$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: xDPD8qsNAvv+fGwiUF4Oke2v8nctXa3ZdrCj/DNJkfQ= Subject key identifier: EE:B8:5A:FE:6A:8D:CA:3D:91:AB:F4:07:2E:FD:8D:7E:8A:BC:32:EC Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 5C Signing time: Thu 19 Jun 2025 06:29:23 +0000 Manifest this update: Thu 19 Jun 2025 06:29:23 +0000 Manifest next update: Thu 26 Jun 2025 06:29:23 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: mqMOeB3qhHfH+BrRmlct7E9s3pTHDw1ALBQqUm8Xt9Q=) 2: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (hash: FGrsxVel52tLC2c3tTf2jw58e+atsnyXCQDnNztZqg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Jun 19 06:29:23 2025 GMT Not After : Jun 26 06:29:23 2025 GMT Subject: CN=6853ae43-2251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:84:b8:bb:ad:e3:7a:96:9f:99:ff:c0:ce: bf:a6:3d:de:f5:c9:c1:d3:c7:be:88:12:c7:2f:a4: 5a:1a:fe:81:ba:18:7f:fb:5f:6e:92:6e:fb:80:0a: ff:f8:8a:bd:4f:b3:e0:65:0d:cb:18:de:a5:c7:bf: 60:8e:35:ec:6c:a9:9f:da:6c:08:d7:16:48:3c:0e: 0f:16:c3:fd:da:71:b8:52:60:e1:f3:3d:58:f7:44: d0:94:85:c9:43:c0:b0:a2:2e:7e:67:47:35:de:4e: f9:31:4d:5a:d1:e8:23:25:78:8e:2f:b5:30:e7:6c: 6c:cf:82:89:9e:e3:31:2b:27:c1:83:ce:80:1e:50: 68:99:17:5f:4f:2b:0e:4b:ba:6b:eb:57:d8:7a:56: 46:4d:9e:e1:12:67:2a:6e:ee:14:51:9b:5b:ca:3b: dd:f6:fd:fd:4a:e7:7d:57:49:b4:19:31:50:36:30: 7c:c5:f7:2e:ef:3c:58:dd:14:b6:3c:89:cb:32:34: 53:9c:cd:3c:e4:09:47:54:e8:5c:21:71:7e:c5:77: 44:4f:34:1c:b2:c0:93:df:f0:dd:98:45:d8:a0:20: 83:70:7d:19:0f:f1:5a:91:7a:bd:3c:70:bf:5f:a3: 06:c9:94:93:fc:bc:fc:c9:c3:ab:cf:13:bc:69:b0: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B8:5A:FE:6A:8D:CA:3D:91:AB:F4:07:2E:FD:8D:7E:8A:BC:32:EC X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ac:73:b4:e8:0a:dd:22:76:c3:5d:97:93:be:ca:09:b2:2d: ab:f7:64:77:94:a2:38:69:7d:ae:93:c7:a7:a0:dd:c0:e8:ce: 50:85:09:15:82:8d:57:c9:92:6e:50:20:94:d3:53:e6:70:dc: 71:aa:57:e4:1b:d6:5a:f4:55:1f:86:74:f5:5c:eb:4a:33:94: ca:83:54:32:d4:be:72:10:c6:ea:8f:2a:c1:be:06:17:0a:7f: 1e:91:b5:f0:08:56:71:2d:54:19:67:1b:1c:dc:e0:68:1b:dc: 80:1e:b4:d9:d4:98:30:6d:31:12:65:9b:6e:10:0c:76:bd:f8: 33:eb:f9:38:8e:bc:39:97:9a:a9:87:3b:c8:e3:09:d1:a5:57: 64:df:a4:0b:42:54:53:b2:1b:4a:f1:46:83:bc:87:bd:a7:7f: 05:42:f0:cf:c7:0c:2e:5b:24:47:df:ba:18:e9:a6:01:9e:3d: 2b:ba:cb:45:b7:8a:4f:3c:89:19:c5:8d:82:50:cc:ea:d3:e5: 07:ec:74:c8:2d:da:90:9a:3f:1f:52:94:be:a2:82:c3:e9:10: f4:f9:61:18:b0:f1:ab:ed:00:39:6f:60:df:d7:71:9c:eb:72: b9:1b:56:41:f0:d0:1f:94:f2:61:67:59:6b:e9:3e:15:2b:eb: fc:a9:2a:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTA2MTkwNjI5MjNaFw0yNTA2MjYwNjI5MjNaMBgxFjAUBgNV BAMTDTY4NTNhZTQzLTIyNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+n4S4u63jepafmf/Azr+mPd71ycHTx76IEscvpFoa/oG6GH/7X26SbvuACv/4 ir1Ps+BlDcsY3qXHv2CONexsqZ/abAjXFkg8Dg8Ww/3acbhSYOHzPVj3RNCUhclD wLCiLn5nRzXeTvkxTVrR6CMleI4vtTDnbGzPgome4zErJ8GDzoAeUGiZF19PKw5L umvrV9h6VkZNnuESZypu7hRRm1vKO932/f1K531XSbQZMVA2MHzF9y7vPFjdFLY8 icsyNFOczTzkCUdU6FwhcX7Fd0RPNByywJPf8N2YRdigIINwfRkP8VqRer08cL9f owbJlJP8vPzJw6vPE7xpsFVHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7rha/mqN yj2Rq/QHLv2Nfoq8MuwwHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD OTA5L0ZGN0M1RkRDQzBEQjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0pl RDR4ZHgySzEteXpEY082SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALysc7ToCt0idsNdl5O+ygmyLav3ZHeUojhpfa6Tx6eg3cDozlCFCRWC jVfJkm5QIJTTU+Zw3HGqV+Qb1lr0VR+GdPVc60ozlMqDVDLUvnIQxuqPKsG+BhcK fx6RtfAIVnEtVBlnGxzc4Ggb3IAetNnUmDBtMRJlm24QDHa9+DPr+TiOvDmXmqmH O8jjCdGlV2TfpAtCVFOyG0rxRoO8h72nfwVC8M/HDC5bJEffuhjppgGePSu6y0W3 ik88iRnFjYJQzOrT5QfsdMgt2pCaPx9SlL6igsPpEPT5YRiw8avtADlvYN/XcZzr crkbVkHw0B+U8mFnWWvpPhUr6/ypKlo= -----END CERTIFICATE-----Generated at Thu Jun 19 09:21:51 2025 by rpki-client