$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: 1yG6FNAKkbcUu5lhJCL0gMRU9aHNmnoSgPpy0dwkGKQ= Subject key identifier: BE:43:F9:50:81:BC:68:04:3D:B0:9A:96:16:F7:05:93:83:0A:E3:CF Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 05D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 05D0 Signing time: Wed 02 Jul 2025 23:21:43 +0000 Manifest this update: Wed 02 Jul 2025 23:21:42 +0000 Manifest next update: Wed 09 Jul 2025 23:21:42 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: YyHKs6EzHxNSkTxRXul04SZV3+5JDYcUO6pcGZ1nhz0=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: vvGapGaGNGJH4S/SUbpLb9IjES+dem4UiH0RpBmA3po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Jul 2 23:21:42 2025 GMT Not After : Jul 9 23:21:42 2025 GMT Subject: CN=6865bf06-54d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f8:87:4e:29:a7:3c:91:ab:5d:02:92:fd:92: 04:d9:14:ea:60:1d:12:9b:94:94:40:02:01:ce:7b: 53:db:ac:75:99:bd:0d:7a:fa:1e:3c:aa:15:fd:ed: 5a:f6:01:cc:4d:b6:81:98:32:50:bb:91:b0:4c:7d: 91:97:80:0e:db:6d:5d:18:e8:ab:3b:f6:c9:b6:06: 10:f9:ba:11:aa:2d:c0:d7:6c:a0:86:48:38:92:60: 9a:5a:a3:9b:2e:9b:30:3e:81:31:59:d2:9d:56:b2: b3:24:e5:94:d3:82:7a:23:4e:77:eb:a8:5c:d7:81: b4:50:2f:19:b0:08:3c:c2:11:2d:a0:7c:82:2a:d3: 25:46:48:4a:41:b2:3a:e8:89:d9:34:92:ae:cc:68: 13:71:a6:48:a0:5e:1b:99:d9:bc:6e:81:96:1b:c9: ee:32:e5:a4:40:11:7d:ab:56:08:15:27:13:63:23: be:5e:4a:0e:d5:84:45:38:10:58:75:59:c8:9a:1b: b8:84:02:3b:16:26:8a:58:5b:b7:36:ea:79:b3:c2: 70:07:7d:bd:e2:6b:46:63:13:b6:74:20:a2:8e:03: 05:11:d1:2a:59:49:72:94:aa:bb:58:06:4e:19:14: 77:c7:c2:7a:af:e4:66:f9:7b:7d:af:60:d0:36:a9: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:F9:50:81:BC:68:04:3D:B0:9A:96:16:F7:05:93:83:0A:E3:CF X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c5:6d:47:34:6b:6f:33:a3:b2:8a:09:51:4d:cc:1e:68:a7: fe:60:71:6b:a9:6d:47:21:a3:1c:bb:98:0b:cd:3e:6e:d7:31: b0:0e:b6:f3:6c:49:20:d2:eb:b0:1a:b0:d9:e3:bb:24:09:91: ef:62:b0:5c:98:f1:75:61:d5:ba:9d:bf:5b:9b:6c:5c:d5:ca: 0f:85:2a:64:28:b0:65:12:5a:15:b5:71:fa:f9:e9:8e:d0:93: 91:88:7f:b8:33:eb:45:90:ef:7b:ff:71:2e:c8:b4:eb:3f:91: 97:9c:bd:de:03:f8:43:51:2d:16:09:a7:b7:d8:23:d6:a1:37: 68:de:6a:c0:77:47:47:3f:4a:f4:53:8d:fc:a5:29:21:97:86: 8c:19:ca:6f:94:24:0e:f0:94:b4:9f:9a:a7:6e:af:63:52:dd: 9c:b0:aa:d2:19:f5:2a:ce:8c:e1:97:dd:23:e3:55:f4:a7:ad: b7:21:3b:48:32:7e:14:79:ff:e7:ee:0a:2b:d4:98:68:a4:c7: 00:1e:1e:e3:47:ee:40:ed:9f:6e:14:55:37:a1:fc:cb:0d:22: 8c:4e:21:83:c2:4b:78:96:c1:95:32:93:86:c3:1c:3d:93:f0: f0:88:da:b0:d8:30:57:0c:85:80:b5:49:22:57:17:45:51:fe: 98:d9:11:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUwNzAyMjMyMTQyWhcNMjUwNzA5MjMyMTQyWjAYMRYwFAYD VQQDEw02ODY1YmYwNi01NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PiHTimnPJGrXQKS/ZIE2RTqYB0Sm5SUQAIBzntT26x1mb0NevoePKoV/e1a 9gHMTbaBmDJQu5GwTH2Rl4AO221dGOirO/bJtgYQ+boRqi3A12yghkg4kmCaWqOb LpswPoExWdKdVrKzJOWU04J6I05366hc14G0UC8ZsAg8whEtoHyCKtMlRkhKQbI6 6InZNJKuzGgTcaZIoF4bmdm8boGWG8nuMuWkQBF9q1YIFScTYyO+XkoO1YRFOBBY dVnImhu4hAI7FiaKWFu3Nup5s8JwB3294mtGYxO2dCCijgMFEdEqWUlylKq7WAZO GRR3x8J6r+Rm+Xt9r2DQNqn14QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5D+VCB vGgEPbCalhb3BZODCuPPMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChxW1HNGtvM6OyiglRTcweaKf+YHFrqW1HIaMcu5gLzT5u1zGwDrbz bEkg0uuwGrDZ47skCZHvYrBcmPF1YdW6nb9bm2xc1coPhSpkKLBlEloVtXH6+emO 0JORiH+4M+tFkO97/3EuyLTrP5GXnL3eA/hDUS0WCae32CPWoTdo3mrAd0dHP0r0 U438pSkhl4aMGcpvlCQO8JS0n5qnbq9jUt2csKrSGfUqzozhl90j41X0p623ITtI Mn4Uef/n7gor1JhopMcAHh7jR+5A7Z9uFFU3ofzLDSKMTiGDwkt4lsGVMpOGwxw9 k/DwiNqw2DBXDIWAtUkiVxdFUf6Y2RFV -----END CERTIFICATE-----Generated at Thu Jul 3 09:32:33 2025 by rpki-client