$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: iARWYn5Gd3lM8icnq0zW+A7KUt5AwiLHNJ5iOFxLF/M= Subject key identifier: B0:F9:C7:39:8B:72:26:B9:49:F3:2E:C7:34:9C:8D:13:C0:9A:76:92 Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 037B Signing time: Sun 29 Jun 2025 00:29:24 +0000 Manifest this update: Sun 29 Jun 2025 00:29:24 +0000 Manifest next update: Sun 06 Jul 2025 00:29:24 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: mNv2O1iTj7hofhwIGru95qvpMK78qn7TbndLvxaN05Q=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hWe9YX01SNRY++LLyLpvdVJBXAjQTAsl1yrwC2O21mY=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: KMxfzJx9x2vyWODkAAY5t+P6RpTmdDTdWRiAuSB0SyQ=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: EXWdfyEJT1f9crTXGSpRWWqKkko/3WFflLjeDGOj6XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Jun 29 00:29:24 2025 GMT Not After : Jul 6 00:29:24 2025 GMT Subject: CN=686088e4-379e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:4f:08:38:d9:d9:22:a2:98:ab:b2:4b:cc: 08:2e:7e:41:57:a5:bd:ad:98:ec:ff:8b:cf:56:90: 71:a1:dc:54:ea:53:c5:09:47:82:b5:59:39:ba:35: 3d:5a:73:7c:62:f9:41:d0:df:e3:cd:53:a4:56:17: cd:c8:02:32:8b:bb:ea:37:2e:53:23:c9:00:c6:80: 7b:61:cb:d2:57:9a:38:fe:a5:a1:6f:28:fe:c7:3b: e8:3a:a0:22:c8:0c:ce:a0:da:e4:59:a2:a9:4b:5b: 07:3d:48:80:c9:98:76:91:49:42:05:84:e5:05:2e: 7b:e7:76:1b:24:b9:1f:67:21:d2:3b:ac:d3:ab:74: 23:4a:ce:b0:3c:49:63:aa:96:7a:5c:0e:29:5b:3e: b0:d5:de:6b:3a:f6:e6:00:63:e8:50:c4:11:eb:3f: 8f:4b:57:bd:66:44:43:9d:28:ef:6f:2c:d8:63:ac: 20:ec:98:e1:a2:a7:8c:81:8e:15:8d:25:99:75:39: 44:e9:87:40:c3:b4:d2:5d:58:b5:a2:04:26:cb:c6: ed:f2:b0:e5:64:9b:9e:79:cd:e8:9b:87:37:18:81: 28:82:39:d0:16:47:4c:dd:e2:89:25:f7:d9:a9:b1: a9:2f:ca:1d:fb:56:c7:65:d4:92:5b:a3:f0:23:15: eb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F9:C7:39:8B:72:26:B9:49:F3:2E:C7:34:9C:8D:13:C0:9A:76:92 X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:eb:b3:34:23:94:0a:d6:50:df:08:8a:be:4a:31:97:be:cd: 6e:30:d5:d0:f1:10:60:e3:f0:56:85:bb:94:87:3c:df:54:aa: 76:89:fe:ea:db:72:df:3c:ce:28:e7:1a:d6:03:a0:ef:f7:0c: 96:46:78:61:7b:24:9e:6d:f4:e7:a9:4b:b0:f0:76:e0:a3:63: 28:ec:4a:78:af:31:16:a2:36:1e:0d:72:dc:af:88:77:a0:37: 24:ae:3c:92:30:e4:ff:7f:1d:7b:f6:d3:47:b1:8e:72:03:30: 87:f3:d4:07:ec:60:90:25:03:2d:ac:67:59:65:9c:ae:ca:1c: de:10:f0:f5:00:27:bf:2b:12:57:8b:cf:59:ea:02:dd:40:50: 75:76:5b:d0:55:16:c1:06:b7:3c:88:51:87:40:1d:42:ee:d0: 27:b5:ba:b6:f7:67:7e:87:ec:87:0c:b5:dd:6c:90:3d:7c:be: af:7c:aa:66:8a:eb:17:86:07:4e:d2:74:78:15:b5:b2:ca:f4: 4b:17:15:e1:4b:64:05:d5:dc:2b:f1:83:08:bf:09:e3:78:8a: 97:29:fe:ee:9d:e9:67:77:83:c1:a3:ee:5e:b8:11:48:96:94: 69:a8:6a:cc:c3:fd:a7:3f:09:66:97:40:3b:0c:64:22:77:ff: ed:80:d0:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUwNjI5MDAyOTI0WhcNMjUwNzA2MDAyOTI0WjAYMRYwFAYD VQQDEw02ODYwODhlNC0zNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAov9PCDjZ2SKimKuyS8wILn5BV6W9rZjs/4vPVpBxodxU6lPFCUeCtVk5ujU9 WnN8YvlB0N/jzVOkVhfNyAIyi7vqNy5TI8kAxoB7YcvSV5o4/qWhbyj+xzvoOqAi yAzOoNrkWaKpS1sHPUiAyZh2kUlCBYTlBS5753YbJLkfZyHSO6zTq3QjSs6wPElj qpZ6XA4pWz6w1d5rOvbmAGPoUMQR6z+PS1e9ZkRDnSjvbyzYY6wg7JjhoqeMgY4V jSWZdTlE6YdAw7TSXVi1ogQmy8bt8rDlZJueec3om4c3GIEogjnQFkdM3eKJJffZ qbGpL8od+1bHZdSSW6PwIxXrRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLD5xzmL cia5SfMuxzScjRPAmnaSMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm67M0I5QK1lDfCIq+SjGXvs1uMNXQ8RBg4/BWhbuUhzzfVKp2if7q 23LfPM4o5xrWA6Dv9wyWRnhheySebfTnqUuw8Hbgo2Mo7Ep4rzEWojYeDXLcr4h3 oDckrjySMOT/fx179tNHsY5yAzCH89QH7GCQJQMtrGdZZZyuyhzeEPD1ACe/KxJX i89Z6gLdQFB1dlvQVRbBBrc8iFGHQB1C7tAntbq292d+h+yHDLXdbJA9fL6vfKpm iusXhgdO0nR4FbWyyvRLFxXhS2QF1dwr8YMIvwnjeIqXKf7unelnd4PBo+5euBFI lpRpqGrMw/2nPwlml0A7DGQid//tgNC+ -----END CERTIFICATE-----Generated at Sun Jun 29 12:45:36 2025 by rpki-client