$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft File: wWHphZYf2VfmZ-8ujKp3N_qShdE.mft (raw, json) Hash identifier: KAcbIqik0hxepbsJ3I5RWihMz/AVBJHq0HhucM9FQ4k= Subject key identifier: F2:01:B6:63:49:91:D2:65:66:2D:77:BF:92:26:E7:86:02:39:0D:4A Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 Certificate issuer: /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft Manifest number: 0184 Signing time: Sat 31 May 2025 03:19:29 +0000 Manifest this update: Sat 31 May 2025 03:19:28 +0000 Manifest next update: Sat 07 Jun 2025 03:19:28 +0000 Files and hashes: 1: wWHphZYf2VfmZ-8ujKp3N_qShdE.crl (hash: L2dybo+Xn56zs71+xpXSqIBaPYSN4wRxRNuh5wHdy+Y=) 2: 67DC0600EFF411EDB617DD7DC4F9AE02.roa (hash: Jrs9iVpBkhWObUZZRk09z2kiCsYhTgr/jMdFkC3tj10=) 3: AB6EF82E29BC11F09DD00E61C4F9AE02.roa (hash: 1jJkOHpbFqLU6pLY6mTAFBdhrTjIN6aPx3N6rDr9+Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E323, serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Validity Not Before: May 31 03:19:28 2025 GMT Not After : Jun 7 03:19:28 2025 GMT Subject: CN=683a7540-d261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:69:e3:84:1e:90:55:8c:91:37:18:72:c0: ad:67:70:e8:a1:1c:7c:c8:8f:cb:63:5b:a7:b1:eb: cb:2b:27:51:a1:38:8e:16:e1:be:64:e1:ec:1a:0b: 84:0f:4f:dd:e6:2d:8a:00:f9:93:42:6a:97:a9:88: ac:39:80:b6:be:41:11:d0:95:d1:c9:04:43:b3:99: d1:4b:63:bf:f9:8c:67:2c:6c:e7:e8:a2:b0:67:c3: eb:f9:98:c1:21:75:87:57:91:f8:8b:ea:8e:9d:64: 7c:cf:97:c9:74:67:a7:7d:88:2d:93:b7:87:ce:d6: 25:55:b8:7e:02:4d:24:93:d8:c7:d5:b5:96:d5:bc: 5a:ae:d3:43:d4:cf:1f:09:cc:3b:03:aa:18:7d:01: db:c3:3f:b7:c4:e8:ee:5a:4a:ac:ef:a0:9b:0a:f7: f8:33:77:9a:ed:d1:44:a2:70:f0:47:b2:d0:70:e5: 25:ea:51:10:ad:08:5f:16:da:6e:88:ab:d2:30:22: 3a:c2:a2:62:08:bd:e3:11:e3:48:7f:fc:22:b7:db: fd:10:ad:ee:cd:6c:86:73:cd:48:fa:f8:8c:c2:8b: ae:9b:9e:8b:ca:be:a4:33:66:06:9e:f3:aa:4e:29: c5:c6:79:05:ba:d4:4c:b2:e9:92:ef:b5:79:e5:a0: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:01:B6:63:49:91:D2:65:66:2D:77:BF:92:26:E7:86:02:39:0D:4A X509v3 Authority Key Identifier: keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2a:10:87:05:6e:78:50:c3:f0:cf:09:97:63:b9:27:ea:83: c7:bc:b3:2b:a4:94:9e:2f:58:8f:57:83:7a:09:6b:cc:f3:38: 83:1d:b5:fc:68:57:ca:19:fe:32:98:fd:e9:36:6d:e9:95:a0: a5:81:cb:ac:5a:63:cb:d9:d1:8e:41:38:f9:bc:80:7d:19:f7: 67:66:5a:6e:4a:b7:04:d0:95:24:ff:a3:74:27:da:99:47:00: 7d:df:99:d7:ff:9c:f7:45:9c:9e:49:0b:8a:7e:7e:24:76:ed: 10:8d:35:71:e6:fc:dc:cd:a0:87:e6:67:12:82:97:6b:9a:39: 94:e8:cf:f6:a5:ed:51:08:98:f7:da:fd:2f:dc:b4:cd:cf:ba: dd:81:bc:dc:71:2a:4a:42:c5:5f:a4:83:da:f1:42:8f:0d:5e: dc:ca:d6:f0:bb:1a:cc:8b:7b:cf:ca:7a:e0:b7:f8:ad:84:ff: 43:fa:a2:44:66:be:a0:a7:b5:a2:e6:d3:b9:7d:20:2c:d7:f1: e1:e1:36:1c:a4:1f:71:81:3c:da:10:01:56:a5:7e:13:93:34: 25:b2:e2:59:91:7f:b1:dc:5b:50:9f:53:b6:54:7c:1c:16:f4: 3b:a7:4c:cb:9c:99:8b:b4:f0:c8:ee:05:f1:07:ef:bb:0a:1d: a2:73:89:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3 RkE5Mjg1RDEwHhcNMjUwNTMxMDMxOTI4WhcNMjUwNjA3MDMxOTI4WjAYMRYwFAYD VQQDEw02ODNhNzU0MC1kMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0Vp44QekFWMkTcYcsCtZ3DooRx8yI/LY1unsevLKydRoTiOFuG+ZOHsGguE D0/d5i2KAPmTQmqXqYisOYC2vkER0JXRyQRDs5nRS2O/+YxnLGzn6KKwZ8Pr+ZjB IXWHV5H4i+qOnWR8z5fJdGenfYgtk7eHztYlVbh+Ak0kk9jH1bWW1bxartND1M8f Ccw7A6oYfQHbwz+3xOjuWkqs76CbCvf4M3ea7dFEonDwR7LQcOUl6lEQrQhfFtpu iKvSMCI6wqJiCL3jEeNIf/wit9v9EK3uzWyGc81I+viMwouum56Lyr6kM2YGnvOq TinFxnkFutRMsumS77V55aBjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIBtmNJ kdJlZi13v5Im54YCOQ1KMB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTMyMy9FN0ZDMkYxRUVGRUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJW Zm1aLTh1aktwM05fcVNoZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjKhCHBW54UMPwzwmXY7kn6oPHvLMrpJSeL1iPV4N6CWvM8ziDHbX8 aFfKGf4ymP3pNm3plaClgcusWmPL2dGOQTj5vIB9GfdnZlpuSrcE0JUk/6N0J9qZ RwB935nX/5z3RZyeSQuKfn4kdu0QjTVx5vzczaCH5mcSgpdrmjmU6M/2pe1RCJj3 2v0v3LTNz7rdgbzccSpKQsVfpIPa8UKPDV7cytbwuxrMi3vPynrgt/ithP9D+qJE Zr6gp7Wi5tO5fSAs1/Hh4TYcpB9xgTzaEAFWpX4TkzQlsuJZkX+x3FtQn1O2VHwc FvQ7p0zLnJmLtPDI7gXxB++7Ch2ic4mH -----END CERTIFICATE-----Generated at Sat May 31 16:42:03 2025 by rpki-client