$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft File: wapc5S4RUztkHjtoWrMjxGl2pAE.mft (raw, json) Hash identifier: tw3l5Wwhq3M+/+H8RkC2bVKh6DgDk0+C8VO+wuS5f7c= Subject key identifier: 07:65:1E:53:FF:0E:33:6D:3E:5D:8B:72:B6:FD:AD:8F:CB:51:DD:83 Authority key identifier: C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 Certificate issuer: /CN=A912ACC3/serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Certificate serial: 195F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft Manifest number: 194E Signing time: Sat 31 May 2025 16:22:30 +0000 Manifest this update: Sat 31 May 2025 16:22:30 +0000 Manifest next update: Sat 07 Jun 2025 16:22:30 +0000 Files and hashes: 1: wapc5S4RUztkHjtoWrMjxGl2pAE.crl (hash: 8Ymgi7/OsRnmHibf95a4tZWGz5RCswC4sMxCkOfx3ko=) 2: 0E01F66437F511EEA737AD17C4F9AE02.roa (hash: 4h9/gedAkyFkLOFX95sZ0gtcQY54jVFNaMdtuEQXK5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6495 (0x195f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912ACC3, serialNumber=C1AA5CE52E11533B641E3B685AB323C46976A401 Validity Not Before: May 31 16:22:30 2025 GMT Not After : Jun 7 16:22:30 2025 GMT Subject: CN=683b2cc6-828b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:92:cf:16:6b:fc:28:d5:29:16:cf:2b:10: a2:41:56:fd:f5:16:cd:93:ea:cf:9f:7b:49:ab:84: 31:83:fd:84:7d:f2:7f:4b:43:8b:19:e5:05:16:cb: 45:ef:53:e9:4b:f6:b3:8f:9e:7a:a1:32:29:fe:d0: 74:12:fb:af:ca:e7:41:99:f9:97:d3:96:48:3e:53: 14:af:7b:25:e6:ca:0d:8c:d0:3a:1e:83:7d:bd:63: f8:de:bc:5d:20:da:51:2d:dc:e1:77:4b:80:17:a8: b6:c9:f6:28:3b:89:5d:16:67:d4:55:14:79:bc:d9: 19:4e:ec:79:f6:4d:69:8a:c9:94:2a:61:29:73:40: 1a:6c:0e:d5:e9:f3:d3:78:2c:6e:7b:7e:86:d6:35: 83:0c:39:c0:e6:e6:f8:20:89:23:4f:4e:f0:8a:64: ad:8f:ae:dc:9b:28:fe:0c:50:27:95:b3:2a:ed:aa: 40:59:33:1c:e5:15:6f:b6:3b:a6:f1:48:59:c4:5b: c4:f8:82:c5:1e:39:18:0e:bd:19:34:db:5b:70:35: a3:b1:b7:d3:af:a9:85:ce:78:0f:ad:13:36:db:e9: df:c0:a5:42:19:ce:ce:d8:64:ea:b1:f5:63:f0:17: 30:36:df:da:bd:70:ef:18:46:30:d1:03:67:16:b0: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:65:1E:53:FF:0E:33:6D:3E:5D:8B:72:B6:FD:AD:8F:CB:51:DD:83 X509v3 Authority Key Identifier: keyid:C1:AA:5C:E5:2E:11:53:3B:64:1E:3B:68:5A:B3:23:C4:69:76:A4:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wapc5S4RUztkHjtoWrMjxGl2pAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACC3/D4F4B48877F711E7B2D33264C4F9AE02/wapc5S4RUztkHjtoWrMjxGl2pAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:34:f8:be:6e:d2:e4:7b:5e:bb:ff:0d:23:ca:86:43:78:be: d5:83:5f:bd:8f:2c:ea:bd:1f:4d:17:a7:9b:8d:9c:d9:82:6e: 22:68:fe:8a:ca:fd:08:1a:26:89:b5:b4:c0:02:eb:7d:91:57: 24:26:7c:26:81:ed:a3:a3:17:6e:cd:25:41:41:a9:40:e5:fc: aa:6f:ce:dc:66:a5:54:1f:60:fe:87:67:71:19:92:b0:79:7d: 68:3a:13:df:9b:c5:05:6f:46:23:74:ad:f5:f3:0d:54:fd:5f: 29:40:d7:59:55:40:3c:07:87:af:e5:74:3e:11:fc:79:34:61: 57:ff:1b:6d:92:69:c6:4d:8d:73:0b:bb:01:b5:ca:8a:39:ca: dc:51:f0:db:c2:11:bf:4f:ab:43:ac:76:c2:b9:d7:15:77:19: 6d:b6:26:e1:7b:16:2a:7f:a9:2a:4b:15:f9:52:f4:47:cb:d5: fe:e7:d1:32:14:91:52:d5:fb:a8:34:af:68:c4:e4:08:50:6b: 7e:ae:d9:07:25:f8:ab:77:52:fe:3f:f5:2d:c1:42:31:21:1d: a7:40:7c:60:43:f3:08:0b:f7:07:eb:87:84:37:d3:bc:8b:7d: 2e:d8:fc:dc:01:89:cb:24:df:98:32:e2:ab:49:27:aa:56:d3: d6:a0:d3:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDQzMxMTAvBgNVBAUTKEMxQUE1Q0U1MkUxMTUzM0I2NDFFM0I2ODVBQjMyM0M0 Njk3NkE0MDEwHhcNMjUwNTMxMTYyMjMwWhcNMjUwNjA3MTYyMjMwWjAYMRYwFAYD VQQDEw02ODNiMmNjNi04MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX+SzxZr/CjVKRbPKxCiQVb99RbNk+rPn3tJq4Qxg/2EffJ/S0OLGeUFFstF 71PpS/azj556oTIp/tB0EvuvyudBmfmX05ZIPlMUr3sl5soNjNA6HoN9vWP43rxd INpRLdzhd0uAF6i2yfYoO4ldFmfUVRR5vNkZTux59k1pismUKmEpc0AabA7V6fPT eCxue36G1jWDDDnA5ub4IIkjT07wimStj67cmyj+DFAnlbMq7apAWTMc5RVvtjum 8UhZxFvE+ILFHjkYDr0ZNNtbcDWjsbfTr6mFzngPrRM22+nfwKVCGc7O2GTqsfVj 8BcwNt/avXDvGEYw0QNnFrAdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdlHlP/ DjNtPl2Lcrb9rY/LUd2DMB8GA1UdIwQYMBaAFMGqXOUuEVM7ZB47aFqzI8RpdqQB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUNDMy9ENEY0QjQ4ODc3 RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6dGtIanRvV3JNanhHbDJw QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhcGM1UzRSVXp0a0hqdG9Xck1qeEdsMnBBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUNDMy9ENEY0QjQ4ODc3RjcxMUU3QjJEMzMyNjRDNEY5QUUwMi93YXBjNVM0UlV6 dGtIanRvV3JNanhHbDJwQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArNPi+btLke167/w0jyoZDeL7Vg1+9jyzqvR9NF6ebjZzZgm4iaP6K yv0IGiaJtbTAAut9kVckJnwmge2joxduzSVBQalA5fyqb87cZqVUH2D+h2dxGZKw eX1oOhPfm8UFb0YjdK318w1U/V8pQNdZVUA8B4ev5XQ+Efx5NGFX/xttkmnGTY1z C7sBtcqKOcrcUfDbwhG/T6tDrHbCudcVdxlttibhexYqf6kqSxX5UvRHy9X+59Ey FJFS1fuoNK9oxOQIUGt+rtkHJfird1L+P/UtwUIxIR2nQHxgQ/MIC/cH64eEN9O8 i30u2PzcAYnLJN+YMuKrSSeqVtPWoNNL -----END CERTIFICATE-----Generated at Sat May 31 17:53:10 2025 by rpki-client