$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: wmFD1Ma3TVFwUp86yy/NAECZQQA6W+MpG0xOn5XuzGA= Subject key identifier: 08:5F:0D:DD:E5:97:A0:AA:94:CE:5B:52:2E:ED:5D:A9:47:B9:26:AB Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 3485 Signing time: Mon 02 Jun 2025 14:55:41 +0000 Manifest this update: Mon 02 Jun 2025 14:55:40 +0000 Manifest next update: Mon 09 Jun 2025 14:55:40 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: czz15ZfHF0Lo/ZwNsGqZnxTzlQkx861mJG2NuAzmWZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Jun 2 14:55:40 2025 GMT Not After : Jun 9 14:55:40 2025 GMT Subject: CN=683dbb6c-20ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:32:87:2e:1e:b5:0e:c0:7e:89:c0:5c:47: 51:fb:37:f1:8b:1b:c2:c1:0e:3d:96:4b:87:43:27: 15:07:34:e9:38:53:93:44:7e:b4:c9:f4:cf:27:6e: ac:e8:48:f7:e7:48:c5:52:55:a4:35:9e:aa:e9:5e: d9:a3:ca:e6:ae:7e:ee:f2:e4:81:ea:00:40:20:41: 63:ec:e4:6f:1a:95:0a:3e:6a:8b:bc:28:b9:25:4d: c1:39:4a:2c:45:d7:37:f1:7a:eb:b5:a5:a3:0a:54: 9a:e8:91:d1:8b:c9:63:bb:38:8d:69:cc:a7:e1:03: d8:cf:ee:e0:13:11:9e:87:b1:cf:39:19:4d:a1:5c: 8e:9d:92:08:3c:22:eb:cb:c5:8f:19:45:08:3e:03: 78:ff:00:8f:e7:4c:d6:ce:30:d9:52:96:fb:13:08: a4:6b:94:77:24:21:4a:45:d1:a9:9c:01:0c:90:08: a2:b0:86:3b:5e:8c:0c:0a:de:cd:ae:3e:53:15:06: 0c:9f:b3:cb:d1:6d:0e:74:6d:29:ac:23:53:8a:45: 5c:f3:b7:7e:84:df:d0:1a:2c:f1:c1:a8:34:1d:f9: 5b:54:64:56:e9:a9:20:cb:e4:be:12:5c:e6:f6:56: 58:98:02:aa:7a:ba:a9:35:78:1b:35:9a:a9:a2:3e: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:0D:DD:E5:97:A0:AA:94:CE:5B:52:2E:ED:5D:A9:47:B9:26:AB X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fc:54:a0:6f:6b:b1:e7:17:13:f6:3a:ce:f8:c4:a3:de:04: b7:23:6e:e7:97:c7:35:60:d8:38:d5:01:d3:63:0c:11:e9:f7: b6:0e:7d:7f:ad:a2:16:cb:0e:bc:ce:f1:af:8a:d9:f6:be:05: 86:87:6e:b6:e2:94:a8:6b:a1:1c:3e:bf:85:d9:52:42:9c:0b: d0:b0:5f:b9:37:eb:27:16:e2:3f:1c:8c:fd:54:cd:b5:ae:67: 34:62:9b:4c:dc:07:57:b5:7d:2e:ea:79:63:4a:de:62:e3:ac: e6:91:0c:28:c1:1e:6e:a0:8f:cc:84:fd:b2:e5:72:73:f5:99: 6b:cf:44:c7:27:9f:ef:b7:33:33:b3:a9:cb:23:37:35:6f:57: 2b:29:92:cd:9b:ae:67:de:b9:7b:84:ad:25:2e:59:b3:11:75: 86:f2:6d:0c:29:46:2b:97:09:ae:30:eb:d0:dc:bd:96:0f:8e: 16:84:ca:f4:a4:20:cb:11:92:95:9c:47:87:f3:e5:91:14:c6: 71:30:93:95:1a:01:ad:dd:60:c5:c0:6e:e9:24:25:53:6c:c4: bb:15:00:f8:ce:d6:2c:33:dd:42:b6:c0:21:43:8a:57:79:4c: 92:3b:e5:83:14:ba:b2:ac:cc:78:27:4a:58:9f:0b:02:7d:7a: c4:4d:cb:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUwNjAyMTQ1NTQwWhcNMjUwNjA5MTQ1NTQwWjAYMRYwFAYD VQQDEw02ODNkYmI2Yy0yMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmUyhy4etQ7AfonAXEdR+zfxixvCwQ49lkuHQycVBzTpOFOTRH60yfTPJ26s 6Ej350jFUlWkNZ6q6V7Zo8rmrn7u8uSB6gBAIEFj7ORvGpUKPmqLvCi5JU3BOUos Rdc38XrrtaWjClSa6JHRi8ljuziNacyn4QPYz+7gExGeh7HPORlNoVyOnZIIPCLr y8WPGUUIPgN4/wCP50zWzjDZUpb7Ewika5R3JCFKRdGpnAEMkAiisIY7XowMCt7N rj5TFQYMn7PL0W0OdG0prCNTikVc87d+hN/QGizxwag0HflbVGRW6akgy+S+Elzm 9lZYmAKqerqpNXgbNZqpoj40hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhfDd3l l6CqlM5bUi7tXalHuSarMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/FSgb2ux5xcT9jrO+MSj3gS3I27nl8c1YNg41QHTYwwR6fe2Dn1/ raIWyw68zvGvitn2vgWGh2624pSoa6EcPr+F2VJCnAvQsF+5N+snFuI/HIz9VM21 rmc0YptM3AdXtX0u6nljSt5i46zmkQwowR5uoI/MhP2y5XJz9Zlrz0THJ5/vtzMz s6nLIzc1b1crKZLNm65n3rl7hK0lLlmzEXWG8m0MKUYrlwmuMOvQ3L2WD44WhMr0 pCDLEZKVnEeH8+WRFMZxMJOVGgGt3WDFwG7pJCVTbMS7FQD4ztYsM91CtsAhQ4pX eUySO+WDFLqyrMx4J0pYnwsCfXrETcv1 -----END CERTIFICATE-----Generated at Mon Jun 2 19:24:50 2025 by rpki-client