$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: TUskF59mn1ClRssRx2+/feqJc+j3Svs5RSs7/Kl1rDk= Subject key identifier: 03:E6:A8:97:48:A9:92:5C:0E:57:7F:EA:90:96:D9:EB:D5:4A:0A:90 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0C29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0C11 Signing time: Sat 28 Jun 2025 18:26:43 +0000 Manifest this update: Sat 28 Jun 2025 18:26:43 +0000 Manifest next update: Sat 05 Jul 2025 18:26:43 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: LeuVDIdI3JLDkIhS0gSvwGylTE+b3uN1pDZzq4Wx5Yo=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Jun 28 18:26:43 2025 GMT Not After : Jul 5 18:26:43 2025 GMT Subject: CN=686033e3-8e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:47:94:7d:ec:aa:95:8c:90:17:20:9c:2d: 9b:e5:d1:06:1b:bf:d5:e1:2b:be:db:e1:c2:87:a8: 5c:c8:40:fb:10:74:d0:26:61:e5:f5:b5:3f:a5:03: b6:6a:83:1d:85:37:f0:62:6b:73:e2:76:bb:aa:d1: 95:02:0a:f9:f1:88:d7:5d:bd:19:c9:69:6c:8b:3c: 55:41:97:d4:6f:6b:56:80:1e:d4:8a:14:b9:41:91: 28:de:62:4f:21:11:41:d5:6d:c9:e3:36:55:61:40: 40:67:1f:55:f4:2c:b6:ba:81:f9:ef:3b:0b:e2:0b: ec:37:a0:dd:03:10:fe:ed:77:68:e8:09:ea:2a:4a: 9b:d3:9e:6c:86:f7:63:43:ac:34:bc:5c:22:62:8c: 72:0d:2e:9b:98:90:49:d1:48:f6:a6:c6:f2:28:a0: 43:e0:fc:1c:9f:7e:eb:5e:05:f4:a2:eb:18:b2:a1: c0:e9:7d:ba:50:49:92:aa:ec:af:23:e0:65:b1:79: 6d:d1:7c:40:3f:8f:50:ba:01:62:68:f0:ac:8a:89: 81:4e:8f:4a:73:89:b0:96:95:4b:84:8f:84:96:52: 1b:3c:78:7c:8a:9f:20:a7:d4:eb:00:89:67:1f:74: ef:68:d6:da:6c:6c:60:4a:3c:92:3b:8e:60:0f:27: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E6:A8:97:48:A9:92:5C:0E:57:7F:EA:90:96:D9:EB:D5:4A:0A:90 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fa:ac:51:06:d6:62:aa:4b:dd:e8:bc:ca:48:78:b5:24:7c: c0:67:6f:22:a4:13:b1:02:9e:b4:e1:a5:dd:3e:7a:ba:46:e3: 21:c4:c1:18:c6:2a:89:15:84:d8:35:3d:a7:63:fa:df:95:d1: 7e:e2:86:ed:74:11:ac:86:5f:63:4b:58:b7:3c:e7:a0:18:22: c9:e8:5e:bf:c7:19:52:30:46:6d:e7:22:b4:f8:00:5d:25:46: 21:86:e8:23:95:c0:76:bb:d2:cd:97:b0:20:68:e1:6c:e1:29: 9f:5a:a5:42:7e:d6:01:e9:9f:89:67:b5:16:b4:1d:24:e3:45: 77:9c:8b:dd:20:3c:57:66:92:f3:93:16:22:42:c5:11:a9:30: 43:6f:65:98:09:a6:ab:3a:1b:29:a8:b0:fa:15:10:60:44:44: 24:2a:20:76:8e:10:2c:45:c8:41:fa:78:05:3f:c5:dd:27:83: f0:4a:30:a4:40:36:24:92:60:3b:fb:aa:4d:b4:5d:f7:86:9e: 0b:b5:1e:91:bf:47:f9:88:f2:f3:47:d2:34:81:f0:9d:f6:44: 6b:82:5a:f2:76:d5:0a:4d:52:c5:fc:c3:14:46:4e:23:93:9c: 4d:38:0c:a7:be:a8:4d:a8:bf:37:e3:d8:18:af:79:1a:e1:cf: 0c:de:9a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjUwNjI4MTgyNjQzWhcNMjUwNzA1MTgyNjQzWjAYMRYwFAYD VQQDEw02ODYwMzNlMy04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75xHlH3sqpWMkBcgnC2b5dEGG7/V4Su+2+HCh6hcyED7EHTQJmHl9bU/pQO2 aoMdhTfwYmtz4na7qtGVAgr58YjXXb0ZyWlsizxVQZfUb2tWgB7UihS5QZEo3mJP IRFB1W3J4zZVYUBAZx9V9Cy2uoH57zsL4gvsN6DdAxD+7Xdo6AnqKkqb055shvdj Q6w0vFwiYoxyDS6bmJBJ0Uj2psbyKKBD4Pwcn37rXgX0ousYsqHA6X26UEmSquyv I+BlsXlt0XxAP49QugFiaPCsiomBTo9Kc4mwlpVLhI+EllIbPHh8ip8gp9TrAIln H3TvaNbabGxgSjySO45gDyfFUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPmqJdI qZJcDld/6pCW2evVSgqQMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe+qxRBtZiqkvd6LzKSHi1JHzAZ28ipBOxAp604aXdPnq6RuMhxMEY xiqJFYTYNT2nY/rfldF+4obtdBGshl9jS1i3POegGCLJ6F6/xxlSMEZt5yK0+ABd JUYhhugjlcB2u9LNl7AgaOFs4SmfWqVCftYB6Z+JZ7UWtB0k40V3nIvdIDxXZpLz kxYiQsURqTBDb2WYCaarOhspqLD6FRBgREQkKiB2jhAsRchB+ngFP8XdJ4PwSjCk QDYkkmA7+6pNtF33hp4LtR6Rv0f5iPLzR9I0gfCd9kRrglrydtUKTVLF/MMURk4j k5xNOAynvqhNqL8349gYr3ka4c8M3poZ -----END CERTIFICATE-----Generated at Mon Jun 30 18:17:22 2025 by rpki-client