$ rpki-client -vvf rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft File: wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft (raw, json) Hash identifier: w+4dxMNaJGI4GBeXjv3L80GOxMpyphnC4bQQwOBZwp4= Subject key identifier: 15:48:54:FD:48:A0:1A:5B:B9:CA:AE:4B:AA:8E:6E:EA:44:4B:A6:2B Authority key identifier: C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 Certificate issuer: /CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft Manifest number: 01C9 Signing time: Fri 13 Jun 2025 02:00:21 +0000 Manifest this update: Fri 13 Jun 2025 02:00:21 +0000 Manifest next update: Fri 20 Jun 2025 02:00:21 +0000 Files and hashes: 1: wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl (hash: 4ZIV8QGJ5OO//u2MkXhfX9ueWJ8MEOsMvwpP0T6Q/D4=) 2: 34FF021A8DA111EDBDB7DC23C4F9AE02.roa (hash: WcOJKBYoZRMDvg4oIYS4kq5xFx2TDUBl7Gt7RS4Zo3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E868, serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Validity Not Before: Jun 13 02:00:21 2025 GMT Not After : Jun 20 02:00:21 2025 GMT Subject: CN=684b8635-1ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:19:23:ce:86:d2:de:c6:53:82:52:f5:d3: 6a:bb:3c:27:0c:8e:78:ae:1f:d0:04:16:d0:18:6b: 13:00:92:8e:ac:86:cc:2b:ab:eb:ed:81:89:df:8f: 30:68:5a:12:d3:21:f3:0e:18:69:05:6e:07:f2:f5: 72:47:2d:8a:c8:b8:a6:0a:62:4e:ad:72:00:66:a4: 8b:8a:90:ad:e1:65:ae:89:e9:74:01:d2:b9:65:0d: 4a:63:5b:73:ae:5e:dc:bb:cd:b2:4d:70:8b:1e:4d: 8a:32:25:52:e9:e3:52:e1:ea:e1:d4:5a:3b:74:13: 2f:3e:9a:9a:00:dd:43:a3:4e:bb:40:80:4c:34:a0: 06:79:6d:a3:e3:73:ea:0f:0c:6b:fa:50:c6:d0:28: 3b:34:39:b2:fc:ee:14:01:c1:1a:32:fb:34:ef:c6: 6f:2c:32:5f:43:a1:32:4f:30:34:d6:39:cf:fd:0d: f1:31:76:7e:bb:a8:16:61:d4:c0:f9:d6:5f:f2:4a: 83:10:15:0f:29:d0:e6:fc:5e:09:a8:4f:cd:fc:cc: c2:b1:c7:06:24:cb:61:01:19:52:dc:bd:6a:2a:3d: 31:12:14:a9:b8:54:db:35:0a:38:63:96:f1:16:43: 52:4c:9e:fe:9b:69:94:1f:24:a3:c5:03:41:89:9b: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:54:FD:48:A0:1A:5B:B9:CA:AE:4B:AA:8E:6E:EA:44:4B:A6:2B X509v3 Authority Key Identifier: keyid:C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:df:b7:62:22:a2:7c:9c:9f:5b:fb:fa:a7:6e:28:17:97:06: d9:c1:6b:99:19:47:b9:c3:0a:42:4c:72:dd:fb:bc:03:ce:19: 66:a7:6a:c0:f1:e4:b0:79:a4:57:ed:6b:21:fb:00:62:82:6f: 5c:52:62:5e:8f:68:f4:af:55:96:dd:16:a2:af:25:89:ac:66: 20:48:ed:32:63:ec:cf:07:23:a7:d8:df:2a:c7:5e:13:e8:fa: 4f:ca:4e:2e:0a:9b:4d:92:5c:fa:ba:d4:5f:da:cd:3a:95:c3: c7:d3:24:72:f1:27:2e:a0:2c:57:ea:a7:be:c4:5c:72:59:b5: 2b:db:1d:7e:2a:1b:84:71:a2:ac:7b:a9:f4:a0:f2:20:ba:1e: 84:c4:1a:4d:95:10:a7:f2:f9:e7:21:0a:44:b0:f9:9c:47:54: 47:4f:c1:01:56:d7:d6:1a:7d:09:76:78:50:78:f4:89:ad:c2: 9e:ed:54:36:ef:b8:04:6a:14:e6:63:dd:1f:3a:43:dd:94:ec: 98:b8:32:ab:f5:50:21:6d:9f:a0:68:e7:b9:0e:21:ff:35:4f: c9:be:73:3d:20:4b:f1:ab:b1:87:47:55:9b:d6:4f:bb:da:46: c7:54:d7:1d:e8:1d:4e:32:4c:2c:b5:c7:74:36:0a:56:fb:69: 42:3f:48:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U4NjgxMTAvBgNVBAUTKEMyNjQzMzcwQjdDREIxQjYxNTlBQkQyRDdENjc3MkM2 RjZEMkZCNjUwHhcNMjUwNjEzMDIwMDIxWhcNMjUwNjIwMDIwMDIxWjAYMRYwFAYD VQQDEw02ODRiODYzNS0xZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8UZI86G0t7GU4JS9dNquzwnDI54rh/QBBbQGGsTAJKOrIbMK6vr7YGJ348w aFoS0yHzDhhpBW4H8vVyRy2KyLimCmJOrXIAZqSLipCt4WWuiel0AdK5ZQ1KY1tz rl7cu82yTXCLHk2KMiVS6eNS4erh1Fo7dBMvPpqaAN1Do067QIBMNKAGeW2j43Pq Dwxr+lDG0Cg7NDmy/O4UAcEaMvs078ZvLDJfQ6EyTzA01jnP/Q3xMXZ+u6gWYdTA +dZf8kqDEBUPKdDm/F4JqE/N/MzCsccGJMthARlS3L1qKj0xEhSpuFTbNQo4Y5bx FkNSTJ7+m2mUHySjxQNBiZs0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVIVP1I oBpbucquS6qObupES6YrMB8GA1UdIwQYMBaAFMJkM3C3zbG2FZq9LX1ncsb20vtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTg2OC83NDZBRjBCMjhE OUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNiWVZtcjB0ZldkeXh2YlMt MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dtUXpjTGZOc2JZVm1yMHRmV2R5eHZiUy0yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTg2OC83NDZBRjBCMjhEOUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNi WVZtcjB0ZldkeXh2YlMtMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+37diIqJ8nJ9b+/qnbigXlwbZwWuZGUe5wwpCTHLd+7wDzhlmp2rA 8eSweaRX7Wsh+wBigm9cUmJej2j0r1WW3RairyWJrGYgSO0yY+zPByOn2N8qx14T 6PpPyk4uCptNklz6utRf2s06lcPH0yRy8ScuoCxX6qe+xFxyWbUr2x1+KhuEcaKs e6n0oPIguh6ExBpNlRCn8vnnIQpEsPmcR1RHT8EBVtfWGn0JdnhQePSJrcKe7VQ2 77gEahTmY90fOkPdlOyYuDKr9VAhbZ+gaOe5DiH/NU/JvnM9IEvxq7GHR1Wb1k+7 2kbHVNcd6B1OMkwstcd0NgpW+2lCP0gY -----END CERTIFICATE-----Generated at Sat Jun 14 19:25:44 2025 by rpki-client