$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json) Hash identifier: cc+Mn/vrNZNKKlpx4/ocFDzXHzDJdNx47z97oAeD4ss= Subject key identifier: EF:2A:92:96:39:33:41:02:7E:E3:7B:C1:55:2C:F2:CB:04:5B:DF:07 Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Certificate serial: 2FF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft Manifest number: 2FE9 Signing time: Mon 30 Jun 2025 15:29:40 +0000 Manifest this update: Mon 30 Jun 2025 15:29:40 +0000 Manifest next update: Mon 07 Jul 2025 15:29:40 +0000 Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: 38n/jK6tOlxDxh9bE2PPuf+F8gaAmS73OimCr7riLUc=) 2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: qjc1TRQ4aj3UWDrfE4OMe7D9VpKX+4bRXdtLVlC/TX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12274 (0x2ff2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Validity Not Before: Jun 30 15:29:40 2025 GMT Not After : Jul 7 15:29:40 2025 GMT Subject: CN=6862ad64-0fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:e6:f3:98:07:57:83:bc:1e:53:f0:4b:4f: 5d:fa:7c:70:24:0f:2a:b9:91:7d:ee:2a:4d:c8:1d: ac:e1:22:f1:12:7a:c1:ed:28:7b:89:7a:b0:fa:10: 82:8b:41:45:6f:fc:76:ff:2c:ca:8b:bf:de:b7:0e: 40:f7:97:be:ba:3a:65:b2:bb:6a:bb:25:93:a7:78: 95:1f:e4:f6:32:82:5e:af:c8:72:01:2f:b2:93:41: 76:6b:b7:2c:ec:fe:a9:18:b7:93:4b:41:28:ae:21: 7e:6f:e7:c4:1a:cc:9c:f1:e3:51:94:16:05:51:2f: 8b:de:76:52:4b:ac:ce:bd:30:47:ea:b3:26:c3:af: 58:f6:60:49:1f:a3:30:52:cc:50:a2:5c:2a:56:67: fe:c4:16:a5:70:88:03:40:e5:17:22:d1:bd:55:6d: b4:82:9e:0c:de:35:cd:83:de:1f:f2:b2:e9:30:0f: f7:cc:8e:46:98:16:51:99:01:1b:cc:1c:a9:e9:58: a2:39:36:13:ad:e4:ed:50:c2:4e:62:de:d2:8f:ea: 99:df:27:0f:59:74:60:2a:53:82:b3:71:58:c0:01: c9:81:1e:78:c1:a7:53:d9:56:a4:05:b4:04:a5:3e: a5:f8:f3:ef:b8:d1:e6:a7:60:37:88:13:f3:ba:47: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2A:92:96:39:33:41:02:7E:E3:7B:C1:55:2C:F2:CB:04:5B:DF:07 X509v3 Authority Key Identifier: keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4a:f4:69:ec:aa:e3:62:4c:ef:28:0e:a4:11:58:01:23:15: 05:a5:c6:4b:41:83:1d:43:11:3e:07:3f:04:5c:3a:55:01:18: 9d:a0:21:63:bb:c6:06:88:83:07:06:55:30:c2:0a:a4:66:e0: 3a:3a:02:2e:43:16:ec:22:f4:e5:73:f2:8d:5f:59:3e:03:18: 1f:58:f0:16:0c:56:2b:f1:8f:79:92:9a:87:f1:cb:47:79:a3: 7b:17:7a:b7:2d:78:80:55:f6:ae:5e:7b:50:12:f0:69:b8:42: 6b:9f:11:7d:da:50:72:e9:4c:82:13:d9:d2:f4:ca:dd:4f:e1: ce:12:e1:7b:e0:98:11:28:3a:3c:c7:b4:f5:fc:be:39:80:05: 30:ac:b6:1c:b0:cc:30:d6:85:d7:c2:d6:57:e2:a2:bf:9e:2d: 45:fc:ba:f8:fe:8e:9a:75:1f:00:16:52:56:bd:49:3b:09:7c: 08:31:61:bd:91:8d:b5:f6:e1:97:00:ec:51:49:f1:6d:ef:18: b4:bf:52:73:e9:4f:2c:53:0d:72:7b:80:3e:42:f9:94:c3:7c: 50:50:65:d5:73:c2:48:87:98:d0:72:c2:de:8f:45:17:d8:8f: cf:5a:0c:e3:f5:87:11:cc:80:6f:a7:41:d3:2e:ce:8e:42:27: ef:c4:d3:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG RTE1MDcyMTkwHhcNMjUwNjMwMTUyOTQwWhcNMjUwNzA3MTUyOTQwWjAYMRYwFAYD VQQDEw02ODYyYWQ2NC0wZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk7m85gHV4O8HlPwS09d+nxwJA8quZF97ipNyB2s4SLxEnrB7Sh7iXqw+hCC i0FFb/x2/yzKi7/etw5A95e+ujplsrtquyWTp3iVH+T2MoJer8hyAS+yk0F2a7cs 7P6pGLeTS0EoriF+b+fEGsyc8eNRlBYFUS+L3nZSS6zOvTBH6rMmw69Y9mBJH6Mw UsxQolwqVmf+xBalcIgDQOUXItG9VW20gp4M3jXNg94f8rLpMA/3zI5GmBZRmQEb zByp6ViiOTYTreTtUMJOYt7Sj+qZ3ycPWXRgKlOCs3FYwAHJgR54wadT2VakBbQE pT6l+PPvuNHmp2A3iBPzukdgGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8qkpY5 M0ECfuN7wVUs8ssEW98HMB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz WmY5dlBpLXpOX3otRlFjaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXSvRp7KrjYkzvKA6kEVgBIxUFpcZLQYMdQxE+Bz8EXDpVARidoCFj u8YGiIMHBlUwwgqkZuA6OgIuQxbsIvTlc/KNX1k+AxgfWPAWDFYr8Y95kpqH8ctH eaN7F3q3LXiAVfauXntQEvBpuEJrnxF92lBy6UyCE9nS9MrdT+HOEuF74JgRKDo8 x7T1/L45gAUwrLYcsMww1oXXwtZX4qK/ni1F/Lr4/o6adR8AFlJWvUk7CXwIMWG9 kY219uGXAOxRSfFt7xi0v1Jz6U8sUw1ye4A+QvmUw3xQUGXVc8JIh5jQcsLej0UX 2I/PWgzj9YcRzIBvp0HTLs6OQifvxNMR -----END CERTIFICATE-----Generated at Tue Jul 1 07:03:34 2025 by rpki-client