$ rpki-client -vvf rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft File: WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft (raw, json) Hash identifier: V35ogrrWLJGlGoUoR/AQ0YqGe0GmHVciHEKSJ68aUho= Subject key identifier: ED:12:09:35:FD:12:B2:73:AF:40:E8:E4:41:83:CE:9C:8D:47:8B:56 Authority key identifier: 5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03 Certificate issuer: /CN=A9166638/serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03 Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft Manifest number: 0AF5 Signing time: Sat 28 Jun 2025 19:05:12 +0000 Manifest this update: Sat 28 Jun 2025 19:05:11 +0000 Manifest next update: Sat 05 Jul 2025 19:05:11 +0000 Files and hashes: 1: WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl (hash: +QMtIe/C0sop8Tu0akUyt2ATFzqHxF6NtM1j3aKeFHw=) 2: 8E49B7320E8C11EDAB2A8680C4F9AE02.roa (hash: Ga7YwAWhVqDOExdvtybYiuoMlOw/9ken4EZnlj+WkpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166638, serialNumber=5A6CA86E40FB6C268E8FE651FF32ECE44D857D03 Validity Not Before: Jun 28 19:05:11 2025 GMT Not After : Jul 5 19:05:11 2025 GMT Subject: CN=68603ce7-7973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:df:29:84:a6:77:4b:03:bd:41:58:16:bf: fb:b7:f9:00:3d:0c:5e:c9:61:e0:cf:24:96:9f:c9: f2:cc:a8:07:f1:c0:86:95:a3:df:59:06:2a:74:28: d9:65:c7:f1:92:77:85:ca:70:56:eb:30:40:4e:bb: 3d:33:44:73:75:ad:7c:48:06:7a:0e:6b:da:54:92: 29:50:1a:68:cb:7e:62:a9:1f:3b:aa:5d:7c:a7:93: b9:10:25:d3:ff:0a:15:30:5e:1f:4c:aa:62:c7:08: a1:0e:2b:3e:fb:11:08:50:f2:23:a5:01:b4:48:a0: 62:7c:ef:b7:22:98:1e:c4:d4:5c:80:f8:c8:ac:13: 82:aa:c5:36:7e:90:2b:dd:89:46:a6:04:07:7b:5d: df:05:5d:6a:95:f4:60:45:b9:46:b0:15:41:39:5a: c6:34:21:3a:2d:70:54:73:8b:e8:ea:8d:9d:1e:f0: 92:2f:d1:1c:1e:c7:5e:6b:1e:7a:16:f0:20:7e:e4: f9:b8:25:54:78:ce:24:4e:13:67:c4:2f:b4:1c:47: 9c:7a:15:b8:ef:08:46:82:ec:a1:d1:6e:24:a7:5a: 43:a9:7f:e8:16:1f:20:b2:ee:55:18:f0:0c:99:5a: 64:1e:b4:53:68:c9:09:1f:c6:2d:ba:5f:32:39:b1: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:12:09:35:FD:12:B2:73:AF:40:E8:E4:41:83:CE:9C:8D:47:8B:56 X509v3 Authority Key Identifier: keyid:5A:6C:A8:6E:40:FB:6C:26:8E:8F:E6:51:FF:32:EC:E4:4D:85:7D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmyobkD7bCaOj-ZR_zLs5E2FfQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166638/41EFC51E48CA11EAA214AF4CC4F9AE02/WmyobkD7bCaOj-ZR_zLs5E2FfQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e3:42:5d:45:6c:c4:40:ad:ab:a3:97:2e:fe:ac:c4:f2:b3: 5d:00:86:b6:6c:e9:56:5f:19:38:87:4b:19:e0:b2:2c:65:03: 2d:68:86:4c:6e:32:4a:ab:b5:be:53:21:91:b0:16:e0:7f:22: 99:6c:9f:49:74:e5:1f:d6:b2:eb:68:3e:94:9e:ed:32:a2:18: dc:b7:17:85:87:4e:03:99:56:f2:cd:20:3d:61:50:f0:fb:31: 55:65:48:1f:fc:fa:cf:42:fc:00:d9:08:33:44:fe:4b:96:70: a9:80:76:15:2f:2b:90:5b:fd:09:39:ac:8f:07:86:59:3e:d5: b2:29:93:fa:17:82:c8:7b:1e:11:f4:2f:e7:f5:95:23:c8:48: c3:bb:36:b4:82:07:04:1c:08:37:f5:d3:b6:a2:08:87:b6:9c: 96:c5:1f:8b:d1:a6:ed:81:7c:a7:96:c3:0c:80:9f:96:af:a5: 71:0a:27:ad:0b:3a:0c:8d:62:9a:10:cc:90:2b:82:d9:3c:b4: 39:e5:7e:b4:83:e9:bc:fa:f1:23:01:e9:53:17:93:bc:a7:ff: f5:97:6c:15:8d:2a:9f:cc:cb:21:58:8b:7e:7c:e2:62:56:ae: 9c:f7:c7:6e:27:72:d0:34:03:0a:9e:a6:50:14:c0:0a:cf:d7: 45:b2:1e:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY2MzgxMTAvBgNVBAUTKDVBNkNBODZFNDBGQjZDMjY4RThGRTY1MUZGMzJFQ0U0 NEQ4NTdEMDMwHhcNMjUwNjI4MTkwNTExWhcNMjUwNzA1MTkwNTExWjAYMRYwFAYD VQQDEw02ODYwM2NlNy03OTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaDfKYSmd0sDvUFYFr/7t/kAPQxeyWHgzySWn8nyzKgH8cCGlaPfWQYqdCjZ ZcfxkneFynBW6zBATrs9M0Rzda18SAZ6DmvaVJIpUBpoy35iqR87ql18p5O5ECXT /woVMF4fTKpixwihDis++xEIUPIjpQG0SKBifO+3IpgexNRcgPjIrBOCqsU2fpAr 3YlGpgQHe13fBV1qlfRgRblGsBVBOVrGNCE6LXBUc4vo6o2dHvCSL9EcHsdeax56 FvAgfuT5uCVUeM4kThNnxC+0HEecehW47whGguyh0W4kp1pDqX/oFh8gsu5VGPAM mVpkHrRTaMkJH8Ytul8yObEppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0SCTX9 ErJzr0Do5EGDzpyNR4tWMB8GA1UdIwQYMBaAFFpsqG5A+2wmjo/mUf8y7ORNhX0D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjYzOC80MUVGQzUxRTQ4 Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JDYU9qLVpSX3pMczVFMkZm UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dteW9ia0Q3YkNhT2otWlJfekxzNUUyRmZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjYzOC80MUVGQzUxRTQ4Q0ExMUVBQTIxNEFGNENDNEY5QUUwMi9XbXlvYmtEN2JD YU9qLVpSX3pMczVFMkZmUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh40JdRWzEQK2ro5cu/qzE8rNdAIa2bOlWXxk4h0sZ4LIsZQMtaIZM bjJKq7W+UyGRsBbgfyKZbJ9JdOUf1rLraD6Unu0yohjctxeFh04DmVbyzSA9YVDw +zFVZUgf/PrPQvwA2QgzRP5LlnCpgHYVLyuQW/0JOayPB4ZZPtWyKZP6F4LIex4R 9C/n9ZUjyEjDuza0ggcEHAg39dO2ogiHtpyWxR+L0abtgXynlsMMgJ+Wr6VxCiet CzoMjWKaEMyQK4LZPLQ55X60g+m8+vEjAelTF5O8p//1l2wVjSqfzMshWIt+fOJi Vq6c98duJ3LQNAMKnqZQFMAKz9dFsh7I -----END CERTIFICATE-----Generated at Sun Jun 29 10:37:50 2025 by rpki-client