$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: CfN5FCsa5rGGGclnKKLkxyDSwM5vgJIfvGlhzpakkFc= Subject key identifier: 6D:A3:F6:43:80:DC:1C:77:C3:E1:9C:13:19:7F:3B:F8:27:8C:A1:FC Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 0183 Signing time: Tue 01 Jul 2025 04:03:34 +0000 Manifest this update: Tue 01 Jul 2025 04:03:34 +0000 Manifest next update: Tue 08 Jul 2025 04:03:34 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: CicryhsN3yEqYzREID+a7NDNi7hcQxo6iJRoA9/fbwE=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: Jul 1 04:03:34 2025 GMT Not After : Jul 8 04:03:34 2025 GMT Subject: CN=68635e16-87bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:46:34:b4:be:b4:3d:0b:f4:d2:38:24:3d: 83:ba:96:d1:12:1f:e1:a4:80:42:fb:2c:3d:57:8f: 98:f1:14:88:6b:45:f2:c8:96:6c:81:44:6c:a7:b9: 16:90:17:2c:a9:ac:57:b0:4a:fd:f1:10:78:77:a3: 30:76:54:07:da:20:53:27:e1:ea:3b:08:e5:56:04: a5:40:f4:35:5e:6b:a9:88:9b:c5:a9:4a:2f:51:11: 57:92:00:0e:68:42:45:f3:16:09:b5:bd:66:4f:3c: 5b:43:38:d4:e5:79:ce:a8:1f:e6:c1:ed:07:fd:23: d4:9a:90:f6:f8:0f:ad:31:85:ed:5a:d9:82:1b:64: 50:be:da:5c:b1:cc:64:47:61:2e:d9:51:f9:48:4a: 1f:2e:b2:0b:49:28:e1:08:61:21:24:26:24:82:c5: e6:87:e3:4e:a8:54:73:0b:0c:2f:66:91:a3:73:9a: bc:47:19:7a:a4:dd:94:d8:36:15:63:9d:e1:8e:8f: 76:78:83:6e:a5:ad:de:38:34:22:97:95:29:12:1f: 9c:67:7e:c4:02:f5:45:30:ba:2a:eb:1e:7d:fa:eb: 84:e4:bb:5a:9b:00:8a:ce:bf:44:bf:c8:7c:6e:6d: f7:5e:5d:31:d5:13:83:6a:a9:99:01:90:31:39:48: c3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A3:F6:43:80:DC:1C:77:C3:E1:9C:13:19:7F:3B:F8:27:8C:A1:FC X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4f:36:c5:f5:bb:5d:a1:d9:08:a6:79:d0:28:2f:81:92:31: 5d:85:89:78:d5:67:a2:10:fb:76:76:92:d9:64:06:af:f0:13: 47:0f:58:d6:45:53:df:bf:5d:5c:58:a3:9c:60:e1:37:77:7d: ca:e0:dc:2e:d0:2d:f6:14:c2:58:76:ac:87:bc:8c:fa:8e:8e: 3f:80:59:3a:e1:49:db:5c:8c:5b:d5:e2:dd:8b:d6:72:26:14: 0b:39:bd:d0:9a:f9:4f:5c:7f:e1:86:3d:aa:cf:08:8d:e7:80: 81:f3:f4:30:1c:fa:b5:59:52:88:d5:24:dc:ba:4b:d1:8d:7c: ef:b6:39:92:05:56:37:f5:b5:36:c0:60:be:e8:aa:58:61:f7: f2:b6:d5:db:bc:e1:3b:bb:4e:cb:7a:45:2d:e4:2d:b8:ae:74: 44:0f:50:c4:2e:d2:e6:4a:b9:7e:ca:8b:bf:03:38:64:f8:72: 4b:36:fb:0e:40:68:76:a2:f6:d0:7a:3c:fe:12:29:5b:dc:f4: 79:0d:e7:bb:65:33:34:6c:cb:2c:bc:e2:7a:1b:8d:d8:75:bb: 0b:7b:ff:63:2a:41:d7:75:63:9e:5d:1a:d8:8a:c4:46:50:ee: e7:70:81:d8:7d:80:85:2f:c2:df:50:9e:62:3c:19:6a:1e:6d: b7:6b:cd:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUwNzAxMDQwMzM0WhcNMjUwNzA4MDQwMzM0WjAYMRYwFAYD VQQDEw02ODYzNWUxNi04N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg9GNLS+tD0L9NI4JD2DupbREh/hpIBC+yw9V4+Y8RSIa0XyyJZsgURsp7kW kBcsqaxXsEr98RB4d6MwdlQH2iBTJ+HqOwjlVgSlQPQ1XmupiJvFqUovURFXkgAO aEJF8xYJtb1mTzxbQzjU5XnOqB/mwe0H/SPUmpD2+A+tMYXtWtmCG2RQvtpcscxk R2Eu2VH5SEofLrILSSjhCGEhJCYkgsXmh+NOqFRzCwwvZpGjc5q8Rxl6pN2U2DYV Y53hjo92eINupa3eODQil5UpEh+cZ37EAvVFMLoq6x59+uuE5LtamwCKzr9Ev8h8 bm33Xl0x1RODaqmZAZAxOUjDVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2j9kOA 3Bx3w+GcExl/O/gnjKH8MB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXTzbF9btdodkIpnnQKC+BkjFdhYl41WeiEPt2dpLZZAav8BNHD1jW RVPfv11cWKOcYOE3d33K4Nwu0C32FMJYdqyHvIz6jo4/gFk64UnbXIxb1eLdi9Zy JhQLOb3QmvlPXH/hhj2qzwiN54CB8/QwHPq1WVKI1STcukvRjXzvtjmSBVY39bU2 wGC+6KpYYffyttXbvOE7u07LekUt5C24rnRED1DELtLmSrl+you/Azhk+HJLNvsO QGh2ovbQejz+Eilb3PR5Dee7ZTM0bMssvOJ6G43YdbsLe/9jKkHXdWOeXRrYisRG UO7ncIHYfYCFL8LfUJ5iPBlqHm23a80E -----END CERTIFICATE-----Generated at Tue Jul 1 18:17:49 2025 by rpki-client