$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: jR6c8whk1JJX47NhIUnEwqevqZDkAiIxm0DZyXplIyg= Subject key identifier: E2:0E:A4:7B:BD:95:06:36:7E:4D:F5:8D:CF:08:DD:26:63:62:1C:26 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 062F Signing time: Fri 04 Jul 2025 23:10:08 +0000 Manifest this update: Fri 04 Jul 2025 23:10:07 +0000 Manifest next update: Fri 11 Jul 2025 23:10:07 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: kViK4fQWlel4FSZizcxtlYZQjgIOkcYw/gmeeYv27No=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: +9NJjEZlHqkxwGJezaqZvNw38PXtW0zuO81yVZ8rOEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Jul 4 23:10:07 2025 GMT Not After : Jul 11 23:10:07 2025 GMT Subject: CN=68685f50-5ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:e3:2e:6f:66:5a:b1:36:20:37:64:4d:f3: af:e2:d8:83:18:9f:0b:af:5f:f9:ee:bc:c9:8f:31: 62:44:f2:f5:1a:9c:db:3d:41:1e:81:74:58:ff:4a: 78:f3:6b:1a:2d:43:81:1d:4d:ae:7a:00:1c:bb:bc: af:f0:8e:3d:e0:c4:03:4b:b8:17:bf:00:a4:99:c1: d6:cb:ce:c4:05:6d:f1:0f:de:ed:6e:82:a0:cc:da: 00:76:60:8e:3d:1c:13:ba:a1:ba:65:4d:16:7e:ec: 2c:ef:4e:de:79:d8:3e:84:d8:d8:fb:aa:8b:47:15: f1:28:f1:38:3f:7f:d7:2a:c2:16:00:ab:5c:d4:5f: f6:63:39:92:24:f5:2e:ea:b4:62:de:8f:a8:bd:56: 69:36:69:aa:18:35:9d:ed:9f:65:45:7a:ab:49:db: 6f:67:11:4a:57:3d:4f:dc:9b:7c:fb:3a:c2:a0:cc: 63:af:49:5a:53:03:82:3f:4f:5c:89:66:c5:a8:71: 40:23:65:02:38:fe:8e:00:49:4c:04:f9:7f:5a:a7: 57:d9:90:17:a3:eb:21:30:3a:e5:e1:09:0e:e4:9e: cb:1e:86:9a:78:14:7c:9a:17:b1:83:d0:68:ed:88: 6e:a2:f5:b3:3f:bb:dd:9d:e2:a2:d1:6c:28:1c:0f: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0E:A4:7B:BD:95:06:36:7E:4D:F5:8D:CF:08:DD:26:63:62:1C:26 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:f0:68:30:51:ef:0b:1d:12:3d:0d:72:d4:d8:a7:e6:9a: 88:12:a2:3e:98:ce:79:c2:22:a4:c2:a5:e8:a1:a2:8d:a5:95: 99:55:34:43:48:03:c3:f1:f1:b6:0c:df:d8:48:44:01:72:01: fd:2f:fb:b1:30:c5:4d:38:59:29:41:90:1e:4e:49:ac:b7:9d: 94:2b:91:67:63:d2:13:5f:2f:06:cd:37:54:27:56:b2:34:36: 00:aa:df:91:de:81:e6:b9:7b:e7:b1:39:ab:eb:e5:37:16:43: 98:97:4c:72:69:61:58:c9:c4:d8:ba:4f:e9:e6:36:84:2e:4d: 82:10:27:e0:e4:c6:0c:d2:0c:98:db:34:bc:11:8f:f7:cd:54: c4:be:00:63:76:38:a7:5e:c2:7d:0a:28:31:c7:06:e2:47:fd: ab:75:bb:06:62:0d:2f:0a:ac:35:1c:96:3b:24:98:a2:5d:ea: 83:15:b6:2c:37:d5:88:ff:c3:29:e6:01:13:e4:9f:a3:7c:b3: f0:9d:0b:d7:5c:58:9f:2b:80:c5:63:81:cb:b8:58:b1:98:7f: 43:69:07:37:a8:39:e7:6e:21:04:08:a9:31:03:63:c9:c8:ae: 57:b6:20:fd:38:99:c4:46:91:be:5f:14:d3:c2:0b:78:71:7b: 7a:2a:8a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUwNzA0MjMxMDA3WhcNMjUwNzExMjMxMDA3WjAYMRYwFAYD VQQDEw02ODY4NWY1MC01Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZLjLm9mWrE2IDdkTfOv4tiDGJ8Lr1/57rzJjzFiRPL1GpzbPUEegXRY/0p4 82saLUOBHU2uegAcu7yv8I494MQDS7gXvwCkmcHWy87EBW3xD97tboKgzNoAdmCO PRwTuqG6ZU0Wfuws707eedg+hNjY+6qLRxXxKPE4P3/XKsIWAKtc1F/2YzmSJPUu 6rRi3o+ovVZpNmmqGDWd7Z9lRXqrSdtvZxFKVz1P3Jt8+zrCoMxjr0laUwOCP09c iWbFqHFAI2UCOP6OAElMBPl/WqdX2ZAXo+shMDrl4QkO5J7LHoaaeBR8mhexg9Bo 7YhuovWzP7vdneKi0WwoHA/bMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIOpHu9 lQY2fk31jc8I3SZjYhwmMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMCvBoMFHvCx0SPQ1y1Nin5pqIEqI+mM55wiKkwqXooaKNpZWZVTRD SAPD8fG2DN/YSEQBcgH9L/uxMMVNOFkpQZAeTkmst52UK5FnY9ITXy8GzTdUJ1ay NDYAqt+R3oHmuXvnsTmr6+U3FkOYl0xyaWFYycTYuk/p5jaELk2CECfg5MYM0gyY 2zS8EY/3zVTEvgBjdjinXsJ9CigxxwbiR/2rdbsGYg0vCqw1HJY7JJiiXeqDFbYs N9WI/8Mp5gET5J+jfLPwnQvXXFifK4DFY4HLuFixmH9DaQc3qDnnbiEECKkxA2PJ yK5XtiD9OJnERpG+XxTTwgt4cXt6Kor+ -----END CERTIFICATE-----Generated at Sat Jul 5 21:54:35 2025 by rpki-client