$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: /sARVBS5hlIWPtbnwEk79ztjPFnKiW7AGL1U2GqqSYE= Subject key identifier: 9F:9D:1A:1D:85:9B:82:C4:6D:9A:D4:EB:9C:20:F5:C1:21:BC:60:8F Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 03A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 03A2 Signing time: Thu 03 Jul 2025 01:06:42 +0000 Manifest this update: Thu 03 Jul 2025 01:06:41 +0000 Manifest next update: Thu 10 Jul 2025 01:06:41 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: LuYBWfUJiT4q/2wsY5dqFk/gj0+oIAnwfzoQk30+2tU=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Jul 3 01:06:41 2025 GMT Not After : Jul 10 01:06:41 2025 GMT Subject: CN=6865d7a1-890c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:2f:ed:4c:8e:c4:cc:71:e2:c5:a4:22:84: 61:71:a0:7a:79:b6:ae:d4:e5:4e:f0:1a:68:9b:97: 48:df:27:07:b2:35:b6:f1:a9:23:a9:d0:6e:99:89: 43:09:db:8a:e5:2f:66:6a:d6:51:73:a8:4a:6c:a9: 15:f4:57:20:91:38:8d:0b:86:e0:a0:4c:6d:fc:cf: b0:b0:39:78:d8:1f:3a:db:08:e7:38:8f:8f:b3:70: 5d:30:c2:af:9f:99:4b:e0:88:67:85:76:95:ec:96: 3a:20:25:be:ce:29:65:c7:b5:08:a3:cc:b1:d2:2b: 8a:a0:d2:36:c1:af:d2:01:9b:57:07:81:c3:da:3a: 09:d2:41:4e:e8:6a:ba:cb:0f:df:c9:25:9a:ab:a8: ba:20:91:d3:d4:00:1a:9a:fa:e9:b6:1a:8a:75:a9: f4:12:f4:5f:86:c9:22:7d:97:1d:6c:52:86:98:6a: 8a:77:94:03:e9:fd:c1:df:e4:6f:2e:ae:3e:9b:9f: 4b:b0:b2:61:ee:ae:14:3e:e6:c5:4d:51:27:e3:fa: a3:53:87:7b:02:fa:88:ce:3e:b8:c7:c1:41:ac:78: 8d:bb:b8:8a:08:4d:28:55:f5:af:36:a5:8b:40:ae: 3a:8a:a9:de:01:ec:d5:c3:98:46:1e:53:08:f2:ea: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9D:1A:1D:85:9B:82:C4:6D:9A:D4:EB:9C:20:F5:C1:21:BC:60:8F X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e4:4a:19:63:6b:29:62:69:0d:ed:06:62:e2:d1:46:03:02: 99:5a:05:d8:20:77:52:4e:dd:b2:ac:43:77:1f:f7:6f:3e:5d: 77:e2:4b:2b:e0:ef:14:70:f1:36:8f:9b:7d:9c:39:3c:20:04: de:e1:3c:ce:fb:7c:f0:80:f2:95:33:e4:fd:9a:87:b1:9e:ea: 58:98:f6:40:27:18:61:4a:e4:23:5c:57:80:0d:11:95:e8:e0: cb:2d:bb:d0:57:88:19:43:3e:db:2d:84:00:f8:b8:42:0b:47: a6:7c:5b:38:ff:70:96:7a:8a:e3:cc:d0:96:cc:35:89:b4:11: 75:21:91:ef:80:9a:d3:e9:0e:73:62:a0:db:84:e8:b8:37:dc: 41:b6:5e:ec:48:32:5f:47:03:b1:0d:9c:e8:40:56:b6:2a:15: e5:83:f3:02:0e:51:6f:c3:50:d5:83:a7:8f:51:9a:69:35:50: e8:81:11:ba:df:17:98:2b:97:8c:09:00:54:3f:4e:e1:8a:09: aa:c6:cd:fb:d1:af:13:25:d1:15:bc:f2:e1:be:32:26:54:0b: 9d:1c:e0:56:df:01:68:af:90:0c:41:46:ec:9b:28:e9:10:90: af:0b:1a:5a:bf:a1:31:0b:ea:3f:b0:9e:8f:45:ee:31:75:cd: f9:73:d0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUwNzAzMDEwNjQxWhcNMjUwNzEwMDEwNjQxWjAYMRYwFAYD VQQDEw02ODY1ZDdhMS04OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ykv7UyOxMxx4sWkIoRhcaB6ebau1OVO8Bpom5dI3ycHsjW28akjqdBumYlD CduK5S9matZRc6hKbKkV9FcgkTiNC4bgoExt/M+wsDl42B862wjnOI+Ps3BdMMKv n5lL4IhnhXaV7JY6ICW+zillx7UIo8yx0iuKoNI2wa/SAZtXB4HD2joJ0kFO6Gq6 yw/fySWaq6i6IJHT1AAamvrpthqKdan0EvRfhskifZcdbFKGmGqKd5QD6f3B3+Rv Lq4+m59LsLJh7q4UPubFTVEn4/qjU4d7AvqIzj64x8FBrHiNu7iKCE0oVfWvNqWL QK46iqneAezVw5hGHlMI8uoLPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+dGh2F m4LEbZrU65wg9cEhvGCPMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF5EoZY2spYmkN7QZi4tFGAwKZWgXYIHdSTt2yrEN3H/dvPl134ksr 4O8UcPE2j5t9nDk8IATe4TzO+3zwgPKVM+T9moexnupYmPZAJxhhSuQjXFeADRGV 6ODLLbvQV4gZQz7bLYQA+LhCC0emfFs4/3CWeorjzNCWzDWJtBF1IZHvgJrT6Q5z YqDbhOi4N9xBtl7sSDJfRwOxDZzoQFa2KhXlg/MCDlFvw1DVg6ePUZppNVDogRG6 3xeYK5eMCQBUP07higmqxs370a8TJdEVvPLhvjImVAudHOBW3wFor5AMQUbsmyjp EJCvCxpav6ExC+o/sJ6PRe4xdc35c9AD -----END CERTIFICATE-----Generated at Thu Jul 3 06:10:17 2025 by rpki-client