$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft File: vWukX_AnbCxgSgM7B82k5MDfFdc.mft (raw, json) Hash identifier: GisBM68XqAbv8oWrGMMLcKM1Bn21qLcUxp6c8u9ogHk= Subject key identifier: D1:12:96:6F:22:82:E0:49:E6:B3:1D:61:70:00:18:14:6F:39:03:0D Authority key identifier: BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7 Certificate issuer: /CN=A9159B6F/serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft Manifest number: ED Signing time: Sat 31 May 2025 04:56:47 +0000 Manifest this update: Sat 31 May 2025 04:56:47 +0000 Manifest next update: Sat 07 Jun 2025 04:56:47 +0000 Files and hashes: 1: vWukX_AnbCxgSgM7B82k5MDfFdc.crl (hash: dFBP1tM9C0MUYrRs/AJ7ld25PVTUCOPq9aa24IVqtY0=) 2: F56322CCD09C11EE94431F80C4F9AE02.roa (hash: VBkLC1Ug6+V5ASssgia7rSJZ2O30hfTWr/78uTsbXl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=BD6BA45FF0276C2C604A033B07CDA4E4C0DF15D7 Validity Not Before: May 31 04:56:47 2025 GMT Not After : Jun 7 04:56:47 2025 GMT Subject: CN=683a8c0f-7fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:41:f5:70:be:72:d9:87:af:67:83:35:77: f4:cd:8c:63:7b:aa:3f:5a:c3:33:72:22:f7:d8:f3: 57:e2:6a:c3:54:ed:a5:b3:f5:45:1e:7f:40:ae:2e: 73:ae:66:68:91:4f:81:7f:5a:4b:af:86:ac:d9:d9: 66:42:2e:ad:e6:cf:c4:2b:a9:25:56:3b:15:22:1b: 73:53:f9:ce:af:51:0a:7d:c8:87:62:d9:04:e9:0f: 10:7f:1f:96:61:c5:f3:18:12:40:56:4c:86:80:6b: 10:b1:6e:96:3c:e7:40:e8:8d:f4:f2:b3:d7:03:5c: c0:29:0f:d7:a0:17:24:9f:a6:a7:48:ef:fd:0a:1c: 30:9a:9b:35:6e:a3:c8:54:fc:92:93:c8:7d:57:c8: fb:8f:ff:c7:bb:62:06:63:c9:6a:f2:ed:61:90:7e: 9f:4e:0a:5a:02:74:db:2c:74:0e:92:4e:2e:ed:11: 9e:d6:b0:aa:95:07:69:d0:8c:a1:56:72:bc:29:d2: 4e:22:59:d7:61:9e:fb:9c:e7:6a:ff:6f:11:5b:45: 69:dd:92:79:70:fa:ed:33:95:04:7a:e2:be:4f:07: 2e:31:5e:15:97:3f:2e:87:2e:f2:ff:e4:e8:c5:ec: a7:3c:b1:0f:4f:b0:5c:38:9e:4c:88:6a:ea:12:e1: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:96:6F:22:82:E0:49:E6:B3:1D:61:70:00:18:14:6F:39:03:0D X509v3 Authority Key Identifier: keyid:BD:6B:A4:5F:F0:27:6C:2C:60:4A:03:3B:07:CD:A4:E4:C0:DF:15:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWukX_AnbCxgSgM7B82k5MDfFdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/348AA908D09C11EE80AB8D7EC4F9AE02/vWukX_AnbCxgSgM7B82k5MDfFdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:9e:ac:07:e5:6a:68:4c:c1:a1:da:7a:2e:b6:bf:3c:bc:eb: 4f:4f:c2:22:b7:f7:a9:dc:4e:ce:07:b1:ab:fc:45:97:92:8e: 24:24:1e:bb:f4:fb:19:95:c7:a1:84:83:f7:13:a9:40:c9:01: c9:2a:4a:7c:4f:f2:43:4f:f0:85:5e:ff:f8:0f:40:1c:e6:0a: 9c:15:9e:91:53:61:5c:8f:0b:f9:b9:72:dc:e6:ea:ce:65:d3: eb:78:90:67:cc:85:a1:25:22:68:23:cc:c2:7c:8c:e5:09:9b: 08:86:9c:c2:ce:6b:9d:1f:8c:7f:a7:35:34:ff:8c:cf:8e:5b: 4e:14:4f:7a:81:97:0d:cd:47:29:d7:29:40:00:04:fe:25:38: d6:cf:2a:3a:72:72:50:90:03:ef:f9:01:f3:e3:b8:06:6d:98: a8:36:a6:8f:46:4a:81:17:c7:c8:a7:a4:a4:a6:69:57:7d:7e: af:54:6d:97:b5:30:d9:75:ea:ce:bf:28:2d:95:09:c3:f2:ff: e9:64:7b:fe:68:1f:7c:03:fa:46:b0:a7:bc:cc:66:64:d6:28: 6a:2a:d8:2d:6a:83:8e:b0:c1:48:b5:9d:54:cc:ae:67:db:a3: 95:8b:df:d9:f6:8e:d5:ed:6d:f7:c6:56:1b:1d:8e:89:b0:ee: bc:e8:2f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKEJENkJBNDVGRjAyNzZDMkM2MDRBMDMzQjA3Q0RBNEU0 QzBERjE1RDcwHhcNMjUwNTMxMDQ1NjQ3WhcNMjUwNjA3MDQ1NjQ3WjAYMRYwFAYD VQQDEw02ODNhOGMwZi03ZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdhB9XC+ctmHr2eDNXf0zYxje6o/WsMzciL32PNX4mrDVO2ls/VFHn9Ari5z rmZokU+Bf1pLr4as2dlmQi6t5s/EK6klVjsVIhtzU/nOr1EKfciHYtkE6Q8Qfx+W YcXzGBJAVkyGgGsQsW6WPOdA6I308rPXA1zAKQ/XoBckn6anSO/9Chwwmps1bqPI VPySk8h9V8j7j//Hu2IGY8lq8u1hkH6fTgpaAnTbLHQOkk4u7RGe1rCqlQdp0Iyh VnK8KdJOIlnXYZ77nOdq/28RW0Vp3ZJ5cPrtM5UEeuK+TwcuMV4Vlz8uhy7y/+To xeynPLEPT7BcOJ5MiGrqEuFMtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNESlm8i guBJ5rMdYXAAGBRvOQMNMB8GA1UdIwQYMBaAFL1rpF/wJ2wsYEoDOwfNpOTA3xXX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8zNDhBQTkwOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi92V3VrWF9BbmJDeGdTZ003QjgyazVNRGZG ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXdWtYX0FuYkN4Z1NnTTdCODJrNU1EZkZkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUI2Ri8zNDhBQTkwOEQwOUMxMUVFODBBQjhEN0VDNEY5QUUwMi92V3VrWF9BbmJD eGdTZ003QjgyazVNRGZGZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBinqwH5WpoTMGh2noutr88vOtPT8Iit/ep3E7OB7Gr/EWXko4kJB67 9PsZlcehhIP3E6lAyQHJKkp8T/JDT/CFXv/4D0Ac5gqcFZ6RU2Fcjwv5uXLc5urO ZdPreJBnzIWhJSJoI8zCfIzlCZsIhpzCzmudH4x/pzU0/4zPjltOFE96gZcNzUcp 1ylAAAT+JTjWzyo6cnJQkAPv+QHz47gGbZioNqaPRkqBF8fIp6SkpmlXfX6vVG2X tTDZderOvygtlQnD8v/pZHv+aB98A/pGsKe8zGZk1ihqKtgtaoOOsMFItZ1UzK5n 26OVi9/Z9o7V7W33xlYbHY6JsO686C9m -----END CERTIFICATE-----Generated at Sat May 31 16:27:02 2025 by rpki-client