$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: osbn8tYNgqsi50gyNmdOWqY66DSgUoDXU6vDcfvVzGA= Subject key identifier: 6C:B0:5F:A2:CE:1A:D5:98:38:B2:1A:B7:C8:56:C9:ED:DC:86:0E:0F Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 014E Signing time: Tue 01 Jul 2025 04:45:12 +0000 Manifest this update: Tue 01 Jul 2025 04:45:12 +0000 Manifest next update: Tue 08 Jul 2025 04:45:12 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: KNZaWOi56FNHwiWw1bCe72oF3YwTmhqY5DeSEeQtgeI=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 4: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Jul 1 04:45:12 2025 GMT Not After : Jul 8 04:45:12 2025 GMT Subject: CN=686367d8-d68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:6d:cc:23:e6:a8:15:81:05:77:04:dd:f1: ae:83:9d:2b:a1:ef:e9:50:88:ee:58:6f:75:ae:48: 24:00:59:7f:bc:f6:8d:ba:e2:8a:4a:eb:74:cc:ee: 1a:9c:d1:57:f2:27:07:8e:0c:a1:23:0a:54:03:fe: 76:a6:fd:7e:76:d6:d2:84:21:b3:49:b4:75:ab:90: ff:e9:6c:b2:0f:3f:d1:ea:2a:f8:19:0e:01:76:62: a8:aa:07:47:11:d0:c5:65:c4:7c:90:c9:93:97:9a: fa:60:0d:55:ee:a3:aa:2a:95:4e:a3:f1:3e:6d:f0: 34:48:26:04:e5:34:bf:65:f9:51:2e:8e:2a:0a:bb: ee:33:f6:05:3d:c2:46:74:be:00:de:78:39:a8:42: 99:e1:aa:e6:31:cd:b2:8b:9e:2d:05:c1:da:03:7b: af:01:61:2f:90:71:a9:eb:c6:5e:4e:d7:9c:d3:af: 73:58:45:7a:56:c8:d4:03:ac:b8:05:f4:25:55:ae: c1:20:81:43:b5:65:81:16:d2:6a:15:35:65:26:9e: 93:ec:c7:43:f6:ab:ee:73:31:bb:0c:96:43:34:0d: 15:dd:77:84:42:d3:cc:4b:64:f5:19:82:44:f1:f0: bc:f8:a8:9e:42:43:76:ea:02:36:d7:69:c6:ca:61: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:5F:A2:CE:1A:D5:98:38:B2:1A:B7:C8:56:C9:ED:DC:86:0E:0F X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:dc:5b:f6:f0:d4:d3:79:ad:f6:cf:83:f9:3e:59:42:f6:33: b0:77:26:d7:6b:f4:f6:3c:18:3e:37:a3:39:ce:54:0d:99:f8: c0:08:cc:50:0b:dc:ac:d6:7b:cc:ee:85:03:13:53:4a:82:97: e5:34:64:fa:e7:3c:d2:7f:4f:37:34:54:28:91:7d:99:cc:d9: 6f:50:53:ef:b5:21:58:92:e1:bf:24:ff:08:9b:bc:a0:49:f0: 89:04:e9:78:fc:67:38:7f:51:99:b3:7f:3f:f8:80:d2:47:a4: 44:56:61:39:70:e4:a4:5b:48:69:4c:9e:4e:fe:0d:a0:b0:de: 2b:ae:67:09:55:46:47:30:49:89:d2:12:65:8a:13:35:0f:94: 7f:ed:a5:0f:26:ea:83:10:e9:8b:46:1c:40:5a:06:b4:14:b5: e8:1a:22:e7:3a:d5:c9:92:bc:c3:81:6d:96:3d:e1:54:91:58: 00:81:1b:e4:1c:1b:19:3f:93:f4:5e:80:46:84:8a:18:6b:47: ef:69:b0:80:b9:78:62:32:06:e9:2f:fa:b4:92:fe:a1:3f:e5: 97:df:eb:00:62:50:af:f4:60:64:74:c1:52:08:30:2a:d8:42: c5:e6:5f:99:12:d7:c4:c3:c1:3b:f0:92:bb:ac:47:f5:7f:4c: e9:70:8a:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUwNzAxMDQ0NTEyWhcNMjUwNzA4MDQ0NTEyWjAYMRYwFAYD VQQDEw02ODYzNjdkOC1kNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWJtzCPmqBWBBXcE3fGug50roe/pUIjuWG91rkgkAFl/vPaNuuKKSut0zO4a nNFX8icHjgyhIwpUA/52pv1+dtbShCGzSbR1q5D/6WyyDz/R6ir4GQ4BdmKoqgdH EdDFZcR8kMmTl5r6YA1V7qOqKpVOo/E+bfA0SCYE5TS/ZflRLo4qCrvuM/YFPcJG dL4A3ng5qEKZ4armMc2yi54tBcHaA3uvAWEvkHGp68ZeTtec069zWEV6VsjUA6y4 BfQlVa7BIIFDtWWBFtJqFTVlJp6T7MdD9qvuczG7DJZDNA0V3XeEQtPMS2T1GYJE 8fC8+KieQkN26gI212nGymFcQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGywX6LO GtWYOLIat8hWye3chg4PMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA33Fv28NTTea32z4P5PllC9jOwdybXa/T2PBg+N6M5zlQNmfjACMxQ C9ys1nvM7oUDE1NKgpflNGT65zzSf083NFQokX2ZzNlvUFPvtSFYkuG/JP8Im7yg SfCJBOl4/Gc4f1GZs38/+IDSR6REVmE5cOSkW0hpTJ5O/g2gsN4rrmcJVUZHMEmJ 0hJlihM1D5R/7aUPJuqDEOmLRhxAWga0FLXoGiLnOtXJkrzDgW2WPeFUkVgAgRvk HBsZP5P0XoBGhIoYa0fvabCAuXhiMgbpL/q0kv6hP+WX3+sAYlCv9GBkdMFSCDAq 2ELF5l+ZEtfEw8E78JK7rEf1f0zpcIq2 -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:09 2025 by rpki-client