$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: i+KQmOcb7LgiMMg9CPsc/hlOHvhwZoEMNhLtpTFRJGs= Subject key identifier: A3:AA:3F:DF:4E:46:99:C2:44:58:F2:C4:6D:30:BC:F4:A5:B2:F1:89 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0615 Signing time: Mon 12 May 2025 22:36:49 +0000 Manifest this update: Mon 12 May 2025 22:36:48 +0000 Manifest next update: Mon 19 May 2025 22:36:48 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: Ip/0UZrsK7p8RKtlXyT8nXmAdPfhS0ijnkGRCz5DNJg=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: +9NJjEZlHqkxwGJezaqZvNw38PXtW0zuO81yVZ8rOEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: May 12 22:36:48 2025 GMT Not After : May 19 22:36:48 2025 GMT Subject: CN=68227800-40e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:da:72:8d:38:c4:aa:cd:db:a4:a6:95:3c: b3:8d:ad:e7:25:bb:b7:cf:2c:4e:dd:cc:ba:ef:8b: 16:67:83:4a:cd:93:a1:da:3e:c7:b3:6e:ce:ec:ca: 8b:bb:44:1e:81:ef:fb:af:cd:fd:b0:e7:53:43:59: 80:f6:78:f2:67:45:be:9a:4b:20:58:9c:c9:a1:02: c3:cb:59:83:f4:e6:2f:f4:c7:0e:d3:4e:92:9c:72: f4:71:e0:93:a3:35:53:26:7c:9a:a6:de:a0:e3:01: 20:32:9d:d5:d1:92:59:c8:70:e7:95:e9:c7:fb:cc: 96:3f:be:93:e0:27:80:77:ae:c8:4c:20:42:fa:1d: 14:55:d9:94:c4:49:42:d6:2c:e7:a2:9d:0b:da:32: 23:ac:a3:98:3d:c8:14:4a:f9:f0:3c:70:11:97:42: 37:20:9a:28:46:26:97:db:c2:aa:76:35:ae:7e:ca: ca:cc:a0:89:3f:ce:6d:e3:d5:83:00:27:22:f6:f7: f4:14:bc:88:23:1a:fe:39:4b:b8:08:59:e7:05:37: 83:4d:39:16:11:75:c7:bf:ac:3b:2c:9c:cc:d9:d0: b6:dd:02:82:6e:1f:fd:bf:5b:ed:32:bc:ad:73:47: 31:98:05:2c:c3:e1:67:5b:69:58:82:e3:19:f0:a1: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AA:3F:DF:4E:46:99:C2:44:58:F2:C4:6D:30:BC:F4:A5:B2:F1:89 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5c:ae:ee:4d:3e:0c:67:7a:2f:02:c4:55:90:7d:9d:2e:9a: 10:28:49:b1:a1:65:2d:64:67:b1:a7:51:1a:be:c5:9a:fe:4a: 63:a5:63:1e:35:57:cf:79:7e:3c:81:40:f7:73:e4:ba:4f:ea: ad:a3:6c:fd:07:8b:e7:20:40:92:df:09:61:b6:8f:2f:2e:a5: 26:bf:74:73:ac:67:4c:7b:ce:d5:e0:16:ab:91:0b:53:f5:d5: db:f5:d7:6b:47:6c:ee:a0:d9:8c:9c:22:29:a0:88:cb:a0:e1: 44:a3:1a:9f:45:a6:3f:f1:29:0c:50:7b:70:a4:af:3a:9a:8f: ff:2a:ff:f7:53:e9:dc:aa:a0:74:86:e8:1c:aa:3c:0d:ef:a7: 07:a4:1d:71:39:74:25:33:6b:3c:cd:44:fb:43:6b:da:31:44: 2d:1d:16:40:8c:87:18:de:6b:7e:26:8e:65:fa:ae:cc:9e:f5: a2:a4:7d:ad:60:72:e6:24:49:66:f3:91:e5:dd:c5:bc:24:6b: 7d:22:55:d4:f7:e2:d5:58:ec:0f:36:49:65:fd:ec:f6:66:d7: 17:22:87:19:64:43:56:eb:b7:09:1b:23:e7:bb:89:35:8e:c5: 9b:c1:60:a1:45:36:0a:4a:02:a8:50:a9:fd:1d:59:aa:0d:b0: 36:8d:08:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUwNTEyMjIzNjQ4WhcNMjUwNTE5MjIzNjQ4WjAYMRYwFAYD VQQDEw02ODIyNzgwMC00MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCbaco04xKrN26SmlTyzja3nJbu3zyxO3cy674sWZ4NKzZOh2j7Hs27O7MqL u0Qege/7r839sOdTQ1mA9njyZ0W+mksgWJzJoQLDy1mD9OYv9McO006SnHL0ceCT ozVTJnyapt6g4wEgMp3V0ZJZyHDnlenH+8yWP76T4CeAd67ITCBC+h0UVdmUxElC 1iznop0L2jIjrKOYPcgUSvnwPHARl0I3IJooRiaX28KqdjWufsrKzKCJP85t49WD ACci9vf0FLyIIxr+OUu4CFnnBTeDTTkWEXXHv6w7LJzM2dC23QKCbh/9v1vtMryt c0cxmAUsw+FnW2lYguMZ8KHEBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOqP99O RpnCRFjyxG0wvPSlsvGJMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXK7uTT4MZ3ovAsRVkH2dLpoQKEmxoWUtZGexp1EavsWa/kpjpWMe NVfPeX48gUD3c+S6T+qto2z9B4vnIECS3wlhto8vLqUmv3RzrGdMe87V4BarkQtT 9dXb9ddrR2zuoNmMnCIpoIjLoOFEoxqfRaY/8SkMUHtwpK86mo//Kv/3U+ncqqB0 hugcqjwN76cHpB1xOXQlM2s8zUT7Q2vaMUQtHRZAjIcY3mt+Jo5l+q7MnvWipH2t YHLmJElm85Hl3cW8JGt9IlXU9+LVWOwPNkll/ez2ZtcXIocZZENW67cJGyPnu4k1 jsWbwWChRTYKSgKoUKn9HVmqDbA2jQjl -----END CERTIFICATE-----Generated at Tue May 13 22:02:47 2025 by rpki-client