$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json) Hash identifier: jLB/r5aiAmGbopOLm2N1dLIZFsZPK8iIaLPv3yHzt3E= Subject key identifier: 8C:E5:55:D8:FA:D5:ED:83:21:D6:FE:E7:68:8C:DE:7B:08:DD:3A:1D Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft Manifest number: 20 Signing time: Tue 01 Jul 2025 08:38:44 +0000 Manifest this update: Tue 01 Jul 2025 08:38:43 +0000 Manifest next update: Tue 08 Jul 2025 08:38:43 +0000 Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: YGch7/gaExtRJf1fadfOKJj+DEQm95lGfO6WvDDyw9I=) 2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=) 3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Validity Not Before: Jul 1 08:38:43 2025 GMT Not After : Jul 8 08:38:43 2025 GMT Subject: CN=68639e93-454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:44:f4:21:14:b4:a8:f7:3d:cf:19:92:75: 65:be:fc:f4:21:b1:da:6c:57:30:9e:23:a0:97:2e: c7:3f:27:75:28:bf:ca:0a:d7:fd:17:10:ac:34:a4: 68:b5:6c:98:40:08:99:57:0e:f8:87:79:54:6f:42: 2d:4e:ef:a3:29:e1:e4:ec:5f:fa:5f:64:88:9c:20: e8:e8:90:64:98:f2:b9:1b:b6:30:a2:aa:da:2a:72: 0e:f9:ea:2e:bf:35:78:1f:b4:b4:4c:66:97:f5:73: 80:71:d1:f9:c8:82:0b:72:9e:da:24:e7:c4:be:be: 46:a2:b9:80:2b:49:dd:4f:6a:a4:e8:3f:ec:e7:76: 67:08:e2:1f:44:65:37:87:b5:20:5c:a6:16:16:55: 5f:31:c3:52:dd:73:4a:30:0b:90:7a:2f:2f:c3:60: 3c:3a:2d:8e:b5:39:53:dd:09:40:b5:95:a2:80:0d: 29:cd:1c:a4:75:7c:76:b2:d0:40:ae:e5:e3:f0:bf: 51:0d:5b:6e:93:25:72:52:8a:8e:2a:8f:a2:fd:89: 2b:73:92:98:76:57:9e:f6:66:20:aa:01:63:ac:6a: a5:b8:e8:a0:fa:30:4b:3b:3d:91:35:5e:cc:8d:6a: 2b:a3:9f:6a:a1:3a:28:bf:67:58:54:cd:5c:bf:5a: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E5:55:D8:FA:D5:ED:83:21:D6:FE:E7:68:8C:DE:7B:08:DD:3A:1D X509v3 Authority Key Identifier: keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:2a:69:35:63:bc:96:61:34:a4:e5:6e:13:c0:d2:d1:d8:45: b1:ae:d9:04:f5:0e:ee:33:14:49:36:b9:8f:5d:1b:76:5b:eb: b0:c2:94:1d:2c:b2:2a:d6:90:a3:7a:f1:3f:91:d5:74:de:c9: 09:a8:c2:fb:50:6b:14:15:54:8b:74:ef:ae:4e:54:7a:e0:d1: 4c:d1:4f:8e:f9:30:ab:6c:15:5f:3b:ba:8d:8b:33:b8:4c:c3: 87:3a:88:85:db:c3:c3:77:06:2d:ef:d6:b1:ad:b8:48:72:02: 32:23:8c:7f:60:77:cc:39:e1:98:6c:39:32:5b:74:a0:26:ed: e6:6d:7e:d7:ed:9d:a5:4b:8a:64:57:26:ef:ca:df:5b:15:2e: 18:81:c9:49:e8:2f:d4:c3:82:a2:c2:f3:2b:82:71:69:e6:f5: d8:5b:e8:43:bf:cc:c8:79:62:25:d1:05:f9:88:41:8e:aa:e3: 96:a3:be:2e:d3:c3:62:fb:42:9b:fd:b0:28:27:c6:b1:00:0a: ea:9c:47:d6:5d:80:e5:12:76:00:ec:78:83:4d:7a:34:b2:3a: c3:b4:dc:6c:88:0a:ef:9f:1f:54:19:d6:8f:f0:00:a7:04:dc: 3b:96:b8:73:7e:18:94:34:d7:ff:e9:57:c0:13:f1:e1:2c:a5: 51:e2:20:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTJCQzExMC8GA1UEBRMoRDMwOTQwQ0M2RjBDMTAyNEI4NDBCQkI3RDNEODAxMjYz NjA2Q0E1OTAeFw0yNTA3MDEwODM4NDNaFw0yNTA3MDgwODM4NDNaMBgxFjAUBgNV BAMTDTY4NjM5ZTkzLTQ1NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8rkT0IRS0qPc9zxmSdWW+/PQhsdpsVzCeI6CXLsc/J3Uov8oK1/0XEKw0pGi1 bJhACJlXDviHeVRvQi1O76Mp4eTsX/pfZIicIOjokGSY8rkbtjCiqtoqcg756i6/ NXgftLRMZpf1c4Bx0fnIggtyntok58S+vkaiuYArSd1PaqToP+zndmcI4h9EZTeH tSBcphYWVV8xw1Ldc0owC5B6Ly/DYDw6LY61OVPdCUC1laKADSnNHKR1fHay0ECu 5ePwv1ENW26TJXJSio4qj6L9iStzkph2V572ZiCqAWOsaqW46KD6MEs7PZE1XsyN aiujn2qhOii/Z1hUzVy/WlUJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjOVV2PrV 7YMh1v7naIzeewjdOh0wHwYDVR0jBBgwFoAU0wlAzG8MECS4QLu309gBJjYGylkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMkJDLzIxQTk1MzE0MjQ4 QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3ls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHdsQXpHOE1FQ1M0UUx1MzA5Z0JKallHeWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MkJDLzIxQTk1MzE0MjQ4QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNT NFFMdTMwOWdCSmpZR3lsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKIqaTVjvJZhNKTlbhPA0tHYRbGu2QT1Du4zFEk2uY9dG3Zb67DClB0s sirWkKN68T+R1XTeyQmowvtQaxQVVIt0765OVHrg0UzRT475MKtsFV87uo2LM7hM w4c6iIXbw8N3Bi3v1rGtuEhyAjIjjH9gd8w54ZhsOTJbdKAm7eZtftftnaVLimRX Ju/K31sVLhiByUnoL9TDgqLC8yuCcWnm9dhb6EO/zMh5YiXRBfmIQY6q45ajvi7T w2L7Qpv9sCgnxrEACuqcR9ZdgOUSdgDseINNejSyOsO03GyICu+fH1QZ1o/wAKcE 3DuWuHN+GJQ01//pV8AT8eEspVHiIBk= -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:44 2025 by rpki-client