$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: YerHh8PT5ZaB/GwtZFZsqBkGOSkGNr5JI6dEO0cQuEQ= Subject key identifier: B0:39:AD:7E:39:D6:7B:58:FA:2D:78:14:4B:9A:39:CE:5B:11:07:19 Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 0149 Signing time: Tue 01 Jul 2025 04:41:25 +0000 Manifest this update: Tue 01 Jul 2025 04:41:25 +0000 Manifest next update: Tue 08 Jul 2025 04:41:25 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: W+vi/QEFVKzvmTZEHgD+BUosLw/T8YE98m7efxuKogs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: Jul 1 04:41:25 2025 GMT Not After : Jul 8 04:41:25 2025 GMT Subject: CN=686366f5-9db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:e9:9c:57:2d:f8:d6:f0:46:ea:0b:95:b1: c1:95:27:c2:0a:48:e9:d7:76:5d:a8:cf:62:f4:a8: 4b:a4:bd:4a:2d:6f:cc:7b:af:3b:d5:b4:af:40:fa: a1:89:c9:6d:71:b7:f8:e2:84:37:76:ea:68:64:4e: c4:e7:63:0a:81:2e:04:7c:02:1c:fa:85:bc:28:05: 06:c7:4f:d3:4f:01:b7:44:e5:6d:07:ca:5c:3a:c6: 43:c7:86:76:0d:9f:d0:b2:25:82:5f:2f:30:a1:c9: 37:28:e8:6b:00:ed:09:5c:38:af:e8:af:12:29:bc: f1:4b:1e:f0:dd:ed:e3:dd:23:7f:e2:6a:27:9f:66: 63:3a:22:d6:e1:e7:be:56:f1:b5:99:44:3f:af:18: 84:72:e2:c1:39:ba:3d:3d:89:a1:6c:9b:94:c1:77: fa:1e:0f:9e:58:be:c2:e1:13:f4:96:ea:52:6b:ca: 9f:bc:5a:05:10:33:e5:7c:34:05:7c:59:0f:2d:5f: 75:a0:16:74:25:11:77:df:69:62:51:15:e5:8d:1a: 82:2a:97:d1:6a:2f:78:f7:d7:fe:b9:1b:4a:ac:63: 61:f1:12:33:bb:3b:4c:4b:b0:57:63:02:46:32:4d: bb:2e:9b:c1:f2:38:12:67:bb:93:95:ed:23:6a:3b: 0a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:39:AD:7E:39:D6:7B:58:FA:2D:78:14:4B:9A:39:CE:5B:11:07:19 X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:1a:13:04:be:a6:93:b3:06:f0:65:00:6d:b5:c7:56:3c:62: 75:ba:ae:2f:b5:d9:23:8b:8d:21:89:57:fe:a2:08:16:b2:22: 3d:c0:ec:8d:6a:df:46:6e:74:ef:fb:99:bb:2d:bb:58:ac:90: c6:50:92:88:40:f8:f0:66:ab:aa:01:d1:d5:9d:fc:f5:88:85: 14:8c:1d:3c:78:98:1f:6f:dd:de:00:c9:73:c9:a2:9e:62:4e: 29:71:68:99:77:74:62:f2:6b:86:90:9c:35:d3:b0:8c:fd:16: 15:07:c2:47:1b:06:5c:39:e6:fc:4c:28:71:01:ff:3a:05:2a: 36:31:f7:b8:92:95:dc:4f:19:f2:9e:cf:b8:8a:6d:6c:8f:1f: 86:40:b1:e8:8a:e7:48:65:db:35:ab:2a:30:1f:d5:e3:cf:09: d8:8a:1d:64:cc:cc:a1:62:dc:38:a8:b1:23:9d:92:8e:40:ba: 9e:0c:22:8b:09:ed:49:ea:4f:3d:54:dd:ce:f0:4d:0a:6f:8a: e0:04:45:35:c3:88:57:b9:31:c3:9f:2c:8c:b2:fa:ec:1f:32: d9:79:0e:ed:e7:f3:4f:56:48:f9:be:da:6d:26:16:90:d1:fb: d9:18:a0:c1:63:63:68:32:fa:a7:a8:f5:48:69:64:23:8c:12: df:14:de:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjUwNzAxMDQ0MTI1WhcNMjUwNzA4MDQ0MTI1WjAYMRYwFAYD VQQDEw02ODYzNjZmNS05ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydTpnFct+NbwRuoLlbHBlSfCCkjp13ZdqM9i9KhLpL1KLW/Me6871bSvQPqh icltcbf44oQ3dupoZE7E52MKgS4EfAIc+oW8KAUGx0/TTwG3ROVtB8pcOsZDx4Z2 DZ/QsiWCXy8wock3KOhrAO0JXDiv6K8SKbzxSx7w3e3j3SN/4monn2ZjOiLW4ee+ VvG1mUQ/rxiEcuLBObo9PYmhbJuUwXf6Hg+eWL7C4RP0lupSa8qfvFoFEDPlfDQF fFkPLV91oBZ0JRF332liURXljRqCKpfRai9499f+uRtKrGNh8RIzuztMS7BXYwJG Mk27LpvB8jgSZ7uTle0jajsKPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA5rX45 1ntY+i14FEuaOc5bEQcZMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTGhMEvqaTswbwZQBttcdWPGJ1uq4vtdkji40hiVf+oggWsiI9wOyN at9GbnTv+5m7LbtYrJDGUJKIQPjwZquqAdHVnfz1iIUUjB08eJgfb93eAMlzyaKe Yk4pcWiZd3Ri8muGkJw107CM/RYVB8JHGwZcOeb8TChxAf86BSo2Mfe4kpXcTxny ns+4im1sjx+GQLHoiudIZds1qyowH9XjzwnYih1kzMyhYtw4qLEjnZKOQLqeDCKL Ce1J6k89VN3O8E0Kb4rgBEU1w4hXuTHDnyyMsvrsHzLZeQ7t5/NPVkj5vtptJhaQ 0fvZGKDBY2NoMvqnqPVIaWQjjBLfFN5S -----END CERTIFICATE-----Generated at Wed Jul 2 07:27:50 2025 by rpki-client