$ rpki-client -vvf rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft File: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft (raw, json) Hash identifier: 7gWHmc0ZCvgpoWQbCNaiR7fpWJ5WBczwbK9Z4JU6Sis= Subject key identifier: BE:3A:2E:C1:25:B3:BE:47:65:41:2E:5B:99:4B:E3:EB:02:08:4A:5C Authority key identifier: EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3 Certificate issuer: /CN=A9189396/serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft Manifest number: 27 Signing time: Thu 19 Jun 2025 07:09:01 +0000 Manifest this update: Thu 19 Jun 2025 07:09:00 +0000 Manifest next update: Thu 26 Jun 2025 07:09:00 +0000 Files and hashes: 1: 74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl (hash: xNImp7S3PvU89b79C5wYSZUXQ060lczG2ZchyE+xQgI=) 2: 7CBE8274103011F08606D714C4F9AE02.roa (hash: IuWisIzOrWuJ3prCFTYRSnmT2eAgA9CS8sTrUTpGkp0=) 3: 7D2C0290103011F08606D714C4F9AE02.roa (hash: YeIsqC2yZDriIQzhHfDUg79mV40ujoQQFn6HZz5y+Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189396, serialNumber=EF85AEFC7B0814DF3F410DA01CA34BE4D66BB1A3 Validity Not Before: Jun 19 07:09:00 2025 GMT Not After : Jun 26 07:09:00 2025 GMT Subject: CN=6853b78d-666f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:42:58:5a:99:22:38:76:10:04:99:3b:57: 7d:20:8e:1f:3b:fd:6a:13:85:41:dc:12:42:6b:56: 34:ae:86:a3:ed:e9:b4:65:d1:b5:60:57:d7:75:5c: fa:86:f2:e3:da:0d:34:71:c8:cb:f4:37:f1:c6:d6: ab:1b:10:6b:63:ca:29:47:2a:11:38:1f:6b:cc:6b: 7a:d3:37:8f:d9:61:20:3f:9d:b2:fb:2f:6c:b5:3f: 64:e9:3a:12:af:a6:6c:64:27:69:92:18:02:ce:55: e3:70:f5:01:a1:00:95:be:af:cd:87:65:aa:26:61: 58:de:7a:15:32:c8:53:4c:b2:ac:dc:a8:04:3b:b0: 4a:8b:58:3d:96:f8:1c:bf:24:9d:ac:5d:e7:f5:80: 96:75:34:b0:0a:4e:f8:22:be:82:5c:78:51:7f:da: 70:e9:7d:41:34:2c:87:45:ba:33:a9:9b:6d:16:73: 26:4e:bf:69:01:53:fb:4d:ba:22:ee:24:05:84:64: a0:fb:f9:8f:01:c1:c5:3b:21:4c:9b:4b:ba:56:ef: aa:c3:9e:53:d4:bf:e2:42:cb:5d:50:7d:c2:a9:db: 45:d5:2c:55:a3:b1:9e:b8:b4:d4:db:b0:69:93:df: c6:ed:24:3d:14:1a:bd:4d:c1:41:f5:1a:1f:c4:fc: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:2E:C1:25:B3:BE:47:65:41:2E:5B:99:4B:E3:EB:02:08:4A:5C X509v3 Authority Key Identifier: keyid:EF:85:AE:FC:7B:08:14:DF:3F:41:0D:A0:1C:A3:4B:E4:D6:6B:B1:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189396/3B8D7488102911F09022263DC4F9AE02/74Wu_HsIFN8_QQ2gHKNL5NZrsaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:81:ad:af:6e:95:34:fc:33:82:80:cd:2c:15:b7:28:39:bd: 74:d8:42:c5:85:51:71:d7:29:e7:5d:15:93:54:92:0e:e0:09: 35:5c:4c:0a:a3:fb:27:96:4f:b3:ed:92:84:d0:3b:f9:ff:99: e6:3c:a2:19:27:e9:1a:2d:3d:31:db:0b:e7:26:a0:f8:03:1e: 00:5f:c9:92:98:a7:ac:9e:b7:ec:ef:b5:76:61:45:a1:59:47: 76:16:3f:c1:ee:5c:fb:d7:6e:57:ce:9e:b2:ef:d7:3f:2f:04: 1a:d5:35:3e:30:43:76:bb:aa:b4:1c:99:1f:db:0b:35:8e:fc: 90:f8:a8:37:7f:5f:78:b0:7a:6e:03:58:38:8d:70:fe:73:6b: ac:6c:a1:a6:49:b9:52:80:39:d6:c8:d6:3f:cf:7c:76:a4:04: d7:0a:5d:45:73:d7:04:c0:8a:d6:ba:5e:33:9e:dd:79:24:b1: 3a:ea:ac:cd:1b:cc:06:50:0e:d5:7d:f8:81:1f:8d:74:51:00: 83:6f:5d:bf:f5:64:f2:86:20:cd:19:6e:ed:cd:f1:a3:57:5a: 12:d2:8a:fe:7a:25:7e:fa:e2:b8:57:4e:62:4e:d7:7c:06:19: 4c:56:44:f6:54:69:f8:26:33:5c:92:10:32:06:78:f4:32:78: 81:8c:df:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTM5NjExMC8GA1UEBRMoRUY4NUFFRkM3QjA4MTRERjNGNDEwREEwMUNBMzRCRTRE NjZCQjFBMzAeFw0yNTA2MTkwNzA5MDBaFw0yNTA2MjYwNzA5MDBaMBgxFjAUBgNV BAMTDTY4NTNiNzhkLTY2NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCywEJYWpkiOHYQBJk7V30gjh87/WoThUHcEkJrVjSuhqPt6bRl0bVgV9d1XPqG 8uPaDTRxyMv0N/HG1qsbEGtjyilHKhE4H2vMa3rTN4/ZYSA/nbL7L2y1P2TpOhKv pmxkJ2mSGALOVeNw9QGhAJW+r82HZaomYVjeehUyyFNMsqzcqAQ7sEqLWD2W+By/ JJ2sXef1gJZ1NLAKTvgivoJceFF/2nDpfUE0LIdFujOpm20WcyZOv2kBU/tNuiLu JAWEZKD7+Y8BwcU7IUybS7pW76rDnlPUv+JCy11QfcKp20XVLFWjsZ64tNTbsGmT 38btJD0UGr1NwUH1Gh/E/EsNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvjouwSWz vkdlQS5bmUvj6wIISlwwHwYDVR0jBBgwFoAU74Wu/HsIFN8/QQ2gHKNL5NZrsaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5Mzk2LzNCOEQ3NDg4MTAy OTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJRk44X1FRMmdIS05MNU5acnNh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNzRXdV9Ic0lGTjhfUVEyZ0hLTkw1Tlpyc2FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 Mzk2LzNCOEQ3NDg4MTAyOTExRjA5MDIyMjYzREM0RjlBRTAyLzc0V3VfSHNJRk44 X1FRMmdIS05MNU5acnNhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADGBra9ulTT8M4KAzSwVtyg5vXTYQsWFUXHXKeddFZNUkg7gCTVcTAqj +yeWT7PtkoTQO/n/meY8ohkn6RotPTHbC+cmoPgDHgBfyZKYp6yet+zvtXZhRaFZ R3YWP8HuXPvXblfOnrLv1z8vBBrVNT4wQ3a7qrQcmR/bCzWO/JD4qDd/X3iwem4D WDiNcP5za6xsoaZJuVKAOdbI1j/PfHakBNcKXUVz1wTAita6XjOe3XkksTrqrM0b zAZQDtV9+IEfjXRRAINvXb/1ZPKGIM0Zbu3N8aNXWhLSiv56JX764rhXTmJO13wG GUxWRPZUafgmM1ySEDIGePQyeIGM3y8= -----END CERTIFICATE-----Generated at Fri Jun 20 07:16:06 2025 by rpki-client