$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft File: wm9G_ZlSs686fXFd4b86YeJceYo.mft (raw, json) Hash identifier: nrkvX+dU1ZuVeCSFjBI+7t5H7hCMxJNQ8cANN3fjWlI= Subject key identifier: F0:C8:A0:DE:01:F6:FE:51:6C:15:DC:59:A7:95:94:1D:7B:E6:19:48 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft Manifest number: B4 Signing time: Tue 03 Jun 2025 05:49:47 +0000 Manifest this update: Tue 03 Jun 2025 05:49:46 +0000 Manifest next update: Tue 10 Jun 2025 05:49:46 +0000 Files and hashes: 1: wm9G_ZlSs686fXFd4b86YeJceYo.crl (hash: JfUeyrqn/L1qt+uTfkvsbdhhejmmjCnF8h5sWXr4N88=) 2: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (hash: 1jGCFzd/sHQM74sRPATE0G9+X7umf34cHsGsadOtRrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Jun 3 05:49:46 2025 GMT Not After : Jun 10 05:49:46 2025 GMT Subject: CN=683e8cfb-a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:f1:a8:82:3b:ec:fc:fa:cf:a5:48:48:bb: c4:a6:ab:58:65:db:a6:4e:1d:11:12:d8:9b:be:05: d7:7f:10:cd:c6:e5:08:11:99:7b:6c:89:46:0e:0f: ac:80:67:1e:d2:28:e0:3f:b8:09:2d:c6:58:fc:b1: d9:4a:0c:60:cb:af:92:0a:6f:a5:ec:87:4f:1f:1f: e4:be:0f:43:1e:c4:76:fa:73:9a:5a:aa:88:1f:7b: 39:2a:ef:b3:e1:e7:24:b0:bd:b4:fc:d9:9c:91:37: 58:06:f1:bf:da:8d:18:56:84:db:1e:bf:96:10:0d: 41:f2:8e:3d:f5:f4:c2:8a:df:09:d0:60:28:e0:be: bb:d2:35:a4:61:e2:5c:ab:70:2a:31:a5:56:b4:69: 8c:53:d3:02:64:d2:3a:34:dd:b1:06:0d:16:d1:ae: 5a:ac:3b:f5:8f:ba:48:d3:45:4d:d3:8e:e0:8c:b4: 17:40:ca:f4:f9:ff:34:50:71:db:ec:95:92:1a:d1: bc:bc:87:f7:fc:d1:ce:68:32:c9:ba:0b:69:d4:1b: 43:24:80:2f:8f:f5:41:57:80:fb:a8:f1:b8:74:7e: 2f:fe:13:09:5f:3e:96:b2:a9:3c:0c:27:29:72:74: 8c:18:f4:29:82:f5:c5:8a:91:1d:19:d1:c3:78:1f: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C8:A0:DE:01:F6:FE:51:6C:15:DC:59:A7:95:94:1D:7B:E6:19:48 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d8:5d:02:3c:68:a3:46:78:52:6c:9d:2b:59:7a:02:5b:dc: 5a:90:b1:bc:62:8b:52:ef:1d:eb:09:ff:8a:02:d9:ec:b0:59: ba:1e:d3:ae:0e:f7:89:3a:fb:6e:61:23:fb:67:4d:e4:f0:f6: d7:fe:4d:0d:a7:dd:5c:79:1b:1f:70:97:8a:cb:95:27:15:61: 61:be:35:cc:fd:f6:d4:dd:74:41:18:1b:6e:9c:56:d8:34:27: 6e:84:c4:4a:af:6c:18:cc:2d:7e:82:f2:11:f2:77:67:0e:ad: 66:95:55:bc:22:ce:74:88:8f:57:e9:f5:25:2e:77:99:ea:ac: 74:77:85:88:9b:b6:e4:aa:65:91:4d:0f:0c:80:67:e5:4b:e8: 70:27:db:4e:3f:15:b0:97:40:2b:61:be:c6:7a:e4:21:58:05: e7:e3:4e:98:72:e1:1c:27:47:e0:5a:d2:66:06:67:17:79:38: 4e:35:56:74:90:f1:65:c8:37:97:cc:06:43:9c:33:b4:ab:d7: 64:0e:a6:96:1b:94:eb:f4:07:d4:f7:25:d5:c6:ba:3c:b2:2b: 99:19:64:8c:87:47:0c:39:0c:d4:29:e7:dd:1e:12:fb:5e:1b: 4a:d5:86:4c:a8:f7:be:80:bd:65:a9:03:04:83:db:69:e6:d7: ed:0b:63:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUwNjAzMDU0OTQ2WhcNMjUwNjEwMDU0OTQ2WjAYMRYwFAYD VQQDEw02ODNlOGNmYi1hMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0fxqII77Pz6z6VISLvEpqtYZdumTh0REtibvgXXfxDNxuUIEZl7bIlGDg+s gGce0ijgP7gJLcZY/LHZSgxgy6+SCm+l7IdPHx/kvg9DHsR2+nOaWqqIH3s5Ku+z 4ecksL20/NmckTdYBvG/2o0YVoTbHr+WEA1B8o499fTCit8J0GAo4L670jWkYeJc q3AqMaVWtGmMU9MCZNI6NN2xBg0W0a5arDv1j7pI00VN047gjLQXQMr0+f80UHHb 7JWSGtG8vIf3/NHOaDLJugtp1BtDJIAvj/VBV4D7qPG4dH4v/hMJXz6Wsqk8DCcp cnSMGPQpgvXFipEdGdHDeB9OAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDIoN4B 9v5RbBXcWaeVlB175hlIMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NFMy9BOTBDQUZDNDM0NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2 ODZmWEZkNGI4NlllSmNlWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm2F0CPGijRnhSbJ0rWXoCW9xakLG8YotS7x3rCf+KAtnssFm6HtOu DveJOvtuYSP7Z03k8PbX/k0Np91ceRsfcJeKy5UnFWFhvjXM/fbU3XRBGBtunFbY NCduhMRKr2wYzC1+gvIR8ndnDq1mlVW8Is50iI9X6fUlLneZ6qx0d4WIm7bkqmWR TQ8MgGflS+hwJ9tOPxWwl0ArYb7GeuQhWAXn406YcuEcJ0fgWtJmBmcXeThONVZ0 kPFlyDeXzAZDnDO0q9dkDqaWG5Tr9AfU9yXVxro8siuZGWSMh0cMOQzUKefdHhL7 XhtK1YZMqPe+gL1lqQMEg9tp5tftC2PI -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:11 2025 by rpki-client