$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: exaV1opsDpliHqw2issT4nv4PS5UHaj38e7q2/tZ6DE= Subject key identifier: 7D:63:D4:B2:43:26:47:6F:59:05:4B:ED:A4:FA:F5:0E:F9:2F:02:35 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: 98 Signing time: Sun 01 Jun 2025 06:07:26 +0000 Manifest this update: Sun 01 Jun 2025 06:07:25 +0000 Manifest next update: Sun 08 Jun 2025 06:07:25 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: x0Kq2/6sliRGk1s0CPMT32QFXvLhXhfW/8R15HAftTQ=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: DGhCmBwIVuA1yV2BSzBBRg3ZffQWFG7MuOhn3OP/r+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Jun 1 06:07:25 2025 GMT Not After : Jun 8 06:07:25 2025 GMT Subject: CN=683bee1d-5c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:31:92:e9:8c:68:1f:d9:ab:83:3b:d2:02: f2:5b:d2:d1:29:59:dd:94:20:1d:a2:23:20:9f:23: 33:45:43:30:d5:7f:af:9d:04:68:2a:3f:df:53:ab: fb:36:1d:eb:ac:09:73:ae:2a:86:37:81:69:88:4b: e2:cc:bb:91:b6:a2:c4:65:f7:5c:bd:5e:c9:9f:67: 85:9d:db:e9:02:7f:db:23:33:77:bf:d0:5c:19:98: 4c:68:f3:9c:62:7f:37:20:13:7a:2f:1b:2d:fc:bc: 3e:0f:3e:86:92:07:80:c8:aa:91:9f:30:af:fa:e3: f0:32:d4:96:3f:a3:97:ff:81:d6:92:6e:8a:c8:51: 8d:aa:83:6f:4f:03:08:07:ff:11:67:39:20:c9:e6: 55:c3:ca:af:6c:02:f5:be:5d:09:19:5d:9f:8e:de: 70:7b:09:9c:5c:58:3b:f8:bd:88:2f:31:61:77:6c: 50:be:95:6f:d2:ce:b4:da:05:7a:58:f9:b3:a9:5c: 2d:e0:48:cc:0c:07:44:8e:e8:01:24:b6:c4:1b:69: 94:b4:8e:b4:e4:67:3d:70:ff:d4:db:49:12:bd:3c: 5d:4a:b9:14:0e:92:f8:4b:f4:9a:de:21:d7:a5:91: 22:0b:a2:9d:f5:d4:0a:47:72:d6:ee:71:13:02:0c: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:63:D4:B2:43:26:47:6F:59:05:4B:ED:A4:FA:F5:0E:F9:2F:02:35 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:cc:28:67:8c:41:67:a2:b0:ed:e6:39:2c:1d:4d:dd:75:3a: 53:55:69:52:54:6a:73:87:dc:c0:5c:9f:08:82:fb:db:d8:62: bb:65:a7:86:27:95:4f:c1:0e:3c:f4:7b:62:1a:7c:81:a3:5b: d7:78:43:ce:45:a1:d6:e0:c6:cb:93:1e:f5:10:59:a0:fa:83: ee:ba:dc:fb:f9:d6:7d:83:2b:38:ea:63:35:88:70:6b:b8:7d: 3a:ab:d6:42:82:81:c8:2a:fe:e1:b6:eb:6c:05:05:c7:d7:7a: fb:bd:36:68:3a:b6:59:49:42:6e:97:18:5c:e4:0f:de:cb:2b: a0:1c:12:43:0b:6a:dd:53:c6:31:84:50:80:c3:86:a7:87:51: 2d:05:55:b2:93:33:2e:0a:a4:28:3c:9f:fb:4d:c0:2b:65:1a: cb:26:42:04:92:e8:fe:f4:25:a4:ef:30:19:47:24:53:5c:af: a7:e9:d5:df:87:12:50:7f:82:87:97:7d:4d:e3:4a:2a:62:27: a6:a0:c0:a2:90:c3:83:09:44:81:0a:84:fc:e1:52:01:ca:b2: 07:3b:b7:80:cb:ee:8f:d0:e0:19:ea:c9:89:fd:d2:72:e3:d0: 61:0f:d0:0b:f0:db:4a:68:23:ee:cb:89:6b:74:31:7e:db:9a: df:98:f6:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUwNjAxMDYwNzI1WhcNMjUwNjA4MDYwNzI1WjAYMRYwFAYD VQQDEw02ODNiZWUxZC01YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGIxkumMaB/Zq4M70gLyW9LRKVndlCAdoiMgnyMzRUMw1X+vnQRoKj/fU6v7 Nh3rrAlzriqGN4FpiEvizLuRtqLEZfdcvV7Jn2eFndvpAn/bIzN3v9BcGZhMaPOc Yn83IBN6Lxst/Lw+Dz6GkgeAyKqRnzCv+uPwMtSWP6OX/4HWkm6KyFGNqoNvTwMI B/8RZzkgyeZVw8qvbAL1vl0JGV2fjt5wewmcXFg7+L2ILzFhd2xQvpVv0s602gV6 WPmzqVwt4EjMDAdEjugBJLbEG2mUtI605Gc9cP/U20kSvTxdSrkUDpL4S/Sa3iHX pZEiC6Kd9dQKR3LW7nETAgwgqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1j1LJD JkdvWQVL7aT69Q75LwI1MB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYzChnjEFnorDt5jksHU3ddTpTVWlSVGpzh9zAXJ8Igvvb2GK7ZaeG J5VPwQ489HtiGnyBo1vXeEPORaHW4MbLkx71EFmg+oPuutz7+dZ9gys46mM1iHBr uH06q9ZCgoHIKv7htutsBQXH13r7vTZoOrZZSUJulxhc5A/eyyugHBJDC2rdU8Yx hFCAw4anh1EtBVWykzMuCqQoPJ/7TcArZRrLJkIEkuj+9CWk7zAZRyRTXK+n6dXf hxJQf4KHl31N40oqYiemoMCikMODCUSBCoT84VIByrIHO7eAy+6P0OAZ6smJ/dJy 49BhD9AL8NtKaCPuy4lrdDF+25rfmPYm -----END CERTIFICATE-----Generated at Mon Jun 2 18:40:52 2025 by rpki-client