$ rpki-client -vvf rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft File: 1WjiWa6pXRNIxmPjlfyma-wQwwk.mft (raw, json) Hash identifier: BoVTI0JallqQElz0m0SNg66NOI36gjdi3b/FLzYpk+k= Subject key identifier: A2:EB:74:3A:FE:1A:DF:E1:B8:C7:35:1E:3F:20:55:61:6D:E5:E6:13 Authority key identifier: D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 Certificate issuer: /CN=A914C086/serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft Manifest number: 3484 Signing time: Fri 30 May 2025 15:11:43 +0000 Manifest this update: Fri 30 May 2025 15:11:42 +0000 Manifest next update: Fri 06 Jun 2025 15:11:42 +0000 Files and hashes: 1: 1WjiWa6pXRNIxmPjlfyma-wQwwk.crl (hash: TMnSYNXn5hy/BYITNr/33Z5f3RM9lunKKTt2JH+N38c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C086, serialNumber=D568E259AEA95D1348C663E395FCA66BEC10C309 Validity Not Before: May 30 15:11:42 2025 GMT Not After : Jun 6 15:11:42 2025 GMT Subject: CN=6839caaf-83c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:0f:c3:df:9a:27:6c:79:c3:a9:03:9d:79: 8c:0e:e8:9b:55:b1:70:8d:9e:35:7d:a4:82:80:50: 31:be:42:3f:37:f2:e0:34:9c:08:5c:fe:f4:40:cf: 6c:02:cc:8d:cd:30:e2:fd:6f:26:36:7c:81:c6:57: 3a:bc:41:25:8d:eb:b0:b4:c2:cf:3d:54:0a:3a:34: 89:7d:e4:35:c3:47:6e:90:d2:47:bc:bf:c9:14:25: cc:96:ec:f2:5e:70:55:38:23:8b:80:cc:86:df:3e: f1:2c:0b:c1:1f:b5:d2:9f:b5:45:d3:c1:ce:c1:b3: b2:cc:69:7a:96:cb:61:c0:df:43:b9:8d:9e:c1:04: 95:28:df:dc:31:20:a8:d5:b1:b7:5e:4e:8a:df:92: 23:26:bb:0d:4d:d5:9e:5b:a2:9d:d0:19:b7:2f:1d: ff:4c:03:b1:2a:40:dc:08:e1:1d:9c:ff:81:b5:b6: ed:2e:6b:ee:65:20:8d:5c:86:c1:5a:9c:a6:d3:25: 10:c9:f2:06:51:b1:54:ea:26:35:6a:12:e1:73:18: f3:5a:44:df:c0:ad:8f:18:05:7a:45:11:82:42:d6: 74:be:a2:7c:1f:43:80:c6:84:d3:ed:57:e1:7b:b9: f6:25:28:93:02:d7:58:64:84:85:4d:9c:54:9f:33: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EB:74:3A:FE:1A:DF:E1:B8:C7:35:1E:3F:20:55:61:6D:E5:E6:13 X509v3 Authority Key Identifier: keyid:D5:68:E2:59:AE:A9:5D:13:48:C6:63:E3:95:FC:A6:6B:EC:10:C3:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WjiWa6pXRNIxmPjlfyma-wQwwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C086/A8114F581DA211E2A0558B9508B02CD2/1WjiWa6pXRNIxmPjlfyma-wQwwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:79:9f:f7:38:ee:c7:c2:bb:7b:2a:45:5d:91:bd:e0:4e:59: 35:17:5d:46:cc:3c:4f:eb:0a:ed:96:2c:8e:1d:58:12:9a:03: d0:d3:35:eb:5b:df:80:94:0b:d9:78:23:29:c9:f4:59:73:21: 13:95:b5:ac:8d:db:fa:e0:f0:90:53:20:91:78:01:9a:70:66: 73:b2:46:7c:20:ee:eb:f3:96:dd:04:90:ba:f4:91:c9:19:e8: 44:e2:4b:75:f1:44:ff:4a:e9:56:44:bb:2b:27:2e:0b:d1:72: 2b:b9:21:23:2d:9d:f6:58:01:2f:e9:b3:56:8e:1e:98:c3:5f: 5c:26:8e:c2:e5:87:b3:c2:3d:e8:97:4d:cc:3a:ef:ab:6f:a9: 81:a0:ae:c5:80:2b:6c:11:a1:93:45:a5:b7:e9:f5:2d:0e:83: 8f:30:32:d9:5b:57:0b:8e:c5:45:6d:f7:3a:72:ce:36:df:00: 79:ce:ab:f2:ea:6f:3f:74:c4:a3:e9:f9:4d:95:05:7e:5f:0a: fb:b7:57:81:72:ac:66:7b:12:c0:50:a2:54:8e:d1:8b:23:46: 73:b5:54:6e:f0:6c:a7:cd:61:05:06:bb:1b:72:0b:e1:dd:36: 05:55:c0:46:13:80:7f:de:40:91:0b:c0:48:b8:f2:fd:36:d3: 14:b7:8e:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwODYxMTAvBgNVBAUTKEQ1NjhFMjU5QUVBOTVEMTM0OEM2NjNFMzk1RkNBNjZC RUMxMEMzMDkwHhcNMjUwNTMwMTUxMTQyWhcNMjUwNjA2MTUxMTQyWjAYMRYwFAYD VQQDEw02ODM5Y2FhZi04M2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ywPw9+aJ2x5w6kDnXmMDuibVbFwjZ41faSCgFAxvkI/N/LgNJwIXP70QM9s AsyNzTDi/W8mNnyBxlc6vEEljeuwtMLPPVQKOjSJfeQ1w0dukNJHvL/JFCXMluzy XnBVOCOLgMyG3z7xLAvBH7XSn7VF08HOwbOyzGl6lsthwN9DuY2ewQSVKN/cMSCo 1bG3Xk6K35IjJrsNTdWeW6Kd0Bm3Lx3/TAOxKkDcCOEdnP+BtbbtLmvuZSCNXIbB Wpym0yUQyfIGUbFU6iY1ahLhcxjzWkTfwK2PGAV6RRGCQtZ0vqJ8H0OAxoTT7Vfh e7n2JSiTAtdYZISFTZxUnzPlZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLrdDr+ Gt/huMc1Hj8gVWFt5eYTMB8GA1UdIwQYMBaAFNVo4lmuqV0TSMZj45X8pmvsEMMJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzA4Ni9BODExNEY1ODFE QTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhSTkl4bVBqbGZ5bWEtd1F3 d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXamlXYTZwWFJOSXhtUGpsZnltYS13UXd3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzA4Ni9BODExNEY1ODFEQTIxMUUyQTA1NThCOTUwOEIwMkNEMi8xV2ppV2E2cFhS Tkl4bVBqbGZ5bWEtd1F3d2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCceZ/3OO7Hwrt7KkVdkb3gTlk1F11GzDxP6wrtliyOHVgSmgPQ0zXr W9+AlAvZeCMpyfRZcyETlbWsjdv64PCQUyCReAGacGZzskZ8IO7r85bdBJC69JHJ GehE4kt18UT/SulWRLsrJy4L0XIruSEjLZ32WAEv6bNWjh6Yw19cJo7C5Yezwj3o l03MOu+rb6mBoK7FgCtsEaGTRaW36fUtDoOPMDLZW1cLjsVFbfc6cs423wB5zqvy 6m8/dMSj6flNlQV+Xwr7t1eBcqxmexLAUKJUjtGLI0ZztVRu8GynzWEFBrsbcgvh 3TYFVcBGE4B/3kCRC8BIuPL9NtMUt47U -----END CERTIFICATE-----Generated at Sat May 31 17:03:27 2025 by rpki-client