$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: vdDyUMC+QOcN8CQwro7XKCr0eeD4nVQ28BOgaD3lNdw= Subject key identifier: 63:DF:9E:47:E2:6C:E4:97:5B:99:6B:BD:36:CC:06:9F:D2:9D:DE:6D Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 032E Signing time: Tue 01 Jul 2025 01:42:07 +0000 Manifest this update: Tue 01 Jul 2025 01:42:06 +0000 Manifest next update: Tue 08 Jul 2025 01:42:06 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: tvsfgSqCs5xkccqnMfp+AAKIR4DmFSE+9z/C68XZY7s=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Jul 1 01:42:06 2025 GMT Not After : Jul 8 01:42:06 2025 GMT Subject: CN=68633cef-bd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:74:32:7a:da:e1:cf:95:b5:c6:71:01:5e: 55:80:bc:29:d8:75:55:6f:f3:fa:ab:6a:4f:c3:55: 67:79:af:dd:2f:2e:54:36:ab:8c:9f:2c:bb:5f:40: e5:06:c3:24:25:12:7f:78:8d:59:b4:07:cf:ae:5f: 43:5c:d5:0b:1c:6a:4c:7e:26:50:bf:b7:e6:e2:09: 69:25:f0:19:12:68:e0:24:20:d8:bf:41:e7:8c:65: d7:76:02:34:ff:9d:b4:79:87:ca:97:2e:3c:4b:6b: 55:36:a9:86:1d:70:42:79:ad:c7:05:01:d9:60:7c: 7f:1d:be:48:55:7a:ca:83:7d:59:82:a0:d9:60:22: 25:0e:90:2c:83:71:ac:47:2c:d9:18:66:2a:ad:cd: 2f:b0:12:77:66:fb:41:06:37:97:95:3c:df:ba:ff: 57:04:a5:a1:a3:e2:fc:5c:6f:19:b8:03:ec:83:41: dd:4c:84:da:77:d4:3e:b2:2f:9e:7a:40:56:31:3a: 15:1b:b4:45:8d:f5:df:15:b1:93:66:cf:e9:98:4b: 1a:e0:89:9a:40:e7:1e:52:21:9c:d9:75:31:9a:2a: 8c:a1:3a:91:6f:ed:b9:f5:81:e8:b1:c6:00:96:cf: e0:d0:a6:70:67:f4:0c:62:46:3c:03:a1:8c:9a:34: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DF:9E:47:E2:6C:E4:97:5B:99:6B:BD:36:CC:06:9F:D2:9D:DE:6D X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:46:4a:ae:20:1e:7d:4b:c9:5e:ed:55:36:a3:b5:86:53:40: ee:c7:0d:b4:34:62:98:12:3a:71:11:43:4d:62:9e:88:3e:26: 0d:67:60:10:5d:5e:dc:17:6a:0e:4b:ef:3b:85:5b:52:45:59: ec:6b:5b:cd:8e:ee:e1:72:ee:39:8d:0f:52:56:91:23:44:e0: 8c:cc:1b:fe:54:3e:7e:51:be:8a:be:23:a2:6c:5b:c7:1f:9a: 4d:ab:ca:e8:56:4e:76:33:82:30:52:ff:85:63:12:49:ff:4e: a3:b4:35:b4:74:07:f1:d6:de:ee:16:f0:b5:49:dd:3b:90:fd: fe:86:c6:41:1f:4a:2c:da:ee:96:74:9a:a2:f2:88:56:f1:e5: f8:54:ea:2b:5e:1e:58:c0:dc:4e:9f:ca:b2:bb:d0:15:6c:4b: f4:a7:34:84:09:f2:a6:97:51:c0:61:06:51:f5:df:42:40:a6: c9:4c:94:91:d7:88:61:04:f2:28:98:1c:37:8b:4b:5a:19:0b: 5a:2f:da:15:d8:9f:87:3d:d1:d7:b4:58:ff:2e:bb:d0:5e:77: e1:a1:df:62:4f:ee:e7:07:46:42:94:8d:98:1e:aa:d1:df:88: 48:16:7a:c3:4e:3d:de:0a:a0:c5:e0:0b:cc:7d:4f:12:5d:60: ce:43:93:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUwNzAxMDE0MjA2WhcNMjUwNzA4MDE0MjA2WjAYMRYwFAYD VQQDEw02ODYzM2NlZi1iZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eB0Mnra4c+VtcZxAV5VgLwp2HVVb/P6q2pPw1Vnea/dLy5UNquMnyy7X0Dl BsMkJRJ/eI1ZtAfPrl9DXNULHGpMfiZQv7fm4glpJfAZEmjgJCDYv0HnjGXXdgI0 /520eYfKly48S2tVNqmGHXBCea3HBQHZYHx/Hb5IVXrKg31ZgqDZYCIlDpAsg3Gs RyzZGGYqrc0vsBJ3ZvtBBjeXlTzfuv9XBKWho+L8XG8ZuAPsg0HdTITad9Q+si+e ekBWMToVG7RFjfXfFbGTZs/pmEsa4ImaQOceUiGc2XUxmiqMoTqRb+259YHoscYA ls/g0KZwZ/QMYkY8A6GMmjT2sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPfnkfi bOSXW5lrvTbMBp/Snd5tMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRRkquIB59S8le7VU2o7WGU0Duxw20NGKYEjpxEUNNYp6IPiYNZ2AQ XV7cF2oOS+87hVtSRVnsa1vNju7hcu45jQ9SVpEjROCMzBv+VD5+Ub6KviOibFvH H5pNq8roVk52M4IwUv+FYxJJ/06jtDW0dAfx1t7uFvC1Sd07kP3+hsZBH0os2u6W dJqi8ohW8eX4VOorXh5YwNxOn8qyu9AVbEv0pzSECfKml1HAYQZR9d9CQKbJTJSR 14hhBPIomBw3i0taGQtaL9oV2J+HPdHXtFj/LrvQXnfhod9iT+7nB0ZClI2YHqrR 34hIFnrDTj3eCqDF4AvMfU8SXWDOQ5Pe -----END CERTIFICATE-----Generated at Wed Jul 2 13:03:36 2025 by rpki-client