$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json) Hash identifier: wYznMttpF1Qqk+VlDm8VYGSbWzPpGFpMfD1oGmWEAlA= Subject key identifier: B9:DC:72:53:74:84:AB:82:22:36:35:5F:76:B7:81:A6:65:AB:D2:01 Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68 Certificate issuer: /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft Manifest number: 033F Signing time: Sun 29 Jun 2025 00:35:17 +0000 Manifest this update: Sun 29 Jun 2025 00:35:17 +0000 Manifest next update: Sun 06 Jul 2025 00:35:17 +0000 Files and hashes: 1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: WVMpu1sbeNa5Ft1Ut5aH68ThAV8frbUAQwjrosgRz04=) 2: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=) 3: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: R45goBc9ltNNydJH/crrPm7jUsX2yEtOzi9r+yJorZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568 Validity Not Before: Jun 29 00:35:17 2025 GMT Not After : Jul 6 00:35:17 2025 GMT Subject: CN=68608a45-840e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:f2:7a:e4:34:d5:1c:78:0f:e0:c1:60:32: 3d:36:56:a4:31:9e:b1:8e:f7:be:d1:db:9a:44:44: fc:5e:49:69:00:c1:da:3c:e8:a8:9b:ae:fd:e8:c2: b4:de:7e:5f:38:3c:c2:4b:e3:26:ba:a6:7d:2b:b4: aa:9f:f6:10:b0:ca:52:b0:49:9f:2c:19:60:a8:bc: 86:7c:c6:4d:0c:64:ea:be:a5:4c:92:db:06:bb:f1: 44:ea:78:58:4d:c4:ec:92:ae:e7:1c:82:cd:79:1f: 3a:48:3e:97:29:90:dd:39:5c:e6:59:83:b1:8a:25: c1:77:72:4f:ba:e5:9d:9f:77:41:4b:10:8f:7b:b7: fe:9c:29:47:8d:05:96:da:df:7d:ec:7e:31:cd:c2: 9e:17:b8:1b:28:f2:8a:16:9d:6e:ed:fb:b5:7c:af: 2a:df:c7:a8:28:ea:e4:9a:37:fa:07:b7:1b:ab:7f: 98:b3:54:1e:bd:24:82:71:52:64:88:b9:b1:0d:89: 1c:6a:67:53:ae:b6:fa:86:1a:a6:f2:18:8f:e9:56: 83:e2:9b:c6:cd:69:f3:e1:cc:50:42:0d:3d:05:17: 5f:3e:96:c8:e0:49:a6:3f:bf:fe:09:46:4f:f0:f1: 43:f1:02:da:b6:19:fe:8a:5d:b6:ac:98:b8:42:74: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DC:72:53:74:84:AB:82:22:36:35:5F:76:B7:81:A6:65:AB:D2:01 X509v3 Authority Key Identifier: keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:cc:36:87:f4:03:0b:3a:26:c9:df:a0:7e:3d:c3:e7:4e:55: 1c:75:0a:6c:19:81:77:e8:86:6c:f6:95:f4:f5:45:96:bc:ed: 25:07:51:24:71:70:21:90:5d:5d:a0:e8:80:28:d1:d6:08:19: e6:9a:62:51:86:31:8e:41:aa:46:e9:ef:8e:51:5a:71:20:6f: c8:e1:2c:ae:74:bb:c7:d4:c3:13:e8:b5:46:a0:50:de:be:29: 65:e2:90:07:1c:ae:ef:2a:82:9d:fd:54:d1:9a:00:d1:95:86: 0d:ff:a6:4f:a7:b9:57:33:15:6f:ed:e4:9c:f9:94:14:b2:ba: 04:95:41:6a:2b:4d:c4:18:32:6d:56:b1:e6:02:9d:e0:16:7b: 8f:26:5c:16:be:6c:56:e2:75:66:04:77:d1:e3:11:dd:a3:d9: 5c:d2:95:4e:15:0a:c4:55:d4:88:bf:36:a2:05:80:bc:ab:2c: 76:48:ce:3e:15:72:e9:05:de:e0:22:23:93:4d:56:f1:22:7b: b5:88:99:16:54:6a:76:fe:60:de:48:e9:a2:b2:88:57:02:b6: 24:12:2b:8c:44:e1:f3:2f:9b:61:b3:14:52:91:18:90:25:fe: c6:66:15:1c:7e:31:6c:88:56:48:a7:28:3b:7d:93:36:c2:8f: fd:65:30:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA2QzIxMTAvBgNVBAUTKDVCMEJCQzg0QjVDQkQxNUMzMEQ5MDE0MjcwNjUyOENG MTkwMTA1NjgwHhcNMjUwNjI5MDAzNTE3WhcNMjUwNzA2MDAzNTE3WjAYMRYwFAYD VQQDEw02ODYwOGE0NS04NDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJDyeuQ01Rx4D+DBYDI9NlakMZ6xjve+0duaRET8XklpAMHaPOiom6796MK0 3n5fODzCS+MmuqZ9K7Sqn/YQsMpSsEmfLBlgqLyGfMZNDGTqvqVMktsGu/FE6nhY TcTskq7nHILNeR86SD6XKZDdOVzmWYOxiiXBd3JPuuWdn3dBSxCPe7f+nClHjQWW 2t997H4xzcKeF7gbKPKKFp1u7fu1fK8q38eoKOrkmjf6B7cbq3+Ys1QevSSCcVJk iLmxDYkcamdTrrb6hhqm8hiP6VaD4pvGzWnz4cxQQg09BRdfPpbI4EmmP7/+CUZP 8PFD8QLathn+il22rJi4QnSnlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLncclN0 hKuCIjY1X3a3gaZlq9IBMB8GA1UdIwQYMBaAFFsLvIS1y9FcMNkBQnBlKM8ZAQVo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDZDMi8xNjI0RDFEOEM0 OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBWd3cyUUZDY0dVb3p4a0JC V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3dThoTFhMMFZ3dzJRRkNjR1VvenhrQkJXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDZDMi8xNjI0RDFEOEM0OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBW d3cyUUZDY0dVb3p4a0JCV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBzDaH9AMLOibJ36B+PcPnTlUcdQpsGYF36IZs9pX09UWWvO0lB1Ek cXAhkF1doOiAKNHWCBnmmmJRhjGOQapG6e+OUVpxIG/I4SyudLvH1MMT6LVGoFDe vill4pAHHK7vKoKd/VTRmgDRlYYN/6ZPp7lXMxVv7eSc+ZQUsroElUFqK03EGDJt VrHmAp3gFnuPJlwWvmxW4nVmBHfR4xHdo9lc0pVOFQrEVdSIvzaiBYC8qyx2SM4+ FXLpBd7gIiOTTVbxInu1iJkWVGp2/mDeSOmisohXArYkEiuMROHzL5thsxRSkRiQ Jf7GZhUcfjFsiFZIpyg7fZM2wo/9ZTDG -----END CERTIFICATE-----Generated at Sun Jun 29 11:38:40 2025 by rpki-client