$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft File: WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft (raw, json) Hash identifier: n2L63uISzkdPS5aG5PwzexDr4hE6A5iaVLhOp/Y83DE= Subject key identifier: C7:F3:CA:DE:E2:76:05:5D:6B:9A:0A:D9:00:C5:F1:11:4C:0F:FE:D8 Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft Manifest number: 02EA Signing time: Sat 07 Jun 2025 01:21:11 +0000 Manifest this update: Sat 07 Jun 2025 01:21:10 +0000 Manifest next update: Sat 14 Jun 2025 01:21:10 +0000 Files and hashes: 1: WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl (hash: t5QBsf0mGM5pPU37U3brARoMt6s6auKYN1bFhA47Yig=) 2: BD65DA5EE24111ECB7132461C4F9AE02.roa (hash: 8qDmsi4NSZMggZYlQgPxLbNv2s0d0VPr9Uca3xZmDtA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D Validity Not Before: Jun 7 01:21:10 2025 GMT Not After : Jun 14 01:21:10 2025 GMT Subject: CN=68439407-3148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:59:cd:11:fb:b6:fd:d0:2b:2a:df:33:2b: 52:21:e4:ea:bb:84:44:d7:55:93:f4:7a:14:7e:e2: 17:fc:bc:3c:1f:d4:27:85:66:0b:ce:7e:7b:20:a6: 68:78:82:61:fb:e9:2d:08:1a:63:96:3a:13:9f:97: c1:04:61:fd:b3:52:33:91:cb:1e:cd:36:50:d0:95: f2:67:af:04:20:a7:79:08:2d:e5:a6:5b:c8:e1:5d: 03:b6:e3:fd:f0:76:b4:46:c2:9e:81:a7:df:8a:5b: 57:c8:c5:d1:32:30:99:84:ff:9a:3e:bf:5d:72:60: 23:e3:7b:ef:98:cb:02:3f:13:f1:36:c3:ae:6c:26: a1:c4:a6:98:1e:8b:3e:d4:c2:5d:79:e3:97:86:ee: 38:81:4d:ee:aa:e5:45:68:73:31:72:cf:15:fc:be: 0f:6d:15:43:42:97:90:d7:6d:d6:4c:7e:6e:27:90: 10:10:00:0a:b2:01:80:e4:65:bf:24:92:77:51:be: e9:17:bd:bc:0e:bf:c4:91:f1:82:af:40:ed:7e:a3: 7c:53:59:e9:64:c0:47:79:bc:14:7f:70:23:f6:44: 99:c3:55:f2:c3:09:ea:f3:92:0b:e1:05:f9:49:f7: f1:c6:69:87:2c:be:fd:5d:f7:64:3c:10:bf:9c:49: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F3:CA:DE:E2:76:05:5D:6B:9A:0A:D9:00:C5:F1:11:4C:0F:FE:D8 X509v3 Authority Key Identifier: keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:a9:6e:05:24:19:e4:35:1c:67:d1:af:2a:a8:c0:a5:3e: bd:b0:9b:95:9e:b1:35:5a:d9:ac:88:24:27:61:f6:37:4f:87: 19:ee:5f:54:21:ad:5f:20:fe:4d:98:04:c9:27:8c:cd:02:45: a7:5b:51:82:e9:92:41:3a:1a:4f:db:5d:86:7b:80:38:40:f2: 79:45:38:82:f9:62:f9:9a:25:f6:9c:93:09:f8:ef:98:c8:a3: c8:65:f7:12:b7:01:89:b3:56:fd:d0:01:81:de:89:8b:ef:eb: 6d:5d:a2:50:4c:18:b7:c5:16:6a:3f:ff:ab:55:fb:a2:fc:b2: 5f:63:b7:35:88:f7:15:38:e4:e8:49:86:d9:c3:88:7a:fd:61: 85:e9:59:1a:46:4f:d0:d3:2c:ea:8c:f0:4e:71:29:e0:6b:e4: 5e:20:9e:95:d7:52:ff:df:3e:b2:a1:d4:fb:39:7b:a6:ef:b8: e4:62:87:f3:d1:82:d5:d5:a5:a7:9e:ba:90:0a:ce:b5:2b:22: f0:ae:07:74:43:00:a4:ad:46:5b:dc:f0:2a:db:91:73:a3:c2: 51:1f:44:63:a3:43:59:08:56:58:57:56:ff:aa:57:e7:5a:d1: 49:78:f2:04:95:57:fe:d7:75:d4:c8:cd:20:2a:55:ad:be:41: 76:ce:04:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFCOTAxMTAvBgNVBAUTKDVBQzM2REU5NTkzNkI4N0EwMTBBMkE0QkE5MTU2OTVB Njk5OTA3MUQwHhcNMjUwNjA3MDEyMTEwWhcNMjUwNjE0MDEyMTEwWjAYMRYwFAYD VQQDEw02ODQzOTQwNy0zMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6NZzRH7tv3QKyrfMytSIeTqu4RE11WT9HoUfuIX/Lw8H9QnhWYLzn57IKZo eIJh++ktCBpjljoTn5fBBGH9s1IzkcsezTZQ0JXyZ68EIKd5CC3lplvI4V0DtuP9 8Ha0RsKegaffiltXyMXRMjCZhP+aPr9dcmAj43vvmMsCPxPxNsOubCahxKaYHos+ 1MJdeeOXhu44gU3uquVFaHMxcs8V/L4PbRVDQpeQ123WTH5uJ5AQEAAKsgGA5GW/ JJJ3Ub7pF728Dr/EkfGCr0DtfqN8U1npZMBHebwUf3Aj9kSZw1Xywwnq85IL4QX5 SffxxmmHLL79XfdkPBC/nEkEwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfzyt7i dgVda5oK2QDF8RFMD/7YMB8GA1UdIwQYMBaAFFrDbelZNrh6AQoqS6kVaVppmQcd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUI5MC9GODBDRUZBQ0Uy M0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVIb0JDaXBMcVJWcFdtbVpC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzTnQ2VmsydUhvQkNpcExxUlZwV21tWkJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUI5MC9GODBDRUZBQ0UyM0QxMUVDODREMkIzNUVDNEY5QUUwMi9Xc050NlZrMnVI b0JDaXBMcVJWcFdtbVpCeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4yKluBSQZ5DUcZ9GvKqjApT69sJuVnrE1WtmsiCQnYfY3T4cZ7l9U Ia1fIP5NmATJJ4zNAkWnW1GC6ZJBOhpP212Ge4A4QPJ5RTiC+WL5miX2nJMJ+O+Y yKPIZfcStwGJs1b90AGB3omL7+ttXaJQTBi3xRZqP/+rVfui/LJfY7c1iPcVOOTo SYbZw4h6/WGF6VkaRk/Q0yzqjPBOcSnga+ReIJ6V11L/3z6yodT7OXum77jkYofz 0YLV1aWnnrqQCs61KyLwrgd0QwCkrUZb3PAq25Fzo8JRH0Rjo0NZCFZYV1b/qlfn WtFJePIElVf+13XUyM0gKlWtvkF2zgRG -----END CERTIFICATE-----Generated at Sat Jun 7 06:01:47 2025 by rpki-client