$ rpki-client -vvf rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft File: WjWLSErYf-ApwQHa5tLtgo2GBVM.mft (raw, json) Hash identifier: qy0OkJJR8aI61esevB9/d2P51ihdZXtTFW2ngjTEeY8= Subject key identifier: 5B:67:F8:6D:F1:1C:F5:0D:98:7D:60:43:C7:0E:33:44:B7:9D:9F:6A Authority key identifier: 5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 Certificate issuer: /CN=A9125949/serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft Manifest number: 0B Signing time: Sat 31 May 2025 07:44:52 +0000 Manifest this update: Sat 31 May 2025 07:44:51 +0000 Manifest next update: Sat 07 Jun 2025 07:44:51 +0000 Files and hashes: 1: WjWLSErYf-ApwQHa5tLtgo2GBVM.crl (hash: jAqtOqomm8d0ToO38YzZOV0D1AnFz4otv5RDCyC2imE=) 2: D01462D636E611F090C5647FC4F9AE02.roa (hash: FQtkhR7K7QV32QbqO8VdQAo75j1/gLUGSAPk3ncX5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125949, serialNumber=5A358B484AD87FE029C101DAE6D2ED828D860553 Validity Not Before: May 31 07:44:51 2025 GMT Not After : Jun 7 07:44:51 2025 GMT Subject: CN=683ab374-fa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8c:da:d6:5a:5e:aa:28:b3:94:79:f8:e4:b3: 13:3c:83:bf:60:e1:33:9b:86:b5:c4:b7:b2:7b:e3: 0e:21:e0:3a:56:aa:ca:3b:e2:50:b0:fa:d9:3f:c2: 39:85:27:4d:d1:2e:46:19:89:ce:a6:cc:88:14:e4: 6b:78:35:28:a0:bc:53:c8:a7:1b:90:b4:a8:43:38: e0:34:a2:90:fb:a5:de:b6:df:07:31:a2:4b:a7:fd: f4:79:42:24:82:04:99:2f:78:2b:8a:e2:45:4c:06: d0:cc:c9:e7:f8:33:d3:86:1f:a1:cd:bd:8d:b1:95: 4f:8a:3f:a1:9a:89:5a:e4:3a:31:15:81:1e:89:ac: be:a5:72:20:73:7c:42:81:69:9e:2b:9e:9e:6e:15: 7a:7f:ff:79:cb:68:a4:63:28:4d:88:a8:33:35:38: d4:0b:1c:1a:dc:d0:5b:89:96:15:d1:e6:60:d5:c3: 12:2f:d0:89:48:2f:fb:ac:f3:43:83:7e:3d:14:72: fc:75:32:6b:4a:02:8c:21:5f:c1:43:d2:b3:b3:6d: 28:a2:32:78:ca:48:f0:af:98:2c:15:91:4e:d0:34: 36:48:84:b0:cf:79:2a:6c:91:39:88:37:a0:8a:cf: 28:f9:9b:39:c8:90:18:7b:80:c7:da:29:97:0a:f3: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:F8:6D:F1:1C:F5:0D:98:7D:60:43:C7:0E:33:44:B7:9D:9F:6A X509v3 Authority Key Identifier: keyid:5A:35:8B:48:4A:D8:7F:E0:29:C1:01:DA:E6:D2:ED:82:8D:86:05:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WjWLSErYf-ApwQHa5tLtgo2GBVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125949/663B25F236E611F0951EB87EC4F9AE02/WjWLSErYf-ApwQHa5tLtgo2GBVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:bc:1d:65:1c:e2:18:05:fb:ed:df:f7:ba:7e:2b:c0:62:81: 9d:5d:70:98:73:68:08:84:98:54:a2:04:9c:8e:f0:74:6b:d5: 12:52:81:d4:0b:8d:f8:bc:a1:be:68:60:4b:c2:0f:68:74:69: 2f:53:67:9c:96:dd:6c:43:dc:6f:fc:05:df:9b:ce:fa:ae:db: 30:f7:d3:23:3d:97:9a:1f:51:49:90:d9:59:43:87:60:58:b3: 3c:bf:8a:11:4e:88:2a:1f:de:d8:e9:fa:60:89:53:d6:37:6f: 08:12:e2:48:6d:7e:6e:e2:4b:f2:88:98:51:4f:8e:d8:52:7f: c8:56:fd:6c:1d:8e:3d:29:36:c4:e1:3a:1c:be:9e:d2:e0:04: 00:c9:de:67:e2:02:cf:6d:85:29:f3:4c:a7:fc:73:2b:0c:46: 58:84:2b:00:7b:85:b5:f2:7d:74:8b:8f:d9:45:bc:2b:d6:19: f3:66:d2:d1:a0:bc:89:6e:39:bd:f3:42:3d:64:e5:df:10:5d: 61:f7:e2:e6:41:63:56:67:57:dc:44:43:dd:51:f4:c6:6c:62: 55:fa:d1:a4:94:8c:f7:6f:86:94:2b:76:92:90:ed:6b:1e:01: 4b:88:ad:6d:aa:e1:69:37:9d:22:c3:ed:60:9c:da:1f:b8:33: 83:b1:b1:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTk0OTExMC8GA1UEBRMoNUEzNThCNDg0QUQ4N0ZFMDI5QzEwMURBRTZEMkVEODI4 RDg2MDU1MzAeFw0yNTA1MzEwNzQ0NTFaFw0yNTA2MDcwNzQ0NTFaMBgxFjAUBgNV BAMTDTY4M2FiMzc0LWZhNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCljNrWWl6qKLOUefjksxM8g79g4TObhrXEt7J74w4h4DpWqso74lCw+tk/wjmF J03RLkYZic6mzIgU5Gt4NSigvFPIpxuQtKhDOOA0opD7pd623wcxokun/fR5QiSC BJkveCuK4kVMBtDMyef4M9OGH6HNvY2xlU+KP6GaiVrkOjEVgR6JrL6lciBzfEKB aZ4rnp5uFXp//3nLaKRjKE2IqDM1ONQLHBrc0FuJlhXR5mDVwxIv0IlIL/us80OD fj0Ucvx1MmtKAowhX8FD0rOzbSiiMnjKSPCvmCwVkU7QNDZIhLDPeSpskTmIN6CK zyj5mznIkBh7gMfaKZcK8zpdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW2f4bfEc 9Q2YfWBDxw4zRLedn2owHwYDVR0jBBgwFoAUWjWLSErYf+ApwQHa5tLtgo2GBVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1OTQ5LzY2M0IyNUYyMzZF NjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1BcHdRSGE1dEx0Z28yR0JW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV2pXTFNFcllmLUFwd1FIYTV0THRnbzJHQlZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 OTQ5LzY2M0IyNUYyMzZFNjExRjA5NTFFQjg3RUM0RjlBRTAyL1dqV0xTRXJZZi1B cHdRSGE1dEx0Z28yR0JWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADe8HWUc4hgF++3f97p+K8BigZ1dcJhzaAiEmFSiBJyO8HRr1RJSgdQL jfi8ob5oYEvCD2h0aS9TZ5yW3WxD3G/8Bd+bzvqu2zD30yM9l5ofUUmQ2VlDh2BY szy/ihFOiCof3tjp+mCJU9Y3bwgS4khtfm7iS/KImFFPjthSf8hW/Wwdjj0pNsTh Ohy+ntLgBADJ3mfiAs9thSnzTKf8cysMRliEKwB7hbXyfXSLj9lFvCvWGfNm0tGg vIluOb3zQj1k5d8QXWH34uZBY1ZnV9xEQ91R9MZsYlX60aSUjPdvhpQrdpKQ7Wse AUuIrW2q4Wk3nSLD7WCc2h+4M4Oxsek= -----END CERTIFICATE-----Generated at Sat May 31 17:00:23 2025 by rpki-client