjVe/16p+dRpOdhKeJPlxR2qXIAigEVhFLZt/9nIkQgmBXIaRdSigkFzS IYy58321E57d3e+izqKWEXHFkijdUuDmUk+K/frNK1T6rf4OyM99ENtWw/bOmZr4 0gq5uerdIn9ZM4gQVkjGrKKcCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNrEuPG TxSspB1nl2z4tou4vAFfMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw/Eeg8ESqwHPC26Hhg643wTLaPMnaGZsrP1/m5NZY5kf8rsQ9RZe3 msYEn/RGEkiXNUFWTk28Qat3J8qDACzSv1X1Pr7ZaJlMGdnAXTvmzZJW3LM51Ubd omSlKkW31ssJvQWeJ5whtquCISqdn1uoO3lCQLdOB95TGNA7CKmY/ixtAB4Rwaq1 fyUvf4VbTOtkl/i4LL9lXnlnClcJS4xsq3vAX+ieb+ob1vl7FzljbS68fYzcyJPM 2s5Te8rLvB12OzRyNh6cjRk23jHNwKublS/Uy1VL3nW1P/ULL2W/ZUCKGmhRHE28 1wlqNE6g+NmQmYNF2z5lrIPRSTfWq1yH -----END CERTIFICATE-----Generated at Fri Jun 20 06:10:47 2025 by rpki-client