$ rpki-client -vvf rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft File: WF3cT9n54xQAXzcZj9HiLmgknes.mft (raw, json) Hash identifier: 9I+tQuKvtsmXs4Iqrk1qxaoVYqYcnW9kpV6Gq1zstrw= Subject key identifier: E3:19:F5:C1:6E:8C:9A:D8:86:A0:37:4E:6B:83:20:A7:44:F2:96:EA Authority key identifier: 58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB Certificate issuer: /CN=A912871A/serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft Manifest number: 0468 Signing time: Thu 03 Jul 2025 00:28:35 +0000 Manifest this update: Thu 03 Jul 2025 00:28:35 +0000 Manifest next update: Thu 10 Jul 2025 00:28:35 +0000 Files and hashes: 1: WF3cT9n54xQAXzcZj9HiLmgknes.crl (hash: w7nlNXbttGlGFOPOZAL0G33c5y2nhr/Ljyw3/oZIZ10=) 2: 5431D022524211ECA52D990FC4F9AE02.roa (hash: ngVDpB9EeVUj1wtwuXlGNZD63XjFCao61CO9K4ARPTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912871A, serialNumber=585DDC4FD9F9E314005F37198FD1E22E68249DEB Validity Not Before: Jul 3 00:28:35 2025 GMT Not After : Jul 10 00:28:35 2025 GMT Subject: CN=6865ceb3-f0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:07:98:d6:01:9f:83:f6:89:4d:53:97:a4: b9:68:ec:97:9c:63:19:f0:f8:81:e4:82:cc:7f:8b: b0:cf:60:1e:4a:71:4e:90:3b:c9:19:0f:48:bc:b7: b9:18:7b:8e:a9:a7:c2:97:1e:ba:59:95:c6:8f:ca: 41:dd:cc:2e:28:98:de:38:28:f2:fc:29:d9:af:2d: 93:08:d6:52:aa:0d:cc:d2:70:93:3c:aa:15:e9:e8: 96:24:5f:93:18:62:da:25:19:83:bd:9c:02:f8:17: 42:ee:ac:c2:f8:17:60:3f:84:63:cd:56:d1:f9:ce: b6:c9:32:68:e8:64:7f:52:2d:59:71:37:58:a9:7d: d3:c7:1f:b5:7a:77:01:24:af:8a:cd:3d:9d:57:31: be:0d:8d:13:bf:f4:c6:de:f9:da:c0:c0:35:f9:49: 26:98:8e:c5:04:2d:38:e2:43:5f:81:9c:d3:52:8c: dc:e6:63:7e:09:93:17:bf:72:9d:8e:9f:b8:b9:cb: 31:87:84:16:43:23:f1:8e:52:93:9e:02:95:4b:45: 11:31:9f:db:02:5f:c2:5a:3e:1c:c6:94:3d:6f:a7: a7:46:7a:a0:45:be:ec:1a:73:8e:a7:d4:98:38:15: 28:5a:8f:74:c7:06:c5:f4:0e:41:15:bc:36:20:b2: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:F5:C1:6E:8C:9A:D8:86:A0:37:4E:6B:83:20:A7:44:F2:96:EA X509v3 Authority Key Identifier: keyid:58:5D:DC:4F:D9:F9:E3:14:00:5F:37:19:8F:D1:E2:2E:68:24:9D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WF3cT9n54xQAXzcZj9HiLmgknes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912871A/05BD0F30524011EC8658060EC4F9AE02/WF3cT9n54xQAXzcZj9HiLmgknes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2e:14:83:c5:8d:0e:e6:eb:36:d9:dd:57:75:1d:c9:ac:ef: 87:0e:a2:ba:b9:f5:d0:9b:1a:53:a6:31:d9:2c:bf:37:24:c4: e9:93:e8:a2:c6:4f:f4:2d:f2:44:9d:b2:49:81:0b:34:ea:8c: af:dd:b8:8c:e4:f2:75:9c:66:50:7a:8b:89:db:a7:44:a8:4a: c0:46:ac:ab:7d:f9:af:89:41:2e:f8:4d:fb:f2:61:96:87:f5: 16:b1:cb:c8:89:68:ea:e4:0e:3c:de:f2:94:26:6e:ee:26:0a: dd:7c:50:84:61:1b:a0:5f:77:3f:e5:3b:5c:ad:3c:53:ee:e3: 41:bf:4e:47:fe:01:90:86:9d:b1:c5:37:80:a1:0e:d8:7e:70: b2:fb:0d:06:9a:f3:d2:5a:a6:47:d2:16:77:29:23:36:48:63: fa:94:9e:29:99:67:c0:fe:59:f1:75:dc:44:f4:58:1d:cd:18: 52:ff:3a:2a:4d:0c:3c:a5:77:d8:6b:66:cf:6e:54:8d:b3:7e: 96:ad:be:b8:4d:d1:74:58:c1:10:f0:c1:5c:b8:c6:2c:4b:41: 1d:c0:16:68:db:a0:12:94:42:6f:58:8f:45:73:5c:43:99:63: 1d:80:00:c4:7d:2c:8a:a1:49:42:56:6b:20:c2:e4:33:cb:d0: d8:e0:48:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg3MUExMTAvBgNVBAUTKDU4NUREQzRGRDlGOUUzMTQwMDVGMzcxOThGRDFFMjJF NjgyNDlERUIwHhcNMjUwNzAzMDAyODM1WhcNMjUwNzEwMDAyODM1WjAYMRYwFAYD VQQDEw02ODY1Y2ViMy1mMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmocHmNYBn4P2iU1Tl6S5aOyXnGMZ8PiB5ILMf4uwz2AeSnFOkDvJGQ9IvLe5 GHuOqafClx66WZXGj8pB3cwuKJjeOCjy/CnZry2TCNZSqg3M0nCTPKoV6eiWJF+T GGLaJRmDvZwC+BdC7qzC+BdgP4RjzVbR+c62yTJo6GR/Ui1ZcTdYqX3Txx+1encB JK+KzT2dVzG+DY0Tv/TG3vnawMA1+UkmmI7FBC044kNfgZzTUozc5mN+CZMXv3Kd jp+4ucsxh4QWQyPxjlKTngKVS0URMZ/bAl/CWj4cxpQ9b6enRnqgRb7sGnOOp9SY OBUoWo90xwbF9A5BFbw2ILJinwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMZ9cFu jJrYhqA3TmuDIKdE8pbqMB8GA1UdIwQYMBaAFFhd3E/Z+eMUAF83GY/R4i5oJJ3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODcxQS8wNUJEMEYzMDUy NDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4UUFYemNaajlIaUxtZ2tu ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGM2NUOW41NHhRQVh6Y1pqOUhpTG1na25lcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODcxQS8wNUJEMEYzMDUyNDAxMUVDODY1ODA2MEVDNEY5QUUwMi9XRjNjVDluNTR4 UUFYemNaajlIaUxtZ2tuZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuLhSDxY0O5us22d1XdR3JrO+HDqK6ufXQmxpTpjHZLL83JMTpk+ii xk/0LfJEnbJJgQs06oyv3biM5PJ1nGZQeouJ26dEqErARqyrffmviUEu+E378mGW h/UWscvIiWjq5A483vKUJm7uJgrdfFCEYRugX3c/5TtcrTxT7uNBv05H/gGQhp2x xTeAoQ7YfnCy+w0GmvPSWqZH0hZ3KSM2SGP6lJ4pmWfA/lnxddxE9FgdzRhS/zoq TQw8pXfYa2bPblSNs36Wrb64TdF0WMEQ8MFcuMYsS0EdwBZo26ASlEJvWI9Fc1xD mWMdgADEfSyKoUlCVmsgwuQzy9DY4EiT -----END CERTIFICATE-----Generated at Thu Jul 3 10:30:39 2025 by rpki-client