$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft File: wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json) Hash identifier: huYyErT+kf00UV7fx6RJCiXVICZ85MUspIanAsKZvuI= Subject key identifier: FE:DD:27:ED:9F:EF:46:84:89:D4:76:67:DC:FB:1F:4F:F8:96:27:DC Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 Certificate issuer: /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Certificate serial: 0666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft Manifest number: 0661 Signing time: Mon 16 Jun 2025 22:08:00 +0000 Manifest this update: Mon 16 Jun 2025 22:08:00 +0000 Manifest next update: Mon 23 Jun 2025 22:08:00 +0000 Files and hashes: 1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: CgpG5T8kt7o7NZy1YTZgpCIj9onMh1XCaUQ/k6bdtxE=) 2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Validity Not Before: Jun 16 22:08:00 2025 GMT Not After : Jun 23 22:08:00 2025 GMT Subject: CN=685095c0-cd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:d8:2d:aa:c0:f4:20:d1:21:79:09:58:93: e8:a2:7e:71:cb:a7:88:57:bc:0d:ff:bd:c1:93:a6: e9:07:1d:24:00:ca:a4:d1:4a:fc:57:1e:52:04:79: 0b:0d:f4:70:88:48:e3:0b:f4:a5:ac:fd:fe:c6:bb: e1:ad:76:65:01:f2:32:3c:44:c5:15:1c:c2:08:d0: d5:88:35:5f:5b:a2:23:7d:df:47:73:52:c6:8d:44: c1:1f:fd:cb:08:19:d5:d5:6b:77:3e:5d:30:e3:2b: f8:1c:68:bd:10:c6:8d:06:18:2f:be:27:71:10:87: bc:70:91:e7:c3:2e:ab:1a:8c:f0:66:8d:04:7d:13: 3c:49:6d:bd:72:51:05:e9:4c:55:ec:88:87:8b:e3: 63:48:5f:29:a5:d9:ff:38:d4:70:45:0c:d8:59:0c: 8d:f5:89:f7:e0:e3:5b:d1:2f:8f:26:aa:2b:42:bf: 2f:06:fe:cf:91:f3:a9:e6:46:96:26:b5:ac:09:44: aa:43:07:1c:8d:0a:6d:d4:12:e4:9a:93:97:a7:a6: ba:8b:ec:bf:4b:a6:e7:e0:69:cd:8c:1c:34:d6:9c: 7a:46:6b:bd:02:d8:6d:7b:81:81:82:14:f1:6a:7e: 1d:fa:99:7f:59:ee:13:df:54:57:59:a1:bb:85:c3: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:27:ED:9F:EF:46:84:89:D4:76:67:DC:FB:1F:4F:F8:96:27:DC X509v3 Authority Key Identifier: keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e2:5f:90:15:84:f5:5d:3d:5c:61:08:e6:d8:42:98:44:79: ee:b0:7d:ff:75:fc:44:b4:30:b9:6e:67:30:ea:58:02:68:5e: e2:84:a9:d6:e0:e7:2a:48:7f:57:3d:75:08:c0:f4:60:a0:8c: f0:5f:15:50:18:c6:50:5e:d4:81:38:85:a5:38:e3:7d:63:a3: bb:2b:79:33:e7:5a:53:5d:81:46:9c:26:fe:7f:7e:4f:58:49: d3:5e:b6:67:60:15:be:ce:85:f0:b2:7a:8d:9d:d3:5a:48:df: fc:fa:c0:a1:37:75:6a:1a:59:c9:09:ae:f7:d4:4e:13:87:11: a6:f8:6b:b4:c2:08:10:14:c1:8f:e6:90:df:17:77:d8:93:6d: b3:39:08:e3:6d:b6:fd:43:5a:44:73:fa:62:1e:ba:bc:e3:5f: 5c:96:56:31:49:31:50:9c:e7:6e:d9:19:24:ee:0c:3b:a9:6b: 49:3c:6a:e3:87:d0:24:7d:64:d7:0e:72:1c:f0:bb:45:91:86: f0:cc:8d:89:d7:17:a9:5f:b3:02:29:66:a9:a3:6a:48:88:e2: 7c:2e:8c:05:ad:72:36:6b:72:0d:a9:e2:2e:56:68:37:a7:eb: 35:98:41:34:72:70:cf:91:af:e6:1b:1a:d6:d4:e5:3e:68:62: 83:13:43:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2 N0JBMUE5ODMwHhcNMjUwNjE2MjIwODAwWhcNMjUwNjIzMjIwODAwWjAYMRYwFAYD VQQDEw02ODUwOTVjMC1jZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0rYLarA9CDRIXkJWJPoon5xy6eIV7wN/73Bk6bpBx0kAMqk0Ur8Vx5SBHkL DfRwiEjjC/SlrP3+xrvhrXZlAfIyPETFFRzCCNDViDVfW6Ijfd9Hc1LGjUTBH/3L CBnV1Wt3Pl0w4yv4HGi9EMaNBhgvvidxEIe8cJHnwy6rGozwZo0EfRM8SW29clEF 6UxV7IiHi+NjSF8ppdn/ONRwRQzYWQyN9Yn34ONb0S+PJqorQr8vBv7PkfOp5kaW JrWsCUSqQwccjQpt1BLkmpOXp6a6i+y/S6bn4GnNjBw01px6Rmu9Athte4GBghTx an4d+pl/We4T31RXWaG7hcPmmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7dJ+2f 70aEidR2Z9z7H0/4lifcMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1 MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFGRC8xMkFDRjA3Qzg1MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40 cEJxTktUSHdzclpudWhxWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ4l+QFYT1XT1cYQjm2EKYRHnusH3/dfxEtDC5bmcw6lgCaF7ihKnW 4OcqSH9XPXUIwPRgoIzwXxVQGMZQXtSBOIWlOON9Y6O7K3kz51pTXYFGnCb+f35P WEnTXrZnYBW+zoXwsnqNndNaSN/8+sChN3VqGlnJCa731E4ThxGm+Gu0wggQFMGP 5pDfF3fYk22zOQjjbbb9Q1pEc/piHrq8419cllYxSTFQnOdu2Rkk7gw7qWtJPGrj h9AkfWTXDnIc8LtFkYbwzI2J1xepX7MCKWapo2pIiOJ8LowFrXI2a3INqeIuVmg3 p+s1mEE0cnDPka/mGxrW1OU+aGKDE0MN -----END CERTIFICATE-----Generated at Tue Jun 17 01:23:47 2025 by rpki-client