$ rpki-client -vvf rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft File: wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft (raw, json) Hash identifier: eFLCbKR3hDp4HxQdq6UM4bUEYBPHh6PfAjQ0I1nM+20= Subject key identifier: 85:AF:05:C0:17:E4:B2:0F:7F:3E:16:4A:D7:82:AC:7A:A2:EE:A6:6C Authority key identifier: C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 Certificate issuer: /CN=A917E868/serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft Manifest number: 01C2 Signing time: Sat 31 May 2025 02:44:18 +0000 Manifest this update: Sat 31 May 2025 02:44:17 +0000 Manifest next update: Sat 07 Jun 2025 02:44:17 +0000 Files and hashes: 1: wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl (hash: qjuEPpAbDUfbjaOeMbZcQRq56+r0sN8mdkj96Dfsjk4=) 2: 34FF021A8DA111EDBDB7DC23C4F9AE02.roa (hash: WcOJKBYoZRMDvg4oIYS4kq5xFx2TDUBl7Gt7RS4Zo3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E868, serialNumber=C2643370B7CDB1B6159ABD2D7D6772C6F6D2FB65 Validity Not Before: May 31 02:44:17 2025 GMT Not After : Jun 7 02:44:17 2025 GMT Subject: CN=683a6d01-5994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:23:fc:64:5b:d9:86:f9:28:47:71:9f:53: 64:38:e0:c3:c1:e8:4f:a9:a1:e1:65:56:62:04:19: 59:b1:83:a5:7b:b5:2b:0f:86:73:7a:88:18:69:56: c5:53:94:2e:ce:13:96:36:36:38:fa:e0:83:88:fc: bc:d3:f8:40:88:22:e5:27:3a:12:d6:15:1f:fe:da: 59:f7:e2:e0:b2:0d:75:d7:15:84:e5:41:66:f7:e7: 3b:38:a6:42:d7:22:68:d9:a9:7f:54:d7:e6:dd:ff: 43:86:d5:51:02:9f:00:30:34:90:76:64:5e:41:7d: a0:1a:85:4e:01:96:66:30:57:62:6e:2b:c5:4d:b8: 46:ad:10:92:d7:45:c6:c4:dd:f8:e6:a7:17:4b:d8: 98:cc:5d:cc:46:41:ae:ab:25:b5:af:aa:4e:e6:0c: a4:b4:62:3f:a7:21:2b:50:00:6f:29:94:80:fe:af: e3:7d:72:9d:ae:10:e1:2f:a6:03:9e:9d:87:dc:4b: 0b:84:1f:82:76:dd:f8:18:e0:ff:a0:01:b8:67:52: a8:24:46:d2:ec:c5:a1:95:c5:6b:f3:56:50:cf:69: 40:d2:a0:12:b6:9c:c7:12:e4:d7:0f:a2:9d:1c:0e: 54:1a:1f:e3:01:8a:ee:38:e6:d4:28:72:14:45:15: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AF:05:C0:17:E4:B2:0F:7F:3E:16:4A:D7:82:AC:7A:A2:EE:A6:6C X509v3 Authority Key Identifier: keyid:C2:64:33:70:B7:CD:B1:B6:15:9A:BD:2D:7D:67:72:C6:F6:D2:FB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wmQzcLfNsbYVmr0tfWdyxvbS-2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E868/746AF0B28D9C11EDB3E3CA1FC4F9AE02/wmQzcLfNsbYVmr0tfWdyxvbS-2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f0:71:43:62:42:9e:70:c2:84:e3:45:d6:ea:0a:fa:78:e4: 14:94:38:12:b4:38:d8:96:98:0d:49:d8:ac:97:38:8b:35:c3: 86:d0:b8:8f:0e:ab:e9:8d:2d:b0:48:fc:45:61:1e:18:2c:11: ed:7a:d0:ae:4b:06:1f:cd:c0:aa:28:fa:bb:f8:f5:c4:d3:e8: a4:1e:21:3c:4a:a8:33:6d:1d:00:d8:fd:83:9e:17:4f:14:b8: b3:6b:ba:38:c0:b8:6d:1f:7b:c1:ee:33:7e:50:65:c0:d0:81: 1b:0f:84:ae:80:09:77:e9:57:a2:50:80:28:05:5f:75:af:89: 37:1b:21:4c:17:a2:ef:af:84:37:66:b8:ca:73:9c:90:0a:f1: 7b:d0:1b:23:8d:9c:90:04:87:82:5c:58:54:ba:c0:c7:64:4c: 28:e0:2b:3a:4c:71:c8:dc:e1:f9:63:ad:5a:4f:10:b1:cd:e5: 95:38:d8:1d:1c:81:56:74:30:21:d6:78:da:21:ea:2e:2f:09: 9e:1e:89:88:d6:01:a3:4a:d0:82:88:67:82:8f:2b:f3:ee:8f: 1e:56:09:02:ae:6e:bd:f3:1b:a8:95:09:49:1f:12:e8:2c:ac: 96:37:8b:37:c4:25:a4:12:49:6a:e1:5b:94:70:e1:06:1d:13: 31:e5:d2:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U4NjgxMTAvBgNVBAUTKEMyNjQzMzcwQjdDREIxQjYxNTlBQkQyRDdENjc3MkM2 RjZEMkZCNjUwHhcNMjUwNTMxMDI0NDE3WhcNMjUwNjA3MDI0NDE3WjAYMRYwFAYD VQQDEw02ODNhNmQwMS01OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ8j/GRb2Yb5KEdxn1NkOODDwehPqaHhZVZiBBlZsYOle7UrD4ZzeogYaVbF U5QuzhOWNjY4+uCDiPy80/hAiCLlJzoS1hUf/tpZ9+Lgsg111xWE5UFm9+c7OKZC 1yJo2al/VNfm3f9DhtVRAp8AMDSQdmReQX2gGoVOAZZmMFdibivFTbhGrRCS10XG xN345qcXS9iYzF3MRkGuqyW1r6pO5gyktGI/pyErUABvKZSA/q/jfXKdrhDhL6YD np2H3EsLhB+Cdt34GOD/oAG4Z1KoJEbS7MWhlcVr81ZQz2lA0qAStpzHEuTXD6Kd HA5UGh/jAYruOObUKHIURRXwbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWvBcAX 5LIPfz4WSteCrHqi7qZsMB8GA1UdIwQYMBaAFMJkM3C3zbG2FZq9LX1ncsb20vtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTg2OC83NDZBRjBCMjhE OUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNiWVZtcjB0ZldkeXh2YlMt MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dtUXpjTGZOc2JZVm1yMHRmV2R5eHZiUy0yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTg2OC83NDZBRjBCMjhEOUMxMUVEQjNFM0NBMUZDNEY5QUUwMi93bVF6Y0xmTnNi WVZtcjB0ZldkeXh2YlMtMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC18HFDYkKecMKE40XW6gr6eOQUlDgStDjYlpgNSdislziLNcOG0LiP DqvpjS2wSPxFYR4YLBHtetCuSwYfzcCqKPq7+PXE0+ikHiE8SqgzbR0A2P2DnhdP FLiza7o4wLhtH3vB7jN+UGXA0IEbD4SugAl36VeiUIAoBV91r4k3GyFMF6Lvr4Q3 ZrjKc5yQCvF70BsjjZyQBIeCXFhUusDHZEwo4Cs6THHI3OH5Y61aTxCxzeWVONgd HIFWdDAh1njaIeouLwmeHomI1gGjStCCiGeCjyvz7o8eVgkCrm698xuolQlJHxLo LKyWN4s3xCWkEklq4VuUcOEGHRMx5dJs -----END CERTIFICATE-----Generated at Sat May 31 17:30:24 2025 by rpki-client