$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft File: wfSjmGHK0883hCGN7aegXoUvIn8.mft (raw, json) Hash identifier: j+wCfTuj2t5rVTKN1nKztivenqdk712WOGhCYavWdjo= Subject key identifier: FA:FF:CD:C7:E3:E9:E3:D6:FE:7A:46:41:47:59:93:92:27:89:F3:6B Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft Manifest number: 33 Signing time: Tue 01 Jul 2025 08:26:20 +0000 Manifest this update: Tue 01 Jul 2025 08:26:19 +0000 Manifest next update: Tue 08 Jul 2025 08:26:19 +0000 Files and hashes: 1: wfSjmGHK0883hCGN7aegXoUvIn8.crl (hash: NQHTnXG0FLaVi2J5YGg280NpJ57gWz4ic6gdIcUvDvY=) 2: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (hash: kwR4HiPzGhpK5SEPo+ThTcF7apxZuPZzTOyt4h1UDag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Validity Not Before: Jul 1 08:26:19 2025 GMT Not After : Jul 8 08:26:19 2025 GMT Subject: CN=68639bac-873e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:62:9d:73:b2:ea:62:d9:e4:dd:26:2f:e2: 78:93:b6:6a:01:3a:8e:2a:41:02:34:bc:86:1b:69: b2:be:b0:13:a2:11:e5:16:7a:ed:07:63:78:c7:83: 4e:d2:d7:6b:f0:e3:84:df:30:77:9c:b8:64:21:74: c0:43:09:f7:ce:9c:c6:8d:32:93:f5:80:20:7c:a5: 12:b0:e4:28:7e:71:66:94:bf:09:78:9f:b1:98:73: 52:31:93:17:c5:32:73:ec:81:b5:1d:dc:1a:41:da: 4a:9c:4f:5c:a6:1e:da:b7:2b:33:5b:1b:2b:ca:98: 32:e5:bb:78:3e:c3:3f:a4:9d:bc:37:f8:9e:23:6c: 56:bb:87:0d:2e:1b:0b:41:0b:ff:06:83:c5:53:70: 69:7c:32:19:60:01:ae:a3:49:11:60:25:08:7b:53: ab:74:c0:12:1c:b1:2b:92:5a:6e:e4:76:c5:2a:17: bc:9d:50:08:ec:28:9a:fc:0f:11:1b:11:85:85:3f: ed:c0:df:ed:48:7c:d0:1f:cc:5f:a8:c0:8f:5e:99: d9:0f:f8:29:e3:a3:17:8c:3d:00:21:dd:d1:45:6f: d7:ea:26:41:75:d6:7a:19:5d:d4:8b:59:c6:56:9c: 48:24:9f:e6:4f:d1:ae:03:74:88:fa:97:14:59:35: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:CD:C7:E3:E9:E3:D6:FE:7A:46:41:47:59:93:92:27:89:F3:6B X509v3 Authority Key Identifier: keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:4b:d1:05:d4:36:c9:5c:c5:0e:a6:69:c8:49:2d:b1:da:68: d4:22:8f:a6:34:8a:9b:6e:2a:bb:63:e0:01:e5:37:c5:2b:b9: 37:a8:26:94:7e:26:5d:4d:fb:1b:14:d5:51:5a:ef:d7:d3:9b: cc:a2:4f:e1:ce:f1:a3:0f:87:35:95:1c:73:42:70:07:24:6b: 59:4d:75:8c:99:39:34:44:79:87:e8:67:ca:57:cc:c4:f3:a7: 86:02:88:88:e2:bc:b3:17:7b:bb:61:52:d7:db:18:00:b4:22: 02:51:fb:c3:41:1a:18:4a:dd:ab:8d:67:e6:5a:6d:ff:f5:cc: 52:23:b3:80:40:6e:b7:18:3e:df:57:7c:fe:60:a5:32:ac:ff: 0d:57:2a:9e:b9:16:68:29:1d:98:a1:6a:9b:91:e5:0a:a8:84: 28:dc:8d:82:58:fe:d9:44:93:42:5d:75:ae:87:9c:3c:b1:59: 8f:50:35:eb:9a:fb:24:a1:36:96:c8:2e:04:dd:0f:8c:5c:31: 6a:df:a7:2b:a6:62:f1:a4:dd:4e:45:0e:eb:99:39:03:90:9c: a0:2b:b9:80:16:f8:da:b8:fb:01:c6:12:3f:31:88:e2:ed:47: 9b:c9:30:36:a5:92:46:90:f3:8b:f9:b3:db:32:26:ae:7d:46: 0b:d8:b3:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REI5NzExMC8GA1UEBRMoQzFGNEEzOTg2MUNBRDNDRjM3ODQyMThERURBN0EwNUU4 NTJGMjI3RjAeFw0yNTA3MDEwODI2MTlaFw0yNTA3MDgwODI2MTlaMBgxFjAUBgNV BAMTDTY4NjM5YmFjLTg3M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7dWKdc7LqYtnk3SYv4niTtmoBOo4qQQI0vIYbabK+sBOiEeUWeu0HY3jHg07S 12vw44TfMHecuGQhdMBDCffOnMaNMpP1gCB8pRKw5Ch+cWaUvwl4n7GYc1IxkxfF MnPsgbUd3BpB2kqcT1ymHtq3KzNbGyvKmDLlu3g+wz+knbw3+J4jbFa7hw0uGwtB C/8Gg8VTcGl8MhlgAa6jSRFgJQh7U6t0wBIcsSuSWm7kdsUqF7ydUAjsKJr8DxEb EYWFP+3A3+1IfNAfzF+owI9emdkP+CnjoxeMPQAh3dFFb9fqJkF11noZXdSLWcZW nEgkn+ZP0a4DdIj6lxRZNUB5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+v/Nx+Pp 49b+ekZBR1mTkieJ82swHwYDVR0jBBgwFoAUwfSjmGHK0883hCGN7aegXoUvIn8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEQjk3LzVEOEI1MjY0MEEx NDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9Vdklu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2ZTam1HSEswODgzaENHTjdhZWdYb1V2SW44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE Qjk3LzVEOEI1MjY0MEExNDExRjBCNDNEQzU4NkM0RjlBRTAyL3dmU2ptR0hLMDg4 M2hDR043YWVnWG9VdkluOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALVL0QXUNslcxQ6machJLbHaaNQij6Y0iptuKrtj4AHlN8UruTeoJpR+ Jl1N+xsU1VFa79fTm8yiT+HO8aMPhzWVHHNCcAcka1lNdYyZOTREeYfoZ8pXzMTz p4YCiIjivLMXe7thUtfbGAC0IgJR+8NBGhhK3auNZ+Zabf/1zFIjs4BAbrcYPt9X fP5gpTKs/w1XKp65FmgpHZihapuR5QqohCjcjYJY/tlEk0Jdda6HnDyxWY9QNeua +yShNpbILgTdD4xcMWrfpyumYvGk3U5FDuuZOQOQnKAruYAW+Nq4+wHGEj8xiOLt R5vJMDalkkaQ84v5s9syJq59RgvYs+U= -----END CERTIFICATE-----Generated at Thu Jul 3 02:58:42 2025 by rpki-client