$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft File: W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json) Hash identifier: dEvFFvvRcScFhkaKQgXhbRXreWbsQVQnAbJvnkyFtgQ= Subject key identifier: 51:71:79:95:94:6A:31:32:81:E4:72:60:51:40:95:F6:39:7F:4C:13 Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23 Certificate issuer: /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23 Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft Manifest number: 0BCA Signing time: Thu 12 Jun 2025 18:42:17 +0000 Manifest this update: Thu 12 Jun 2025 18:42:16 +0000 Manifest next update: Thu 19 Jun 2025 18:42:16 +0000 Files and hashes: 1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: xHncFhTf2sJx3Ic+krg0hk4dwPZQo6cD5CPb6z3JoVA=) 2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: eDzZS0BLQQgZmboEzi1MeyFIGvpWBV3MnFnzSkClZZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BF70, serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23 Validity Not Before: Jun 12 18:42:16 2025 GMT Not After : Jun 19 18:42:16 2025 GMT Subject: CN=684b1f88-7f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:10:a5:c2:85:f8:c7:88:58:fe:4e:2c:60:73: 31:f8:79:69:81:aa:cf:34:41:11:bb:df:0e:bc:d3: 77:26:2d:46:a1:a7:5e:c6:3c:37:32:3e:21:d9:19: eb:e5:f0:79:c0:ca:e2:c9:71:e4:3a:be:06:93:94: 32:a9:c9:14:98:23:4a:4c:64:57:23:54:1c:e7:e8: 46:e8:69:91:ed:3a:a8:0c:ae:27:b6:99:4f:b7:57: d9:e1:ed:13:6b:d0:62:bc:47:5b:0b:1c:bd:c5:4a: 18:1d:32:e7:dc:0c:98:f3:0e:e3:17:a0:e0:7b:a8: e7:c0:bb:65:6a:57:fa:61:66:ff:eb:b2:e0:d8:6e: fc:d8:d5:d0:2d:7f:27:86:27:38:1f:5b:1e:65:a2: 86:a7:c6:71:c3:9d:2f:53:5c:ef:4e:b0:e6:80:47: 07:d0:a9:5e:1e:25:09:d3:0d:26:18:d8:2d:dd:9f: ea:71:d3:1c:a0:15:73:ed:5f:6f:4b:cb:38:77:e1: af:75:23:b5:70:e1:4f:c6:0e:04:c4:ec:5b:a9:0f: 39:e7:c0:bc:4e:c7:1f:7b:1e:8c:c1:8d:04:06:d0: ab:bb:df:b6:e9:21:2e:99:03:e0:c1:28:c0:f8:db: 7f:d1:ce:b7:95:a0:1f:07:49:70:a6:12:34:a6:7a: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:71:79:95:94:6A:31:32:81:E4:72:60:51:40:95:F6:39:7F:4C:13 X509v3 Authority Key Identifier: keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:5e:d5:98:9c:6c:2b:9a:8e:c2:72:e7:d4:a8:fc:03:5d: f0:c9:3a:37:95:a4:2d:91:88:5f:d5:0f:58:11:8a:47:71:ea: 40:ea:b7:54:7e:4f:b3:cc:4b:5a:27:39:aa:87:6f:b2:4e:0f: 4d:6c:8b:bb:f5:2f:a3:ef:3b:d9:61:3a:fa:cc:0e:84:0c:8b: a0:3b:9a:2c:53:a6:f2:cf:74:55:95:69:f8:3c:d0:71:44:6d: ef:45:a1:2f:b3:f7:be:bb:f7:03:18:5a:3a:ac:7b:58:bc:52: 4f:6e:6d:ed:d0:db:3f:41:78:2c:46:3a:ae:94:e9:71:2a:28: f5:6b:81:13:a3:83:e6:9a:93:93:61:f6:a7:83:2b:41:e0:24: 19:46:ac:e0:f9:af:bf:c8:c6:84:d6:ed:6a:d8:d7:e8:d0:c1: e5:9a:fe:99:63:f2:d9:bb:66:75:35:b6:8f:50:9e:cf:51:d7: f5:2d:ab:4f:6a:80:00:4c:e2:46:d9:44:6c:ab:d4:1e:d7:7f: e1:34:46:12:f5:62:8e:0b:72:2c:26:80:60:ab:c1:18:3f:67: 67:42:28:d3:12:05:64:e3:fd:25:aa:ef:b7:fe:d8:e3:e4:d4: 2e:23:41:91:04:90:b4:dd:cc:6b:ab:28:b4:8e:6c:a6:ec:a5: df:63:20:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGNzAxMTAvBgNVBAUTKDVCQTlBMkIxMzBFNzA1MzYyMTNCRDlENDY4OUZFN0JE NTRGMEFEMjMwHhcNMjUwNjEyMTg0MjE2WhcNMjUwNjE5MTg0MjE2WjAYMRYwFAYD VQQDEw02ODRiMWY4OC03ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRClwoX4x4hY/k4sYHMx+HlpgarPNEERu98OvNN3Ji1Goadexjw3Mj4h2Rnr 5fB5wMriyXHkOr4Gk5QyqckUmCNKTGRXI1Qc5+hG6GmR7TqoDK4ntplPt1fZ4e0T a9BivEdbCxy9xUoYHTLn3AyY8w7jF6Dge6jnwLtlalf6YWb/67Lg2G782NXQLX8n hic4H1seZaKGp8Zxw50vU1zvTrDmgEcH0KleHiUJ0w0mGNgt3Z/qcdMcoBVz7V9v S8s4d+GvdSO1cOFPxg4ExOxbqQ8558C8Tscfex6MwY0EBtCru9+26SEumQPgwSjA +Nt/0c63laAfB0lwphI0pnq7UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFxeZWU ajEygeRyYFFAlfY5f0wTMB8GA1UdIwQYMBaAFFuporEw5wU2ITvZ1Gif571U8K0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkY3MC9EMDI4OEMzNjFE OTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJUWWhPOW5VYUpfbnZWVHdy U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2bWlzVERuQlRZaE85blVhSl9udlZUd3JTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkY3MC9EMDI4OEMzNjFEOTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJU WWhPOW5VYUpfbnZWVHdyU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZCV7VmJxsK5qOwnLn1Kj8A13wyTo3laQtkYhf1Q9YEYpHcepA6rdU fk+zzEtaJzmqh2+yTg9NbIu79S+j7zvZYTr6zA6EDIugO5osU6byz3RVlWn4PNBx RG3vRaEvs/e+u/cDGFo6rHtYvFJPbm3t0Ns/QXgsRjqulOlxKij1a4ETo4PmmpOT YfangytB4CQZRqzg+a+/yMaE1u1q2Nfo0MHlmv6ZY/LZu2Z1NbaPUJ7PUdf1LatP aoAATOJG2URsq9Qe13/hNEYS9WKOC3IsJoBgq8EYP2dnQijTEgVk4/0lqu+3/tjj 5NQuI0GRBJC03cxrqyi0jmym7KXfYyDk -----END CERTIFICATE-----Generated at Sat Jun 14 19:06:42 2025 by rpki-client