$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft File: wrgcmpNbsrM71p-3mzTuMmc5nbY.mft (raw, json) Hash identifier: Sv/zvFT9RsuJNJF56ON5oqiwlR2qUeElM9mV7NGtkt8= Subject key identifier: F8:C0:D2:86:A8:E4:99:E6:B6:67:F0:5B:65:2B:A1:7A:16:B2:C4:E4 Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6 Certificate issuer: /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft Manifest number: 01B8 Signing time: Thu 03 Jul 2025 03:09:56 +0000 Manifest this update: Thu 03 Jul 2025 03:09:55 +0000 Manifest next update: Thu 10 Jul 2025 03:09:55 +0000 Files and hashes: 1: wrgcmpNbsrM71p-3mzTuMmc5nbY.crl (hash: q2URmYFlB6abyhRuxuJHEnZLft8fvS8VPkVJ0GUL35k=) 2: EAD89080BA8B11EDB9005884C4F9AE02.roa (hash: cK40QtT2CNNImNuy8pJFpePuMkD3LPBAr2rQnfOdgKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180882, serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6 Validity Not Before: Jul 3 03:09:55 2025 GMT Not After : Jul 10 03:09:55 2025 GMT Subject: CN=6865f484-61fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f3:96:39:db:74:2d:aa:62:3b:6c:27:6f:1f: 8d:2f:0c:aa:3a:4e:9d:e7:c2:f8:c1:0c:69:64:e2: 17:19:74:3f:84:69:4d:80:c4:c3:5d:45:60:0c:53: 91:15:ea:af:61:6d:e5:86:5a:93:92:85:10:be:02: 5f:fa:c8:12:d2:e3:08:58:6c:17:6f:18:b8:13:b4: 28:d6:3b:b4:34:6c:ff:6d:09:03:b8:8e:e0:80:8e: 1d:68:74:5f:2a:73:0b:63:68:79:fa:2d:e4:1b:d6: 77:da:c9:3d:6b:b2:cf:84:cb:64:b4:17:77:a3:7d: 09:60:d6:fb:da:76:ad:f8:42:77:3b:db:b4:a6:c9: 77:d1:1e:29:23:72:7d:fe:a6:f1:53:98:92:ab:02: 56:65:cf:40:6c:e6:b0:c6:a7:e2:48:d8:11:7f:60: 54:ec:5c:8c:4d:6c:18:ba:12:0b:5d:53:95:92:da: a2:24:91:68:91:f7:4b:91:cb:99:bd:d1:7b:a4:db: 6d:76:2f:ff:0d:54:f9:a8:d1:9e:bc:59:75:2a:44: c6:df:68:b0:da:69:7c:1c:68:7f:21:48:37:20:7a: b9:e3:41:ac:1c:b3:b3:cd:2d:87:47:2a:2c:de:61: 71:ab:92:42:3d:d4:c6:7c:30:91:ee:29:8a:9f:fa: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C0:D2:86:A8:E4:99:E6:B6:67:F0:5B:65:2B:A1:7A:16:B2:C4:E4 X509v3 Authority Key Identifier: keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8a:9f:c3:51:64:bb:aa:ea:d0:eb:18:db:1f:b8:84:d7:67: 23:75:c0:4f:8b:de:62:36:09:6d:31:48:94:ef:10:30:9c:a1: c8:97:67:14:4f:68:da:9a:37:2d:1a:bb:b1:03:43:48:b9:47: 80:2d:6e:87:f0:74:bd:9a:29:96:87:16:9e:67:9b:9e:d4:f9: 83:d1:be:0c:2f:a8:86:9e:e3:f3:28:2c:54:f6:2d:3d:48:e7: fa:bd:af:ae:8d:0d:96:cd:70:1f:55:3d:aa:ac:83:17:20:92: a9:27:a9:ec:d7:f8:07:83:96:d9:25:85:d7:1a:62:c0:b8:8b: 0b:e7:d7:24:6d:e6:d2:6a:b7:40:4a:a6:c4:7c:c8:04:37:54: 00:1d:f6:20:91:86:4e:b8:c0:9b:79:ed:df:ea:82:31:9c:88: 73:5d:42:15:89:69:bc:4b:8b:74:f4:c2:bf:ed:0d:9a:2d:8d: 7d:6a:21:14:23:8b:cd:ba:0e:ee:c7:8c:ea:fd:4b:71:02:d3: 29:92:ff:23:e1:df:ae:78:4b:91:06:45:b7:44:43:83:52:f3: d9:86:8f:34:a1:89:41:5f:e9:b4:a5:a8:bd:8f:7a:ee:ba:f7: 50:06:8d:69:e0:f7:86:0b:fc:a1:c5:c7:66:70:42:c0:60:05: f3:94:90:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA4ODIxMTAvBgNVBAUTKEMyQjgxQzlBOTM1QkIyQjMzQkQ2OUZCNzlCMzRFRTMy NjczOTlEQjYwHhcNMjUwNzAzMDMwOTU1WhcNMjUwNzEwMDMwOTU1WjAYMRYwFAYD VQQDEw02ODY1ZjQ4NC02MWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/OWOdt0LapiO2wnbx+NLwyqOk6d58L4wQxpZOIXGXQ/hGlNgMTDXUVgDFOR FeqvYW3lhlqTkoUQvgJf+sgS0uMIWGwXbxi4E7Qo1ju0NGz/bQkDuI7ggI4daHRf KnMLY2h5+i3kG9Z32sk9a7LPhMtktBd3o30JYNb72nat+EJ3O9u0psl30R4pI3J9 /qbxU5iSqwJWZc9AbOawxqfiSNgRf2BU7FyMTWwYuhILXVOVktqiJJFokfdLkcuZ vdF7pNttdi//DVT5qNGevFl1KkTG32iw2ml8HGh/IUg3IHq540GsHLOzzS2HRyos 3mFxq5JCPdTGfDCR7imKn/ouwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjA0oao 5JnmtmfwW2UroXoWssTkMB8GA1UdIwQYMBaAFMK4HJqTW7KzO9aft5s07jJnOZ22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDg4Mi9ERjNBQjQ2Q0I3 MkQxMUVEODVERDMwMTdDNEY5QUUwMi93cmdjbXBOYnNyTTcxcC0zbXpUdU1tYzVu YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyZ2NtcE5ic3JNNzFwLTNtelR1TW1jNW5iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDg4Mi9ERjNBQjQ2Q0I3MkQxMUVEODVERDMwMTdDNEY5QUUwMi93cmdjbXBOYnNy TTcxcC0zbXpUdU1tYzVuYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGip/DUWS7qurQ6xjbH7iE12cjdcBPi95iNgltMUiU7xAwnKHIl2cU T2jamjctGruxA0NIuUeALW6H8HS9mimWhxaeZ5ue1PmD0b4ML6iGnuPzKCxU9i09 SOf6va+ujQ2WzXAfVT2qrIMXIJKpJ6ns1/gHg5bZJYXXGmLAuIsL59ckbebSardA SqbEfMgEN1QAHfYgkYZOuMCbee3f6oIxnIhzXUIViWm8S4t09MK/7Q2aLY19aiEU I4vNug7ux4zq/UtxAtMpkv8j4d+ueEuRBkW3REODUvPZho80oYlBX+m0pai9j3ru uvdQBo1p4PeGC/yhxcdmcELAYAXzlJA+ -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:28 2025 by rpki-client