$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: qCQut16alnFgiEffc70NWBW/nK7TDOIgsKEc6rPNgzs= Subject key identifier: 36:55:50:10:01:8D:81:93:E3:91:2F:D1:0C:11:2D:C2:09:24:D1:FC Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: C9 Signing time: Thu 03 Jul 2025 05:54:23 +0000 Manifest this update: Thu 03 Jul 2025 05:54:22 +0000 Manifest next update: Thu 10 Jul 2025 05:54:22 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: N8gJt9juWIU504nIelYAocXkutD6ce65hGqrl2Q/sV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Jul 3 05:54:22 2025 GMT Not After : Jul 10 05:54:22 2025 GMT Subject: CN=68661b0e-fc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:7f:00:8f:78:6a:35:79:2f:bd:14:46:6f: df:7b:e2:7f:a4:d4:d8:dd:84:a5:5a:9d:23:d5:2e: cf:9e:39:1a:b3:ad:c3:96:42:d8:3a:f0:94:14:c3: 93:0a:c5:dc:c3:c0:09:d7:71:8d:81:cf:ee:48:2f: 41:a0:ef:dc:30:cb:a9:75:1a:78:d7:d0:e3:93:22: 23:ba:25:f7:02:bb:c0:f5:8e:f1:97:db:1b:41:cf: 0a:e4:71:f9:19:82:bb:47:9c:d5:79:c5:c4:33:5f: 30:2f:79:5e:44:b6:e6:78:2b:d7:c7:a2:5e:43:fe: 4c:4a:53:7a:8d:82:5e:43:09:f6:92:f5:5f:d1:ef: b3:ed:5f:83:ca:fe:b8:fa:b6:a6:17:41:7a:cf:bb: 4c:10:2f:3e:34:f7:b8:30:fb:b7:28:77:f4:90:1d: 58:73:3d:91:4e:47:65:2e:47:0f:bb:fa:1d:64:db: 46:e6:88:da:af:aa:d5:61:0b:11:ea:5e:7f:47:70: ad:05:10:76:0f:f7:e1:67:af:82:df:4b:ca:2f:c8: 8e:7b:fe:e3:63:f6:ba:45:54:4b:ef:3d:cc:ea:0b: 87:f8:3f:9c:25:2a:9f:2a:42:12:8d:af:f0:b9:7a: c3:f0:f9:d1:74:0c:48:73:fc:9e:90:8f:df:6d:d8: 57:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:55:50:10:01:8D:81:93:E3:91:2F:D1:0C:11:2D:C2:09:24:D1:FC X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ca:d6:50:19:49:04:a7:1e:00:08:d4:94:f1:7a:51:a5:f0: b2:9b:07:37:5a:e9:8c:3b:37:ff:c8:45:07:55:c5:a6:17:59: 4f:55:86:a5:dc:2b:ac:ae:ee:b1:19:06:fc:82:46:1f:7c:c8: 3b:aa:1c:f2:48:93:45:9a:7e:21:64:1c:b7:47:30:a0:ec:ba: 14:ed:9c:52:c5:81:4f:a9:e2:f7:18:c2:c9:05:20:6b:f7:cf: a7:45:3b:74:1d:51:47:4f:6c:3d:5a:d9:98:58:86:03:4b:3f: d9:eb:03:2d:d7:e1:ef:25:32:10:61:85:18:2c:b0:cd:6d:ef: 1e:77:64:4b:3a:db:82:53:7c:8a:f0:1b:01:a3:05:6a:46:be: 24:8c:8b:33:eb:20:65:c9:d4:0b:86:46:7c:59:62:75:55:c4: dc:69:90:9d:e0:9a:a8:e8:c8:27:9b:80:72:73:28:df:51:53: cc:b4:76:f8:1f:9a:9f:c9:51:55:04:cb:f2:5b:bd:09:ba:5f: ea:92:43:ad:82:83:eb:4b:1d:ef:e8:f9:bf:24:f7:33:de:b1: 11:ae:a1:ba:1f:17:03:07:75:fd:48:2c:93:ec:4f:06:d1:d0: 0d:a5:1f:b0:b5:7c:64:0f:93:02:d3:5d:49:20:8b:19:90:f5: 78:b3:01:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjUwNzAzMDU1NDIyWhcNMjUwNzEwMDU1NDIyWjAYMRYwFAYD VQQDEw02ODY2MWIwZS1mYzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBN/AI94ajV5L70URm/fe+J/pNTY3YSlWp0j1S7Pnjkas63DlkLYOvCUFMOT CsXcw8AJ13GNgc/uSC9BoO/cMMupdRp419DjkyIjuiX3ArvA9Y7xl9sbQc8K5HH5 GYK7R5zVecXEM18wL3leRLbmeCvXx6JeQ/5MSlN6jYJeQwn2kvVf0e+z7V+Dyv64 +ramF0F6z7tMEC8+NPe4MPu3KHf0kB1Ycz2RTkdlLkcPu/odZNtG5ojar6rVYQsR 6l5/R3CtBRB2D/fhZ6+C30vKL8iOe/7jY/a6RVRL7z3M6guH+D+cJSqfKkISja/w uXrD8PnRdAxIc/yekI/fbdhXCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZVUBAB jYGT45Ev0QwRLcIJJNH8MB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ytZQGUkEpx4ACNSU8XpRpfCymwc3WumMOzf/yEUHVcWmF1lPVYal 3Cusru6xGQb8gkYffMg7qhzySJNFmn4hZBy3RzCg7LoU7ZxSxYFPqeL3GMLJBSBr 98+nRTt0HVFHT2w9WtmYWIYDSz/Z6wMt1+HvJTIQYYUYLLDNbe8ed2RLOtuCU3yK 8BsBowVqRr4kjIsz6yBlydQLhkZ8WWJ1VcTcaZCd4Jqo6Mgnm4BycyjfUVPMtHb4 H5qfyVFVBMvyW70Jul/qkkOtgoPrSx3v6Pm/JPcz3rERrqG6HxcDB3X9SCyT7E8G 0dANpR+wtXxkD5MC011JIIsZkPV4swFB -----END CERTIFICATE-----Generated at Fri Jul 4 08:17:26 2025 by rpki-client