$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json) Hash identifier: 6m3o0BC46b3HORRs8iYBLw6ACFb8SPrLGseZxAnskCE= Subject key identifier: 5D:2D:DC:BA:73:6C:6F:96:29:98:36:37:BD:A9:5A:9D:CA:89:55:F8 Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8 Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft Manifest number: 02A2 Signing time: Sat 05 Jul 2025 02:06:37 +0000 Manifest this update: Sat 05 Jul 2025 02:06:37 +0000 Manifest next update: Sat 12 Jul 2025 02:06:37 +0000 Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: T2vhknFyNkBQaY2TJ/MT9aZdihEAcLQVgmg00h8F5bo=) 2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8 Validity Not Before: Jul 5 02:06:37 2025 GMT Not After : Jul 12 02:06:37 2025 GMT Subject: CN=686888ad-21e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ef:77:a6:bb:20:05:80:aa:d4:63:47:c5:43: 93:01:8f:1d:9c:49:ff:98:4a:fd:3e:cf:d0:95:4e: d4:c0:63:7c:18:c8:d5:50:aa:b6:9a:9f:3f:87:d4: ce:e6:fc:7f:71:e3:9e:21:48:52:58:51:cc:e7:46: e6:d7:3e:92:ec:08:6d:64:5f:09:f7:35:ee:b2:d6: e4:a5:94:80:eb:cf:06:1d:8f:a5:cc:56:b9:8a:40: 30:82:79:1a:55:e8:35:9f:f0:a4:6e:6c:8b:87:89: 77:a9:3a:bc:f4:a3:b7:66:f5:6b:12:0c:2b:17:54: ce:27:c8:d8:dd:14:5a:d9:57:2b:78:50:c7:2b:c5: 15:e0:ca:38:4e:40:bd:73:9a:e1:ba:a4:12:e5:97: 30:1f:69:e8:96:e2:83:2e:d2:4f:e7:98:0f:f0:e7: fd:af:7a:3a:27:51:48:d4:4d:8f:bb:53:9e:8d:ef: 4a:ba:18:bc:f6:a0:87:5d:59:64:cb:41:44:a9:7a: 4a:de:57:70:8b:ac:ec:93:68:3b:fd:23:38:4c:0a: c3:2b:a4:2b:93:06:52:9e:14:4c:76:df:cb:38:56: a9:ab:d5:98:29:7e:5e:be:0e:c1:91:f3:73:a1:85: 39:a6:b0:8e:0d:37:a8:3a:ff:9d:06:e8:75:54:c4: e7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:DC:BA:73:6C:6F:96:29:98:36:37:BD:A9:5A:9D:CA:89:55:F8 X509v3 Authority Key Identifier: keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f4:61:3b:46:c6:ac:5f:38:99:8f:12:1b:72:6f:d1:b4:78: 49:ea:96:51:ed:2f:65:74:a1:02:dd:06:a3:8d:78:d6:97:8c: bc:62:4e:bf:c6:ae:10:62:75:a2:a8:58:26:78:6e:46:a6:ed: 86:f1:17:d6:7b:b6:e5:e4:72:4f:38:4c:ea:96:76:50:20:36: 48:ad:83:57:a3:73:61:e9:5f:91:ab:1b:08:21:01:c2:7c:a1: d9:f4:a4:ff:c5:56:dc:93:41:e3:0a:75:ce:15:30:4a:ec:a1: 2c:35:b4:41:19:67:75:07:48:77:31:d0:66:67:53:3c:2a:ea: 0e:5b:d1:b0:ce:8a:17:72:56:42:35:06:61:81:9c:80:e9:c3: 11:53:66:0d:a9:8c:6d:ac:de:48:8e:e1:5f:00:ad:23:cb:94: 7c:82:ca:5e:06:be:78:f6:2c:c8:91:41:ca:91:28:06:ad:01: 87:fa:d1:bb:ea:3b:7e:17:25:6e:91:a9:c9:71:71:72:c6:d0: d6:aa:fd:f4:e4:a6:1b:aa:7c:82:68:97:f0:d1:26:a5:63:f0: 51:1e:f5:db:30:f6:50:ee:8a:5e:0e:a6:35:65:05:e1:6f:de: 7b:cc:91:58:87:e7:3e:fc:6d:61:e5:a1:10:7a:68:ab:74:bd: 9c:89:c4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE RTY3MTdDQzgwHhcNMjUwNzA1MDIwNjM3WhcNMjUwNzEyMDIwNjM3WjAYMRYwFAYD VQQDEw02ODY4ODhhZC0yMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9e93prsgBYCq1GNHxUOTAY8dnEn/mEr9Ps/QlU7UwGN8GMjVUKq2mp8/h9TO 5vx/ceOeIUhSWFHM50bm1z6S7AhtZF8J9zXustbkpZSA688GHY+lzFa5ikAwgnka Veg1n/CkbmyLh4l3qTq89KO3ZvVrEgwrF1TOJ8jY3RRa2VcreFDHK8UV4Mo4TkC9 c5rhuqQS5ZcwH2noluKDLtJP55gP8Of9r3o6J1FI1E2Pu1Oeje9Kuhi89qCHXVlk y0FEqXpK3ldwi6zsk2g7/SM4TArDK6QrkwZSnhRMdt/LOFapq9WYKX5evg7BkfNz oYU5prCODTeoOv+dBuh1VMTnkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0t3Lpz bG+WKZg2N72pWp3KiVX4MB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2 MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFENi83N0RFRkQzMjA2MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlK dmpLMDFMaWl6Q0hlWnhmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc9GE7RsasXziZjxIbcm/RtHhJ6pZR7S9ldKEC3QajjXjWl4y8Yk6/ xq4QYnWiqFgmeG5Gpu2G8RfWe7bl5HJPOEzqlnZQIDZIrYNXo3Nh6V+RqxsIIQHC fKHZ9KT/xVbck0HjCnXOFTBK7KEsNbRBGWd1B0h3MdBmZ1M8KuoOW9GwzooXclZC NQZhgZyA6cMRU2YNqYxtrN5IjuFfAK0jy5R8gspeBr549izIkUHKkSgGrQGH+tG7 6jt+FyVukanJcXFyxtDWqv305KYbqnyCaJfw0SalY/BRHvXbMPZQ7opeDqY1ZQXh b957zJFYh+c+/G1h5aEQemirdL2cicSL -----END CERTIFICATE-----Generated at Sat Jul 5 22:42:26 2025 by rpki-client