$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: 4NieOe6vEp3WLDuxbZKuJJ27Si/vjSek5TAfxTJmN34= Subject key identifier: 63:59:91:F0:22:30:B4:E5:AF:90:30:F6:29:9B:0A:9B:05:BF:F9:F2 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0209 Signing time: Thu 03 Jul 2025 02:27:21 +0000 Manifest this update: Thu 03 Jul 2025 02:27:21 +0000 Manifest next update: Thu 10 Jul 2025 02:27:21 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: YBUFwHgiOMymL8rB3tCQ5ZtMrFIjhmaHunTh0xpN4ck=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:27:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Jul 3 02:27:21 2025 GMT Not After : Jul 10 02:27:21 2025 GMT Subject: CN=6865ea89-5881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:e6:c2:98:94:e5:fd:d8:d0:77:08:b2:39: c3:e5:59:f7:8b:9d:c5:eb:c0:3f:f4:b3:f1:d3:0d: aa:87:ad:3a:53:77:57:3f:73:a3:48:e3:6b:57:9d: 97:68:01:64:06:65:c7:80:c3:cb:0c:5e:91:f2:91: 74:3e:67:80:4e:6a:d6:a1:e3:d2:8b:b3:ce:36:61: 93:59:9b:8b:3b:75:66:f6:d6:31:9a:29:5f:55:80: 47:42:65:a2:69:0e:a1:b8:0a:b3:79:38:1c:b7:bf: 52:d2:8c:6e:55:c5:fc:ef:46:7f:79:c2:85:e7:27: b8:17:78:35:b0:c3:b7:26:15:74:70:ac:8c:c7:c9: 81:62:e5:e7:ae:be:15:9d:cf:d5:d6:05:38:b0:5d: 6c:51:91:16:43:37:f8:3e:23:9c:e8:79:2a:3b:45: 54:f9:80:27:6c:c3:77:69:43:7f:bd:70:df:f4:38: b9:ab:99:c7:94:55:7f:ad:3f:7f:90:95:40:16:85: ca:a2:24:95:87:4d:36:20:01:c8:ab:f7:e1:24:a4: f8:ab:b5:34:72:17:a5:cb:01:43:11:0c:b9:19:0d: cf:cc:2b:2a:39:6e:d9:1c:07:de:7b:0f:5a:b8:44: 91:bb:bf:33:3a:0e:1b:a7:46:7d:ca:11:44:eb:38: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:59:91:F0:22:30:B4:E5:AF:90:30:F6:29:9B:0A:9B:05:BF:F9:F2 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:5a:33:96:bd:22:11:88:31:de:18:c4:51:20:2f:09:49:62: 76:d4:2c:73:6f:52:77:7e:2f:5e:c3:86:56:d8:fc:23:b1:8b: 8e:50:98:ff:dc:61:18:66:db:38:12:10:d6:c4:33:51:73:e8: 1a:07:17:73:72:24:30:85:0e:09:d0:e5:46:dc:7c:7e:ea:8b: a4:80:3f:b8:65:f3:eb:9b:dd:a3:60:f1:67:5b:4e:68:af:b2: a8:2e:08:13:10:97:79:a4:1d:4f:d4:7c:c7:53:00:de:11:d2: f5:55:60:25:d7:85:cd:fc:8b:42:8b:92:5b:15:eb:6f:60:94: f1:49:ca:ae:ed:93:16:2a:71:fd:b1:21:9f:f6:9f:01:0f:20: fd:be:aa:c1:67:5d:81:2a:5c:76:a2:62:10:7f:73:75:13:4d: 67:5f:69:48:77:a4:04:5a:a7:f0:8f:68:0e:94:c1:6a:2f:f8: e2:41:51:f1:81:b5:13:63:76:64:4b:5f:d9:f2:87:e5:bb:04: 0c:99:ff:b1:56:27:8a:e7:67:f1:7a:c9:b7:fd:97:35:9a:1c: 89:07:68:c2:4f:02:64:ad:86:03:54:31:7f:bb:65:b5:be:53: 09:b9:01:1b:f9:0a:ad:19:5f:f3:25:38:57:52:8e:ae:19:0f: 9e:ea:d2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwNzAzMDIyNzIxWhcNMjUwNzEwMDIyNzIxWjAYMRYwFAYD VQQDEw02ODY1ZWE4OS01ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsI7mwpiU5f3Y0HcIsjnD5Vn3i53F68A/9LPx0w2qh606U3dXP3OjSONrV52X aAFkBmXHgMPLDF6R8pF0PmeATmrWoePSi7PONmGTWZuLO3Vm9tYxmilfVYBHQmWi aQ6huAqzeTgct79S0oxuVcX870Z/ecKF5ye4F3g1sMO3JhV0cKyMx8mBYuXnrr4V nc/V1gU4sF1sUZEWQzf4PiOc6HkqO0VU+YAnbMN3aUN/vXDf9Di5q5nHlFV/rT9/ kJVAFoXKoiSVh002IAHIq/fhJKT4q7U0chelywFDEQy5GQ3PzCsqOW7ZHAfeew9a uESRu78zOg4bp0Z9yhFE6zjGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNZkfAi MLTlr5Aw9imbCpsFv/nyMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2WjOWvSIRiDHeGMRRIC8JSWJ21Cxzb1J3fi9ew4ZW2PwjsYuOUJj/ 3GEYZts4EhDWxDNRc+gaBxdzciQwhQ4J0OVG3Hx+6oukgD+4ZfPrm92jYPFnW05o r7KoLggTEJd5pB1P1HzHUwDeEdL1VWAl14XN/ItCi5JbFetvYJTxScqu7ZMWKnH9 sSGf9p8BDyD9vqrBZ12BKlx2omIQf3N1E01nX2lId6QEWqfwj2gOlMFqL/jiQVHx gbUTY3ZkS1/Z8ofluwQMmf+xVieK52fxesm3/Zc1mhyJB2jCTwJkrYYDVDF/u2W1 vlMJuQEb+QqtGV/zJThXUo6uGQ+e6tIN -----END CERTIFICATE-----Generated at Fri Jul 4 14:34:02 2025 by rpki-client