$ rpki-client -vvf rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft File: WYUGlV49GgWTCLSexvcnjZpeGrg.mft (raw, json) Hash identifier: R5pkvHff/bfm/y+wstL6JOUJONfBe+UPmFXjAX8gs3E= Subject key identifier: 52:9F:3C:58:C8:82:85:5F:3C:2D:2C:90:4A:62:84:7E:9A:B3:2E:C8 Authority key identifier: 59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 Certificate issuer: /CN=A9124F2F/serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Certificate serial: 0629 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft Manifest number: 0620 Signing time: Wed 04 Jun 2025 22:39:26 +0000 Manifest this update: Wed 04 Jun 2025 22:39:26 +0000 Manifest next update: Wed 11 Jun 2025 22:39:26 +0000 Files and hashes: 1: WYUGlV49GgWTCLSexvcnjZpeGrg.crl (hash: XvppldjsOomyYw8DLyOJu3pkOwP3tea4THTvkWZTUW0=) 2: 60A7536AC83311EC8981520CC4F9AE02.roa (hash: +9NJjEZlHqkxwGJezaqZvNw38PXtW0zuO81yVZ8rOEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1577 (0x629) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124F2F, serialNumber=598506955E3D1A059308B49EC6F7278D9A5E1AB8 Validity Not Before: Jun 4 22:39:26 2025 GMT Not After : Jun 11 22:39:26 2025 GMT Subject: CN=6840cb1e-4251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:02:11:a5:09:7d:a0:87:20:c6:3a:d1:e9: 4a:1e:d9:19:e0:4b:3e:6b:f7:2d:6a:bc:b3:ff:3c: 48:25:01:ee:cc:68:b8:fd:8d:a6:03:01:2e:26:74: ab:c7:ad:b7:f3:2b:c2:38:8e:58:92:4c:68:d3:3b: 5e:98:c0:11:13:82:04:13:30:17:fc:81:60:aa:e8: 2c:60:20:9f:0c:0e:33:04:63:a0:bd:63:f3:92:71: fb:13:a6:a8:d7:1d:a6:7f:d6:60:58:6f:55:fe:a9: 43:70:8a:06:ca:6a:d1:ab:d4:0a:4d:08:1c:49:66: 4c:67:ff:e3:63:55:c1:99:f0:df:b4:b7:eb:21:bb: 6d:54:3b:58:98:76:a7:ce:7e:37:3e:1d:90:06:12: c3:5e:d5:50:5f:0b:83:f9:65:e6:6c:77:02:9d:5b: e8:9b:58:eb:ab:42:09:28:f7:d3:28:2c:a9:b5:d2: e1:2f:bb:2c:d8:bf:40:1f:1f:ad:81:b5:72:0e:7b: e0:e3:10:84:d8:13:56:32:fe:32:ba:21:f3:df:94: 42:52:a8:23:9f:d2:c9:d8:ca:15:ea:aa:f8:f7:47: fe:64:75:2b:0d:fc:62:f2:ce:ae:a3:a5:17:ec:33: c1:a9:93:c7:38:b9:2a:2f:72:78:87:90:84:56:b9: c8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:3C:58:C8:82:85:5F:3C:2D:2C:90:4A:62:84:7E:9A:B3:2E:C8 X509v3 Authority Key Identifier: keyid:59:85:06:95:5E:3D:1A:05:93:08:B4:9E:C6:F7:27:8D:9A:5E:1A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYUGlV49GgWTCLSexvcnjZpeGrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124F2F/3E4EED929EC111EB8E15576AC4F9AE02/WYUGlV49GgWTCLSexvcnjZpeGrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:35:d6:e9:aa:8d:48:8e:9d:9a:22:9a:23:00:bb:b6:e1:63: ba:8b:2a:eb:86:c1:d2:31:1f:75:c0:4d:c2:09:39:da:d6:89: 20:fe:05:1a:1c:2b:f1:9b:aa:09:83:b7:bf:99:ee:a4:7a:60: 33:0f:7a:67:13:fc:fc:93:9e:c1:f6:45:e5:d2:f7:96:90:15: fe:74:41:96:ba:7e:56:2c:b8:75:4c:0c:4b:d6:15:b6:81:58: 29:52:0e:5b:b3:2f:a0:c8:5d:c8:36:95:96:01:0c:f6:2f:12: d8:c4:f2:2a:ee:01:c5:0d:db:c7:65:11:54:40:5b:98:73:76: 81:c8:15:47:df:24:4c:a3:fa:c6:1f:ae:22:14:d2:74:78:9e: 28:06:ae:78:69:78:41:58:03:c5:b1:11:f5:4d:28:8b:d9:04: 10:03:6c:ba:01:1d:a1:d5:9e:fd:5e:e5:73:fd:2b:f1:1b:af: 54:6e:8d:74:4d:2a:a1:6d:f0:24:26:dc:a3:26:85:35:3f:b1: c9:4b:fe:2f:7c:56:19:eb:70:d0:01:f0:44:b8:f6:68:95:1f: a7:28:29:4c:28:1c:3f:93:b4:d3:32:6f:23:29:b3:d4:db:fd: 5c:a0:6a:43:45:8f:97:5e:28:c0:30:da:23:54:23:78:c5:e4: db:c7:86:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRGMkYxMTAvBgNVBAUTKDU5ODUwNjk1NUUzRDFBMDU5MzA4QjQ5RUM2RjcyNzhE OUE1RTFBQjgwHhcNMjUwNjA0MjIzOTI2WhcNMjUwNjExMjIzOTI2WjAYMRYwFAYD VQQDEw02ODQwY2IxZS00MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0MCEaUJfaCHIMY60elKHtkZ4Es+a/ctaryz/zxIJQHuzGi4/Y2mAwEuJnSr x6238yvCOI5Ykkxo0ztemMARE4IEEzAX/IFgqugsYCCfDA4zBGOgvWPzknH7E6ao 1x2mf9ZgWG9V/qlDcIoGymrRq9QKTQgcSWZMZ//jY1XBmfDftLfrIbttVDtYmHan zn43Ph2QBhLDXtVQXwuD+WXmbHcCnVvom1jrq0IJKPfTKCyptdLhL7ss2L9AHx+t gbVyDnvg4xCE2BNWMv4yuiHz35RCUqgjn9LJ2MoV6qr490f+ZHUrDfxi8s6uo6UX 7DPBqZPHOLkqL3J4h5CEVrnIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKfPFjI goVfPC0skEpihH6asy7IMB8GA1UdIwQYMBaAFFmFBpVePRoFkwi0nsb3J42aXhq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEYyRi8zRTRFRUQ5MjlF QzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdnV1RDTFNleHZjbmpacGVH cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZVUdsVjQ5R2dXVENMU2V4dmNualpwZUdyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEYyRi8zRTRFRUQ5MjlFQzExMUVCOEUxNTU3NkFDNEY5QUUwMi9XWVVHbFY0OUdn V1RDTFNleHZjbmpacGVHcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Ndbpqo1Ijp2aIpojALu24WO6iyrrhsHSMR91wE3CCTna1okg/gUa HCvxm6oJg7e/me6kemAzD3pnE/z8k57B9kXl0veWkBX+dEGWun5WLLh1TAxL1hW2 gVgpUg5bsy+gyF3INpWWAQz2LxLYxPIq7gHFDdvHZRFUQFuYc3aByBVH3yRMo/rG H64iFNJ0eJ4oBq54aXhBWAPFsRH1TSiL2QQQA2y6AR2h1Z79XuVz/SvxG69Ubo10 TSqhbfAkJtyjJoU1P7HJS/4vfFYZ63DQAfBEuPZolR+nKClMKBw/k7TTMm8jKbPU 2/1coGpDRY+XXijAMNojVCN4xeTbx4bb -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:12 2025 by rpki-client