$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: 8wSExqm/ATdSqm4Pljz2C7Ti4YcfKtmDnZB3Y4kcU2s= Subject key identifier: DA:F3:08:86:0D:1C:A4:AC:49:94:7A:BD:74:62:09:1E:FD:F1:E2:26 Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 017B Signing time: Sun 15 Jun 2025 02:56:53 +0000 Manifest this update: Sun 15 Jun 2025 02:56:53 +0000 Manifest next update: Sun 22 Jun 2025 02:56:53 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: 6yvAWDIU9eoviA9X+PIGnwvSpqTfy6WG1gS5i/ZiPgc=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: Jun 15 02:56:53 2025 GMT Not After : Jun 22 02:56:53 2025 GMT Subject: CN=684e3675-d958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:4a:40:9f:da:e4:c5:bb:8c:ee:9c:63:c7: 49:57:25:ab:d3:f2:19:e7:5b:d3:0e:1f:3a:7a:f5: 26:07:97:ee:ad:f9:76:b1:df:5c:0d:9b:61:33:b7: 6f:8f:39:0e:29:b1:0f:53:6b:68:2b:96:eb:17:94: ee:f3:f6:a0:a8:37:36:8d:07:43:e2:a4:4a:77:f9: de:ce:b0:f1:09:48:f4:20:34:7c:fe:62:f6:65:e1: 7a:17:83:b4:a3:91:e2:d8:2c:70:5c:75:7a:01:a4: 1b:2c:60:74:2a:9f:c5:d9:e2:68:cf:df:93:33:72: a5:38:73:2e:b7:5a:33:6e:65:3f:42:6c:44:78:83: 04:ad:8e:c7:fe:8b:4d:ea:72:b7:e9:dc:ee:b2:55: 62:90:13:9f:5c:ff:9b:ae:91:b2:4f:31:b1:9d:0a: 9a:f7:c6:68:bf:6f:71:c1:1e:c1:e8:af:62:23:b7: a1:af:ea:27:7a:88:9d:f7:74:69:3a:ef:1e:b1:12: 45:1c:14:75:39:5b:7c:32:88:59:92:a2:9e:89:7f: 00:6a:24:85:67:79:54:f4:61:9d:ae:3a:79:fc:cb: c7:4e:df:7a:17:ef:20:b8:11:d8:a2:8d:53:86:b3: 8d:7b:d6:22:31:ec:ff:a0:1b:d9:4f:01:b6:19:ce: 69:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F3:08:86:0D:1C:A4:AC:49:94:7A:BD:74:62:09:1E:FD:F1:E2:26 X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e8:a6:3e:64:ba:c0:08:6a:0f:ec:f7:1e:69:16:9f:c1:a9: 43:32:6e:99:3f:d5:47:b2:8c:95:da:2d:6b:f4:35:e7:5a:ba: 39:1d:cb:3c:34:e2:ed:2a:fb:5e:26:d5:31:1c:df:e1:aa:9a: 7e:41:5a:e8:c7:4d:19:7f:82:17:7c:78:e6:53:32:9a:bc:53: 68:67:5d:78:f1:78:17:03:70:3f:37:f0:94:06:65:c1:fb:94: 2f:ac:c5:dd:ab:09:1b:8a:23:20:af:cd:dc:bf:eb:b2:79:76: 00:9b:df:53:04:09:a9:19:c5:11:3d:09:fc:6a:9a:04:62:88: 32:6a:75:8e:da:e3:9d:03:71:a7:7b:81:dd:d9:d5:94:1d:f7: a9:3b:95:7a:55:c6:dc:68:a7:6b:6e:be:68:bd:d1:17:44:3e: 19:05:df:b1:7f:ec:36:2f:20:81:05:b3:87:52:e6:08:f7:2d: 4c:61:36:27:93:fd:5b:1b:d6:e9:9d:ef:bd:37:7d:30:b3:a8: d4:b0:8e:16:8d:f2:c1:55:f0:0a:ed:ca:76:a3:41:b5:da:c2: f1:ea:fc:16:53:71:e6:25:ec:74:0e:37:cc:3e:8e:7f:86:64: 0d:24:be:25:1c:bb:9c:b2:63:9f:e4:b0:4f:b7:a2:22:78:e0: 25:81:06:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUwNjE1MDI1NjUzWhcNMjUwNjIyMDI1NjUzWjAYMRYwFAYD VQQDEw02ODRlMzY3NS1kOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYJKQJ/a5MW7jO6cY8dJVyWr0/IZ51vTDh86evUmB5furfl2sd9cDZthM7dv jzkOKbEPU2toK5brF5Tu8/agqDc2jQdD4qRKd/nezrDxCUj0IDR8/mL2ZeF6F4O0 o5Hi2CxwXHV6AaQbLGB0Kp/F2eJoz9+TM3KlOHMut1ozbmU/QmxEeIMErY7H/otN 6nK36dzuslVikBOfXP+brpGyTzGxnQqa98Zov29xwR7B6K9iI7ehr+oneoid93Rp Ou8esRJFHBR1OVt8MohZkqKeiX8AaiSFZ3lU9GGdrjp5/MvHTt96F+8guBHYoo1T hrONe9YiMez/oBvZTwG2Gc5puQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrzCIYN HKSsSZR6vXRiCR798eImMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP6KY+ZLrACGoP7PceaRafwalDMm6ZP9VHsoyV2i1r9DXnWro5Hcs8 NOLtKvteJtUxHN/hqpp+QVrox00Zf4IXfHjmUzKavFNoZ1148XgXA3A/N/CUBmXB +5QvrMXdqwkbiiMgr83cv+uyeXYAm99TBAmpGcURPQn8apoEYogyanWO2uOdA3Gn e4Hd2dWUHfepO5V6VcbcaKdrbr5ovdEXRD4ZBd+xf+w2LyCBBbOHUuYI9y1MYTYn k/1bG9bpne+9N30ws6jUsI4WjfLBVfAK7cp2o0G12sLx6vwWU3HmJex0DjfMPo5/ hmQNJL4lHLucsmOf5LBPt6IieOAlgQYL -----END CERTIFICATE-----Generated at Tue Jun 17 01:35:50 2025 by rpki-client