$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: z0bBSzrNTpStnk88y/lCvgnQ/NxgYKZvuoClwAin8BA= Subject key identifier: 0F:41:45:AB:0D:8C:7B:75:0D:EE:9E:11:75:F5:7C:AB:80:FE:39:C3 Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: E9 Signing time: Thu 03 Jul 2025 05:32:26 +0000 Manifest this update: Thu 03 Jul 2025 05:32:26 +0000 Manifest next update: Thu 10 Jul 2025 05:32:26 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: iN4PX+Mh7P+e1GLkgPW+xwaLmJ/rDXjEdGMjOEhmoDE=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Jul 3 05:32:26 2025 GMT Not After : Jul 10 05:32:26 2025 GMT Subject: CN=686615ea-fd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:3a:27:ff:10:24:bf:1c:8c:57:45:d3:2a: d4:8c:fb:dd:b9:3d:d2:ba:0d:af:97:e1:a7:ad:0e: 28:bf:59:a8:ec:e1:fa:60:a4:b5:af:b2:a7:64:c9: 0b:ca:5a:95:f4:fd:25:8a:fd:bb:46:d4:c3:ba:7a: 7d:40:42:70:20:1b:81:87:96:ee:46:ab:1f:27:62: eb:ac:2c:8d:ca:b8:2d:73:4b:3b:ad:0d:a0:b1:b1: 03:51:df:85:c8:ff:ca:89:ac:cb:0d:99:4c:ed:5e: 1d:92:cc:58:52:f5:cf:ff:ee:06:9b:14:cb:b9:53: c2:ad:00:fa:a1:78:29:62:cc:dc:09:2f:9b:1e:1c: df:15:45:73:0f:3a:6f:50:ef:65:6c:01:ad:60:6f: 14:f8:46:0d:75:95:6b:c8:49:95:1f:d5:2b:37:4f: 2a:66:e4:46:f2:c2:5d:af:7c:68:24:4c:55:5a:de: 6f:c7:64:c7:dc:cb:b3:a9:fd:e9:28:d1:40:be:15: b1:1c:38:dc:56:3a:26:ed:4c:92:48:2d:d3:87:9c: 05:71:fa:4b:f8:65:e9:fc:a7:68:c3:b7:cd:7f:a6: 1e:10:53:f2:4c:13:3a:84:6f:ce:8e:24:ee:f6:0d: 3e:b7:29:05:9a:22:a5:43:66:87:de:de:1c:aa:ee: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:45:AB:0D:8C:7B:75:0D:EE:9E:11:75:F5:7C:AB:80:FE:39:C3 X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:08:f7:59:ce:6f:50:8c:0b:64:cd:ad:ed:10:ab:17:b1:d6: 6f:e6:cf:01:e4:c6:ed:75:c7:63:67:bf:34:46:ef:88:ad:ce: 6b:f2:10:fd:36:b4:ee:7b:f4:d3:5f:34:8d:16:52:6d:02:be: 77:f4:e7:1c:f7:ff:b4:0e:a2:34:08:ae:01:70:07:47:49:5b: 3b:82:9c:a2:e6:a9:45:ed:ed:bd:f7:9d:7b:63:78:aa:39:e9: cf:a5:84:00:8f:27:f0:e8:07:a7:2f:70:72:3a:46:05:23:05: f4:18:07:6b:76:b2:a2:6d:3a:c6:08:c8:93:1c:6b:2d:d8:b1: 7e:83:3b:7d:87:b4:ff:6e:9d:0d:a3:00:6b:27:74:d0:03:8c: b2:25:cd:83:40:68:36:43:51:d9:60:20:b7:95:3b:75:2c:74: c2:b3:6a:2f:40:08:38:5d:56:a2:e6:8a:93:33:bc:12:35:65: 00:5b:53:9b:3b:dd:a2:b7:0c:30:0a:92:9b:86:ef:87:fc:cb: c0:24:27:06:27:7d:b6:52:fc:ec:b1:b7:66:94:2e:b2:92:ca: 44:7e:a2:e6:a1:09:f3:70:97:ff:33:8f:f7:11:52:d9:eb:9e: de:2b:3e:79:a8:f5:b3:8f:81:ba:58:4e:81:05:69:f5:1b:7f: 16:1d:8a:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUwNzAzMDUzMjI2WhcNMjUwNzEwMDUzMjI2WjAYMRYwFAYD VQQDEw02ODY2MTVlYS1mZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy006J/8QJL8cjFdF0yrUjPvduT3Sug2vl+GnrQ4ov1mo7OH6YKS1r7KnZMkL ylqV9P0liv27RtTDunp9QEJwIBuBh5buRqsfJ2LrrCyNyrgtc0s7rQ2gsbEDUd+F yP/KiazLDZlM7V4dksxYUvXP/+4GmxTLuVPCrQD6oXgpYszcCS+bHhzfFUVzDzpv UO9lbAGtYG8U+EYNdZVryEmVH9UrN08qZuRG8sJdr3xoJExVWt5vx2TH3Muzqf3p KNFAvhWxHDjcVjom7UySSC3Th5wFcfpL+GXp/Kdow7fNf6YeEFPyTBM6hG/OjiTu 9g0+tykFmiKlQ2aH3t4cqu5cxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9BRasN jHt1De6eEXX1fKuA/jnDMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuCPdZzm9QjAtkza3tEKsXsdZv5s8B5MbtdcdjZ780Ru+Irc5r8hD9 NrTue/TTXzSNFlJtAr539Occ9/+0DqI0CK4BcAdHSVs7gpyi5qlF7e299517Y3iq OenPpYQAjyfw6AenL3ByOkYFIwX0GAdrdrKibTrGCMiTHGst2LF+gzt9h7T/bp0N owBrJ3TQA4yyJc2DQGg2Q1HZYCC3lTt1LHTCs2ovQAg4XVai5oqTM7wSNWUAW1Ob O92itwwwCpKbhu+H/MvAJCcGJ322UvzssbdmlC6ykspEfqLmoQnzcJf/M4/3EVLZ 657eKz55qPWzj4G6WE6BBWn1G38WHYq3 -----END CERTIFICATE-----Generated at Thu Jul 3 23:46:00 2025 by rpki-client