$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json) Hash identifier: J4RVjynGS9xgaDGRkoimowzrrH52l9q4R6Vi65CEaLU= Subject key identifier: 9F:4B:CE:EC:34:23:4C:02:15:FF:CC:52:E2:C0:5F:F0:1F:E1:B8:A6 Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft Manifest number: 2A Signing time: Sat 31 May 2025 07:18:57 +0000 Manifest this update: Sat 31 May 2025 07:18:56 +0000 Manifest next update: Sat 07 Jun 2025 07:18:56 +0000 Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: N9RpBoYTP3IXLmJrXfZBPvb30enbKZQvNrzHFaQV+FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Validity Not Before: May 31 07:18:56 2025 GMT Not After : Jun 7 07:18:56 2025 GMT Subject: CN=683aad61-b751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:77:74:6a:94:8a:7c:59:98:76:10:6e:0d:c9: fd:98:23:9e:b9:33:cc:71:63:ed:88:f6:c7:28:6f: 45:91:6a:d8:1d:71:eb:04:2a:b4:c0:f0:1c:9e:a0: c2:5e:24:52:35:0c:39:30:85:33:21:12:f6:c5:1f: 85:53:d0:08:d3:62:df:81:84:a6:e2:dd:8d:d5:62: 40:7b:17:ec:bf:db:f2:19:55:41:fc:9c:d6:91:07: e8:b2:b9:6b:28:48:d5:ff:04:8e:b7:d2:2b:7b:b4: 8f:c4:41:3d:95:dc:f7:97:a6:d7:d3:c7:d6:bb:01: 34:a3:7e:0f:20:42:eb:40:d6:35:46:f2:a8:fb:27: 34:c8:1d:ba:60:1c:40:e7:9b:5a:e9:58:91:76:66: fb:2b:23:da:c7:94:60:33:b4:bc:d6:6f:ba:9c:2d: 03:b6:90:de:97:88:ab:65:86:98:48:d6:44:d9:51: f0:6b:a7:3d:c0:93:5f:a5:c5:59:9f:76:ba:d3:88: cd:75:d4:2b:98:16:b5:ff:5f:d3:67:a9:85:f1:06: 0f:7a:43:d7:5c:cd:77:aa:76:4f:e4:fa:18:d1:0f: f0:18:f0:6f:23:38:54:ac:a2:ee:0b:b2:a4:0f:ec: d6:e2:29:cf:2f:94:82:71:18:58:4b:57:ea:49:02: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:CE:EC:34:23:4C:02:15:FF:CC:52:E2:C0:5F:F0:1F:E1:B8:A6 X509v3 Authority Key Identifier: keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:42:10:46:eb:59:a5:82:f8:ba:2b:da:37:f3:d5:c3:2e:85: 08:dc:f1:ed:86:cc:ba:ad:dd:e7:1e:32:c6:db:96:08:1d:ef: ca:8d:3b:a8:33:96:71:bd:e1:7b:8d:8c:4f:c2:11:e5:e5:88: ba:36:d9:04:dc:f3:4e:59:3b:4a:c8:f2:b0:68:46:1a:d2:9d: ce:13:61:a7:23:67:e6:6f:ea:7c:ba:11:ce:f3:1d:56:08:1f: 8d:d8:0a:5e:a4:cd:1d:b9:04:00:e4:65:66:f7:a8:44:d0:c7: d9:58:44:eb:08:fc:28:bd:40:c8:55:fd:ff:c9:d6:da:3d:16: eb:3b:c6:1a:fb:1a:4d:f2:9b:cc:c1:2f:6f:65:6d:94:c9:47: d0:b2:ce:28:83:73:1b:ee:d8:2c:d3:57:05:00:38:a9:c0:4c: c2:6a:e3:42:9f:6a:94:a3:2b:57:4b:d8:9e:52:36:c5:59:ac: 99:15:c2:b8:d7:60:34:43:20:39:00:7e:86:d9:63:92:5f:05: d1:82:ca:8a:fa:7c:9e:1e:80:c4:fe:5f:e0:61:ff:07:3e:47: 59:ce:77:dd:c7:a8:ae:3f:36:ae:15:07:b3:d3:90:88:f9:a9: b9:55:36:7b:d8:87:c7:10:eb:e8:58:bb:0d:f4:71:f2:b0:cf: 50:26:4d:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0NERDExMC8GA1UEBRMoNUFCRTMzN0U2NUMwMEJFQTg0N0NFMEQyNTlDODg3RTRG REIzQjkyMTAeFw0yNTA1MzEwNzE4NTZaFw0yNTA2MDcwNzE4NTZaMBgxFjAUBgNV BAMTDTY4M2FhZDYxLWI3NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZd3RqlIp8WZh2EG4Nyf2YI565M8xxY+2I9scob0WRatgdcesEKrTA8ByeoMJe JFI1DDkwhTMhEvbFH4VT0AjTYt+BhKbi3Y3VYkB7F+y/2/IZVUH8nNaRB+iyuWso SNX/BI630it7tI/EQT2V3PeXptfTx9a7ATSjfg8gQutA1jVG8qj7JzTIHbpgHEDn m1rpWJF2ZvsrI9rHlGAztLzWb7qcLQO2kN6XiKtlhphI1kTZUfBrpz3Ak1+lxVmf drrTiM111CuYFrX/X9NnqYXxBg96Q9dczXeqdk/k+hjRD/AY8G8jOFSsou4LsqQP 7NbiKc8vlIJxGFhLV+pJAkjZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn0vO7DQj TAIV/8xS4sBf8B/huKYwHwYDVR0jBBgwFoAUWr4zfmXAC+qEfODSWciH5P2zuSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQ0RELzM5QjFCMzYyRkRE ODExRUZCNTI1QjY3NEM0RjlBRTAyL1dyNHpmbVhBQy1xRWZPRFNXY2lINVAyenVT RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3I0emZtWEFDLXFFZk9EU1djaUg1UDJ6dVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz Q0RELzM5QjFCMzYyRkREODExRUZCNTI1QjY3NEM0RjlBRTAyL1dyNHpmbVhBQy1x RWZPRFNXY2lINVAyenVTRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAERCEEbrWaWC+Lor2jfz1cMuhQjc8e2GzLqt3eceMsbblggd78qNO6gz lnG94XuNjE/CEeXliLo22QTc805ZO0rI8rBoRhrSnc4TYacjZ+Zv6ny6Ec7zHVYI H43YCl6kzR25BADkZWb3qETQx9lYROsI/Ci9QMhV/f/J1to9Fus7xhr7Gk3ym8zB L29lbZTJR9CyziiDcxvu2CzTVwUAOKnATMJq40KfapSjK1dL2J5SNsVZrJkVwrjX YDRDIDkAfobZY5JfBdGCyor6fJ4egMT+X+Bh/wc+R1nOd93HqK4/Nq4VB7PTkIj5 qblVNnvYh8cQ6+hYuw30cfKwz1AmTWs= -----END CERTIFICATE-----Generated at Sat May 31 16:39:50 2025 by rpki-client