$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: e6g56sfSn5yTO7wL9dyGRZhytFdmJ6DMzqp2Dn2pVrE= Subject key identifier: CA:5E:2F:AA:EA:97:33:53:10:F9:DA:CB:AB:A9:4E:17:67:1B:35:DE Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 0139 Signing time: Sat 31 May 2025 04:03:06 +0000 Manifest this update: Sat 31 May 2025 04:03:06 +0000 Manifest next update: Sat 07 Jun 2025 04:03:06 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: Fr6+dRy5oK/zzjsr9FtaHvw91U0CTLEibAbwQCJ7QeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: May 31 04:03:06 2025 GMT Not After : Jun 7 04:03:06 2025 GMT Subject: CN=683a7f7a-b505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:f5:1d:7f:8d:60:8f:de:33:66:39:3a:7a: 97:e0:5e:d4:7f:7d:8b:68:e6:d9:77:d8:a7:a2:38: ee:d4:a7:3d:c6:bd:ce:7f:a4:30:85:87:eb:cb:b8: 0f:42:e2:9f:d5:21:52:5a:d3:46:c5:fe:3e:7b:9b: 6d:1b:a9:47:4f:38:3c:40:c4:56:8b:41:a4:06:b2: a4:5d:65:6a:db:47:71:df:cb:f6:79:52:29:01:bb: fc:4b:c7:e2:06:8b:08:ca:29:b1:7a:b7:f3:f2:65: ae:4c:99:52:93:07:0f:1e:b1:2a:38:d3:3a:95:13: 15:3a:96:79:40:80:4a:e7:3a:88:e1:e5:09:cf:77: 7b:15:e1:19:25:5d:17:9b:b5:64:d2:9a:27:84:60: 49:2f:70:10:71:17:b5:7a:e3:f8:b2:67:0c:65:e9: c8:13:c7:c5:dc:c3:15:c4:64:a0:2f:af:24:0d:a9: 39:de:af:d1:a0:3e:86:0a:20:d0:91:e3:db:a2:c6: 0d:ba:91:3c:4f:c4:86:6f:90:67:2c:e2:df:be:24: 25:a3:e6:2a:dd:85:3b:9f:65:ac:f4:1e:b5:b7:2e: 07:ce:fd:41:d7:f4:96:f1:bb:ee:1f:e1:bb:62:bc: 72:b2:cd:8b:2a:77:c5:6a:0d:72:cd:db:f2:fc:ae: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:2F:AA:EA:97:33:53:10:F9:DA:CB:AB:A9:4E:17:67:1B:35:DE X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:31:18:63:6e:0f:81:fa:eb:77:69:53:2f:0b:d3:11:71:1a: 56:c7:9d:75:4b:62:16:7c:fb:d4:65:c4:03:e1:a1:f6:b1:0f: de:5f:5f:95:4d:bf:31:16:97:f3:42:0b:d2:2b:fc:a5:03:56: ad:79:41:55:ae:f2:1b:0f:22:c0:e2:6b:9e:1d:b0:39:64:40: 38:e0:b9:16:7b:4b:42:28:6e:05:08:40:f5:3e:52:c3:ce:22: 9b:01:ef:79:b1:6a:4e:76:7f:93:18:35:77:61:d8:1b:6a:bc: 78:7e:ed:68:68:4e:df:bc:ed:a0:55:1a:79:89:ff:aa:63:8c: ce:43:9a:6b:7b:ec:05:7d:fb:a4:9f:d2:63:45:94:3e:5f:7e: d7:33:dc:7d:f6:90:79:6a:4b:b9:3f:d5:60:7e:75:94:4d:f2: 8c:77:7b:ae:ab:ea:e1:ed:f7:76:f7:80:d0:87:dc:fd:96:f5: 16:00:de:34:29:7c:70:5c:aa:d1:fc:b1:fe:90:69:ff:86:e7: 62:bd:72:66:78:96:a2:47:c8:1a:ab:d8:6a:68:13:ba:fa:22: 21:ea:61:ac:f3:9e:8f:e4:01:da:83:90:c4:83:bf:5e:c8:d0: b0:41:b4:e5:9b:bc:50:24:30:ab:8e:25:82:2e:48:d3:08:f4: 42:2c:9b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjUwNTMxMDQwMzA2WhcNMjUwNjA3MDQwMzA2WjAYMRYwFAYD VQQDEw02ODNhN2Y3YS1iNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfX1HX+NYI/eM2Y5OnqX4F7Uf32LaObZd9inojju1Kc9xr3Of6QwhYfry7gP QuKf1SFSWtNGxf4+e5ttG6lHTzg8QMRWi0GkBrKkXWVq20dx38v2eVIpAbv8S8fi BosIyimxerfz8mWuTJlSkwcPHrEqONM6lRMVOpZ5QIBK5zqI4eUJz3d7FeEZJV0X m7Vk0ponhGBJL3AQcRe1euP4smcMZenIE8fF3MMVxGSgL68kDak53q/RoD6GCiDQ kePbosYNupE8T8SGb5BnLOLfviQlo+Yq3YU7n2Ws9B61ty4Hzv1B1/SW8bvuH+G7 Yrxyss2LKnfFag1yzdvy/K7cjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpeL6rq lzNTEPnay6upThdnGzXeMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0MRhjbg+B+ut3aVMvC9MRcRpWx511S2IWfPvUZcQD4aH2sQ/eX1+V Tb8xFpfzQgvSK/ylA1ateUFVrvIbDyLA4mueHbA5ZEA44LkWe0tCKG4FCED1PlLD ziKbAe95sWpOdn+TGDV3Ydgbarx4fu1oaE7fvO2gVRp5if+qY4zOQ5pre+wFffuk n9JjRZQ+X37XM9x99pB5aku5P9VgfnWUTfKMd3uuq+rh7fd294DQh9z9lvUWAN40 KXxwXKrR/LH+kGn/hudivXJmeJaiR8gaq9hqaBO6+iIh6mGs856P5AHag5DEg79e yNCwQbTlm7xQJDCrjiWCLkjTCPRCLJvv -----END CERTIFICATE-----Generated at Sat May 31 15:28:22 2025 by rpki-client