$ rpki-client -vvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: P91xleIWBdp+rhnCG/FQwTjZDcJ1tTQhWssaaYqsTFI= Subject key identifier: CC:5B:2A:69:DF:27:D4:A2:A0:E3:65:9B:82:4C:DE:4B:E4:1B:EA:C6 Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 055E Signing time: Sun 08 Jun 2025 22:58:53 +0000 Manifest this update: Sun 08 Jun 2025 22:58:52 +0000 Manifest next update: Sun 15 Jun 2025 22:58:52 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: 1GksOdd4Vlp/BNS10hQwNdUQj8Lj1LG3y4rsNk022CY=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: oSqY7LR2RimEPpc7yB9nwDJKZPsrgKKxfgWlADMHfYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 22:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Jun 8 22:58:52 2025 GMT Not After : Jun 15 22:58:52 2025 GMT Subject: CN=684615ac-d207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:af:d3:79:d8:8d:80:15:25:11:b0:89:5b: d2:20:ae:e3:ad:ca:64:72:af:10:4d:df:e4:97:51: 00:1b:a8:86:db:d6:5e:b8:c2:c7:47:a9:ce:34:10: 46:19:79:8f:52:e2:c2:af:89:48:c0:02:d6:9f:7e: 4f:ec:86:de:96:18:91:93:51:ed:0b:4d:8f:b7:39: 7d:49:3b:bd:5e:c6:1d:12:e6:8e:50:1e:43:3e:7f: 8a:30:03:04:a1:dd:8c:09:07:6e:ef:a1:9a:3e:b5: b2:04:04:f0:85:cc:7b:72:b4:81:2f:01:9b:39:20: 14:40:fd:56:2d:7c:2d:be:88:46:08:11:7d:a3:6d: 25:9c:c0:9c:c2:71:f7:b0:5d:25:ea:d9:91:f6:d0: f7:0f:92:9b:f5:01:7b:3a:cf:94:7c:cb:3e:84:7d: 54:fd:df:69:45:0d:06:e8:37:47:ee:f2:a1:6c:e2: 7e:82:b9:62:74:df:8f:f8:2a:1a:f8:7d:90:37:68: 31:05:2c:38:1a:5c:a9:fe:0a:17:e3:50:a9:1e:fd: 02:a3:83:4d:e7:57:f4:4e:47:bf:e2:21:74:9e:23: 06:bc:08:ca:71:15:7c:c4:e7:2c:3d:90:60:07:83: a3:60:63:69:4a:00:2c:22:cd:fd:40:21:db:ec:b2: 11:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5B:2A:69:DF:27:D4:A2:A0:E3:65:9B:82:4C:DE:4B:E4:1B:EA:C6 X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bf:c3:2c:c9:17:63:84:8d:04:b3:ea:07:0e:dc:63:9d:48: 78:0d:fb:c2:c4:08:eb:81:01:b5:11:6d:b1:52:ac:c0:81:a8: c5:ce:63:4f:9e:0c:31:cf:6c:80:60:f2:6d:bd:b5:26:4b:6b: f4:c5:33:a2:57:e1:1f:2c:94:8c:7a:21:d4:92:25:0d:37:08: 9f:a1:44:32:24:88:54:ef:2f:b9:41:53:be:be:c0:30:af:e2: ed:e4:8a:f5:a3:26:6f:46:46:d9:e7:8a:ce:d2:96:16:3e:c9: f3:bf:f6:aa:3b:17:82:75:07:f7:c2:78:78:f9:ab:1b:a1:80: ce:d7:fa:f0:b8:ba:a7:c6:6e:c7:d9:58:07:e5:db:96:ac:5a: c5:95:b3:08:33:a1:a7:bc:e7:a7:bf:42:1e:09:5a:ab:73:a4: 54:44:c5:43:6f:8d:aa:60:33:ea:45:3f:7d:41:f3:e4:dd:9f: 4b:23:b6:42:87:0f:68:de:96:d7:ff:e1:c7:bf:99:9b:14:d9: 4e:f9:c3:e4:f2:53:2d:6d:4b:fc:e0:06:bf:db:90:ad:70:72: 89:67:a2:cb:0d:a6:f4:0b:b5:02:6c:b8:34:e4:1e:0a:49:00: 16:cc:08:b5:76:08:bf:4a:66:4f:06:f3:1b:d2:1b:71:1f:87: ca:4e:bb:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjUwNjA4MjI1ODUyWhcNMjUwNjE1MjI1ODUyWjAYMRYwFAYD VQQDEw02ODQ2MTVhYy1kMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdav03nYjYAVJRGwiVvSIK7jrcpkcq8QTd/kl1EAG6iG29ZeuMLHR6nONBBG GXmPUuLCr4lIwALWn35P7IbelhiRk1HtC02Ptzl9STu9XsYdEuaOUB5DPn+KMAME od2MCQdu76GaPrWyBATwhcx7crSBLwGbOSAUQP1WLXwtvohGCBF9o20lnMCcwnH3 sF0l6tmR9tD3D5Kb9QF7Os+UfMs+hH1U/d9pRQ0G6DdH7vKhbOJ+grlidN+P+Coa +H2QN2gxBSw4Glyp/goX41CpHv0Co4NN51f0Tke/4iF0niMGvAjKcRV8xOcsPZBg B4OjYGNpSgAsIs39QCHb7LIRNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxbKmnf J9SioONlm4JM3kvkG+rGMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCav8MsyRdjhI0Es+oHDtxjnUh4DfvCxAjrgQG1EW2xUqzAgajFzmNP ngwxz2yAYPJtvbUmS2v0xTOiV+EfLJSMeiHUkiUNNwifoUQyJIhU7y+5QVO+vsAw r+Lt5Ir1oyZvRkbZ54rO0pYWPsnzv/aqOxeCdQf3wnh4+asboYDO1/rwuLqnxm7H 2VgH5duWrFrFlbMIM6GnvOenv0IeCVqrc6RURMVDb42qYDPqRT99QfPk3Z9LI7ZC hw9o3pbX/+HHv5mbFNlO+cPk8lMtbUv84Aa/25CtcHKJZ6LLDab0C7UCbLg05B4K SQAWzAi1dgi/SmZPBvMb0htxH4fKTrug -----END CERTIFICATE-----Generated at Tue Jun 10 08:51:25 2025 by rpki-client