$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft File: wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft (raw, json) Hash identifier: NMAvgpZm7O0sx2VqCXMgB1Lroxma65VZb4MBU7jmwWs= Subject key identifier: BD:51:3E:1E:EB:94:74:8A:37:C7:C7:BE:7A:4B:80:87:E2:51:24:58 Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69 Certificate issuer: /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft Manifest number: 07 Signing time: Tue 01 Jul 2025 08:58:40 +0000 Manifest this update: Tue 01 Jul 2025 08:58:39 +0000 Manifest next update: Tue 08 Jul 2025 08:58:39 +0000 Files and hashes: 1: wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl (hash: JapIO85SRB9YXHAD4szzfgTQ34bF8K1Zpf/GiK+L8y4=) 2: 1BB7179A51A611F0863A2B36C4F9AE02.roa (hash: 63j54fJ2hxn7dsTffTxKtV1a44WJvIl6Kuapu9EYJTc=) 3: 1C2049B851A611F0863A2B36C4F9AE02.roa (hash: sHYa8nme58N//J9QgIPrzoi+II58k2J0/lwv98SyPaA=) 4: 275CD490509D11F0977ED738C4F9AE02.roa (hash: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69 Validity Not Before: Jul 1 08:58:39 2025 GMT Not After : Jul 8 08:58:39 2025 GMT Subject: CN=6863a33f-b1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:bb:20:d1:1b:b3:b3:16:1b:ac:a9:51:49: 00:af:db:de:1a:91:57:1e:28:92:66:ed:cc:8d:d7: ac:36:14:32:13:1a:f7:20:2f:b6:ed:ca:e2:de:12: 86:04:db:16:a8:5b:d8:1a:0a:63:ab:ef:d6:1e:84: 0b:a5:47:5d:9d:dd:2f:7e:65:ce:23:71:80:db:0a: 64:5a:38:92:1a:f4:bd:c0:ce:84:39:0d:07:e9:ea: 0d:4c:76:4a:e8:76:22:99:b3:f6:5e:ce:71:87:05: fe:37:82:d6:4c:5a:50:20:ea:c7:6f:c1:ff:4b:6f: 0b:cc:fb:32:c3:b0:7c:7c:62:de:89:7b:c6:8b:02: c3:4d:01:09:e5:a7:9b:a9:f7:d8:e5:ff:cf:12:31: db:ab:a4:b9:82:cf:43:e9:e4:0d:4e:29:e7:d9:4d: f2:13:e5:ed:2d:83:14:9d:cd:c2:05:08:45:ae:46: 30:83:62:ee:b3:8b:f8:32:91:c1:aa:ab:9f:c8:ff: 39:fe:56:f5:de:aa:48:13:12:09:22:c9:f0:16:24: 94:0f:49:81:a3:48:f8:bc:49:50:e0:5f:fd:e8:39: 69:75:24:91:1f:01:f1:30:f4:11:df:77:b0:66:88: 02:37:6e:3f:cf:33:93:05:57:83:bb:fb:ea:ba:d2: 17:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:51:3E:1E:EB:94:74:8A:37:C7:C7:BE:7A:4B:80:87:E2:51:24:58 X509v3 Authority Key Identifier: keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1a:d6:93:83:0f:de:f0:42:fe:44:85:b3:82:0f:c9:63:36: 7b:c2:54:1e:97:a6:94:5c:30:96:d1:00:71:ba:ce:e6:5a:17: 09:2a:aa:2c:6a:91:6c:07:92:84:a9:4f:1d:e3:24:b1:ca:97: 6b:8b:fd:83:cb:66:9f:d8:81:97:29:b4:de:40:2f:29:cd:40: 21:2f:b5:89:d1:3d:ec:f5:68:da:e9:9e:52:9b:af:42:b6:36: 83:16:4f:f5:d9:84:4c:e1:b2:48:a8:dd:04:be:fb:52:34:03: 0f:dc:9b:07:70:38:cd:6b:95:7b:69:72:9e:a4:61:f2:a8:c0: ca:90:45:79:21:dd:8f:b2:6e:f7:23:78:7c:99:df:80:ce:ac: 7e:e0:02:61:71:3d:f7:bd:e0:63:d5:16:b2:1d:c0:0b:0e:d6: 7b:eb:be:a7:24:f7:ae:05:54:bb:e4:3b:78:46:92:76:08:49: c2:91:d5:2a:76:0b:54:53:6e:0e:1a:6c:03:c3:b8:0e:80:f5: 3d:c9:7d:fd:a7:51:b7:9d:8e:12:c9:75:8a:c2:05:ec:5e:9b: 6f:a1:50:69:1f:e1:3b:99:24:0e:58:87:fd:18:bc:dd:75:83: f0:7c:95:cb:fc:96:75:a2:cd:3f:54:8a:af:77:08:0e:f7:6b: c2:db:6c:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBRDExMC8GA1UEBRMoQzE1OTcxMzFFQUJDNUJCMzMyQkM5OTlENDE2RTlENUU3 RkNDMEE2OTAeFw0yNTA3MDEwODU4MzlaFw0yNTA3MDgwODU4MzlaMBgxFjAUBgNV BAMTDTY4NjNhMzNmLWIxZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Orsg0RuzsxYbrKlRSQCv294akVceKJJm7cyN16w2FDITGvcgL7btyuLeEoYE 2xaoW9gaCmOr79YehAulR12d3S9+Zc4jcYDbCmRaOJIa9L3AzoQ5DQfp6g1Mdkro diKZs/ZeznGHBf43gtZMWlAg6sdvwf9LbwvM+zLDsHx8Yt6Je8aLAsNNAQnlp5up 99jl/88SMdurpLmCz0Pp5A1OKefZTfIT5e0tgxSdzcIFCEWuRjCDYu6zi/gykcGq q5/I/zn+VvXeqkgTEgkiyfAWJJQPSYGjSPi8SVDgX/3oOWl1JJEfAfEw9BHfd7Bm iAI3bj/PM5MFV4O7++q60heJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvVE+HuuU dIo3x8e+ekuAh+JRJFgwHwYDVR0jBBgwFoAUwVlxMeq8W7MyvJmdQW6dXn/MCmkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0JDMjhBRjAwNTA5 QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdNeXZKbWRRVzZkWG5fTUNt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1ZseE1lcThXN015dkptZFFXNmRYbl9NQ21rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MUFEL0JDMjhBRjAwNTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdN eXZKbWRRVzZkWG5fTUNtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACwa1pODD97wQv5EhbOCD8ljNnvCVB6XppRcMJbRAHG6zuZaFwkqqixq kWwHkoSpTx3jJLHKl2uL/YPLZp/YgZcptN5ALynNQCEvtYnRPez1aNrpnlKbr0K2 NoMWT/XZhEzhskio3QS++1I0Aw/cmwdwOM1rlXtpcp6kYfKowMqQRXkh3Y+ybvcj eHyZ34DOrH7gAmFxPfe94GPVFrIdwAsO1nvrvqck964FVLvkO3hGknYIScKR1Sp2 C1RTbg4abAPDuA6A9T3Jff2nUbedjhLJdYrCBexem2+hUGkf4TuZJA5Yh/0YvN11 g/B8lcv8lnWizT9Uiq93CA73a8LbbEk= -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:15 2025 by rpki-client