$ rpki-client -vvf rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft File: wP8fMmfYrZgSiz45fM_3lzt1CM0.mft (raw, json) Hash identifier: IjmhWpMmMwVZ6XrK6D/sVMVn2mI3mTQH5jidmKzjx7I= Subject key identifier: A5:F8:15:CC:1F:05:B1:75:8A:A6:A3:E4:7B:66:20:F4:9C:B9:97:3D Authority key identifier: C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD Certificate issuer: /CN=A91653D3/serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft Manifest number: CD Signing time: Thu 03 Jul 2025 05:50:49 +0000 Manifest this update: Thu 03 Jul 2025 05:50:49 +0000 Manifest next update: Thu 10 Jul 2025 05:50:49 +0000 Files and hashes: 1: wP8fMmfYrZgSiz45fM_3lzt1CM0.crl (hash: rOpkqVD/Ul16zOpgDMN7rAECOFMpbZ/0R6pPQaFEe7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91653D3, serialNumber=C0FF1F3267D8AD98128B3E397CCFF7973B7508CD Validity Not Before: Jul 3 05:50:49 2025 GMT Not After : Jul 10 05:50:49 2025 GMT Subject: CN=68661a39-302e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:40:b9:89:a9:ea:48:ae:b6:1e:91:3d:31: 9a:a0:68:63:7f:20:3d:6e:d6:31:10:7d:a6:db:ce: 81:e8:be:76:28:9f:e0:5f:d2:06:37:6b:82:d5:df: 89:66:e1:7a:a7:82:95:e6:b9:f5:43:9c:5c:e5:85: c4:3b:76:30:fa:44:f2:5f:a1:b9:62:22:4e:8d:f1: d2:24:73:5e:8b:5a:34:5f:d4:26:65:68:ee:76:11: 9e:61:d6:23:83:31:28:70:36:7e:9f:74:27:03:f6: 8e:27:b4:51:77:d2:52:77:b8:50:a5:0f:e7:7d:05: db:1d:d0:f4:49:fb:f0:45:f0:22:b1:77:ed:4d:dc: b2:ed:2b:52:74:5a:6e:ca:5f:95:19:97:a2:b6:c3: a8:dc:45:c2:a3:e8:a8:10:23:45:33:2a:af:30:50: 83:86:97:8f:43:95:97:f4:ba:56:72:10:25:73:89: 05:60:32:87:7f:03:b3:23:c0:c0:51:bf:0b:37:78: d7:bc:78:15:bd:00:56:26:6e:92:8c:a3:85:a1:5c: d1:0d:4f:22:16:99:65:af:f3:1e:1a:e0:bb:ca:b4: 84:32:b6:5a:c7:d1:a8:6e:3c:45:cf:6c:48:4d:3b: 19:12:98:f4:ab:3e:8a:ec:cc:5d:ad:08:52:fd:99: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:15:CC:1F:05:B1:75:8A:A6:A3:E4:7B:66:20:F4:9C:B9:97:3D X509v3 Authority Key Identifier: keyid:C0:FF:1F:32:67:D8:AD:98:12:8B:3E:39:7C:CF:F7:97:3B:75:08:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wP8fMmfYrZgSiz45fM_3lzt1CM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91653D3/42529F9E1D8811EFA3C64A5EC4F9AE02/wP8fMmfYrZgSiz45fM_3lzt1CM0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:fb:8f:bd:0b:b5:23:5f:25:4c:d0:ca:ee:5b:a3:87:5b:96: 83:05:e9:51:f7:ec:a8:17:3e:c0:43:9a:17:54:25:1c:ff:e7: 0e:ae:a7:48:57:22:3f:91:42:d7:7e:95:04:ce:d3:8d:db:da: 72:ed:ff:76:6f:c8:41:7c:96:02:1a:e8:ea:2d:cd:3c:85:c9: 46:21:8a:39:09:77:9d:00:3b:c0:92:09:0e:77:ab:0e:73:5a: ab:22:85:3c:ea:49:45:89:fc:36:1d:97:79:d3:6b:b6:9d:5c: ec:4e:ab:2e:f7:8d:97:6f:96:93:26:78:89:0d:f3:27:83:1f: 11:7a:70:39:8b:5a:2b:31:61:4a:60:30:01:05:b1:44:64:40: 55:33:60:aa:95:7a:da:d4:1b:57:eb:3a:63:59:27:d5:19:2e: ca:28:a1:fd:f8:77:7b:7e:09:1a:c6:59:48:ad:47:ed:0f:8f: 85:27:04:2d:dd:36:a6:2a:4f:2a:43:10:e7:70:3e:ad:18:57: 70:c3:c2:66:3a:2a:7c:38:15:ed:b6:86:aa:e3:49:a7:38:0a: b3:ae:99:48:f6:8a:ce:45:83:08:60:b4:d1:b3:17:f2:ee:e8: e3:5a:e9:d8:87:6a:fc:1f:4e:0a:91:58:21:10:70:6b:af:bf: 13:47:27:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUzRDMxMTAvBgNVBAUTKEMwRkYxRjMyNjdEOEFEOTgxMjhCM0UzOTdDQ0ZGNzk3 M0I3NTA4Q0QwHhcNMjUwNzAzMDU1MDQ5WhcNMjUwNzEwMDU1MDQ5WjAYMRYwFAYD VQQDEw02ODY2MWEzOS0zMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23VAuYmp6kiuth6RPTGaoGhjfyA9btYxEH2m286B6L52KJ/gX9IGN2uC1d+J ZuF6p4KV5rn1Q5xc5YXEO3Yw+kTyX6G5YiJOjfHSJHNei1o0X9QmZWjudhGeYdYj gzEocDZ+n3QnA/aOJ7RRd9JSd7hQpQ/nfQXbHdD0SfvwRfAisXftTdyy7StSdFpu yl+VGZeitsOo3EXCo+ioECNFMyqvMFCDhpePQ5WX9LpWchAlc4kFYDKHfwOzI8DA Ub8LN3jXvHgVvQBWJm6SjKOFoVzRDU8iFpllr/MeGuC7yrSEMrZax9GobjxFz2xI TTsZEpj0qz6K7MxdrQhS/ZkYFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX4Fcwf BbF1iqaj5HtmIPScuZc9MB8GA1UdIwQYMBaAFMD/HzJn2K2YEos+OXzP95c7dQjN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTNEMy80MjUyOUY5RTFE ODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJaZ1NpejQ1Zk1fM2x6dDFD TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQOGZNbWZZclpnU2l6NDVmTV8zbHp0MUNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTNEMy80MjUyOUY5RTFEODgxMUVGQTNDNjRBNUVDNEY5QUUwMi93UDhmTW1mWXJa Z1NpejQ1Zk1fM2x6dDFDTTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ+4+9C7UjXyVM0MruW6OHW5aDBelR9+yoFz7AQ5oXVCUc/+cOrqdI VyI/kULXfpUEztON29py7f92b8hBfJYCGujqLc08hclGIYo5CXedADvAkgkOd6sO c1qrIoU86klFifw2HZd502u2nVzsTqsu942Xb5aTJniJDfMngx8RenA5i1orMWFK YDABBbFEZEBVM2CqlXra1BtX6zpjWSfVGS7KKKH9+Hd7fgkaxllIrUftD4+FJwQt 3TamKk8qQxDncD6tGFdww8JmOip8OBXttoaq40mnOAqzrplI9orORYMIYLTRsxfy 7ujjWunYh2r8H04KkVghEHBrr78TRyeE -----END CERTIFICATE-----Generated at Thu Jul 3 11:28:43 2025 by rpki-client