$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: shWnT0YDGGb+xhQPWZc0XzCCmM/7l0VLtmiCxOXYTpw= Subject key identifier: 41:93:FB:C0:72:A0:A6:5A:82:C9:5F:38:32:58:1A:6C:55:D2:76:A7 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C0F Signing time: Fri 30 May 2025 18:51:42 +0000 Manifest this update: Fri 30 May 2025 18:51:42 +0000 Manifest next update: Fri 06 Jun 2025 18:51:42 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: DZpN64WEuH5XDpn8BTN/e+ojK5g3YPMS3iuGBWsRPEQ=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3123 (0xc33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: May 30 18:51:42 2025 GMT Not After : Jun 6 18:51:42 2025 GMT Subject: CN=6839fe3e-ebf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:18:62:c5:6b:32:3f:cd:cc:55:cf:80:72: 04:be:8e:82:35:6f:71:1b:33:a1:da:8c:52:ad:de: af:c1:40:91:ae:e8:18:af:4e:18:61:fd:db:75:a6: aa:65:43:d2:df:9e:ee:39:22:92:4f:ea:aa:75:78: f0:8b:1f:78:7d:3d:93:5e:d1:53:c5:d5:d2:e9:fe: ef:ad:73:99:9b:2c:5d:3d:c0:b3:c0:f1:91:0b:3c: dd:9b:d2:ec:e0:66:9f:94:03:55:89:34:4d:40:4a: 28:b3:dd:53:d3:db:ea:bd:1e:e1:bb:0f:1e:f6:8d: c2:71:db:69:08:cf:2d:fe:9d:66:51:6e:85:b1:a6: 79:0f:98:69:23:38:dc:2f:c6:a4:f2:79:ec:43:f8: c7:25:f9:33:c9:d8:a5:d4:6f:c6:01:69:67:1c:d9: bc:eb:61:4f:4f:bd:f4:ce:65:6b:70:ca:92:f1:34: 00:2c:22:88:bb:3d:84:ee:73:1b:cf:f8:ca:04:a4: bd:20:de:46:53:53:fb:f3:29:c3:08:d9:fa:57:b7: bd:8d:27:8b:81:24:45:09:15:f6:c5:06:77:cb:e8: 92:a7:f5:ae:6c:5d:5e:8d:12:e1:53:2d:38:18:3a: f9:e7:81:03:79:59:83:96:a5:03:38:a6:a0:e9:ab: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:93:FB:C0:72:A0:A6:5A:82:C9:5F:38:32:58:1A:6C:55:D2:76:A7 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:69:d8:68:11:d7:30:44:57:32:ac:a1:49:03:00:01:65:3b: 69:ff:08:86:4b:86:97:1a:23:29:e5:53:2a:74:89:ac:3a:94: 4f:2b:dc:99:24:bd:08:13:77:aa:fc:85:e4:9b:8b:5a:86:7b: a7:52:e9:c1:1d:08:b7:a5:3d:4f:ad:db:8f:af:5c:2d:66:ca: 22:88:9b:9c:54:8c:74:dd:06:be:1a:4b:91:9b:7e:1f:42:eb: 8a:e5:ad:74:d1:7c:b9:93:cd:18:f5:06:b2:42:6e:ed:e9:dd: 92:bb:84:2d:0d:60:40:01:d6:11:bf:81:c5:6d:c9:0e:54:51: 6a:cc:73:2b:11:3e:71:32:d7:ad:fe:3f:c0:83:ac:87:0b:43: 60:e5:aa:fb:f2:78:9e:ce:43:71:0d:3a:9c:fd:0e:f7:cc:8d: c7:2d:5c:2b:f5:a6:aa:52:3d:e5:e2:8f:b8:00:49:6b:92:39: 3f:5a:11:a8:48:24:7f:14:1b:15:91:42:c1:b3:84:b3:64:3f: 73:00:7e:6e:82:bb:67:a8:c6:98:6f:69:ac:72:08:b3:68:89: fb:e9:43:9b:4d:e7:ea:14:7d:e9:b5:25:35:41:13:96:e4:85: 8a:59:5d:63:37:fa:9f:d1:a5:9e:36:5f:bb:bd:0b:e3:bc:c7: 71:ea:55:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwNTMwMTg1MTQyWhcNMjUwNjA2MTg1MTQyWjAYMRYwFAYD VQQDEw02ODM5ZmUzZS1lYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH4YYsVrMj/NzFXPgHIEvo6CNW9xGzOh2oxSrd6vwUCRrugYr04YYf3bdaaq ZUPS357uOSKST+qqdXjwix94fT2TXtFTxdXS6f7vrXOZmyxdPcCzwPGRCzzdm9Ls 4GaflANViTRNQEoos91T09vqvR7huw8e9o3CcdtpCM8t/p1mUW6FsaZ5D5hpIzjc L8ak8nnsQ/jHJfkzydil1G/GAWlnHNm862FPT730zmVrcMqS8TQALCKIuz2E7nMb z/jKBKS9IN5GU1P78ynDCNn6V7e9jSeLgSRFCRX2xQZ3y+iSp/WubF1ejRLhUy04 GDr554EDeVmDlqUDOKag6avIUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGT+8By oKZagslfODJYGmxV0nanMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBadhoEdcwRFcyrKFJAwABZTtp/wiGS4aXGiMp5VMqdImsOpRPK9yZ JL0IE3eq/IXkm4tahnunUunBHQi3pT1PrduPr1wtZsoiiJucVIx03Qa+GkuRm34f QuuK5a100Xy5k80Y9QayQm7t6d2Su4QtDWBAAdYRv4HFbckOVFFqzHMrET5xMtet /j/Ag6yHC0Ng5ar78niezkNxDTqc/Q73zI3HLVwr9aaqUj3l4o+4AElrkjk/WhGo SCR/FBsVkULBs4SzZD9zAH5ugrtnqMaYb2mscgizaIn76UObTefqFH3ptSU1QROW 5IWKWV1jN/qf0aWeNl+7vQvjvMdx6lUr -----END CERTIFICATE-----Generated at Sat May 31 17:23:37 2025 by rpki-client