$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft File: wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft (raw, json) Hash identifier: Vx/QB2qckmm0N9vdx9I3p4nVD+8tjgAMdD+y6IKKx6U= Subject key identifier: 51:48:AE:A8:B2:B3:E7:6B:3F:FC:18:88:D9:93:75:A5:FD:43:83:A8 Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft Manifest number: 01D5 Signing time: Tue 01 Jul 2025 03:16:39 +0000 Manifest this update: Tue 01 Jul 2025 03:16:38 +0000 Manifest next update: Tue 08 Jul 2025 03:16:38 +0000 Files and hashes: 1: wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl (hash: yOX4wOOeiXKV3R+gv+i/oPWwxoEhsmuzDEV1y6bNqiQ=) 2: 949A543291B011EDA9CB747CC4F9AE02.roa (hash: IXWkWs++k8QNiBEV5gRLUUd6hmjdG0gw9M6G9nB2OC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Validity Not Before: Jul 1 03:16:38 2025 GMT Not After : Jul 8 03:16:38 2025 GMT Subject: CN=68635316-8d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:4e:a9:04:e2:26:19:10:70:18:95:41:20: 11:5a:62:80:8d:4a:f1:9f:a8:5f:f0:8b:bc:0a:80: 66:1a:f1:cd:77:31:d9:ca:60:85:7f:30:cd:cb:1c: b0:a8:e6:18:fd:a2:3d:d0:20:4b:dc:84:ea:59:68: dd:d4:39:c3:86:18:ac:6c:ae:b7:2d:0f:01:47:64: 61:d5:78:68:e5:54:95:f3:27:03:e6:88:19:fd:07: bc:6b:b0:12:fc:f2:e3:44:f6:5b:f3:70:1d:06:14: 65:35:62:b2:11:6c:fd:c8:e3:22:d2:13:f9:49:fb: 77:7a:51:e3:4a:e2:b0:9c:5f:23:89:1b:52:25:92: 70:c3:77:45:ad:f6:20:d4:d1:eb:8a:ca:40:4e:70: af:cc:32:f9:88:c3:cc:e0:50:7f:1f:75:99:9d:1a: 63:51:b9:4d:a3:d6:60:04:b5:c7:f5:54:b7:6f:0a: 75:1f:1f:01:66:2a:2b:f7:71:f8:18:32:07:68:5b: 14:f0:16:4c:d5:f7:51:69:47:b7:77:95:8a:10:0a: ab:02:86:1d:eb:cc:5d:28:9e:8b:91:f0:10:9a:0d: 19:ea:8f:b5:c1:b2:8a:d4:7d:1c:75:0d:69:61:d4: 5b:df:64:f8:6f:c7:11:53:40:8f:e1:de:7b:bc:0c: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:AE:A8:B2:B3:E7:6B:3F:FC:18:88:D9:93:75:A5:FD:43:83:A8 X509v3 Authority Key Identifier: keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ba:3b:f9:d4:66:2a:55:af:db:df:ed:36:ca:5a:3c:70:51: 13:36:7d:71:2b:c1:4f:23:96:09:b4:9a:32:03:0e:73:b9:ef: 7d:8d:86:8c:d4:c7:f4:36:b1:db:3a:56:05:25:40:c8:1f:16: f5:d2:d9:19:aa:6e:81:29:a4:c0:93:46:ea:b2:af:e0:b9:17: f0:6b:80:bc:09:24:b3:b1:57:fc:35:30:66:e6:9d:16:dd:1f: 5c:be:78:53:68:e1:94:d2:bc:98:f9:71:fe:dc:2a:e5:1c:fb: 46:82:57:b7:ba:b1:f3:ec:c1:61:9d:ef:c2:83:43:4a:76:cf: 5d:f8:9a:cb:0d:92:c3:ad:cf:0a:29:d4:b8:48:84:50:ef:e9: 5e:15:00:66:50:37:21:28:9f:08:e3:c4:ec:c1:56:6a:99:74: 57:5a:7a:26:76:69:fb:ad:1a:5d:2a:2e:0a:0d:f2:48:92:15: ff:42:31:f5:91:d1:e0:80:bd:72:41:24:ee:91:5b:6c:ca:85: 31:9e:c6:4a:1c:46:7a:c6:33:d2:ff:8c:37:3f:7e:85:75:3f: 1f:89:4c:8d:95:71:b0:6c:89:41:99:7d:03:2b:f5:f0:6f:eb: b6:54:18:5f:9f:5b:b8:b9:d0:af:30:66:51:32:7d:71:a5:4c: 60:5e:df:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2 OUM5MDAzRjQwHhcNMjUwNzAxMDMxNjM4WhcNMjUwNzA4MDMxNjM4WjAYMRYwFAYD VQQDEw02ODYzNTMxNi04ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp5OqQTiJhkQcBiVQSARWmKAjUrxn6hf8Iu8CoBmGvHNdzHZymCFfzDNyxyw qOYY/aI90CBL3ITqWWjd1DnDhhisbK63LQ8BR2Rh1Xho5VSV8ycD5ogZ/Qe8a7AS /PLjRPZb83AdBhRlNWKyEWz9yOMi0hP5Sft3elHjSuKwnF8jiRtSJZJww3dFrfYg 1NHrispATnCvzDL5iMPM4FB/H3WZnRpjUblNo9ZgBLXH9VS3bwp1Hx8BZior93H4 GDIHaFsU8BZM1fdRaUe3d5WKEAqrAoYd68xdKJ6LkfAQmg0Z6o+1wbKK1H0cdQ1p YdRb32T4b8cRU0CP4d57vAz8ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFIrqiy s+drP/wYiNmTdaX9Q4OoMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVF cm9SX2FTUGFpUkJweVFBX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUujv51GYqVa/b3+02ylo8cFETNn1xK8FPI5YJtJoyAw5zue99jYaM 1Mf0NrHbOlYFJUDIHxb10tkZqm6BKaTAk0bqsq/guRfwa4C8CSSzsVf8NTBm5p0W 3R9cvnhTaOGU0ryY+XH+3CrlHPtGgle3urHz7MFhne/Cg0NKds9d+JrLDZLDrc8K KdS4SIRQ7+leFQBmUDchKJ8I48TswVZqmXRXWnomdmn7rRpdKi4KDfJIkhX/QjH1 kdHggL1yQSTukVtsyoUxnsZKHEZ6xjPS/4w3P36FdT8fiUyNlXGwbIlBmX0DK/Xw b+u2VBhfn1u4udCvMGZRMn1xpUxgXt8Z -----END CERTIFICATE-----Generated at Wed Jul 2 11:45:38 2025 by rpki-client