$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft File: WUvRQ79yOI2ipctku8ORCIj2TcU.mft (raw, json) Hash identifier: gRuVezUUOqBaQb+6mJRifsRWhonqtwokqCBLNS7i8cE= Subject key identifier: 6D:B8:0B:CC:13:6D:68:37:CD:86:95:5D:B1:3A:2E:DC:70:2C:B3:EA Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft Manifest number: A1 Signing time: Tue 17 Jun 2025 05:07:56 +0000 Manifest this update: Tue 17 Jun 2025 05:07:55 +0000 Manifest next update: Tue 24 Jun 2025 05:07:55 +0000 Files and hashes: 1: WUvRQ79yOI2ipctku8ORCIj2TcU.crl (hash: Ix8VTjGx0tcnLWt9s+3I14+2HZMVfiN7zmt4kuDctLM=) 2: ACDAB45E592011EF976B8A1BC4F9AE02.roa (hash: 4GxfwSppjmwPB5KvCU0KTCfh5qeeGsb0mq6St5vDNUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A53A, serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5 Validity Not Before: Jun 17 05:07:55 2025 GMT Not After : Jun 24 05:07:55 2025 GMT Subject: CN=6850f82c-3e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:21:0e:93:82:2b:d2:c2:7a:ab:58:8b:3b: 51:f6:bf:bd:fe:71:5a:fc:df:21:e5:5a:cf:4c:e9: cd:4e:14:fc:11:02:31:bd:f2:9a:7b:2f:43:52:00: 08:e4:c7:9b:f1:fa:01:48:a8:9a:18:c4:25:2d:ed: ed:20:ac:21:b7:a8:be:83:28:17:fc:fb:df:34:18: b1:78:d3:bd:b3:29:c7:b6:bd:0e:a1:2e:22:47:6f: f7:7f:2b:53:4b:a0:4a:f1:32:b5:a6:c5:06:ba:a4: db:2c:92:04:88:2f:31:e9:5c:9c:cc:7e:47:35:c5: 9a:3b:fc:59:c7:29:3d:6f:72:8d:e0:8c:07:28:cd: b6:9c:93:1e:65:7e:d6:e4:76:33:72:0d:b4:88:bc: 89:b9:f6:38:62:cf:ae:2c:07:09:50:8d:5d:67:69: c1:af:af:ee:72:e5:fd:df:e9:39:c2:34:c8:ef:d5: 1b:1f:00:5d:59:69:e3:76:1a:87:65:78:77:5c:17: 88:06:7f:b3:37:20:12:7a:0b:cf:30:12:1c:a2:d4: 6c:ee:2e:30:f4:31:e2:b4:89:8b:be:96:f9:6f:e4: 66:e0:96:bb:7c:93:7b:ec:fb:cf:96:66:47:be:02: d8:2a:fa:4d:8f:af:e3:fc:7f:88:a3:f5:55:71:60: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B8:0B:CC:13:6D:68:37:CD:86:95:5D:B1:3A:2E:DC:70:2C:B3:EA X509v3 Authority Key Identifier: keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4f:fa:71:ae:c2:82:49:61:d9:63:58:76:0d:0e:ab:f2:fa: 8c:90:6d:c3:75:28:a0:4f:f5:bd:0c:4f:a7:dd:d0:b9:70:95: f4:89:02:1f:3b:fb:ca:76:39:9b:c7:ff:d4:fa:57:3d:62:65: f9:6b:0e:2d:c6:2c:80:4f:dc:6e:34:38:b3:5b:7f:5c:f7:83: 06:e0:f7:24:a4:9c:b1:29:c3:fc:a7:17:c0:34:cf:9c:73:5f: d8:d4:10:cc:d7:67:7d:16:a4:8c:ae:e1:a8:68:2c:3d:86:f9: f7:1e:8f:7b:dc:8c:24:e3:be:cb:78:9d:af:89:d9:e9:bb:c3: b5:16:26:f4:50:d5:b5:89:bb:d3:43:0a:9e:69:5b:e0:58:60: 2e:0e:75:f6:e6:d4:7e:24:df:e7:39:ca:fd:4d:cb:54:5e:1d: 65:c9:87:39:56:7a:85:ed:a0:4c:d8:8b:a3:2f:26:2e:9f:5c: bf:ef:90:d9:22:87:ad:20:b9:30:89:10:28:72:63:2e:b7:ff: 43:15:6a:b7:04:74:91:e4:57:5d:77:6d:3c:90:cc:20:2d:5f: 61:c2:7d:8d:d1:d5:6f:5d:80:05:42:7a:49:1b:aa:fb:f9:0e: 43:b6:eb:15:0e:f4:19:e3:69:a4:f6:18:4b:5d:44:db:4d:45: 29:ac:1b:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E1M0ExMTAvBgNVBAUTKDU5NEJEMTQzQkY3MjM4OERBMkE1Q0I2NEJCQzM5MTA4 ODhGNjREQzUwHhcNMjUwNjE3MDUwNzU1WhcNMjUwNjI0MDUwNzU1WjAYMRYwFAYD VQQDEw02ODUwZjgyYy0zZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jchDpOCK9LCeqtYiztR9r+9/nFa/N8h5VrPTOnNThT8EQIxvfKaey9DUgAI 5Meb8foBSKiaGMQlLe3tIKwht6i+gygX/PvfNBixeNO9synHtr0OoS4iR2/3fytT S6BK8TK1psUGuqTbLJIEiC8x6VyczH5HNcWaO/xZxyk9b3KN4IwHKM22nJMeZX7W 5HYzcg20iLyJufY4Ys+uLAcJUI1dZ2nBr6/ucuX93+k5wjTI79UbHwBdWWnjdhqH ZXh3XBeIBn+zNyASegvPMBIcotRs7i4w9DHitImLvpb5b+Rm4Ja7fJN77PvPlmZH vgLYKvpNj6/j/H+Io/VVcWCgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG24C8wT bWg3zYaVXbE6LtxwLLPqMB8GA1UdIwQYMBaAFFlL0UO/cjiNoqXLZLvDkQiI9k3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTUzQS80RTZCQzY2QTU5 MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9XVXZSUTc5eU9JMmlwY3RrdThPUkNJajJU Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dVdlJRNzl5T0kyaXBjdGt1OE9SQ0lqMlRjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTUzQS80RTZCQzY2QTU5MjAxMUVGQTU2MDAwNEVDNEY5QUUwMi9XVXZSUTc5eU9J MmlwY3RrdThPUkNJajJUY1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJT/pxrsKCSWHZY1h2DQ6r8vqMkG3DdSigT/W9DE+n3dC5cJX0iQIf O/vKdjmbx//U+lc9YmX5aw4txiyAT9xuNDizW39c94MG4PckpJyxKcP8pxfANM+c c1/Y1BDM12d9FqSMruGoaCw9hvn3Ho973Iwk477LeJ2vidnpu8O1Fib0UNW1ibvT QwqeaVvgWGAuDnX25tR+JN/nOcr9TctUXh1lyYc5VnqF7aBM2IujLyYun1y/75DZ IoetILkwiRAocmMut/9DFWq3BHSR5Fddd208kMwgLV9hwn2N0dVvXYAFQnpJG6r7 +Q5DtusVDvQZ42mk9hhLXUTbTUUprBvS -----END CERTIFICATE-----Generated at Tue Jun 17 11:46:21 2025 by rpki-client