$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: 7tUzlW9z0oaD8h8qYcGN085s8PARCWxX0Imr/ccO9+A= Subject key identifier: 03:CA:83:53:B8:BC:8E:3F:79:84:BF:DC:2F:CE:D9:50:8F:20:4A:C0 Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 05A5 Signing time: Sat 28 Jun 2025 22:46:07 +0000 Manifest this update: Sat 28 Jun 2025 22:46:06 +0000 Manifest next update: Sat 05 Jul 2025 22:46:06 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: r6G6cCXGFu0Hc+HKNH1P0ufqvYxmTQVarenEKxoP3eQ=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Jun 28 22:46:06 2025 GMT Not After : Jul 5 22:46:06 2025 GMT Subject: CN=686070ae-532b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:49:ef:35:96:32:96:75:19:0b:b9:e3:4d: aa:bb:e8:2e:f1:86:43:f1:59:83:05:74:10:70:5f: cc:3b:60:4a:43:d0:5b:4c:8a:0c:67:1c:6c:a3:a0: 5d:d8:b3:c3:db:15:5e:a9:19:86:3d:03:89:de:6d: d3:df:84:02:d8:29:00:48:45:7c:c6:f8:b8:2d:9d: 29:b3:ac:2d:fc:38:3b:0d:12:a5:7d:56:9e:37:fa: f6:90:c8:0f:6a:db:1c:20:fb:00:92:d6:a5:d9:e4: 8b:8a:e1:81:25:35:db:ba:dc:97:f4:a4:b5:d8:db: 2a:91:83:f5:52:1d:51:c3:78:45:ad:31:4b:ab:f7: 12:d0:cb:82:1e:02:ed:92:bb:13:9e:f5:6c:96:24: 22:21:d2:77:b5:35:17:70:3a:5e:18:2b:95:15:75: 03:be:4b:b5:79:c0:d2:5b:38:b7:b0:b2:50:a6:af: bd:e8:25:f0:50:22:1e:47:47:c0:6a:bb:44:48:7b: ec:8b:1e:a1:cf:3e:9c:33:11:12:6b:a2:f2:24:66: 9a:86:b6:97:0d:49:6e:20:e4:8e:e9:19:60:e9:ff: 9e:f7:15:f6:c6:a1:f9:2b:76:0a:23:bb:71:d9:82: d6:78:8e:af:eb:4f:60:6f:09:fb:32:5b:ee:9c:7d: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CA:83:53:B8:BC:8E:3F:79:84:BF:DC:2F:CE:D9:50:8F:20:4A:C0 X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:de:80:71:eb:1d:f8:0b:85:14:b7:a4:be:cb:58:98:12:c5: 53:ad:6c:9f:3d:71:a9:32:83:93:4f:06:f5:2b:d3:0a:21:a2: bd:14:2d:43:85:3e:90:65:e1:1b:11:7b:d8:3d:b5:6d:ca:aa: 2b:28:15:54:15:dd:1c:ec:94:89:70:c9:09:c0:eb:cd:a1:fa: 42:7c:a7:bf:8f:24:48:8c:5c:18:00:3f:8a:f4:96:3e:a7:b7: 50:95:99:cf:85:d6:9e:55:01:f7:90:8c:b1:9d:b7:ba:a1:f2: 3f:bc:a8:7a:2b:cc:f3:ca:e0:3d:d7:e0:df:25:0c:5a:6c:63: e7:80:44:a9:49:51:30:48:8c:fc:f0:76:d4:8e:04:1f:9e:6e: 6c:aa:30:ec:2b:c8:88:fe:fd:3a:bd:f5:cb:8b:1d:03:29:db: eb:34:d7:91:af:43:32:1a:48:2d:34:e6:2f:68:59:1e:ff:4d: 8e:07:4d:ed:7b:6a:5c:c4:95:ce:98:3d:2c:68:88:5f:38:4d: 96:a6:78:5b:86:52:a7:bf:21:9d:cd:82:58:c3:68:4e:3c:76: 74:78:75:79:38:28:6c:14:d8:6a:c7:47:69:d7:25:f6:ab:0b: cc:66:30:7d:60:3b:36:9a:86:d4:56:26:12:18:85:3e:7a:f0: 4f:f2:42:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUwNjI4MjI0NjA2WhcNMjUwNzA1MjI0NjA2WjAYMRYwFAYD VQQDEw02ODYwNzBhZS01MzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0pJ7zWWMpZ1GQu5402qu+gu8YZD8VmDBXQQcF/MO2BKQ9BbTIoMZxxso6Bd 2LPD2xVeqRmGPQOJ3m3T34QC2CkASEV8xvi4LZ0ps6wt/Dg7DRKlfVaeN/r2kMgP atscIPsAktal2eSLiuGBJTXbutyX9KS12NsqkYP1Uh1Rw3hFrTFLq/cS0MuCHgLt krsTnvVsliQiIdJ3tTUXcDpeGCuVFXUDvku1ecDSWzi3sLJQpq+96CXwUCIeR0fA artESHvsix6hzz6cMxESa6LyJGaahraXDUluIOSO6Rlg6f+e9xX2xqH5K3YKI7tx 2YLWeI6v609gbwn7MlvunH0TewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPKg1O4 vI4/eYS/3C/O2VCPIErAMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA93oBx6x34C4UUt6S+y1iYEsVTrWyfPXGpMoOTTwb1K9MKIaK9FC1D hT6QZeEbEXvYPbVtyqorKBVUFd0c7JSJcMkJwOvNofpCfKe/jyRIjFwYAD+K9JY+ p7dQlZnPhdaeVQH3kIyxnbe6ofI/vKh6K8zzyuA91+DfJQxabGPngESpSVEwSIz8 8HbUjgQfnm5sqjDsK8iI/v06vfXLix0DKdvrNNeRr0MyGkgtNOYvaFke/02OB03t e2pcxJXOmD0saIhfOE2WpnhbhlKnvyGdzYJYw2hOPHZ0eHV5OChsFNhqx0dp1yX2 qwvMZjB9YDs2mobUViYSGIU+evBP8kJv -----END CERTIFICATE-----Generated at Mon Jun 30 21:25:49 2025 by rpki-client