$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: CoBqKF1+b4Ibs4HqOeMsVIzfeagO09CJ8p7cJo3X5eM= Subject key identifier: A8:F0:26:4C:52:08:87:74:50:4D:24:A9:8D:EC:8F:B0:09:B5:B0:B6 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 34B4 Signing time: Mon 30 Jun 2025 15:15:20 +0000 Manifest this update: Mon 30 Jun 2025 15:15:19 +0000 Manifest next update: Mon 07 Jul 2025 15:15:19 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: 9aGtHNSfpYnZz7X8hqbbuXbgpV07w1DSrWN0ZhgdBMs=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Jun 30 15:15:19 2025 GMT Not After : Jul 7 15:15:19 2025 GMT Subject: CN=6862aa07-b74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:78:e3:f8:f2:fc:f9:61:27:41:95:ba:b6: b9:2f:09:da:7b:eb:7e:45:6a:37:7a:55:e4:5c:c3: 21:ac:4e:94:49:9d:93:2e:0c:fa:b6:ba:89:77:a0: ac:d4:c7:ee:d9:4c:51:b1:17:9e:57:f0:2e:89:c8: df:54:81:36:5e:4f:b1:a4:20:0b:c8:00:a0:02:38: f3:83:5f:f6:0a:58:9f:fe:59:a4:a1:ea:67:d1:93: a7:3d:0c:72:45:0e:1e:9e:33:42:8e:a8:c0:01:79: aa:2e:b4:9f:ac:e4:53:aa:ae:89:4c:12:dc:bd:39: ae:39:68:1a:c1:16:88:5f:a6:74:ec:5a:96:a7:a8: a3:e9:53:04:46:c9:69:77:b0:3b:af:49:55:1b:af: 3a:9e:14:1e:07:cf:47:81:ab:0f:4a:49:e8:2c:ea: f3:17:01:c0:76:19:7e:2d:e5:63:a6:b5:77:5a:f6: 31:96:76:a4:13:66:47:25:00:de:4b:3e:fb:3d:3f: e7:47:93:13:44:1d:9f:78:af:ea:32:2b:40:5b:f4: b7:f3:97:26:d9:d0:40:b5:dc:7f:19:81:15:56:c1: 97:53:dd:6b:76:a4:68:35:18:96:3c:04:a6:01:c5: 55:82:1d:fd:7e:61:27:ab:de:aa:74:fc:48:a1:3f: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:26:4C:52:08:87:74:50:4D:24:A9:8D:EC:8F:B0:09:B5:B0:B6 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a1:83:c8:1c:ff:58:9b:c1:75:0e:11:70:dc:f4:ec:14:18: 85:f4:10:3d:99:4c:58:17:bd:fe:c4:be:66:5e:1e:5a:b5:75: 68:24:21:35:93:7f:d4:05:75:22:dd:40:6a:e6:31:99:55:1f: 58:18:59:25:73:92:d4:06:16:ea:d7:b0:c3:8c:a6:75:d2:d5: fd:e2:de:7b:46:f5:1a:d1:9e:44:87:71:ed:e1:18:a7:b8:e9: 89:99:03:5f:02:01:e7:a9:42:af:ef:9a:81:e5:ca:6b:46:44: 86:26:10:b5:8d:14:9b:5a:84:ad:62:0e:6c:a6:3f:72:ac:f1: 72:d0:10:e0:ca:9a:6e:74:2f:6c:49:cb:51:6d:4f:c8:46:f4: a3:4b:52:56:59:17:77:be:26:0e:0f:dd:ef:9b:12:8f:cf:2f: 1d:1c:fc:33:46:2f:e3:d5:7a:9d:f8:3a:bd:c8:8b:d9:83:6d: 3d:9b:b7:e7:67:22:2c:98:a0:85:c7:b7:8f:12:98:72:ce:c9: 10:b1:41:66:7a:e5:58:b6:bc:bd:75:48:25:0f:f4:a8:30:42: aa:e2:b3:11:d3:29:49:25:d5:33:57:5c:d4:a8:2f:53:fa:d5: 85:5f:7a:6b:c5:19:c7:e3:54:e7:60:5d:fe:44:e0:89:c9:b1: 07:24:2b:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwNjMwMTUxNTE5WhcNMjUwNzA3MTUxNTE5WjAYMRYwFAYD VQQDEw02ODYyYWEwNy1iNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0R44/jy/PlhJ0GVura5Lwnae+t+RWo3elXkXMMhrE6USZ2TLgz6trqJd6Cs 1Mfu2UxRsReeV/AuicjfVIE2Xk+xpCALyACgAjjzg1/2Clif/lmkoepn0ZOnPQxy RQ4enjNCjqjAAXmqLrSfrORTqq6JTBLcvTmuOWgawRaIX6Z07FqWp6ij6VMERslp d7A7r0lVG686nhQeB89HgasPSknoLOrzFwHAdhl+LeVjprV3WvYxlnakE2ZHJQDe Sz77PT/nR5MTRB2feK/qMitAW/S385cm2dBAtdx/GYEVVsGXU91rdqRoNRiWPASm AcVVgh39fmEnq96qdPxIoT+a5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjwJkxS CId0UE0kqY3sj7AJtbC2MB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeoYPIHP9Ym8F1DhFw3PTsFBiF9BA9mUxYF73+xL5mXh5atXVoJCE1 k3/UBXUi3UBq5jGZVR9YGFklc5LUBhbq17DDjKZ10tX94t57RvUa0Z5Eh3Ht4Rin uOmJmQNfAgHnqUKv75qB5cprRkSGJhC1jRSbWoStYg5spj9yrPFy0BDgyppudC9s SctRbU/IRvSjS1JWWRd3viYOD93vmxKPzy8dHPwzRi/j1Xqd+Dq9yIvZg209m7fn ZyIsmKCFx7ePEphyzskQsUFmeuVYtry9dUglD/SoMEKq4rMR0ylJJdUzV1zUqC9T +tWFX3prxRnH41TnYF3+ROCJybEHJCuZ -----END CERTIFICATE-----Generated at Wed Jul 2 05:35:36 2025 by rpki-client