$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: /p3F2FQ4Ad9XPZKEeaU5sCjgVPFw9uqW5yBAJyepuUY= Subject key identifier: F7:E1:19:6D:04:96:00:BD:2B:60:9B:EF:94:AF:9E:A7:FF:8F:B0:F2 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: AF Signing time: Thu 03 Jul 2025 06:14:27 +0000 Manifest this update: Thu 03 Jul 2025 06:14:27 +0000 Manifest next update: Thu 10 Jul 2025 06:14:27 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: +kkuywzPZlxnqdFAjDN1KJQrJI8/SB1/fM4iOuaAuew=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Jul 3 06:14:27 2025 GMT Not After : Jul 10 06:14:27 2025 GMT Subject: CN=68661fc3-64ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:f4:e2:a0:4e:e6:d1:96:f8:ba:50:b5:77: 5f:77:a7:3a:97:94:fc:10:4d:b0:42:2c:dc:0c:67: 46:5f:8c:b9:ad:df:d2:bf:19:5d:d4:6a:6a:7a:51: 3a:69:98:26:ec:b5:2f:05:16:d0:fd:45:fa:7c:31: d4:15:c2:95:91:8e:65:78:f2:c4:d5:a8:cd:c7:65: 5a:cc:36:12:d1:1e:b1:48:e1:f7:c6:3c:71:8e:43: 31:38:34:60:e0:34:03:68:1c:82:02:25:e7:36:ef: f3:3f:01:32:58:af:25:43:fa:5c:a3:22:44:8e:53: 6d:71:8e:ea:06:a0:be:da:c7:cf:72:70:b3:71:33: c3:78:96:0b:e0:7d:fb:2f:33:2f:76:96:a4:93:83: b5:69:df:12:bd:96:59:ff:fc:cf:ac:4d:f7:bb:dc: 44:bd:43:b0:eb:b8:ee:cb:5f:d1:a0:89:c8:f2:74: 00:7d:06:ac:ae:bb:12:11:06:09:9f:87:51:fc:73: 64:c3:4b:9d:0f:a6:c4:35:bc:9f:08:2f:24:24:65: 85:f1:d5:30:ce:da:22:82:5b:84:a1:88:ae:dc:4a: 47:04:ab:9a:00:23:ec:84:dd:83:c4:32:49:5f:18: ea:87:a3:f2:e1:ef:d3:5c:02:24:34:cc:68:71:4f: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:19:6D:04:96:00:BD:2B:60:9B:EF:94:AF:9E:A7:FF:8F:B0:F2 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2f:68:10:22:a3:1a:97:75:c5:1b:e0:b3:03:8c:b7:01:99: 16:13:63:18:b9:27:ec:8f:70:25:86:c3:0b:af:0c:90:b6:b0: b2:ba:44:7f:92:23:e6:19:bc:a4:26:13:31:69:b7:d9:1a:c9: eb:41:db:4a:f8:01:36:dc:3e:3d:eb:0d:c4:8f:ef:69:30:f0: 50:b3:1f:4c:b2:dc:97:29:02:f4:a1:db:09:8f:70:ab:e3:6f: 24:a9:97:7e:71:50:54:55:e9:f3:6c:8b:17:14:76:6d:56:f3: b9:b4:0f:8c:c8:da:37:f5:64:7e:69:88:f6:1f:98:cd:03:70: 86:4b:2e:43:db:96:60:52:0f:b9:e7:a4:64:8c:ee:16:71:e9: 05:83:17:16:9c:31:fd:68:db:5b:46:d4:90:cd:10:36:cf:6f: 87:a3:1e:6e:97:13:c1:58:1d:41:8b:1d:77:97:9a:22:7b:89: e4:8b:73:00:f8:f3:04:c0:4f:5a:41:8e:bc:55:6f:77:4b:d1: 69:22:fd:7f:89:91:4d:dc:d2:0b:ed:56:d3:ae:a6:1d:9d:31: e3:df:5d:65:74:bb:bc:ac:3f:99:8f:ae:25:5c:ca:b9:d2:5b: e4:19:0b:da:fb:0a:2a:35:67:b7:05:6c:67:21:5b:7e:4c:f2: ba:c2:ae:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUwNzAzMDYxNDI3WhcNMjUwNzEwMDYxNDI3WjAYMRYwFAYD VQQDEw02ODY2MWZjMy02NGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZD04qBO5tGW+LpQtXdfd6c6l5T8EE2wQizcDGdGX4y5rd/Svxld1GpqelE6 aZgm7LUvBRbQ/UX6fDHUFcKVkY5lePLE1ajNx2VazDYS0R6xSOH3xjxxjkMxODRg 4DQDaByCAiXnNu/zPwEyWK8lQ/pcoyJEjlNtcY7qBqC+2sfPcnCzcTPDeJYL4H37 LzMvdpakk4O1ad8SvZZZ//zPrE33u9xEvUOw67juy1/RoInI8nQAfQasrrsSEQYJ n4dR/HNkw0udD6bENbyfCC8kJGWF8dUwztoigluEoYiu3EpHBKuaACPshN2DxDJJ Xxjqh6Py4e/TXAIkNMxocU+kIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfhGW0E lgC9K2Cb75Svnqf/j7DyMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANL2gQIqMal3XFG+CzA4y3AZkWE2MYuSfsj3AlhsMLrwyQtrCyukR/ kiPmGbykJhMxabfZGsnrQdtK+AE23D496w3Ej+9pMPBQsx9MstyXKQL0odsJj3Cr 428kqZd+cVBUVenzbIsXFHZtVvO5tA+MyNo39WR+aYj2H5jNA3CGSy5D25ZgUg+5 56RkjO4WcekFgxcWnDH9aNtbRtSQzRA2z2+Hox5ulxPBWB1Bix13l5oie4nki3MA +PMEwE9aQY68VW93S9FpIv1/iZFN3NIL7VbTrqYdnTHj311ldLu8rD+Zj64lXMq5 0lvkGQva+woqNWe3BWxnIVt+TPK6wq71 -----END CERTIFICATE-----Generated at Fri Jul 4 07:55:43 2025 by rpki-client