$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft File: wN6dhGshfHjdZIVanteaw9JxEI4.mft (raw, json) Hash identifier: /xisrJRTBCW1Sb4AxroHon+RtKUvVFvq17BjY+tYyjM= Subject key identifier: 5D:7E:A5:4D:D1:F7:B8:68:D0:F0:40:71:06:93:78:4A:2C:D4:06:EC Authority key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E Certificate issuer: /CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft Manifest number: 025F Signing time: Wed 11 Jun 2025 01:42:12 +0000 Manifest this update: Wed 11 Jun 2025 01:42:11 +0000 Manifest next update: Wed 18 Jun 2025 01:42:11 +0000 Files and hashes: 1: wN6dhGshfHjdZIVanteaw9JxEI4.crl (hash: /z0FHMdELAVO9BI2HWcBd40gHiBlE1UXg3JWpAWWgcQ=) 2: F3862312575011EDA38B8A6DC4F9AE02.roa (hash: XVi0UgAslGszWLxV3R+z7xjOlX78p11eVVDevVvqWnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC4, serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Validity Not Before: Jun 11 01:42:11 2025 GMT Not After : Jun 18 01:42:11 2025 GMT Subject: CN=6848def4-2041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:c4:59:75:0e:57:9d:26:fb:a8:71:f4:b8: fb:cd:aa:40:a2:d0:be:43:e2:38:c8:a1:be:4c:9a: 2c:9d:9b:ce:f9:ef:fe:51:12:2a:3b:80:eb:e6:f9: 32:4e:c5:e7:21:71:97:6b:af:5a:20:17:52:e4:b3: 78:6d:58:a2:5d:eb:e8:3e:be:59:91:8c:0e:98:c3: 57:64:9e:a1:d0:4a:ae:fb:9e:1c:91:9b:4d:60:45: 21:bf:31:fa:da:70:76:7d:b0:f1:b8:4b:70:22:1e: bd:bd:22:a1:a8:e9:f1:e0:79:26:dd:fa:e5:48:81: d5:a7:cc:d0:d8:e3:b2:af:f9:f3:d8:dc:7d:c0:b1: 65:b5:a8:1d:e8:19:34:45:eb:0f:3c:af:b0:5a:99: 7b:70:ee:03:0f:bf:a3:b2:65:87:86:47:89:db:ac: ea:9a:4f:00:09:10:c6:e3:ef:45:dd:61:a9:88:39: a5:7a:5f:58:bf:90:63:c9:73:bc:d6:7f:45:60:16: 57:38:d3:97:48:68:51:98:98:61:f1:4c:84:df:9c: 05:c0:88:18:19:4e:bb:9d:23:4d:be:d1:26:6f:e8: f3:21:87:27:10:18:90:26:45:47:41:f8:f8:79:ad: 43:2f:d1:24:95:68:a3:02:76:c3:5e:82:27:78:f8: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7E:A5:4D:D1:F7:B8:68:D0:F0:40:71:06:93:78:4A:2C:D4:06:EC X509v3 Authority Key Identifier: keyid:C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f4:74:43:78:53:86:ed:9b:ba:07:f3:f1:27:8d:f7:1a:cd: 1a:c7:45:90:7e:f3:33:31:6d:8e:86:a0:39:cd:99:cc:c2:2e: f1:0a:7b:ef:54:60:86:35:bb:16:b1:e1:81:41:6a:35:71:bf: e4:9f:d4:30:c5:c0:e5:56:ab:f1:38:f3:ed:e5:bf:ed:a8:5d: fb:b7:4d:b8:06:e9:6b:ae:eb:de:ce:d8:89:55:c7:48:55:5c: f5:69:0a:0d:c7:72:76:b6:40:72:2f:ca:14:3c:52:47:a0:de: 39:e7:54:e4:77:7e:09:f2:dc:6a:00:f7:b1:80:5c:49:f1:cb: ec:6b:3a:f6:55:45:8e:1d:3e:5b:c4:47:73:cf:99:90:bc:e9: 06:8a:67:6f:87:1c:cc:09:d2:79:e2:16:9c:ea:16:47:ce:a5: dc:ce:6e:a6:ed:d9:ca:65:94:b6:e7:79:e1:2c:ea:bd:e0:64: 88:3d:24:e3:33:b0:74:22:16:8b:4b:ff:a1:e9:06:3d:78:c3: a9:65:45:af:d5:2b:c8:93:b7:0b:bb:83:ee:a5:69:27:2c:8f: 93:a8:d4:e7:11:e6:df:b5:5d:9b:3c:66:dd:7d:74:75:55:71: 21:b1:69:66:8a:96:a4:b6:6f:0b:50:66:60:8c:0d:e1:1f:e8: 38:e7:0d:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzQxMTAvBgNVBAUTKEMwREU5RDg0NkIyMTdDNzhERDY0ODU1QTlFRDc5QUMz RDI3MTEwOEUwHhcNMjUwNjExMDE0MjExWhcNMjUwNjE4MDE0MjExWjAYMRYwFAYD VQQDEw02ODQ4ZGVmNC0yMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaLEWXUOV50m+6hx9Lj7zapAotC+Q+I4yKG+TJosnZvO+e/+URIqO4Dr5vky TsXnIXGXa69aIBdS5LN4bViiXevoPr5ZkYwOmMNXZJ6h0Equ+54ckZtNYEUhvzH6 2nB2fbDxuEtwIh69vSKhqOnx4Hkm3frlSIHVp8zQ2OOyr/nz2Nx9wLFltagd6Bk0 ResPPK+wWpl7cO4DD7+jsmWHhkeJ26zqmk8ACRDG4+9F3WGpiDmlel9Yv5BjyXO8 1n9FYBZXONOXSGhRmJhh8UyE35wFwIgYGU67nSNNvtEmb+jzIYcnEBiQJkVHQfj4 ea1DL9EklWijAnbDXoInePguVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1+pU3R 97ho0PBAcQaTeEos1AbsMB8GA1UdIwQYMBaAFMDenYRrIXx43WSFWp7XmsPScRCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDNC8wQjIyQTZGODFC QUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZIamRaSVZhbnRlYXc5SnhF STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dONmRoR3NoZkhqZFpJVmFudGVhdzlKeEVJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RURDNC8wQjIyQTZGODFCQUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZI amRaSVZhbnRlYXc5SnhFSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+9HRDeFOG7Zu6B/PxJ433Gs0ax0WQfvMzMW2OhqA5zZnMwi7xCnvv VGCGNbsWseGBQWo1cb/kn9QwxcDlVqvxOPPt5b/tqF37t024BulrruveztiJVcdI VVz1aQoNx3J2tkByL8oUPFJHoN4551Tkd34J8txqAPexgFxJ8cvsazr2VUWOHT5b xEdzz5mQvOkGimdvhxzMCdJ54hac6hZHzqXczm6m7dnKZZS253nhLOq94GSIPSTj M7B0IhaLS/+h6QY9eMOpZUWv1SvIk7cLu4PupWknLI+TqNTnEebftV2bPGbdfXR1 VXEhsWlmipaktm8LUGZgjA3hH+g45w1u -----END CERTIFICATE-----Generated at Thu Jun 12 13:17:01 2025 by rpki-client