$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft File: wlVOkccHDswx5jeOpDvPrzyCE8A.mft (raw, json) Hash identifier: 3xDy/YZFyLOdQYJsB+aynhdTDBKj/heLAJli1bkYltI= Subject key identifier: A7:4B:AF:6F:52:D0:BE:50:07:C1:AC:87:EA:37:69:77:2D:03:33:E9 Authority key identifier: C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 Certificate issuer: /CN=A9198553/serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft Manifest number: 50 Signing time: Sun 15 Jun 2025 06:23:44 +0000 Manifest this update: Sun 15 Jun 2025 06:23:43 +0000 Manifest next update: Sun 22 Jun 2025 06:23:43 +0000 Files and hashes: 1: wlVOkccHDswx5jeOpDvPrzyCE8A.crl (hash: RF2JAsT71uDaHftXU54GTc0vmubdfphwH5PZnBcHU9s=) 2: 4D8A57B6D2F111EFAC77C249C4F9AE02.roa (hash: KHoPbgNVtZT0OwKjaJvVWJ02MeB3Fx2ZKzMa6yBJHMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=C2554E91C7070ECC31E6378EA43BCFAF3C8213C0 Validity Not Before: Jun 15 06:23:43 2025 GMT Not After : Jun 22 06:23:43 2025 GMT Subject: CN=684e66f0-4f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:88:b3:6a:02:e1:af:e4:8e:6b:7f:68:74: 5f:c7:0c:99:e2:fa:0c:cf:c2:56:2b:a3:43:43:72: c6:45:13:36:97:b5:15:27:5e:a7:00:cd:aa:17:de: 21:a3:47:30:ce:fb:a9:bf:7e:54:14:bb:48:b0:ec: 79:f1:73:42:76:71:77:0e:8e:bb:48:88:fd:0d:22: 04:62:dd:b4:9c:e5:3c:f5:91:4d:f1:5c:d3:98:e3: 22:92:11:fa:78:bd:25:80:46:b2:2c:b0:06:d7:32: fa:41:c8:12:f1:ed:0c:58:95:07:9e:4e:b9:bf:b4: a0:cb:5a:8a:c1:7f:83:80:e7:1b:15:2d:e4:d3:dc: 06:6d:b9:7f:f8:83:6a:00:b1:87:3f:32:b7:15:31: 8f:79:68:ab:d0:59:13:03:a7:5a:29:d6:3b:e6:96: 86:19:17:1d:94:93:9f:6e:8f:bb:84:8a:b9:e7:4a: 52:8a:3e:f2:45:68:f8:1f:4d:03:f3:99:0a:13:ed: fb:e9:89:1e:b5:47:a7:34:95:ca:12:af:33:ec:ca: 72:8e:5a:2e:22:99:8d:12:e8:4d:81:91:09:e2:74: e4:8f:28:65:21:c6:e3:fb:bc:62:f4:62:d2:dc:a7: 86:ab:aa:ff:d6:02:e3:d0:b9:1b:dc:2a:a8:01:6b: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:AF:6F:52:D0:BE:50:07:C1:AC:87:EA:37:69:77:2D:03:33:E9 X509v3 Authority Key Identifier: keyid:C2:55:4E:91:C7:07:0E:CC:31:E6:37:8E:A4:3B:CF:AF:3C:82:13:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wlVOkccHDswx5jeOpDvPrzyCE8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/AE92DC1CD2ED11EF8DEE5120C4F9AE02/wlVOkccHDswx5jeOpDvPrzyCE8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:5f:8b:04:f8:78:98:25:35:3f:9b:7d:c4:4a:34:58:3f:35: a6:0e:35:8a:1b:67:dc:f9:eb:f0:4a:00:4e:f4:8b:59:8b:98: bd:05:ed:ab:f5:0e:fb:8a:f0:3f:8e:ea:ac:4e:4f:8f:1f:9c: dc:7a:4d:05:ca:1a:26:43:ac:16:f4:a7:a9:aa:d0:24:b7:ba: 75:98:3b:d4:36:0c:c6:04:10:33:19:80:97:1f:c0:0a:4c:1c: b4:f2:cc:c3:b6:29:5d:8f:b1:7b:55:67:84:03:b6:cf:16:69: f4:d9:72:3c:3a:db:72:d1:91:9b:81:34:88:d5:4e:7f:ad:3c: 1c:7b:6d:57:61:93:ba:23:78:aa:f1:3f:5c:ac:d3:db:7a:77: 45:3c:ba:81:9a:48:98:ed:38:4d:57:e6:ea:30:1a:94:20:1c: 8b:bd:03:68:57:7e:00:be:54:56:7e:98:92:ad:7f:61:63:73: 59:6a:bd:93:3c:60:66:04:4e:af:8c:74:46:5a:42:3f:ef:f9: 6f:c1:d4:11:58:d2:bd:1e:22:94:93:15:74:1e:37:02:4f:81: 88:60:6c:dd:9d:9b:a7:96:78:51:62:fc:56:9c:20:b4:3e:f7: fa:aa:3d:9d:6a:1a:89:67:b0:01:7f:81:d4:80:72:38:81:bf: 69:15:91:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODU1MzExMC8GA1UEBRMoQzI1NTRFOTFDNzA3MEVDQzMxRTYzNzhFQTQzQkNGQUYz QzgyMTNDMDAeFw0yNTA2MTUwNjIzNDNaFw0yNTA2MjIwNjIzNDNaMBgxFjAUBgNV BAMTDTY4NGU2NmYwLTRmOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDed4izagLhr+SOa39odF/HDJni+gzPwlYro0NDcsZFEzaXtRUnXqcAzaoX3iGj RzDO+6m/flQUu0iw7Hnxc0J2cXcOjrtIiP0NIgRi3bSc5Tz1kU3xXNOY4yKSEfp4 vSWARrIssAbXMvpByBLx7QxYlQeeTrm/tKDLWorBf4OA5xsVLeTT3AZtuX/4g2oA sYc/MrcVMY95aKvQWRMDp1op1jvmloYZFx2Uk59uj7uEirnnSlKKPvJFaPgfTQPz mQoT7fvpiR61R6c0lcoSrzPsynKOWi4imY0S6E2BkQnidOSPKGUhxuP7vGL0YtLc p4arqv/WAuPQuRvcKqgBaweHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUp0uvb1LQ vlAHwayH6jdpdy0DM+kwHwYDVR0jBBgwFoAUwlVOkccHDswx5jeOpDvPrzyCE8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NTUzL0FFOTJEQzFDRDJF RDExRUY4REVFNTEyMEM0RjlBRTAyL3dsVk9rY2NIRHN3eDVqZU9wRHZQcnp5Q0U4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2xWT2tjY0hEc3d4NWplT3BEdlByenlDRThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NTUzL0FFOTJEQzFDRDJFRDExRUY4REVFNTEyMEM0RjlBRTAyL3dsVk9rY2NIRHN3 eDVqZU9wRHZQcnp5Q0U4QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALhfiwT4eJglNT+bfcRKNFg/NaYONYobZ9z56/BKAE70i1mLmL0F7av1 DvuK8D+O6qxOT48fnNx6TQXKGiZDrBb0p6mq0CS3unWYO9Q2DMYEEDMZgJcfwApM HLTyzMO2KV2PsXtVZ4QDts8WafTZcjw623LRkZuBNIjVTn+tPBx7bVdhk7ojeKrx P1ys09t6d0U8uoGaSJjtOE1X5uowGpQgHIu9A2hXfgC+VFZ+mJKtf2Fjc1lqvZM8 YGYETq+MdEZaQj/v+W/B1BFY0r0eIpSTFXQeNwJPgYhgbN2dm6eWeFFi/FacILQ+ 9/qqPZ1qGolnsAF/gdSAcjiBv2kVkZo= -----END CERTIFICATE-----Generated at Sun Jun 15 10:03:18 2025 by rpki-client