$ rpki-client -vvf rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft File: WbbWzXMF8t7sK45hPF2PSUJeADk.mft (raw, json) Hash identifier: PPh9qFTxpCziBRqJ4rNAe68a68yRWV/cBhHoV6qSxhM= Subject key identifier: 28:96:91:79:7C:73:72:33:AB:A7:96:5D:D7:60:7E:62:4C:4C:2A:B1 Authority key identifier: 59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 Certificate issuer: /CN=A9185FD0/serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft Manifest number: 0173 Signing time: Sat 31 May 2025 03:29:43 +0000 Manifest this update: Sat 31 May 2025 03:29:43 +0000 Manifest next update: Sat 07 Jun 2025 03:29:43 +0000 Files and hashes: 1: WbbWzXMF8t7sK45hPF2PSUJeADk.crl (hash: e6a5pnOJnm3oEx9T6/W3KHzHB4+gXm1Le1lb7w4sXEQ=) 2: 9E5F4D0060E111EEBD81AD43C4F9AE02.roa (hash: LvsVsArM6WgAwVg4l/iixUJeke5f36Ab2xwAtLEZPnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185FD0, serialNumber=59B6D6CD7305F2DEEC2B8E613C5D8F49425E0039 Validity Not Before: May 31 03:29:43 2025 GMT Not After : Jun 7 03:29:43 2025 GMT Subject: CN=683a77a7-c3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:f6:56:b2:cd:37:59:b0:3d:04:73:48:2e: c3:67:35:54:b5:89:dd:20:30:8e:74:cc:f6:96:7d: e3:bd:6f:4d:e8:8b:dd:7a:3b:93:22:1c:67:7d:ff: e4:47:9a:bd:1e:0a:57:c6:f4:0c:29:d2:17:eb:68: 52:1f:da:7b:ea:58:5b:b6:81:f5:dd:cc:74:49:2f: 04:d7:fb:fb:67:44:2d:39:90:06:8b:c8:40:98:ce: a6:1a:c0:b9:68:94:de:28:08:47:1c:6c:ba:af:4f: 10:cd:4c:bf:6c:b2:38:87:cf:f0:47:fe:7a:e2:45: 1b:0f:26:7b:94:40:c6:87:bd:a4:f1:48:84:0d:cb: 0b:cd:29:7f:b4:5e:46:de:5a:94:63:9e:ed:ea:6c: c2:8e:f2:58:61:c6:22:b9:9a:a0:ef:a6:c5:b0:27: 10:1b:6e:f2:3d:5c:68:96:a4:2e:84:f7:b3:86:e8: 77:e3:3f:dd:db:cd:e2:3c:60:fb:12:80:65:05:24: 80:3d:e1:f1:ef:e2:9a:6c:6e:88:a0:39:bb:64:db: 8b:06:87:2e:3c:2e:7c:eb:41:7c:ed:fa:84:31:f1: d8:ab:6c:6e:6d:b4:74:34:d0:62:61:84:dd:d5:6a: c8:20:99:6a:8d:bb:b6:fd:9e:a1:94:da:b8:03:aa: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:91:79:7C:73:72:33:AB:A7:96:5D:D7:60:7E:62:4C:4C:2A:B1 X509v3 Authority Key Identifier: keyid:59:B6:D6:CD:73:05:F2:DE:EC:2B:8E:61:3C:5D:8F:49:42:5E:00:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WbbWzXMF8t7sK45hPF2PSUJeADk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185FD0/3833447809CF11EEA5E82532C4F9AE02/WbbWzXMF8t7sK45hPF2PSUJeADk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b8:6f:59:2b:ed:cd:38:a5:16:66:ee:6f:4f:88:e4:33:37: 29:b9:0f:44:fb:36:45:f7:b8:0e:49:a9:ce:ec:86:f3:12:b3: 45:2f:1e:2a:15:8c:79:dd:f9:5a:77:3d:b9:70:82:3a:2b:30: 87:59:d6:56:91:8d:70:b9:f1:1e:7d:e1:2c:c9:25:99:4c:4c: 45:c4:bf:cd:62:5a:ac:46:f9:65:f7:2c:85:4d:1a:9c:bb:f1: 19:e1:4a:45:ed:0c:ea:07:61:a0:8b:8d:07:67:89:86:41:5d: d5:b9:2f:6c:aa:a6:9a:fb:6f:98:10:11:8d:a2:ac:d9:dd:f3: 9d:a8:c0:3d:78:c2:fe:02:b2:12:f3:d0:99:25:15:78:b6:ca: 4f:09:e2:6a:da:4d:cd:3a:2a:f0:28:12:0d:4e:1a:cc:6d:d9: 01:b1:db:96:12:fa:fe:28:45:bb:32:87:dc:75:d6:a1:7c:08: 50:d1:90:98:20:77:14:88:db:20:86:b5:9c:7a:cf:cc:9a:59: 78:95:5d:80:5b:4a:54:1e:7e:b7:f7:81:98:75:ec:b6:a9:99: ab:d7:be:46:77:59:c9:bb:e0:76:f4:16:fa:fc:83:37:29:99: bc:97:e8:50:a4:fd:1c:3a:2a:23:42:54:54:93:7e:8d:65:53: 90:1e:73:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGRDAxMTAvBgNVBAUTKDU5QjZENkNENzMwNUYyREVFQzJCOEU2MTNDNUQ4RjQ5 NDI1RTAwMzkwHhcNMjUwNTMxMDMyOTQzWhcNMjUwNjA3MDMyOTQzWjAYMRYwFAYD VQQDEw02ODNhNzdhNy1jM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02z2VrLNN1mwPQRzSC7DZzVUtYndIDCOdMz2ln3jvW9N6IvdejuTIhxnff/k R5q9HgpXxvQMKdIX62hSH9p76lhbtoH13cx0SS8E1/v7Z0QtOZAGi8hAmM6mGsC5 aJTeKAhHHGy6r08QzUy/bLI4h8/wR/564kUbDyZ7lEDGh72k8UiEDcsLzSl/tF5G 3lqUY57t6mzCjvJYYcYiuZqg76bFsCcQG27yPVxolqQuhPezhuh34z/d283iPGD7 EoBlBSSAPeHx7+KabG6IoDm7ZNuLBocuPC5860F87fqEMfHYq2xubbR0NNBiYYTd 1WrIIJlqjbu2/Z6hlNq4A6oDXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiWkXl8 c3Izq6eWXddgfmJMTCqxMB8GA1UdIwQYMBaAFFm21s1zBfLe7CuOYTxdj0lCXgA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUZEMC8zODMzNDQ3ODA5 Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0N3NLNDVoUEYyUFNVSmVB RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1diYld6WE1GOHQ3c0s0NWhQRjJQU1VKZUFEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUZEMC8zODMzNDQ3ODA5Q0YxMUVFQTVFODI1MzJDNEY5QUUwMi9XYmJXelhNRjh0 N3NLNDVoUEYyUFNVSmVBRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSuG9ZK+3NOKUWZu5vT4jkMzcpuQ9E+zZF97gOSanO7IbzErNFLx4q FYx53fladz25cII6KzCHWdZWkY1wufEefeEsySWZTExFxL/NYlqsRvll9yyFTRqc u/EZ4UpF7QzqB2Ggi40HZ4mGQV3VuS9sqqaa+2+YEBGNoqzZ3fOdqMA9eML+ArIS 89CZJRV4tspPCeJq2k3NOirwKBINThrMbdkBsduWEvr+KEW7MofcddahfAhQ0ZCY IHcUiNsghrWces/Mmll4lV2AW0pUHn6394GYdey2qZmr175Gd1nJu+B29Bb6/IM3 KZm8l+hQpP0cOiojQlRUk36NZVOQHnPy -----END CERTIFICATE-----Generated at Sat May 31 16:42:10 2025 by rpki-client