$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft File: wTya41wnwxAw4CQoc7otWnNdeBE.mft (raw, json) Hash identifier: d4ruZtUzMXmY5NClbbCmDONLbLzahRgf7s8+G/oJncU= Subject key identifier: C4:DA:A9:24:C7:2C:5B:6D:FE:05:08:82:16:62:C9:03:9A:B4:C2:5D Authority key identifier: C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 Certificate issuer: /CN=A9161F73/serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft Manifest number: B8 Signing time: Tue 01 Jul 2025 06:35:25 +0000 Manifest this update: Tue 01 Jul 2025 06:35:24 +0000 Manifest next update: Tue 08 Jul 2025 06:35:24 +0000 Files and hashes: 1: wTya41wnwxAw4CQoc7otWnNdeBE.crl (hash: YfyKYoipRy+tonaP7oWYWZJ+abr8F69E1ueP8u+f5hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=C13C9AE35C27C31030E0242873BA2D5A735D7811 Validity Not Before: Jul 1 06:35:24 2025 GMT Not After : Jul 8 06:35:24 2025 GMT Subject: CN=686381ac-ed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:59:bc:20:0c:e0:a5:9e:57:a1:5e:db:15:50: 15:31:eb:17:a7:ae:6b:fc:87:48:25:cd:8b:93:e3: 8b:26:0d:42:c9:ec:f0:db:d7:b9:71:02:01:c1:91: 42:c5:f0:f1:b2:69:02:dd:29:3e:f3:8f:cc:d9:49: b7:2d:fb:5f:26:85:29:30:27:5d:ea:e1:61:d1:37: 0a:1f:62:5d:01:e2:bc:b4:e1:a3:31:b5:08:cc:1e: 91:dd:41:99:dd:35:7b:70:b8:b5:59:13:a7:1d:6f: 6a:0c:35:f0:91:66:5a:c0:e8:8f:85:52:33:d4:f0: 07:41:90:1a:b1:75:f7:38:b9:24:a7:f0:d6:1f:9a: 5a:82:e6:b2:46:aa:1c:d4:99:59:ea:4f:a8:cf:7c: 42:4a:0c:09:e1:50:3a:af:07:47:fd:f7:4f:13:73: f8:a9:e7:d3:75:95:0c:ab:58:15:f1:0b:43:68:c9: 8f:07:16:ee:9f:cb:74:be:bf:df:3c:54:2c:f8:5a: 1a:9c:82:ee:57:54:ea:7c:71:2c:fa:f5:2d:a8:f9: e0:7c:75:6b:44:f6:f7:f9:31:5c:bf:e1:f0:42:c0: 6b:71:0e:cd:24:fd:cf:24:29:ed:8e:b1:b4:8a:e0: 05:e5:3e:42:77:ce:5c:02:0e:02:26:0c:35:55:68: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DA:A9:24:C7:2C:5B:6D:FE:05:08:82:16:62:C9:03:9A:B4:C2:5D X509v3 Authority Key Identifier: keyid:C1:3C:9A:E3:5C:27:C3:10:30:E0:24:28:73:BA:2D:5A:73:5D:78:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTya41wnwxAw4CQoc7otWnNdeBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/76DF76EE3D0711EFB5C9EC24C4F9AE02/wTya41wnwxAw4CQoc7otWnNdeBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f7:c6:66:61:27:e6:fc:e2:4e:7e:d7:bb:05:b4:36:6d:d7: 94:ff:5b:a1:88:18:d9:93:61:80:39:60:0b:ac:5f:94:97:39: 09:24:93:43:be:23:1d:52:a3:68:d1:1b:1e:68:e8:35:2c:01: 88:f8:e2:0e:2a:c8:df:56:49:43:60:17:19:1f:03:69:52:c5: bc:7a:25:3d:b4:8c:65:28:22:48:bb:58:c2:1a:65:27:74:96: ec:6e:07:f0:a7:1d:8c:d3:63:34:e8:9a:8d:0b:fb:cb:b5:2a: 90:6e:50:31:0c:89:85:94:21:19:10:80:54:7f:5f:2b:28:18: e6:0f:d6:9c:94:ec:e0:0a:82:aa:df:7a:c2:30:c3:41:19:8b: 36:89:79:78:36:ad:8f:37:c1:55:81:e6:db:fe:59:6b:a8:d7: 37:15:cd:e9:3c:ee:dd:89:c5:0d:fa:c7:89:a9:5c:02:7b:a0: fd:6d:9e:9c:13:e3:42:a8:89:d7:34:81:f9:91:95:01:9c:88: 1c:1a:57:e3:e3:45:8f:23:e1:63:8a:d7:0d:54:2f:b6:ab:db: 57:33:1b:98:4d:aa:7a:63:8d:a6:e6:44:f8:1f:c2:bf:13:7d: 65:35:ba:09:97:40:9f:70:1b:09:ea:d8:b1:d0:2d:fa:a4:3c: 34:6a:6a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEMxM0M5QUUzNUMyN0MzMTAzMEUwMjQyODczQkEyRDVB NzM1RDc4MTEwHhcNMjUwNzAxMDYzNTI0WhcNMjUwNzA4MDYzNTI0WjAYMRYwFAYD VQQDEw02ODYzODFhYy1lZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFm8IAzgpZ5XoV7bFVAVMesXp65r/IdIJc2Lk+OLJg1Cyezw29e5cQIBwZFC xfDxsmkC3Sk+84/M2Um3LftfJoUpMCdd6uFh0TcKH2JdAeK8tOGjMbUIzB6R3UGZ 3TV7cLi1WROnHW9qDDXwkWZawOiPhVIz1PAHQZAasXX3OLkkp/DWH5paguayRqoc 1JlZ6k+oz3xCSgwJ4VA6rwdH/fdPE3P4qefTdZUMq1gV8QtDaMmPBxbun8t0vr/f PFQs+FoanILuV1TqfHEs+vUtqPngfHVrRPb3+TFcv+HwQsBrcQ7NJP3PJCntjrG0 iuAF5T5Cd85cAg4CJgw1VWh6IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTaqSTH LFtt/gUIghZiyQOatMJdMB8GA1UdIwQYMBaAFME8muNcJ8MQMOAkKHO6LVpzXXgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My83NkRGNzZFRTNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4QXc0Q1FvYzdvdFduTmRl QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUeWE0MXdud3hBdzRDUW9jN290V25OZGVCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My83NkRGNzZFRTNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi93VHlhNDF3bnd4 QXc0Q1FvYzdvdFduTmRlQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG98ZmYSfm/OJOfte7BbQ2bdeU/1uhiBjZk2GAOWALrF+UlzkJJJND viMdUqNo0RseaOg1LAGI+OIOKsjfVklDYBcZHwNpUsW8eiU9tIxlKCJIu1jCGmUn dJbsbgfwpx2M02M06JqNC/vLtSqQblAxDImFlCEZEIBUf18rKBjmD9aclOzgCoKq 33rCMMNBGYs2iXl4Nq2PN8FVgebb/llrqNc3Fc3pPO7dicUN+seJqVwCe6D9bZ6c E+NCqInXNIH5kZUBnIgcGlfj40WPI+FjitcNVC+2q9tXMxuYTap6Y42m5kT4H8K/ E31lNboJl0CfcBsJ6tix0C36pDw0amqu -----END CERTIFICATE-----Generated at Tue Jul 1 17:07:37 2025 by rpki-client