$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft File: wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft (raw, json) Hash identifier: FKz+a7Qej/Qqpu5lqdXQrLA0otO+Y3+8Fdn8zDODrgE= Subject key identifier: 80:0E:35:14:F2:BD:7A:0A:03:20:64:01:8E:C7:5B:6E:0A:AB:69:8E Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 Certificate issuer: /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft Manifest number: 065E Signing time: Tue 10 Jun 2025 22:21:46 +0000 Manifest this update: Tue 10 Jun 2025 22:21:45 +0000 Manifest next update: Tue 17 Jun 2025 22:21:45 +0000 Files and hashes: 1: wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl (hash: sa/2K8WNYpgRuv/aYPz4I3D/1XIHfZh84lYazDZESd4=) 2: 8A9A4734854211EB9DAFD045C4F9AE02.roa (hash: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Validity Not Before: Jun 10 22:21:45 2025 GMT Not After : Jun 17 22:21:45 2025 GMT Subject: CN=6848aff9-713e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:6f:97:9d:ac:a5:12:42:6a:d5:ba:cf:83: e0:17:76:b8:df:09:1b:74:32:c2:90:fc:ea:64:db: 5e:0e:f6:0d:c4:b1:16:ec:9f:37:f5:f1:2d:fc:38: 46:a3:c8:c9:07:68:ae:e8:fa:c5:e2:61:7d:6c:31: ed:f4:bf:96:f2:2d:16:d6:2c:0d:c9:a9:ef:df:39: 92:01:e2:f8:bf:c1:d0:d1:fb:9e:cf:17:fd:0c:c9: f4:a8:aa:4e:d1:f9:2b:8b:ac:1a:57:bf:c7:f9:33: 4a:5e:d8:8f:9c:f9:e4:73:f6:50:a0:cf:99:fe:da: d8:cb:11:21:0d:77:37:09:8c:ad:f0:d3:cc:04:54: 53:f9:80:c3:a2:fe:1b:f5:6d:c9:8e:f2:5b:f0:41: 34:21:5b:cd:fb:bb:f7:43:f7:0b:80:00:db:01:4d: 57:3d:73:8d:39:b5:d3:9d:7d:6d:07:72:85:da:ab: 83:2a:39:ad:ca:51:de:a6:f2:e3:59:ed:f3:a0:a8: 43:05:66:e5:a0:a5:e0:92:ed:1f:2a:37:2b:d7:a6: f4:31:07:d5:a9:29:9e:74:8a:82:b3:e1:3e:23:96: be:b1:74:df:5f:06:30:c6:94:e7:38:c7:01:38:87: bd:56:68:7e:6b:67:72:67:5f:1e:dd:da:66:c4:93: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0E:35:14:F2:BD:7A:0A:03:20:64:01:8E:C7:5B:6E:0A:AB:69:8E X509v3 Authority Key Identifier: keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:37:5f:ba:92:32:75:2b:ac:94:29:ee:1e:83:b5:e9:2a:e1: ee:f4:ce:e9:ee:f5:01:7f:98:79:7c:ed:a1:f2:af:d6:45:5b: b0:83:1a:44:f5:1d:81:54:aa:ac:fe:53:25:8f:a9:08:d2:8b: 91:11:91:63:8e:ef:ec:28:24:0c:1f:2c:6a:5b:36:7c:59:d0: 3d:6f:4a:8c:82:d8:e4:3f:5c:1a:08:b9:dc:9f:d8:8d:45:90: 2f:1a:26:3e:a0:61:4d:28:71:4a:15:14:e0:44:b1:c6:16:8b: cb:14:0b:a4:6a:ee:c2:53:28:5f:ca:2d:02:77:72:3a:20:5b: 53:ce:71:13:5f:2d:03:10:33:ae:9c:45:2d:37:53:5d:1a:1e: 6d:d0:5c:71:2c:90:d1:13:3e:22:e2:29:b1:e4:3c:52:37:28: 07:75:4b:66:97:3c:c4:77:4b:d8:d0:94:0a:e7:e5:46:69:8b: 85:4a:ac:6a:de:40:27:b0:3a:5e:fa:d6:c3:9b:69:73:2f:6a: f2:a9:b6:fb:39:5b:5f:32:a4:61:6f:cf:9f:84:95:8b:43:1c: e1:cd:9a:fd:fe:a1:20:67:74:de:15:90:c1:96:50:cb:1e:4a: 9b:0b:f9:1b:30:a3:65:f6:d2:2a:ab:ae:27:4a:66:d0:61:2e: eb:8b:1a:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2 N0JBMUE5ODMwHhcNMjUwNjEwMjIyMTQ1WhcNMjUwNjE3MjIyMTQ1WjAYMRYwFAYD VQQDEw02ODQ4YWZmOS03MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue5vl52spRJCatW6z4PgF3a43wkbdDLCkPzqZNteDvYNxLEW7J839fEt/DhG o8jJB2iu6PrF4mF9bDHt9L+W8i0W1iwNyanv3zmSAeL4v8HQ0fuezxf9DMn0qKpO 0fkri6waV7/H+TNKXtiPnPnkc/ZQoM+Z/trYyxEhDXc3CYyt8NPMBFRT+YDDov4b 9W3JjvJb8EE0IVvN+7v3Q/cLgADbAU1XPXONObXTnX1tB3KF2quDKjmtylHepvLj We3zoKhDBWbloKXgku0fKjcr16b0MQfVqSmedIqCs+E+I5a+sXTfXwYwxpTnOMcB OIe9Vmh+a2dyZ18e3dpmxJMN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAONRTy vXoKAyBkAY7HW24Kq2mOMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1 MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFGRC8xMkFDRjA3Qzg1MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40 cEJxTktUSHdzclpudWhxWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4N1+6kjJ1K6yUKe4eg7XpKuHu9M7p7vUBf5h5fO2h8q/WRVuwgxpE 9R2BVKqs/lMlj6kI0ouREZFjju/sKCQMHyxqWzZ8WdA9b0qMgtjkP1waCLncn9iN RZAvGiY+oGFNKHFKFRTgRLHGFovLFAukau7CUyhfyi0Cd3I6IFtTznETXy0DEDOu nEUtN1NdGh5t0FxxLJDREz4i4imx5DxSNygHdUtmlzzEd0vY0JQK5+VGaYuFSqxq 3kAnsDpe+tbDm2lzL2ryqbb7OVtfMqRhb8+fhJWLQxzhzZr9/qEgZ3TeFZDBllDL HkqbC/kbMKNl9tIqq64nSmbQYS7rixqH -----END CERTIFICATE-----Generated at Wed Jun 11 04:33:43 2025 by rpki-client