$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft File: wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json) Hash identifier: JRbrnq0mP8m41xRvdtxIVI3dvXv7ypGpseX1vLcYLJU= Subject key identifier: 13:F9:2D:29:68:9C:7F:AC:E2:5F:20:06:41:69:02:EE:87:33:39:C2 Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 18F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft Manifest number: 18F1 Signing time: Wed 02 Jul 2025 16:34:43 +0000 Manifest this update: Wed 02 Jul 2025 16:34:43 +0000 Manifest next update: Wed 09 Jul 2025 16:34:43 +0000 Files and hashes: 1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: Je3Ah7FfV0xbBu9BDhr6Uy8WEN2gmsQToInZVXlPWdw=) 2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: JsSR5Xyiam1gqDW8LZ3p6vMD1Unh1jWG06vXX1Pt4OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6393 (0x18f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Jul 2 16:34:43 2025 GMT Not After : Jul 9 16:34:43 2025 GMT Subject: CN=68655fa3-58d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:0a:91:ea:cb:d9:06:55:58:d5:4a:25:36: 45:9d:fd:02:31:97:b2:16:a9:cb:20:75:d7:fc:ca: 39:ce:e4:b8:09:9b:73:a6:39:bb:3e:81:a7:8f:c5: 3f:23:bc:fb:e9:d1:b2:c3:a2:98:90:7c:30:b9:7f: e4:fa:bf:69:02:74:c2:7a:9a:56:b4:90:c1:e3:5a: 70:cc:42:a6:3a:5a:dc:2a:91:b0:db:7c:79:63:73: dc:13:28:5b:ac:5b:17:2c:e6:c0:f3:5a:aa:a2:52: 85:6e:80:c6:59:92:f9:f1:ae:fa:7a:56:a9:77:c5: 8d:88:a1:c8:02:b1:8a:60:61:5e:d9:3b:51:12:8a: ee:cb:34:39:84:81:e9:47:0c:a7:8c:97:09:cc:1a: 8a:e9:eb:d6:82:78:a6:84:c4:71:c9:55:02:a4:a1: 2d:4a:71:4e:42:ce:03:2a:bb:a7:db:dd:74:72:7b: a4:37:72:ff:d1:2e:4d:7b:da:58:3c:87:2d:d9:8e: 1f:b4:a1:56:da:2f:b1:0a:4a:31:66:22:3d:bc:0f: 3d:a0:5d:67:a4:51:14:61:b0:7e:9a:6a:1c:d4:73: a3:70:99:96:89:fd:3e:a5:70:49:5d:1b:57:b8:5c: 94:e7:9d:3f:24:7b:e0:2e:9e:0c:88:4f:9b:df:48: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F9:2D:29:68:9C:7F:AC:E2:5F:20:06:41:69:02:EE:87:33:39:C2 X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f6:df:fa:64:de:01:29:fb:c9:a4:11:2d:9c:d2:66:7b:fb: bc:81:e0:b2:7f:b7:3b:dc:56:af:1f:64:5f:69:a9:39:39:0b: 81:c9:63:31:2e:3a:15:5c:3f:df:b7:f9:97:92:e6:18:9c:b1: 30:09:dd:32:8a:8a:e7:2e:67:23:e0:a2:ae:df:28:7c:74:f0: 91:5d:8f:82:78:76:55:c5:f0:eb:9c:2d:29:86:4d:c7:76:f7: 62:7b:e2:bc:d4:52:99:6e:8d:c1:46:df:47:65:ce:62:70:23: aa:11:23:34:6a:31:c8:8c:20:49:fe:85:29:5a:76:44:35:87: 76:89:98:91:df:a3:3f:cc:4e:68:93:17:a4:ac:e1:57:f6:83: 6f:bb:b6:6b:a2:53:f2:ae:88:07:20:21:d7:67:ed:ee:cf:32: a2:29:8c:a0:a0:91:6f:b7:d3:df:f9:79:68:49:06:b3:39:0d: 98:b0:d5:8a:42:dd:8c:4a:ef:83:bc:bf:d5:aa:be:60:19:38: f5:5a:ce:d1:d8:51:45:08:b9:c8:69:da:49:5c:10:f6:b9:57: 63:e0:bc:cd:a4:e6:ae:c1:c6:ab:4a:67:a7:cd:4d:52:ad:23: 1b:92:13:dc:ad:e0:b6:33:7a:56:bb:36:16:f5:c6:37:7f:9c: c1:b4:52:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjUwNzAyMTYzNDQzWhcNMjUwNzA5MTYzNDQzWjAYMRYwFAYD VQQDEw02ODY1NWZhMy01OGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I8KkerL2QZVWNVKJTZFnf0CMZeyFqnLIHXX/Mo5zuS4CZtzpjm7PoGnj8U/ I7z76dGyw6KYkHwwuX/k+r9pAnTCeppWtJDB41pwzEKmOlrcKpGw23x5Y3PcEyhb rFsXLObA81qqolKFboDGWZL58a76elapd8WNiKHIArGKYGFe2TtREoruyzQ5hIHp RwynjJcJzBqK6evWgnimhMRxyVUCpKEtSnFOQs4DKrun2910cnukN3L/0S5Ne9pY PIct2Y4ftKFW2i+xCkoxZiI9vA89oF1npFEUYbB+mmoc1HOjcJmWif0+pXBJXRtX uFyU550/JHvgLp4MiE+b30iM4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP5LSlo nH+s4l8gBkFpAu6HMznCMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t SU9zSnFyTGVyV0EwdUNqcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/9t/6ZN4BKfvJpBEtnNJme/u8geCyf7c73FavH2Rfaak5OQuByWMx LjoVXD/ft/mXkuYYnLEwCd0yiornLmcj4KKu3yh8dPCRXY+CeHZVxfDrnC0phk3H dvdie+K81FKZbo3BRt9HZc5icCOqESM0ajHIjCBJ/oUpWnZENYd2iZiR36M/zE5o kxekrOFX9oNvu7ZrolPyrogHICHXZ+3uzzKiKYygoJFvt9Pf+XloSQazOQ2YsNWK Qt2MSu+DvL/Vqr5gGTj1Ws7R2FFFCLnIadpJXBD2uVdj4LzNpOauwcarSmenzU1S rSMbkhPcreC2M3pWuzYW9cY3f5zBtFJV -----END CERTIFICATE-----Generated at Fri Jul 4 10:54:17 2025 by rpki-client