$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: keRhwBu0c6g3VWGgsRKTpp3a7fP8lgtsSIbWpJZJ7uo= Subject key identifier: 02:82:67:90:D7:20:F9:E4:21:FC:FA:3E:C1:B3:69:78:52:5F:F0:2B Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 06E0 Signing time: Mon 30 Jun 2025 22:19:34 +0000 Manifest this update: Mon 30 Jun 2025 22:19:34 +0000 Manifest next update: Mon 07 Jul 2025 22:19:34 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: 1sbiFykpEyodrH59zeg5HLGTOI2sVcvAZ4todLc/ymQ=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: Jun 30 22:19:34 2025 GMT Not After : Jul 7 22:19:34 2025 GMT Subject: CN=68630d76-612d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:91:39:a8:69:41:9a:7c:9f:ed:dc:fa:56: f2:39:60:26:c7:16:cf:fa:0e:7a:d7:2e:33:90:a2: af:17:84:20:d8:24:66:91:33:ba:9f:dd:d1:8a:fe: 13:6e:f4:87:02:37:68:83:7f:82:f4:07:c3:bf:a5: f5:2e:f1:0a:09:5b:f8:40:09:e6:c9:cd:0e:fd:49: 16:a8:ec:9d:d9:6d:87:a7:33:38:04:34:21:16:60: 7f:cc:6c:7e:43:71:e3:fa:6d:4c:30:90:75:28:62: 03:0c:f6:ba:f7:98:a0:69:8e:e1:14:46:12:a9:d6: 48:79:d2:1e:25:34:bf:51:70:b6:f8:cc:6a:a7:fa: af:27:95:06:a3:81:20:56:e4:f8:ef:62:63:a1:5e: 72:3f:eb:b8:20:7c:6d:c1:98:12:08:b0:20:ce:17: ba:1d:20:76:90:04:d8:15:cd:4d:b0:51:28:46:c5: 02:a9:c0:37:a1:62:48:ce:dd:78:c7:16:a6:e6:28: f6:7d:35:7a:03:5d:96:a5:31:96:e3:64:01:65:1e: a5:84:87:3d:af:86:11:c2:c4:8e:70:6d:fd:1b:0d: 9d:96:3d:06:45:f6:db:29:32:43:75:c6:02:6b:80: 76:ea:53:55:ef:f7:a0:de:66:91:68:4d:d5:d3:84: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:82:67:90:D7:20:F9:E4:21:FC:FA:3E:C1:B3:69:78:52:5F:F0:2B X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:1b:eb:be:1d:55:d4:07:4a:23:01:e7:63:e8:d0:d1:99:61: ac:71:90:03:8c:cf:63:59:a8:e8:a8:47:10:0b:7a:dd:17:4a: 14:a3:4b:1b:bb:5a:96:ff:78:f2:4d:24:a8:d1:28:e3:d8:0f: e3:2d:50:15:fa:80:7c:6a:41:32:fb:82:c6:41:83:42:b9:1c: d8:52:d8:76:5a:00:07:49:c8:0c:8f:40:7f:56:15:c9:03:bc: 25:b8:22:4e:04:94:74:f3:28:3c:a9:2f:9c:5a:4c:f9:d4:7d: f8:4f:0e:7f:72:b7:a6:2a:9e:c3:eb:a8:e2:0f:ee:f7:f7:02: 0c:91:28:94:f1:10:59:29:49:e7:43:25:01:85:e8:e2:17:89: 4f:dc:1e:9f:53:d9:64:d1:64:b9:54:19:55:4c:dd:86:12:f8: 1e:62:15:78:47:20:e3:55:e5:12:d6:dc:41:4f:8a:e5:e5:ae: 3d:3f:be:65:a2:46:cb:96:15:28:bc:b5:7b:ad:bc:2b:41:fe: a2:a8:ac:33:b7:0d:5b:ba:b8:b9:f5:ae:9e:fa:3e:73:ad:71: 8f:97:0f:07:29:77:63:f6:ac:62:f6:34:a7:09:b2:48:c3:ad: b7:d7:7b:08:93:51:93:3f:53:2e:35:79:be:98:56:8d:b1:e9: 64:85:fa:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwNjMwMjIxOTM0WhcNMjUwNzA3MjIxOTM0WjAYMRYwFAYD VQQDEw02ODYzMGQ3Ni02MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1CROahpQZp8n+3c+lbyOWAmxxbP+g561y4zkKKvF4Qg2CRmkTO6n93Riv4T bvSHAjdog3+C9AfDv6X1LvEKCVv4QAnmyc0O/UkWqOyd2W2HpzM4BDQhFmB/zGx+ Q3Hj+m1MMJB1KGIDDPa695igaY7hFEYSqdZIedIeJTS/UXC2+Mxqp/qvJ5UGo4Eg VuT472JjoV5yP+u4IHxtwZgSCLAgzhe6HSB2kATYFc1NsFEoRsUCqcA3oWJIzt14 xxam5ij2fTV6A12WpTGW42QBZR6lhIc9r4YRwsSOcG39Gw2dlj0GRfbbKTJDdcYC a4B26lNV7/eg3maRaE3V04SBmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKCZ5DX IPnkIfz6PsGzaXhSX/ArMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2G+u+HVXUB0ojAedj6NDRmWGscZADjM9jWajoqEcQC3rdF0oUo0sb u1qW/3jyTSSo0Sjj2A/jLVAV+oB8akEy+4LGQYNCuRzYUth2WgAHScgMj0B/VhXJ A7wluCJOBJR08yg8qS+cWkz51H34Tw5/cremKp7D66jiD+739wIMkSiU8RBZKUnn QyUBhejiF4lP3B6fU9lk0WS5VBlVTN2GEvgeYhV4RyDjVeUS1txBT4rl5a49P75l okbLlhUovLV7rbwrQf6iqKwztw1buri59a6e+j5zrXGPlw8HKXdj9qxi9jSnCbJI w62313sIk1GTP1MuNXm+mFaNselkhfri -----END CERTIFICATE-----Generated at Tue Jul 1 20:13:19 2025 by rpki-client