$ rpki-client -vvf rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft File: wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft (raw, json) Hash identifier: kY6bA5QbO/5i1l5jtGqvsRZlYFsPjR8IyqCmhko8rBM= Subject key identifier: BB:C4:A5:E7:8A:B0:9B:65:C8:2E:BF:E6:00:E6:DF:DE:3F:41:98:AB Authority key identifier: C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A Certificate issuer: /CN=A917FED9/serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft Manifest number: 016B Signing time: Tue 17 Jun 2025 02:58:20 +0000 Manifest this update: Tue 17 Jun 2025 02:58:19 +0000 Manifest next update: Tue 24 Jun 2025 02:58:19 +0000 Files and hashes: 1: wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl (hash: A0vHzjkUB+Q6vKDm+TEGeVTDhrLet7bBv00Ls/Mqs1Q=) 2: 32503D0625FC11EE9A575E36C4F9AE02.roa (hash: AlPEcyEIDBXADdQ7LcHDoET2vUI4PMePKSIHLdjtTsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FED9, serialNumber=C13A9F62A14B05103C5AC5756F976592888A495A Validity Not Before: Jun 17 02:58:19 2025 GMT Not After : Jun 24 02:58:19 2025 GMT Subject: CN=6850d9cc-5c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:12:15:a7:cf:35:85:65:1d:96:73:cd:1d: 6b:ff:a3:ed:36:c2:f3:e1:ca:b1:3e:b8:83:20:da: b5:69:3b:f9:f4:50:03:98:1c:81:d7:76:63:47:2b: 5a:87:cf:8b:02:ed:26:26:64:25:ea:a9:c0:a8:09: f9:0e:06:9b:83:4a:43:f7:c7:5f:f3:3f:0a:38:19: 29:04:9c:dc:5c:b5:20:6b:93:3b:65:5e:15:74:af: fc:7e:a8:7e:38:68:06:95:8c:b2:2d:7d:20:c9:cc: 12:49:1d:23:11:2f:8f:c1:ad:80:24:4f:9f:0d:d3: 47:a5:bb:66:89:b1:5e:6e:74:d7:28:be:0a:56:1b: 6e:0f:99:2d:7c:c3:ad:8e:b6:a6:37:f2:9d:8f:d1: b9:59:51:bc:8b:41:1f:06:40:73:5f:41:1e:e3:3a: 34:95:bb:8f:28:53:a7:94:b8:aa:22:17:a5:bf:0d: 15:db:f0:fd:40:12:6b:7b:ac:06:22:5b:34:ff:2f: d0:89:3a:9d:79:b8:bf:28:fa:15:22:85:7b:b5:4d: 31:1f:fc:57:ab:26:56:34:95:f2:7d:c7:89:cd:ed: 2a:6d:48:13:94:43:1f:e2:e1:b6:d2:36:fd:e9:c8: 56:21:0e:40:bc:e6:95:e9:e1:ff:2d:55:b0:fc:ad: db:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C4:A5:E7:8A:B0:9B:65:C8:2E:BF:E6:00:E6:DF:DE:3F:41:98:AB X509v3 Authority Key Identifier: keyid:C1:3A:9F:62:A1:4B:05:10:3C:5A:C5:75:6F:97:65:92:88:8A:49:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTqfYqFLBRA8WsV1b5dlkoiKSVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FED9/C0BA8AAE221B11EEA508D62EC4F9AE02/wTqfYqFLBRA8WsV1b5dlkoiKSVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:10:2b:63:3d:aa:5b:52:4f:26:db:a9:a5:d1:7c:c4:32:4a: a8:1c:dd:cb:8b:73:9c:c4:fa:4d:72:94:4c:7e:d9:c8:c6:0c: 85:43:8a:d4:1b:2c:c9:76:db:a1:3c:82:54:d4:63:8f:b6:67: 11:cb:24:e2:03:8a:b7:3e:17:b2:29:ed:5a:b9:2d:92:f5:3d: 73:e7:df:96:0f:59:68:b7:fa:bc:40:c3:3a:3e:ea:ea:7b:0a: e3:2b:86:92:92:ae:b2:ff:2d:bb:9f:2b:f4:30:b3:34:96:5c: 27:64:19:74:45:ac:41:a2:17:9e:d0:de:e8:db:eb:55:88:6c: df:be:a9:e3:97:c5:6e:2d:7d:6c:d6:43:5c:cc:28:b4:33:d8: 3e:70:38:85:e4:99:ed:e3:a1:05:25:64:6a:48:5c:aa:df:ff: e7:2a:6b:e0:ec:7e:dd:7b:f0:11:0d:b4:37:75:6c:47:38:db: db:37:4a:39:f5:0e:65:7c:8b:fc:1d:a5:36:12:03:1c:2b:29: c5:05:bd:83:05:bd:1a:83:e6:72:bf:d0:3b:f7:42:8e:8c:77: 2b:85:dd:8e:4e:e4:78:fc:d7:2d:36:b8:2b:a2:b8:b6:81:5a: ca:d9:d5:57:88:a4:05:97:9b:7f:24:28:d0:cf:9b:20:80:77: a7:d6:e6:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZFRDkxMTAvBgNVBAUTKEMxM0E5RjYyQTE0QjA1MTAzQzVBQzU3NTZGOTc2NTky ODg4QTQ5NUEwHhcNMjUwNjE3MDI1ODE5WhcNMjUwNjI0MDI1ODE5WjAYMRYwFAYD VQQDEw02ODUwZDljYy01YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEISFafPNYVlHZZzzR1r/6PtNsLz4cqxPriDINq1aTv59FADmByB13ZjRyta h8+LAu0mJmQl6qnAqAn5Dgabg0pD98df8z8KOBkpBJzcXLUga5M7ZV4VdK/8fqh+ OGgGlYyyLX0gycwSSR0jES+Pwa2AJE+fDdNHpbtmibFebnTXKL4KVhtuD5ktfMOt jramN/Kdj9G5WVG8i0EfBkBzX0Ee4zo0lbuPKFOnlLiqIhelvw0V2/D9QBJre6wG Ils0/y/QiTqdebi/KPoVIoV7tU0xH/xXqyZWNJXyfceJze0qbUgTlEMf4uG20jb9 6chWIQ5AvOaV6eH/LVWw/K3b3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvEpeeK sJtlyC6/5gDm394/QZirMB8GA1UdIwQYMBaAFME6n2KhSwUQPFrFdW+XZZKIikla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkVEOS9DMEJBOEFBRTIy MUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJSQThXc1YxYjVkbGtvaUtT Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUcWZZcUZMQlJBOFdzVjFiNWRsa29pS1NWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkVEOS9DMEJBOEFBRTIyMUIxMUVFQTUwOEQ2MkVDNEY5QUUwMi93VHFmWXFGTEJS QThXc1YxYjVkbGtvaUtTVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsECtjPapbUk8m26ml0XzEMkqoHN3Li3OcxPpNcpRMftnIxgyFQ4rU GyzJdtuhPIJU1GOPtmcRyyTiA4q3PheyKe1auS2S9T1z59+WD1lot/q8QMM6Purq ewrjK4aSkq6y/y27nyv0MLM0llwnZBl0RaxBohee0N7o2+tViGzfvqnjl8VuLX1s 1kNczCi0M9g+cDiF5Jnt46EFJWRqSFyq3//nKmvg7H7de/ARDbQ3dWxHONvbN0o5 9Q5lfIv8HaU2EgMcKynFBb2DBb0ag+Zyv9A790KOjHcrhd2OTuR4/NctNrgrori2 gVrK2dVXiKQFl5t/JCjQz5sggHen1uYz -----END CERTIFICATE-----Generated at Tue Jun 17 15:19:51 2025 by rpki-client