$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: vghizb+r9ebXKu8Qx3OjWmkIzK6Hb/kz+UCT1Lt2pZQ= Subject key identifier: 35:51:FD:48:F1:09:5E:2D:72:A4:57:B4:AE:36:8D:2D:E8:FD:D9:36 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 0921 Signing time: Mon 30 Jun 2025 20:26:57 +0000 Manifest this update: Mon 30 Jun 2025 20:26:57 +0000 Manifest next update: Mon 07 Jul 2025 20:26:57 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: BM7Ad23uFUs826d2sVWPAfWWemqbLH8Texqc19WW4zI=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: gOCw5zLl7y7h+UWFzAOSwX3oI4JmJwwAJxjqn+jEKuo=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: NQ+08YGOdEaF/ITWmOcqyCWrC35sSFn/SumNIjZOhls=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: mVbCZmxbw75/wJuw2lQw2e9EqjrrEqzYVc8QSZMYsH8=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: c5z4KkXkym8vqTv49IzGrRHtzbiepV0IBMzX8Mue6BQ=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: ya3/+CFVUd26DRczFvF0+d7fGBWWa9IkA5jh/NTOjQU=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: qBySD0Ql5ISyNIpBRQOOsUE/7hyokJQg1egqkA93Wgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Jun 30 20:26:57 2025 GMT Not After : Jul 7 20:26:57 2025 GMT Subject: CN=6862f311-5f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:2c:a8:ad:ec:07:54:b4:2b:d6:32:4f:f8: 7e:0c:39:54:7c:1d:0d:de:10:46:81:c6:bd:70:4c: e8:da:79:f2:ff:21:c5:78:37:a7:7b:88:af:89:04: 3a:51:d0:19:04:c2:a1:e3:e0:cf:f8:03:4b:bb:fc: 19:ce:dc:5c:7f:2c:5e:5e:a1:6c:ba:3f:6d:1e:24: 5b:5f:5d:2d:7d:fe:86:d4:dd:3c:f4:31:cd:1d:dc: 47:d7:1f:12:85:7e:ae:fc:27:c4:50:63:8e:80:8b: ec:17:66:16:c1:46:aa:70:b1:24:41:e7:43:0c:f2: a1:4b:19:eb:bd:c9:60:bf:0e:eb:66:b9:e0:22:c5: 92:cf:63:f3:0b:51:ac:49:55:60:f3:73:26:a3:07: b1:51:90:81:89:ba:5c:ad:88:82:86:3b:05:c3:4a: 01:36:46:22:65:f1:35:45:9e:15:fd:d6:84:dc:39: 46:96:75:57:dc:a3:92:f3:19:85:72:99:e6:a4:cf: b2:fe:97:44:12:0f:a6:e8:1a:d2:7e:0b:a6:e2:9e: ee:dd:d3:e0:78:01:19:91:de:85:8f:03:e0:72:ac: ea:cc:ca:f7:81:93:50:b9:9f:04:fa:65:76:a2:4b: 82:27:50:ba:65:a8:3e:ee:ab:12:74:92:7e:6c:0c: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:51:FD:48:F1:09:5E:2D:72:A4:57:B4:AE:36:8D:2D:E8:FD:D9:36 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f2:70:27:ba:a5:7e:95:b0:a8:79:9e:e4:a5:fd:c1:b4:6a:9f: eb:dd:37:a1:a9:ba:0e:df:98:7b:61:1a:0d:01:28:bd:fe:f6: cc:43:5d:14:38:1c:d4:0c:72:d3:03:51:b9:b9:96:28:53:1a: e5:ec:90:b1:bc:69:bf:d3:86:4c:0b:60:a7:e0:de:67:54:af: 22:43:b4:fd:79:53:dd:49:33:fc:9c:a2:23:fd:17:73:57:5b: 3c:99:8f:13:06:38:a1:03:70:d1:64:a5:4b:bf:7b:d7:2c:18: 61:03:8b:47:e3:74:6c:cb:76:cb:6d:23:8c:e0:c0:fc:99:bf: 7a:e2:a0:5e:b2:62:87:54:79:1c:5e:66:11:2e:61:4c:58:b3: 79:02:9a:55:ba:bc:73:73:8b:e5:35:12:77:58:4e:2d:84:1d: 15:b9:39:80:e9:b4:f8:3e:0f:cd:e8:8e:67:14:22:68:74:ee: ad:1d:f7:a8:3c:af:93:b2:90:31:57:0c:86:b4:3f:13:ba:e1: 90:e2:8f:c3:4e:38:d4:00:97:82:cf:ad:99:cd:f8:c4:dd:7e: 6b:92:18:aa:79:fd:56:a6:a7:8f:92:7d:4a:49:05:8e:a1:d8: 55:17:cb:b8:30:16:9c:a9:a6:a8:d8:18:81:ca:30:1f:c7:e2: 67:c4:77:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwNjMwMjAyNjU3WhcNMjUwNzA3MjAyNjU3WjAYMRYwFAYD VQQDEw02ODYyZjMxMS01ZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYUsqK3sB1S0K9YyT/h+DDlUfB0N3hBGgca9cEzo2nny/yHFeDene4iviQQ6 UdAZBMKh4+DP+ANLu/wZztxcfyxeXqFsuj9tHiRbX10tff6G1N089DHNHdxH1x8S hX6u/CfEUGOOgIvsF2YWwUaqcLEkQedDDPKhSxnrvclgvw7rZrngIsWSz2PzC1Gs SVVg83MmowexUZCBibpcrYiChjsFw0oBNkYiZfE1RZ4V/daE3DlGlnVX3KOS8xmF cpnmpM+y/pdEEg+m6BrSfgum4p7u3dPgeAEZkd6FjwPgcqzqzMr3gZNQuZ8E+mV2 okuCJ1C6Zag+7qsSdJJ+bAxsUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVR/Ujx CV4tcqRXtK42jS3o/dk2MB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDycCe6pX6VsKh5nuSl/cG0ap/r3TehqboO35h7YRoNASi9/vbMQ10U OBzUDHLTA1G5uZYoUxrl7JCxvGm/04ZMC2Cn4N5nVK8iQ7T9eVPdSTP8nKIj/Rdz V1s8mY8TBjihA3DRZKVLv3vXLBhhA4tH43Rsy3bLbSOM4MD8mb964qBesmKHVHkc XmYRLmFMWLN5AppVurxzc4vlNRJ3WE4thB0VuTmA6bT4Pg/N6I5nFCJodO6tHfeo PK+TspAxVwyGtD8TuuGQ4o/DTjjUAJeCz62ZzfjE3X5rkhiqef1WpqePkn1KSQWO odhVF8u4MBacqaao2BiByjAfx+JnxHdt -----END CERTIFICATE-----Generated at Wed Jul 2 06:50:23 2025 by rpki-client