$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: 3AafK4gS67jsxzXbJUyIMZoZ3CNOXClQmk6VBFwrdd4= Subject key identifier: 89:A4:A3:42:A2:DA:C7:C0:CC:0C:35:D6:C4:12:96:C5:3F:68:33:AB Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 1B Signing time: Tue 01 Jul 2025 08:48:01 +0000 Manifest this update: Tue 01 Jul 2025 08:48:00 +0000 Manifest next update: Tue 08 Jul 2025 08:48:00 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: ZBYPIO+Yc5G8EuG5L91vxtupE8wrXB+F63ObmR1Rrxg=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: Jul 1 08:48:00 2025 GMT Not After : Jul 8 08:48:00 2025 GMT Subject: CN=6863a0c0-4529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:00:c3:5b:7d:05:73:56:56:c6:ab:2e:fe: 9f:16:2b:a5:8a:5b:df:1a:f7:8f:d0:bd:9f:e9:74: ec:05:b1:82:12:84:e8:cf:f3:9d:9c:34:88:f9:13: 36:33:78:7e:a5:ba:94:38:1b:fc:14:af:68:cb:71: 9e:1b:53:85:8b:ab:ba:89:f3:18:95:18:12:32:9e: 91:30:31:08:91:e6:19:78:92:e9:6c:96:6d:e2:3c: cf:44:42:f1:f1:72:b3:4c:cb:f5:b8:0c:83:05:42: 0a:17:4e:00:cb:50:9c:31:59:8f:0c:b5:b3:04:c7: 6a:11:07:39:4d:93:6c:2c:3e:73:be:cc:f0:92:44: 34:7a:c8:22:7e:12:d0:4a:da:92:ca:97:a5:6f:97: 25:9f:38:b8:f7:7a:8d:db:7c:82:9d:7c:bd:d9:32: 31:57:9e:10:f8:24:55:95:75:a7:f5:fe:ae:06:7a: 69:e2:04:d6:c6:f6:fe:b4:01:90:9a:d2:80:d6:74: 21:46:ae:74:3f:fd:63:2c:13:f6:6b:85:16:91:6f: 4d:ee:37:93:26:d1:3f:18:cd:ca:5c:20:4c:ce:05: 30:73:31:6e:f9:f9:1f:9b:d0:35:fd:fb:58:16:37: f9:9a:56:a3:42:c7:9c:7e:2e:e9:dd:0f:11:1a:a2: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A4:A3:42:A2:DA:C7:C0:CC:0C:35:D6:C4:12:96:C5:3F:68:33:AB X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:11:dc:6b:dc:3d:f9:f3:d3:90:9a:99:cd:6f:a0:7f:b6:a5: 87:21:e0:07:67:f8:cf:e7:46:2d:98:3d:7b:e0:c3:47:db:2e: 09:0e:e1:77:16:9f:b7:d2:53:1b:cc:de:01:c1:16:92:fe:8c: 0b:29:86:84:2c:18:68:4a:83:e4:5b:94:fa:3b:14:56:cf:10: d1:0f:00:bc:f3:a6:c2:ca:b0:50:8d:ca:17:d5:f0:35:68:7a: 42:c0:68:3d:55:02:00:28:9f:1c:c4:96:d7:94:22:e3:c6:fa: 8d:30:67:33:0b:5f:e4:2f:6a:bb:2d:b4:29:7e:bc:82:a7:9a: 34:bb:5d:90:a3:51:57:4e:28:e7:3f:7c:95:90:5d:e4:d2:bd: 23:05:32:5f:19:13:55:f0:0d:3c:14:78:72:4a:a9:d0:d1:6c: 79:1d:0a:30:7d:48:f7:b5:ba:8a:ec:df:32:91:8b:42:6b:16: 1d:64:11:fc:35:72:7b:00:15:57:a1:d1:7b:83:f4:61:cb:d9: 25:21:e6:b1:69:31:31:3c:f2:77:2d:02:43:a1:59:7c:c3:2c: eb:f8:d9:26:c0:95:c9:48:f6:36:17:2a:05:6c:da:d7:60:85: 42:64:25:63:51:fb:6a:b4:3c:80:81:85:69:65:71:9a:43:88: 67:fd:4e:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTA3MDEwODQ4MDBaFw0yNTA3MDgwODQ4MDBaMBgxFjAUBgNV BAMTDTY4NjNhMGMwLTQ1MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdxQDDW30Fc1ZWxqsu/p8WK6WKW98a94/QvZ/pdOwFsYIShOjP852cNIj5EzYz eH6lupQ4G/wUr2jLcZ4bU4WLq7qJ8xiVGBIynpEwMQiR5hl4kulslm3iPM9EQvHx crNMy/W4DIMFQgoXTgDLUJwxWY8MtbMEx2oRBzlNk2wsPnO+zPCSRDR6yCJ+EtBK 2pLKl6VvlyWfOLj3eo3bfIKdfL3ZMjFXnhD4JFWVdaf1/q4GemniBNbG9v60AZCa 0oDWdCFGrnQ//WMsE/ZrhRaRb03uN5Mm0T8YzcpcIEzOBTBzMW75+R+b0DX9+1gW N/maVqNCx5x+LundDxEaolQxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiaSjQqLa x8DMDDXWxBKWxT9oM6swHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwR3GvcPfnz05Camc1voH+2pYch4Adn+M/nRi2YPXvgw0fbLgkO4XcW n7fSUxvM3gHBFpL+jAsphoQsGGhKg+RblPo7FFbPENEPALzzpsLKsFCNyhfV8DVo ekLAaD1VAgAonxzElteUIuPG+o0wZzMLX+QvarsttCl+vIKnmjS7XZCjUVdOKOc/ fJWQXeTSvSMFMl8ZE1XwDTwUeHJKqdDRbHkdCjB9SPe1uors3zKRi0JrFh1kEfw1 cnsAFVeh0XuD9GHL2SUh5rFpMTE88nctAkOhWXzDLOv42SbAlclI9jYXKgVs2tdg hUJkJWNR+2q0PICBhWllcZpDiGf9TuE= -----END CERTIFICATE-----Generated at Thu Jul 3 01:09:05 2025 by rpki-client