$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: gsJ3av2lGy8NxYdX5hLlaWDSSxyf0xlFduCNFA95FNc= Subject key identifier: 67:AF:BB:A0:AD:60:D1:17:3A:1D:B3:09:46:D9:92:8F:1F:33:DD:29 Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 016E Signing time: Sat 31 May 2025 03:38:14 +0000 Manifest this update: Sat 31 May 2025 03:38:14 +0000 Manifest next update: Sat 07 Jun 2025 03:38:14 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: NMV+WRTcaQ0pJe2GfgGKCtTgnjXRm9+1hRs+y/XGE1E=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: S8YNNTIIBrTPm8ymERHQ4CPzLan04br8iQE6kJBXXTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: May 31 03:38:14 2025 GMT Not After : Jun 7 03:38:14 2025 GMT Subject: CN=683a79a6-3cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:ed:57:d4:a2:71:18:4d:d4:37:69:0b:a1: a7:a2:aa:bf:57:cd:70:d0:d3:40:be:4e:a9:ac:97: 6d:7d:2e:0b:68:39:e3:07:46:92:12:69:e0:1f:28: 41:64:cb:51:f1:bc:0e:23:e6:bb:48:e1:29:e4:18: 62:88:b6:11:ec:5d:28:15:35:7b:10:c9:c9:d1:d7: e9:3d:7b:12:8e:00:cd:8e:22:78:c1:08:40:29:52: c5:f3:58:40:25:b6:20:fe:90:0d:a9:16:0b:b7:63: fd:f6:20:1a:a1:4a:eb:6a:43:74:8a:a5:70:3d:f6: 39:11:e2:79:7b:60:68:ca:41:e7:2e:20:6b:74:d8: 11:9d:ee:3c:d3:0f:c9:23:6a:d7:6c:2f:5c:10:d2: 3f:93:64:52:9c:a9:cb:dd:70:88:7f:39:41:f9:a5: 30:b1:b0:35:c6:b9:7b:70:fe:2e:5c:db:95:36:e6: 8d:af:5e:8e:6e:79:4f:45:42:45:51:47:bb:47:e7: 75:a8:f7:28:ed:3c:3b:5b:34:54:3b:6c:b4:94:c1: e0:6e:0f:0a:73:28:2e:97:d5:c7:40:0c:c6:54:22: ae:0b:e2:99:f6:67:8b:50:d2:33:3e:39:b8:6e:86: 3e:a4:50:29:9f:06:c7:9d:21:5e:ec:ec:cb:33:6b: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AF:BB:A0:AD:60:D1:17:3A:1D:B3:09:46:D9:92:8F:1F:33:DD:29 X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a6:36:99:18:33:0d:4f:cf:20:76:7b:a4:4d:54:48:10:ef: d0:e4:6f:21:f6:a4:b8:26:00:7f:f2:66:c5:f3:0e:94:c0:4b: 1c:0e:61:5e:ba:68:ae:fd:a4:b9:24:9d:30:26:1a:66:b9:e2: 7e:6d:ac:81:5a:ec:c4:b9:7b:be:bb:76:dd:65:c7:22:d8:55: 03:29:7e:20:45:2f:9b:99:3b:f4:23:e1:bb:91:62:d2:95:ba: 2d:ce:0e:32:8e:ea:2d:35:2d:0c:14:6c:5d:1e:d9:da:f7:92: 66:4b:02:66:cc:9d:06:6e:5f:8b:b3:0e:5d:7a:21:b6:2a:20: 5b:9b:a7:98:31:bd:31:d9:8b:ec:dd:05:38:92:20:15:ab:41: 76:a2:dc:90:f6:d8:2e:57:1c:ac:95:e0:5b:41:21:bf:db:2d: 09:21:31:69:3f:fe:46:3e:d8:20:86:ce:11:e7:f4:c7:02:1c: 8f:50:d0:8a:e4:87:51:db:4c:12:df:56:43:4b:66:31:1c:35: e2:85:dc:7c:78:f9:0d:f1:46:cb:6f:39:3c:87:2a:2e:f6:31: 03:24:48:26:68:1f:97:a4:57:88:60:cb:e2:e3:e9:a3:13:bc: 6b:48:25:77:a3:3f:1c:15:d4:b3:b8:e3:75:ce:a7:e9:b7:0b: 5e:11:9d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUwNTMxMDMzODE0WhcNMjUwNjA3MDMzODE0WjAYMRYwFAYD VQQDEw02ODNhNzlhNi0zY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKbtV9SicRhN1DdpC6Gnoqq/V81w0NNAvk6prJdtfS4LaDnjB0aSEmngHyhB ZMtR8bwOI+a7SOEp5BhiiLYR7F0oFTV7EMnJ0dfpPXsSjgDNjiJ4wQhAKVLF81hA JbYg/pANqRYLt2P99iAaoUrrakN0iqVwPfY5EeJ5e2BoykHnLiBrdNgRne480w/J I2rXbC9cENI/k2RSnKnL3XCIfzlB+aUwsbA1xrl7cP4uXNuVNuaNr16ObnlPRUJF UUe7R+d1qPco7Tw7WzRUO2y0lMHgbg8Kcygul9XHQAzGVCKuC+KZ9meLUNIzPjm4 boY+pFApnwbHnSFe7OzLM2uFgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGevu6Ct YNEXOh2zCUbZko8fM90pMB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUpjaZGDMNT88gdnukTVRIEO/Q5G8h9qS4JgB/8mbF8w6UwEscDmFe umiu/aS5JJ0wJhpmueJ+bayBWuzEuXu+u3bdZcci2FUDKX4gRS+bmTv0I+G7kWLS lbotzg4yjuotNS0MFGxdHtna95JmSwJmzJ0Gbl+Lsw5deiG2KiBbm6eYMb0x2Yvs 3QU4kiAVq0F2otyQ9tguVxysleBbQSG/2y0JITFpP/5GPtgghs4R5/THAhyPUNCK 5IdR20wS31ZDS2YxHDXihdx8ePkN8UbLbzk8hyou9jEDJEgmaB+XpFeIYMvi4+mj E7xrSCV3oz8cFdSzuON1zqfptwteEZ0h -----END CERTIFICATE-----Generated at Sat May 31 17:12:57 2025 by rpki-client