$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json) Hash identifier: obRLexcqCTPpmCAlAoqvk9xVet1Pgi7l0u2UhCyHUss= Subject key identifier: 35:CD:15:B9:41:4B:64:B2:0E:76:76:D6:23:F7:68:39:59:1D:C6:52 Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft Manifest number: 17 Signing time: Sun 29 Jun 2025 06:59:22 +0000 Manifest this update: Sun 29 Jun 2025 06:59:21 +0000 Manifest next update: Sun 06 Jul 2025 06:59:21 +0000 Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: /q2SrFr+yWCkolRK5y002l/MpaxHmZom1m9KOEw7AZc=) 2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Validity Not Before: Jun 29 06:59:21 2025 GMT Not After : Jul 6 06:59:21 2025 GMT Subject: CN=6860e44a-2e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:4a:32:f5:81:95:c2:f3:e1:ac:ff:ba:89: 55:26:89:00:56:2e:07:7f:a3:8e:ed:e1:d5:02:92: 53:b6:77:c9:b7:98:6e:2e:29:83:6c:18:9e:7c:83: ad:aa:27:44:47:e1:07:33:39:b6:2b:23:20:9a:b9: 15:62:be:97:39:70:71:d6:26:46:10:52:64:98:dd: 28:83:e5:12:db:3a:dd:c9:b3:9c:ca:12:4a:01:8d: d2:2b:d8:7a:45:1f:0f:f2:bd:0f:08:65:b1:75:db: 07:10:c0:84:18:4d:b4:4c:a9:e6:1f:a3:04:ac:e2: d1:67:67:7a:57:79:e6:fc:0c:ec:a6:d2:8a:aa:53: ee:e4:40:27:b3:25:64:88:97:79:ce:ad:0a:aa:3a: bd:83:4c:58:43:90:d2:07:d8:0d:c6:0d:c9:60:2f: 1f:74:4a:5c:a0:92:90:81:c3:32:b7:8a:4f:1f:43: 37:1c:bb:b5:d2:18:7f:69:3c:15:52:d1:4c:a6:7d: f9:a6:e0:4d:1e:22:fd:7c:e9:50:db:6a:2b:46:3a: 5d:a6:89:18:7e:90:f9:21:c1:21:df:e3:27:bb:8c: 2b:cf:26:d7:8c:b9:b6:7b:b7:0a:f8:09:ce:bb:20: bf:08:b8:47:17:8f:f9:2e:ba:a7:9b:c3:2a:30:2f: 16:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CD:15:B9:41:4B:64:B2:0E:76:76:D6:23:F7:68:39:59:1D:C6:52 X509v3 Authority Key Identifier: keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9d:a1:f6:de:c9:e0:9a:22:9b:e0:e2:72:46:ff:95:35:80: 61:b2:f7:35:b7:3b:f4:84:d6:27:e7:4d:85:4d:3b:41:0d:5b: 82:57:eb:69:6b:fa:58:23:1a:94:c5:ca:d3:d3:42:ba:83:c3: 0f:39:be:87:d7:e2:da:d4:02:07:03:1c:65:05:55:dc:80:95: fc:06:88:36:48:d6:f9:06:ed:82:1d:27:a9:8d:bc:3d:ca:f0: ce:6a:d1:1e:7b:24:df:dc:2e:fd:ab:54:79:d2:a0:a9:0a:d1: 43:15:9c:1c:44:d2:96:58:8f:9c:f9:d1:d7:56:7d:3f:01:5c: f8:8d:28:86:4b:4b:66:03:10:7d:e2:f6:47:8e:85:50:5d:22: 48:e3:ac:e2:c1:98:99:9f:b0:9e:e1:4f:23:48:70:bc:98:2f: 4a:a3:cd:c7:99:bb:66:83:eb:54:65:d2:9d:50:19:2f:5a:eb: 51:13:c7:b1:98:69:6e:21:5c:c7:21:fe:91:d9:cd:6d:37:cc: 6e:34:17:31:c8:1b:43:bb:fd:cd:ff:21:43:93:68:e8:c5:07: d0:0f:ee:e5:28:d1:34:c9:3a:26:a3:77:52:fa:96:1c:02:dc: b6:4a:84:bb:58:07:e3:53:ba:53:ad:64:81:78:65:3d:df:e6: 30:99:6a:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC NzQwRDJDRDAeFw0yNTA2MjkwNjU5MjFaFw0yNTA3MDYwNjU5MjFaMBgxFjAUBgNV BAMTDTY4NjBlNDRhLTJlNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM5Uoy9YGVwvPhrP+6iVUmiQBWLgd/o47t4dUCklO2d8m3mG4uKYNsGJ58g62q J0RH4QczObYrIyCauRVivpc5cHHWJkYQUmSY3SiD5RLbOt3Js5zKEkoBjdIr2HpF Hw/yvQ8IZbF12wcQwIQYTbRMqeYfowSs4tFnZ3pXeeb8DOym0oqqU+7kQCezJWSI l3nOrQqqOr2DTFhDkNIH2A3GDclgLx90SlygkpCBwzK3ik8fQzccu7XSGH9pPBVS 0Uymffmm4E0eIv186VDbaitGOl2miRh+kPkhwSHf4ye7jCvPJteMubZ7twr4Cc67 IL8IuEcXj/kuuqebwyowLxZrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNc0VuUFL ZLIOdnbWI/doOVkdxlIwHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2 ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGOdofbeyeCaIpvg4nJG/5U1gGGy9zW3O/SE1ifnTYVNO0ENW4JX62lr +lgjGpTFytPTQrqDww85vofX4trUAgcDHGUFVdyAlfwGiDZI1vkG7YIdJ6mNvD3K 8M5q0R57JN/cLv2rVHnSoKkK0UMVnBxE0pZYj5z50ddWfT8BXPiNKIZLS2YDEH3i 9keOhVBdIkjjrOLBmJmfsJ7hTyNIcLyYL0qjzceZu2aD61Rl0p1QGS9a61ETx7GY aW4hXMch/pHZzW03zG40FzHIG0O7/c3/IUOTaOjFB9AP7uUo0TTJOiajd1L6lhwC 3LZKhLtYB+NTulOtZIF4ZT3f5jCZaro= -----END CERTIFICATE-----Generated at Mon Jun 30 09:42:42 2025 by rpki-client