$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: NwYtdgQwmAdLUR/HGZNSYsmKC3ogaGZqxWFNsY2gjfY= Subject key identifier: 68:5D:6B:4E:71:CF:E5:F9:D4:E0:92:BC:81:41:C1:35:6F:4F:BA:56 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: 9B Signing time: Sun 29 Jun 2025 05:20:29 +0000 Manifest this update: Sun 29 Jun 2025 05:20:28 +0000 Manifest next update: Sun 06 Jul 2025 05:20:28 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: GckOmP+NDlTo4MHD34N7EPjTOSWsEWb99QkA2QUiRlg=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Jun 29 05:20:28 2025 GMT Not After : Jul 6 05:20:28 2025 GMT Subject: CN=6860cd1c-7ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:8d:e3:12:65:e2:07:10:a6:14:24:50:ed: 46:f4:3e:e8:7f:ef:e5:56:9a:e9:f7:27:26:99:f4: 90:7e:7e:27:e8:5b:91:65:d6:5f:af:0b:bd:c5:18: 06:ef:f9:a4:58:6c:b9:b5:1d:06:fd:71:2c:07:03: d9:8a:39:af:ee:18:dc:c1:a3:31:fe:9f:97:b4:1a: 67:10:c5:4b:e0:17:60:38:47:d6:ab:10:e5:99:1d: 4e:44:1b:6f:f2:93:a8:f5:a9:a3:ff:b4:90:85:4a: 1c:85:e5:dc:29:ba:a8:8e:b1:4f:91:2c:7a:79:20: 70:1a:a3:e4:91:5c:28:dc:5a:86:fe:ec:6c:67:1c: f5:5a:7c:d7:17:00:40:e6:50:1d:6b:c9:6f:b6:b2: b9:55:23:2f:82:42:7e:5d:0c:7e:d8:a7:27:51:53: be:76:6a:49:5c:86:cb:d3:b3:98:22:a4:03:d0:9b: 20:75:47:f1:37:5b:e8:32:e7:04:8d:eb:0f:09:22: 9c:8f:2e:9f:b6:d5:80:8f:d3:fc:5a:0c:a2:aa:61: b8:14:7d:0d:8b:06:1c:aa:56:7b:31:be:40:74:ff: 32:8f:3d:0a:75:4c:5a:a8:9b:c7:8d:ed:43:02:3b: 28:5a:87:13:62:b8:ca:90:2c:80:1c:44:b3:a1:3b: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:6B:4E:71:CF:E5:F9:D4:E0:92:BC:81:41:C1:35:6F:4F:BA:56 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c7:25:b5:e7:31:bd:e2:00:f7:12:13:57:cc:0f:01:4f:2d: 17:d8:e1:50:40:f5:ff:bd:27:d1:a8:04:ae:d1:5f:2e:59:88: 2c:dc:a1:66:2a:58:47:4f:88:7f:64:c8:88:a2:2c:a5:19:66: 36:76:b9:6b:6c:b6:f9:2e:68:e2:06:c0:bc:d8:e0:82:19:ff: d8:4d:58:ac:9b:4f:94:bd:19:ee:ba:26:0b:62:60:9f:ae:11: f0:09:19:c0:91:22:20:6f:18:79:9a:99:93:1d:86:f0:c7:bb: 2f:f3:90:a5:59:6b:be:cb:7d:52:f4:fd:df:5b:76:9b:5c:82: 8b:a7:55:9a:1b:34:b2:4c:16:63:18:16:fd:71:3f:4e:f7:97: b6:df:46:76:55:12:d4:9d:24:97:95:8f:72:78:e0:85:51:76: af:2b:5a:b0:e3:b0:d1:61:27:4b:ca:fa:ce:f5:78:70:1d:47: 8b:a7:d9:6a:3d:0d:38:5a:15:0a:4f:b0:27:7d:94:38:af:3c: 11:ea:e5:82:75:d2:78:29:26:c3:81:74:83:a7:cf:0b:cb:ee: 13:4c:c0:5e:31:86:2a:09:00:60:18:91:0b:13:c8:bf:f8:ff: 59:2e:af:e3:78:a4:6d:cd:21:53:0b:db:5c:c6:99:0c:8c:02: 66:ca:f4:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwNjI5MDUyMDI4WhcNMjUwNzA2MDUyMDI4WjAYMRYwFAYD VQQDEw02ODYwY2QxYy03YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77CN4xJl4gcQphQkUO1G9D7of+/lVprp9ycmmfSQfn4n6FuRZdZfrwu9xRgG 7/mkWGy5tR0G/XEsBwPZijmv7hjcwaMx/p+XtBpnEMVL4BdgOEfWqxDlmR1ORBtv 8pOo9amj/7SQhUocheXcKbqojrFPkSx6eSBwGqPkkVwo3FqG/uxsZxz1WnzXFwBA 5lAda8lvtrK5VSMvgkJ+XQx+2KcnUVO+dmpJXIbL07OYIqQD0JsgdUfxN1voMucE jesPCSKcjy6fttWAj9P8WgyiqmG4FH0NiwYcqlZ7Mb5AdP8yjz0KdUxaqJvHje1D AjsoWocTYrjKkCyAHESzoTsMIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhda05x z+X51OCSvIFBwTVvT7pWMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGxyW15zG94gD3EhNXzA8BTy0X2OFQQPX/vSfRqASu0V8uWYgs3KFm KlhHT4h/ZMiIoiylGWY2drlrbLb5LmjiBsC82OCCGf/YTVism0+UvRnuuiYLYmCf rhHwCRnAkSIgbxh5mpmTHYbwx7sv85ClWWu+y31S9P3fW3abXIKLp1WaGzSyTBZj GBb9cT9O95e230Z2VRLUnSSXlY9yeOCFUXavK1qw47DRYSdLyvrO9XhwHUeLp9lq PQ04WhUKT7AnfZQ4rzwR6uWCddJ4KSbDgXSDp88Ly+4TTMBeMYYqCQBgGJELE8i/ +P9ZLq/jeKRtzSFTC9tcxpkMjAJmyvTF -----END CERTIFICATE-----Generated at Mon Jun 30 16:08:04 2025 by rpki-client