$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft File: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft (raw, json) Hash identifier: TAN8IQbKpWkCbHE2SFktbGyUbUUwVdreKSsAeMx4moY= Subject key identifier: 2D:E8:3C:08:AE:4A:A9:22:EA:FD:4F:16:AC:1E:65:9E:B5:7C:95:19 Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft Manifest number: 0449 Signing time: Sun 01 Jun 2025 00:26:12 +0000 Manifest this update: Sun 01 Jun 2025 00:26:12 +0000 Manifest next update: Sun 08 Jun 2025 00:26:12 +0000 Files and hashes: 1: WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl (hash: R34cereR/3c9ipEBbk9dlLumIvOeXXGXuayEl5gh0WU=) 2: 94FA2A66174B11EF84A2715AC4F9AE02.roa (hash: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2 Validity Not Before: Jun 1 00:26:12 2025 GMT Not After : Jun 8 00:26:12 2025 GMT Subject: CN=683b9e24-3468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:97:d0:fc:6d:46:a9:e9:08:e8:db:d0:6a: 75:d5:db:dc:51:e9:42:44:18:0e:72:ec:88:bd:63: 58:6d:f3:6f:79:73:93:b1:ae:7f:f1:5b:b4:df:cc: 25:ff:38:15:f8:6b:08:a9:0e:fb:c1:3a:6f:68:b2: ed:f0:26:56:6b:7c:b0:28:59:b7:c5:d4:91:1b:bb: ef:a2:74:5e:85:4a:2d:a6:f6:7d:b8:23:c9:f8:fe: 2f:0c:01:52:87:37:ce:0a:eb:df:3b:f2:fb:7f:92: 92:bd:88:b3:61:33:d3:f8:7a:78:1a:98:9b:21:f1: 73:84:8c:3a:14:69:15:9e:ad:ff:56:c7:11:4f:98: bb:2e:57:53:30:63:55:d3:ed:9b:46:da:88:c9:86: 43:97:47:ca:01:66:ad:bd:b4:d6:9b:d5:5d:bd:3b: c3:ae:c1:7d:b2:5a:a5:fa:e6:80:cd:2c:fe:d5:8d: 95:72:dc:9b:ba:ed:47:fc:d4:8a:21:60:31:e8:3c: 0e:26:e7:b0:be:e8:d6:af:f9:1b:e0:31:7b:77:fb: dc:65:e1:b9:6f:b2:0d:20:72:54:a1:09:67:ae:48: 28:f3:c8:47:20:3a:4a:45:b4:f6:ea:14:1d:e9:40: 41:44:ab:ed:02:31:08:f3:45:bc:5c:ab:68:d8:5a: 41:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:3C:08:AE:4A:A9:22:EA:FD:4F:16:AC:1E:65:9E:B5:7C:95:19 X509v3 Authority Key Identifier: keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:5d:b1:aa:1a:2b:43:60:25:80:46:b1:ad:bd:76:ad:2a:2b: 8f:5f:36:73:3b:09:cf:0b:02:50:79:91:88:0c:ca:a9:33:c1: e5:59:f1:55:89:b3:20:ec:bc:1a:11:04:dd:bf:66:f6:3d:58: cb:06:2f:f3:1a:65:bb:dc:ab:56:9a:91:19:bd:42:66:25:26: b4:20:0c:f4:77:62:b1:6e:10:7e:44:ea:c1:1e:be:bf:c1:79: b0:54:bf:5c:3a:7a:3d:35:cb:56:a8:ff:0c:96:4b:68:e4:26: e9:52:9f:64:51:53:f1:1e:86:d3:a5:5b:cc:28:9b:1e:fa:a7: e2:20:e8:dd:bd:65:59:31:d8:20:82:d5:56:94:d5:13:88:20: c2:25:6f:5a:8a:d1:d9:8d:31:70:f7:1c:ee:44:d4:e0:e5:2b: d7:90:ff:d0:bc:e0:a7:14:05:ec:21:44:ce:22:4e:28:a0:12: 34:c5:ab:a9:c5:61:61:a7:ad:7e:62:89:2a:ac:44:f8:9d:25: 30:8f:7b:18:e4:b6:a2:7a:81:d9:c8:10:39:72:71:8e:89:e7: 40:7a:bb:c2:f3:07:6c:a2:84:af:20:c7:9f:af:e2:c3:49:11: 3e:05:9c:05:fc:a8:ec:3c:eb:0d:a5:9a:94:ce:2a:f5:ee:e6: dd:72:2f:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKDU5NTc1OUQxN0Y4QUNGNDRDQzU0RDkwNjA0NkMwMkY0 QjFEOURBQTIwHhcNMjUwNjAxMDAyNjEyWhcNMjUwNjA4MDAyNjEyWjAYMRYwFAYD VQQDEw02ODNiOWUyNC0zNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGmX0PxtRqnpCOjb0Gp11dvcUelCRBgOcuyIvWNYbfNveXOTsa5/8Vu038wl /zgV+GsIqQ77wTpvaLLt8CZWa3ywKFm3xdSRG7vvonRehUotpvZ9uCPJ+P4vDAFS hzfOCuvfO/L7f5KSvYizYTPT+Hp4GpibIfFzhIw6FGkVnq3/VscRT5i7LldTMGNV 0+2bRtqIyYZDl0fKAWatvbTWm9VdvTvDrsF9slql+uaAzSz+1Y2Vctybuu1H/NSK IWAx6DwOJuewvujWr/kb4DF7d/vcZeG5b7INIHJUoQlnrkgo88hHIDpKRbT26hQd 6UBBRKvtAjEI80W8XKto2FpBfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3oPAiu Sqki6v1PFqweZZ61fJUZMB8GA1UdIwQYMBaAFFlXWdF/is9EzFTZBgRsAvSx2dqi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8yRDc5MUQ0QzU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3owVE1WTmtHQkd3QzlMSFoy cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dWZFowWC1LejBUTVZOa0dCR3dDOUxIWjJxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8yRDc5MUQ0QzU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi9XVmRaMFgtS3ow VE1WTmtHQkd3QzlMSFoycUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLXbGqGitDYCWARrGtvXatKiuPXzZzOwnPCwJQeZGIDMqpM8HlWfFV ibMg7LwaEQTdv2b2PVjLBi/zGmW73KtWmpEZvUJmJSa0IAz0d2KxbhB+ROrBHr6/ wXmwVL9cOno9NctWqP8Mlkto5CbpUp9kUVPxHobTpVvMKJse+qfiIOjdvWVZMdgg gtVWlNUTiCDCJW9aitHZjTFw9xzuRNTg5SvXkP/QvOCnFAXsIUTOIk4ooBI0xaup xWFhp61+YokqrET4nSUwj3sY5LaieoHZyBA5cnGOiedAervC8wdsooSvIMefr+LD SRE+BZwF/KjsPOsNpZqUzir17ubdci+i -----END CERTIFICATE-----Generated at Mon Jun 2 20:34:43 2025 by rpki-client