$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: Vv0NO+DqaDvM55KGBjKkNH7fuY/+wfRlnObRVa3SeRI= Subject key identifier: B9:E9:B7:9B:C1:A3:FC:F0:0B:98:6D:E8:3F:CC:CC:84:7A:24:2C:18 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 0711 Signing time: Thu 12 Jun 2025 21:34:13 +0000 Manifest this update: Thu 12 Jun 2025 21:34:12 +0000 Manifest next update: Thu 19 Jun 2025 21:34:12 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: ltULQJRv/VBnV4HT580vF9haI1l2hHWHHXsgH1QVye8=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: Ze9P8zUvpUUuNDb2f6jUuTz0IuEk5HXo9HL8O2n8v1w=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: cENNW/nbgAC9wITEnAsu2/v6Nt+Sg/6ucMETk/SBbPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692, serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: Jun 12 21:34:12 2025 GMT Not After : Jun 19 21:34:12 2025 GMT Subject: CN=684b47d4-f9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:a6:60:54:da:83:12:97:6a:b5:fd:9f:9f: e2:af:2f:4c:ce:be:a8:fb:1b:f3:f9:d3:44:f4:39: 44:45:73:bf:0a:43:bd:63:d0:f0:50:ff:ab:67:ef: b7:0c:53:a7:13:7b:90:79:a8:7b:6f:21:08:40:dc: 35:af:d7:77:69:4e:c5:ef:0c:5e:3e:af:0e:8c:b7: ac:68:02:82:56:f9:6f:cf:e3:e0:1a:c9:67:90:2c: fd:f4:54:88:7c:e4:b4:6a:6a:3e:71:bf:1e:b9:74: 4f:0f:cd:fd:c7:62:b4:91:02:da:a3:32:b4:32:e1: 2b:f5:92:15:96:e9:49:5f:28:3b:29:11:95:a8:37: ef:90:52:65:44:34:15:81:aa:11:1a:07:92:5e:90: 57:d3:d4:34:4e:c9:a4:6e:08:c0:f4:ea:4f:7f:4e: 80:ba:bc:05:c7:5b:09:ea:32:b6:81:bc:07:35:92: 5b:6e:73:4c:97:4e:6a:5b:ff:b9:01:2c:32:b8:03: 1d:d2:1f:10:a3:9e:4a:62:a9:33:46:a0:be:f1:34: 5f:cd:e4:b2:32:ea:a9:c5:fc:00:8b:75:9b:d8:e8: 2a:7a:e4:c8:24:34:95:19:c8:23:5d:1d:2d:d6:4e: 49:89:bc:fa:4c:4e:1f:00:c6:c7:8c:28:68:74:2f: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:B7:9B:C1:A3:FC:F0:0B:98:6D:E8:3F:CC:CC:84:7A:24:2C:18 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:2c:99:b6:1b:43:ea:7b:37:b6:a8:09:ee:df:8f:13:ab:eb: 9a:0e:3f:36:1a:e9:6e:8d:12:b3:5e:81:b9:72:1a:cd:b1:fb: 1f:d5:99:a2:56:ec:21:80:f8:1c:7c:57:b4:76:46:45:58:1e: f9:e1:79:5e:20:43:92:20:45:56:24:bb:e2:0e:3b:5c:69:3a: be:10:39:5c:36:57:7e:5e:f9:4c:16:cf:d8:b5:27:26:35:82: 32:37:d4:2f:f1:cf:07:f0:c7:56:4d:ae:54:d1:70:94:5d:4a: dd:11:7e:d3:e2:8d:4e:7c:ce:8e:9e:c1:89:91:09:2f:a1:db: 07:69:38:98:b1:11:8f:53:bd:10:2d:11:ef:7d:d3:d9:09:a8: 12:8b:93:fa:0b:a8:2d:35:95:b7:c3:67:d6:02:0c:9c:90:a9: 8c:47:0c:73:96:1d:5e:60:3f:e8:e2:83:90:dd:6f:69:1b:a6: 1f:1d:53:87:ec:07:1d:94:33:64:03:0c:4c:8c:48:c3:2c:ed: e8:c0:fb:c7:35:73:0e:0a:5a:94:28:4e:51:73:e6:82:7d:12: 28:14:2f:71:d4:89:bc:07:3a:a1:69:c1:d7:df:5d:cf:27:35: e7:f3:87:7e:67:33:4a:2c:69:bf:7a:7a:06:32:b7:ea:27:72: 6c:f4:bf:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjUwNjEyMjEzNDEyWhcNMjUwNjE5MjEzNDEyWjAYMRYwFAYD VQQDEw02ODRiNDdkNC1mOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3qmYFTagxKXarX9n5/iry9Mzr6o+xvz+dNE9DlERXO/CkO9Y9DwUP+rZ++3 DFOnE3uQeah7byEIQNw1r9d3aU7F7wxePq8OjLesaAKCVvlvz+PgGslnkCz99FSI fOS0amo+cb8euXRPD839x2K0kQLaozK0MuEr9ZIVlulJXyg7KRGVqDfvkFJlRDQV gaoRGgeSXpBX09Q0TsmkbgjA9OpPf06AurwFx1sJ6jK2gbwHNZJbbnNMl05qW/+5 ASwyuAMd0h8Qo55KYqkzRqC+8TRfzeSyMuqpxfwAi3Wb2OgqeuTIJDSVGcgjXR0t 1k5Jibz6TE4fAMbHjChodC8V+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnpt5vB o/zwC5ht6D/MzIR6JCwYMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjLJm2G0Pqeze2qAnu348Tq+uaDj82GulujRKzXoG5chrNsfsf1Zmi VuwhgPgcfFe0dkZFWB754XleIEOSIEVWJLviDjtcaTq+EDlcNld+XvlMFs/YtScm NYIyN9Qv8c8H8MdWTa5U0XCUXUrdEX7T4o1OfM6OnsGJkQkvodsHaTiYsRGPU70Q LRHvfdPZCagSi5P6C6gtNZW3w2fWAgyckKmMRwxzlh1eYD/o4oOQ3W9pG6YfHVOH 7AcdlDNkAwxMjEjDLO3owPvHNXMOClqUKE5Rc+aCfRIoFC9x1Im8BzqhacHX313P JzXn84d+ZzNKLGm/enoGMrfqJ3Js9L+f -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:37 2025 by rpki-client