$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft File: wvw-GxtUPr1I39pZHcJRgiT5W38.mft (raw, json) Hash identifier: yBcjkHboRH5dW2tH2yXhP4JvEQ+UQZiNIeicPL9itqQ= Subject key identifier: C5:A5:9A:17:42:57:66:C5:34:BD:FA:D4:F4:D9:72:D7:85:60:81:98 Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F Certificate issuer: /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft Manifest number: 0233 Signing time: Sun 15 Jun 2025 01:35:42 +0000 Manifest this update: Sun 15 Jun 2025 01:35:42 +0000 Manifest next update: Sun 22 Jun 2025 01:35:42 +0000 Files and hashes: 1: wvw-GxtUPr1I39pZHcJRgiT5W38.crl (hash: kHfsH2wUNiiySUG2ttNUqx1hI+at4F5pxnWz6G352ew=) 2: 6B0DCABA80D111EFA7138B77C4F9AE02.roa (hash: XrzD9gHCwm8eB2YxyR3P7eTPrT9KRU3rPXHkNDhO2w8=) 3: B0EBD14E80D111EFABEC5878C4F9AE02.roa (hash: KwzZR+D6Yo3n0RMq2SPd2PCh/+pc1niACNwCgSeZryU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171524, serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F Validity Not Before: Jun 15 01:35:42 2025 GMT Not After : Jun 22 01:35:42 2025 GMT Subject: CN=684e236e-f939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:41:48:47:57:a4:58:3c:13:eb:73:cd:bf: 7d:3b:7d:63:84:f6:c1:92:53:69:2d:66:e3:6f:e2: 90:e9:17:ba:ff:d5:d8:fd:d3:4a:60:71:f5:60:b3: 12:0a:e8:b9:2f:67:de:62:bf:e5:2a:56:19:08:0a: e9:5d:46:38:9b:d9:8d:b8:55:f8:b0:d0:b1:11:1c: b7:b7:64:fd:ee:cb:2e:eb:41:37:d0:17:25:03:4b: b6:dc:10:ef:e0:2d:a9:3a:08:86:c4:c1:14:cc:d7: 3b:de:f3:a4:c9:cd:76:6e:58:18:27:de:51:94:22: f2:be:9f:41:64:c8:09:23:55:06:75:69:09:fb:3d: ae:15:ce:a0:57:55:5d:b9:0c:a0:a5:ff:1f:24:0d: 2c:92:23:56:1b:18:eb:6c:07:c6:41:f7:18:06:82: 2a:a9:f1:4e:e2:1d:a2:06:d2:5a:47:c1:c0:0c:74: 5d:1d:ef:e2:33:b9:0d:5a:13:b3:7f:ff:c2:9f:03: 68:e7:7b:42:68:16:1b:a0:b2:09:3b:3a:4b:c5:17: 6d:7f:5c:a7:1f:c8:70:ac:2f:da:ad:d8:41:bf:a6: 67:b5:c5:a2:bc:cc:6d:31:51:de:6f:b0:5d:ef:0a: cd:1d:16:a2:87:45:95:5c:b4:1a:61:03:2b:13:cf: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A5:9A:17:42:57:66:C5:34:BD:FA:D4:F4:D9:72:D7:85:60:81:98 X509v3 Authority Key Identifier: keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7b:e9:3e:16:bf:6b:f0:07:a8:e9:e4:64:44:7f:d3:48:34: 3a:11:ae:d1:6c:4f:b9:67:ce:00:63:05:e9:a3:5d:c6:09:7d: db:71:97:6b:d1:cd:9b:0b:d1:bc:43:d2:c5:bf:d2:d4:d0:78: 50:c9:7b:9f:1e:97:bf:4e:77:3a:a7:e1:f3:6d:13:3b:67:e9: 44:62:68:50:17:80:b4:42:45:e3:60:ec:6e:e7:9b:af:8c:54: b2:5b:d8:4e:d7:25:2e:92:44:fa:55:c5:b3:c3:ad:bd:3a:5f: 76:bb:c9:9e:cb:72:a2:00:fb:82:1f:8f:0e:ff:f8:a0:46:76: 5d:93:3d:f4:d2:95:4b:cd:0e:74:4a:8c:83:b6:6a:7f:2a:9d: 68:a9:5a:24:37:4d:2e:22:fa:fb:66:76:4f:e4:16:d4:28:62: 04:89:e9:78:ba:ed:2c:60:8a:e1:b0:5f:7f:8f:a8:77:c0:80: 13:0c:cb:0a:16:c1:c4:e0:90:46:08:78:3f:36:e5:e0:b5:cc: 12:8e:af:f5:e7:f1:4e:e3:0f:6c:f5:b9:e0:2a:49:13:e5:4d: 04:5a:c5:d3:de:c9:4e:b1:2d:a3:01:6e:57:16:9f:2c:60:8c: bd:61:d3:84:e3:6a:97:7c:fe:99:b4:7a:2d:b6:8e:72:78:d3: 16:1f:ea:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1MjQxMTAvBgNVBAUTKEMyRkMzRTFCMUI1NDNFQkQ0OERGREE1OTFEQzI1MTgy MjRGOTVCN0YwHhcNMjUwNjE1MDEzNTQyWhcNMjUwNjIyMDEzNTQyWjAYMRYwFAYD VQQDEw02ODRlMjM2ZS1mOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc9BSEdXpFg8E+tzzb99O31jhPbBklNpLWbjb+KQ6Re6/9XY/dNKYHH1YLMS Cui5L2feYr/lKlYZCArpXUY4m9mNuFX4sNCxERy3t2T97ssu60E30BclA0u23BDv 4C2pOgiGxMEUzNc73vOkyc12blgYJ95RlCLyvp9BZMgJI1UGdWkJ+z2uFc6gV1Vd uQygpf8fJA0skiNWGxjrbAfGQfcYBoIqqfFO4h2iBtJaR8HADHRdHe/iM7kNWhOz f//CnwNo53tCaBYboLIJOzpLxRdtf1ynH8hwrC/ardhBv6ZntcWivMxtMVHeb7Bd 7wrNHRaih0WVXLQaYQMrE89lywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWlmhdC V2bFNL361PTZcteFYIGYMB8GA1UdIwQYMBaAFML8PhsbVD69SN/aWR3CUYIk+Vt/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTUyNC80OTFGMDJERTJD NzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVByMUkzOXBaSGNKUmdpVDVX MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2dy1HeHRVUHIxSTM5cFpIY0pSZ2lUNVczOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTUyNC80OTFGMDJERTJDNzgxMUVEOTVGM0RFMTRDNEY5QUUwMi93dnctR3h0VVBy MUkzOXBaSGNKUmdpVDVXMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0e+k+Fr9r8Aeo6eRkRH/TSDQ6Ea7RbE+5Z84AYwXpo13GCX3bcZdr 0c2bC9G8Q9LFv9LU0HhQyXufHpe/Tnc6p+HzbRM7Z+lEYmhQF4C0QkXjYOxu55uv jFSyW9hO1yUukkT6VcWzw629Ol92u8mey3KiAPuCH48O//igRnZdkz300pVLzQ50 SoyDtmp/Kp1oqVokN00uIvr7ZnZP5BbUKGIEiel4uu0sYIrhsF9/j6h3wIATDMsK FsHE4JBGCHg/NuXgtcwSjq/15/FO4w9s9bngKkkT5U0EWsXT3slOsS2jAW5XFp8s YIy9YdOE42qXfP6ZtHotto5yeNMWH+rp -----END CERTIFICATE-----Generated at Sun Jun 15 18:59:11 2025 by rpki-client