$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: jbUyvjAiMX/if32JzUAaxIRwdTYfAwMd0p0AduzGDQE= Subject key identifier: F2:B1:D8:AF:A6:D7:16:B8:03:28:89:40:78:8B:3C:11:19:2B:C7:AD Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 04CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 04C8 Signing time: Thu 03 Jul 2025 00:10:12 +0000 Manifest this update: Thu 03 Jul 2025 00:10:12 +0000 Manifest next update: Thu 10 Jul 2025 00:10:12 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: dV30URB/bFqRJHkEfc1PfO4GtJt5bR5P8RmDgtsYt+s=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: W1EZe814Szf15WwX2ObaPNFong/hjvqkU7/N1EMoShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1229 (0x4cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Jul 3 00:10:12 2025 GMT Not After : Jul 10 00:10:12 2025 GMT Subject: CN=6865ca64-fdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a9:e1:a9:b2:a1:31:16:23:d6:e5:88:99:80: 5a:b5:c1:b4:e0:6f:e4:10:c5:9f:d8:dd:81:0f:96: b8:ad:21:62:bd:b6:22:e2:da:14:d3:18:6f:bf:8e: 9d:b5:0d:05:94:15:a1:fd:78:19:51:04:d4:6c:8c: 92:2a:c6:cf:02:70:b9:f6:60:dc:28:9c:19:f2:91: 13:ac:e1:f4:1d:49:cf:8a:85:ce:c6:36:c0:80:c0: 69:08:f2:d7:c2:92:29:eb:64:c8:c6:79:00:c4:31: 94:1e:59:50:46:e6:75:bd:5e:70:6f:9a:ee:00:46: 33:dd:6b:d1:a6:8f:a1:4d:43:be:ca:a0:24:fa:c0: d3:51:85:ae:7d:00:0d:93:62:92:c0:eb:aa:b9:5a: aa:55:99:46:81:e0:bb:f7:ce:3b:ad:89:4b:c3:81: b3:86:4a:f9:c8:0b:34:02:5e:6d:73:ab:96:be:36: d2:3d:01:3e:2b:e5:6a:ca:45:ea:5c:16:71:9f:3b: 04:66:b2:72:61:f5:0a:e4:2c:bf:b6:fb:3a:c8:7d: ea:50:24:cf:0f:0b:7b:f4:02:55:76:cb:a1:c0:2b: 62:de:fd:1a:ca:06:88:69:35:f6:87:09:ee:22:4e: a3:78:13:d7:05:b1:81:ab:3f:80:b1:bb:9c:b3:61: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B1:D8:AF:A6:D7:16:B8:03:28:89:40:78:8B:3C:11:19:2B:C7:AD X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ed:8e:52:fb:22:2a:44:54:64:a8:f2:fe:18:5c:c8:6c:89: fd:0d:27:3f:9d:6d:bb:67:c4:04:c8:35:bd:0e:1f:84:63:b5: 73:82:fc:0a:cb:12:e3:38:1c:90:a6:e5:9f:9d:36:72:98:15: 57:71:11:9a:1a:4e:c6:45:e9:e0:f0:17:a7:83:84:55:46:30: 10:49:83:39:26:fe:36:d1:8b:be:e1:06:bd:25:d5:cf:d2:b7: 57:1b:88:88:9f:b1:dd:96:c7:14:b7:f2:ee:12:2b:7d:c4:73: ef:93:86:60:3a:9f:7c:e8:78:bd:2f:54:02:1a:04:78:a5:7f: 40:4e:9a:6d:90:4a:3d:8c:a7:9b:40:dc:3c:64:52:d0:ba:4d: b1:8b:21:5e:0e:d2:ff:bf:e5:13:76:9c:30:6c:38:9a:d5:c6: c2:29:91:1d:00:d9:7f:2a:6e:d5:dd:c1:8a:87:1f:39:2c:c4: f9:94:2b:98:06:39:8e:b0:f3:97:7b:31:28:79:c6:b3:93:55: 70:2c:5b:3b:4f:0c:45:a1:97:80:6e:7a:9e:d3:ac:35:c7:68: bd:d3:d0:3a:c3:c1:20:03:54:67:9b:10:ce:6b:a2:77:28:80: 55:ae:b9:a9:a0:52:f1:a4:1b:32:56:cd:d8:68:98:77:94:5e: 4e:5f:db:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjUwNzAzMDAxMDEyWhcNMjUwNzEwMDAxMDEyWjAYMRYwFAYD VQQDEw02ODY1Y2E2NC1mZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvanhqbKhMRYj1uWImYBatcG04G/kEMWf2N2BD5a4rSFivbYi4toU0xhvv46d tQ0FlBWh/XgZUQTUbIySKsbPAnC59mDcKJwZ8pETrOH0HUnPioXOxjbAgMBpCPLX wpIp62TIxnkAxDGUHllQRuZ1vV5wb5ruAEYz3WvRpo+hTUO+yqAk+sDTUYWufQAN k2KSwOuquVqqVZlGgeC79847rYlLw4Gzhkr5yAs0Al5tc6uWvjbSPQE+K+VqykXq XBZxnzsEZrJyYfUK5Cy/tvs6yH3qUCTPDwt79AJVdsuhwCti3v0aygaIaTX2hwnu Ik6jeBPXBbGBqz+Asbucs2GyEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKx2K+m 1xa4AyiJQHiLPBEZK8etMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB37Y5S+yIqRFRkqPL+GFzIbIn9DSc/nW27Z8QEyDW9Dh+EY7VzgvwK yxLjOByQpuWfnTZymBVXcRGaGk7GReng8Beng4RVRjAQSYM5Jv420Yu+4Qa9JdXP 0rdXG4iIn7HdlscUt/LuEit9xHPvk4ZgOp986Hi9L1QCGgR4pX9ATpptkEo9jKeb QNw8ZFLQuk2xiyFeDtL/v+UTdpwwbDia1cbCKZEdANl/Km7V3cGKhx85LMT5lCuY BjmOsPOXezEoecazk1VwLFs7TwxFoZeAbnqe06w1x2i909A6w8EgA1RnmxDOa6J3 KIBVrrmpoFLxpBsyVs3YaJh3lF5OX9tM -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:06 2025 by rpki-client