$ rpki-client -vvf rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft File: wVU6bzeV4xXosEZIGTV6VZhShds.mft (raw, json) Hash identifier: U7Ejlz2rfsiGKb67jkpb6KQ0ijibUuTrKvGbD7q+nfM= Subject key identifier: 89:20:88:39:00:7F:72:A5:0C:55:B3:BF:0A:34:FB:1C:73:2C:56:B0 Authority key identifier: C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB Certificate issuer: /CN=A9164C0B/serialNumber=C1553A6F3795E315E8B0464819357A55985285DB Certificate serial: 3496 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft Manifest number: 3496 Signing time: Wed 02 Jul 2025 14:38:22 +0000 Manifest this update: Wed 02 Jul 2025 14:38:22 +0000 Manifest next update: Wed 09 Jul 2025 14:38:22 +0000 Files and hashes: 1: wVU6bzeV4xXosEZIGTV6VZhShds.crl (hash: fcg9biSUHtOplmWNXiRWo06Epqojr9dmSYhvfWQfuwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13462 (0x3496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164C0B, serialNumber=C1553A6F3795E315E8B0464819357A55985285DB Validity Not Before: Jul 2 14:38:22 2025 GMT Not After : Jul 9 14:38:22 2025 GMT Subject: CN=6865445e-5492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:e5:05:20:4c:94:76:6b:fe:ee:42:81:bd: 12:75:b2:0c:f5:d2:79:4b:ae:d2:67:37:76:ba:aa: 0f:97:d9:7e:93:b3:a7:6d:ee:7a:d0:4d:dd:75:18: 10:2e:6c:4b:53:77:8c:09:6d:15:6e:51:8c:70:31: ed:ff:8e:93:c2:40:98:c6:50:a6:4b:5a:13:b5:e3: f4:63:ce:f8:be:a9:60:3f:fd:ac:34:8e:35:b0:b9: cb:c6:38:11:2e:b4:bd:57:d2:87:6b:61:e6:7a:e2: a1:93:e4:ad:c4:c1:2f:31:84:21:d4:3f:8a:f9:b8: 83:ad:08:d1:ca:2e:f2:0d:36:85:f0:4f:4a:63:16: a9:3a:58:7d:3f:11:22:0f:ad:25:cc:9c:f4:36:e3: e2:f0:3e:ca:04:e1:ae:2f:6b:68:59:1d:8f:76:9b: 12:f8:0c:2b:b5:2b:ca:40:c6:b3:c4:98:2c:ac:c9: c5:ab:44:ac:bc:71:a9:71:c8:3b:52:03:aa:04:57: 60:a5:5e:f9:22:68:f7:04:d0:9a:05:56:7f:2f:fa: bc:4b:64:9d:61:4c:b0:15:60:76:ff:64:55:19:1d: 9a:6d:7b:9d:71:af:5f:62:e6:75:7b:dc:52:00:ba: b7:99:18:a3:9b:37:f5:68:6e:9d:78:c5:03:41:ba: 60:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:20:88:39:00:7F:72:A5:0C:55:B3:BF:0A:34:FB:1C:73:2C:56:B0 X509v3 Authority Key Identifier: keyid:C1:55:3A:6F:37:95:E3:15:E8:B0:46:48:19:35:7A:55:98:52:85:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wVU6bzeV4xXosEZIGTV6VZhShds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164C0B/82D837C61D8C11E2A1A4CBE708B02CD2/wVU6bzeV4xXosEZIGTV6VZhShds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9e:34:ef:12:3f:b0:a4:61:28:d2:f4:bb:f9:9f:17:67:6a: 7a:c7:37:bb:91:b1:23:3a:03:82:b8:a5:34:20:38:9f:34:98: a7:3b:0a:0d:a4:36:15:67:b1:1c:f5:99:85:2e:5b:1a:5a:90: a2:19:44:d7:07:d1:f7:24:37:54:eb:23:45:60:09:d0:28:6e: d8:9c:ad:57:ea:66:ea:c2:82:95:b4:4b:dd:7c:4f:cf:31:80: 1d:b8:61:e3:32:bb:d5:0b:ef:66:dd:33:5a:58:25:f8:99:3d: 00:11:23:80:7a:a1:ec:51:54:63:5b:8f:96:9c:e8:94:c7:02: a7:5c:ea:c5:44:ce:ce:cd:d9:df:c8:bb:3e:44:d3:b4:68:0a: 03:0b:a1:78:e4:b3:0f:78:9d:b7:ce:79:ce:33:43:20:5d:03: f7:f1:3b:45:42:f3:b1:cb:a3:b8:5d:2f:cd:1f:6f:13:b3:79: c7:bd:4e:9f:f3:01:1f:f7:a6:a7:7d:3d:eb:0f:20:26:a7:b3: b1:7d:1e:43:0f:63:c1:2d:da:01:a8:de:76:37:11:20:d5:85: b8:9e:18:4f:f5:81:d7:45:7b:f2:f6:d5:3d:d7:d9:32:77:86: 48:c1:a5:bb:e3:3d:40:97:71:cf:8e:9f:87:2c:20:6e:31:7d: 19:8d:ca:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRDMEIxMTAvBgNVBAUTKEMxNTUzQTZGMzc5NUUzMTVFOEIwNDY0ODE5MzU3QTU1 OTg1Mjg1REIwHhcNMjUwNzAyMTQzODIyWhcNMjUwNzA5MTQzODIyWjAYMRYwFAYD VQQDEw02ODY1NDQ1ZS01NDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZzlBSBMlHZr/u5Cgb0SdbIM9dJ5S67SZzd2uqoPl9l+k7Onbe560E3ddRgQ LmxLU3eMCW0VblGMcDHt/46TwkCYxlCmS1oTteP0Y874vqlgP/2sNI41sLnLxjgR LrS9V9KHa2HmeuKhk+StxMEvMYQh1D+K+biDrQjRyi7yDTaF8E9KYxapOlh9PxEi D60lzJz0NuPi8D7KBOGuL2toWR2PdpsS+AwrtSvKQMazxJgsrMnFq0SsvHGpccg7 UgOqBFdgpV75Imj3BNCaBVZ/L/q8S2SdYUywFWB2/2RVGR2abXudca9fYuZ1e9xS ALq3mRijmzf1aG6deMUDQbpgNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkgiDkA f3KlDFWzvwo0+xxzLFawMB8GA1UdIwQYMBaAFMFVOm83leMV6LBGSBk1elWYUoXb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEMwQi84MkQ4MzdDNjFE OEMxMUUyQTFBNENCRTcwOEIwMkNEMi93VlU2YnplVjR4WG9zRVpJR1RWNlZaaFNo ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dWVTZiemVWNHhYb3NFWklHVFY2VlpoU2hkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEMwQi84MkQ4MzdDNjFEOEMxMUUyQTFBNENCRTcwOEIwMkNEMi93VlU2YnplVjR4 WG9zRVpJR1RWNlZaaFNoZHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAunjTvEj+wpGEo0vS7+Z8XZ2p6xze7kbEjOgOCuKU0IDifNJinOwoN pDYVZ7Ec9ZmFLlsaWpCiGUTXB9H3JDdU6yNFYAnQKG7YnK1X6mbqwoKVtEvdfE/P MYAduGHjMrvVC+9m3TNaWCX4mT0AESOAeqHsUVRjW4+WnOiUxwKnXOrFRM7Ozdnf yLs+RNO0aAoDC6F45LMPeJ23znnOM0MgXQP38TtFQvOxy6O4XS/NH28Ts3nHvU6f 8wEf96anfT3rDyAmp7OxfR5DD2PBLdoBqN52NxEg1YW4nhhP9YHXRXvy9tU919ky d4ZIwaW74z1Al3HPjp+HLCBuMX0Zjcp3 -----END CERTIFICATE-----Generated at Wed Jul 2 19:36:40 2025 by rpki-client