$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft File: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft (raw, json) Hash identifier: JMb6/0YzXj0M1bDPz+WN9Mst8s1A7vzQbjQAlX0GC8M= Subject key identifier: 1E:D0:0C:C1:BC:39:08:1B:21:FC:CE:38:9D:FC:65:16:4E:E2:4C:78 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft Manifest number: 0B09 Signing time: Sat 28 Jun 2025 19:03:12 +0000 Manifest this update: Sat 28 Jun 2025 19:03:12 +0000 Manifest next update: Sat 05 Jul 2025 19:03:12 +0000 Files and hashes: 1: Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl (hash: Y5Ihy/pmHx2Jp5Q8daIuqlURfN6FCb2JhPgUGEY6x1c=) 2: 47BBB5E4465311EA85CB607EC4F9AE02.roa (hash: Mg9FSloatKIT5DeKmuz+Qvjhu8F3q0aOXlO1sHBkA98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Jun 28 19:03:12 2025 GMT Not After : Jul 5 19:03:12 2025 GMT Subject: CN=68603c70-653e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:f9:90:93:e8:6f:8c:5b:dc:a7:4a:4a:5a: 72:da:94:72:47:10:7b:d8:67:d1:cb:53:43:00:40: 60:04:b6:aa:76:d0:be:6b:6f:ad:18:aa:3b:ac:da: 37:52:f5:f7:5e:ff:40:71:73:4b:24:f2:bd:aa:ce: 1b:2f:b5:f1:95:b9:93:01:28:02:88:37:e2:a2:f0: 97:55:5b:d6:a4:69:69:26:b2:3f:f5:05:77:af:5f: bc:b5:80:97:eb:73:b8:78:e5:d9:14:b8:78:4c:df: 7e:d4:66:ad:e9:05:da:51:83:f9:75:5b:fb:57:9b: f5:24:7d:81:28:a6:e3:94:a9:93:44:c4:b3:1e:0f: fc:e0:04:6d:a8:53:e0:41:c9:f3:19:18:9c:5d:3f: 49:63:46:fa:34:a8:98:f7:28:f3:1b:63:22:1d:02: fb:e1:c7:93:0f:53:b0:31:bb:a2:7e:f0:cd:8b:cd: bb:a4:8f:55:0e:2f:af:03:95:8c:0d:b8:1d:8b:36: e0:4d:1e:8c:40:74:8b:27:a4:8a:70:60:91:ff:76: 1f:26:c5:0d:c6:f4:98:99:a0:5e:de:a4:c5:e1:de: 60:34:fc:cb:46:af:f3:80:4a:ae:62:a2:9f:75:49: b3:b0:b7:4d:96:81:ef:0e:93:28:19:8d:b6:d0:77: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D0:0C:C1:BC:39:08:1B:21:FC:CE:38:9D:FC:65:16:4E:E2:4C:78 X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3e:cb:2b:ce:0f:47:89:68:d6:e2:1d:27:c6:ba:12:24:6e: 84:62:b9:57:b9:fb:42:2b:49:a4:7a:15:21:9f:72:ab:90:2d: ce:2b:7a:01:53:51:46:90:bf:42:3f:14:c8:b2:f8:c8:d7:1c: 7c:06:31:5d:88:a9:58:2b:64:bd:cc:c6:06:93:53:bf:79:41: 33:23:8f:ea:bd:eb:64:ea:8e:e8:1a:ad:b6:1b:0f:97:50:ac: a4:34:78:7a:67:8e:e4:ce:ee:44:00:fb:60:9c:6a:5e:28:26: e8:e9:fe:90:76:6b:2c:75:44:61:f3:ba:75:b6:83:52:d3:42: 63:15:00:56:0f:f7:72:f3:72:27:93:ba:04:de:29:cf:b8:9d: 41:02:1a:91:e3:ac:de:ec:58:bc:30:ef:1a:61:c8:a8:2a:1c: f9:8c:34:c5:09:09:f1:67:df:a0:25:63:14:54:f2:2c:bb:f9: 63:ed:c1:1d:0d:ca:39:5c:e1:90:8e:e3:7c:07:e6:41:c6:67: 3a:e8:89:fd:3a:d1:76:67:17:98:17:8f:84:8b:aa:87:f4:ad: f3:db:9c:47:d5:68:99:bc:be:85:f4:d9:9a:5e:a6:a5:eb:2d: fe:a7:6a:78:ae:65:36:51:c4:b1:ad:24:b9:5b:df:52:cd:8e: 45:69:e1:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUwNjI4MTkwMzEyWhcNMjUwNzA1MTkwMzEyWjAYMRYwFAYD VQQDEw02ODYwM2M3MC02NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZv5kJPob4xb3KdKSlpy2pRyRxB72GfRy1NDAEBgBLaqdtC+a2+tGKo7rNo3 UvX3Xv9AcXNLJPK9qs4bL7XxlbmTASgCiDfiovCXVVvWpGlpJrI/9QV3r1+8tYCX 63O4eOXZFLh4TN9+1Gat6QXaUYP5dVv7V5v1JH2BKKbjlKmTRMSzHg/84ARtqFPg QcnzGRicXT9JY0b6NKiY9yjzG2MiHQL74ceTD1OwMbuifvDNi827pI9VDi+vA5WM DbgdizbgTR6MQHSLJ6SKcGCR/3YfJsUNxvSYmaBe3qTF4d5gNPzLRq/zgEquYqKf dUmzsLdNloHvDpMoGY220HeIzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7QDMG8 OQgbIfzOOJ38ZRZO4kx4MB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjJEMy9CRjlDNkQ5NDQ2NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5 SDRYaTFaRDkxZlFHZlF1OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQPssrzg9HiWjW4h0nxroSJG6EYrlXuftCK0mkehUhn3KrkC3OK3oB U1FGkL9CPxTIsvjI1xx8BjFdiKlYK2S9zMYGk1O/eUEzI4/qvetk6o7oGq22Gw+X UKykNHh6Z47kzu5EAPtgnGpeKCbo6f6QdmssdURh87p1toNS00JjFQBWD/dy83In k7oE3inPuJ1BAhqR46ze7Fi8MO8aYcioKhz5jDTFCQnxZ9+gJWMUVPIsu/lj7cEd Dco5XOGQjuN8B+ZBxmc66In9OtF2ZxeYF4+Ei6qH9K3z25xH1WiZvL6F9NmaXqal 6y3+p2p4rmU2UcSxrSS5W99SzY5FaeFx -----END CERTIFICATE-----Generated at Sun Jun 29 19:14:02 2025 by rpki-client