$ rpki-client -vvf rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft File: wrYFvbTytu0rBR3EKy6AP7YHjk0.mft (raw, json) Hash identifier: 645wdHI4RysUPiypWucBdpzeYiDdNxwaMYO6hQOm//4= Subject key identifier: 41:57:79:9D:A4:F6:52:CA:7A:67:27:83:F5:CC:36:91:C1:31:AD:8B Authority key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D Certificate issuer: /CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft Manifest number: 0250 Signing time: Sun 29 Jun 2025 01:20:42 +0000 Manifest this update: Sun 29 Jun 2025 01:20:41 +0000 Manifest next update: Sun 06 Jul 2025 01:20:41 +0000 Files and hashes: 1: wrYFvbTytu0rBR3EKy6AP7YHjk0.crl (hash: fIdhAeqGDf3IMmtU/njTVJq+G1RiL2mG6UWB7/m4SM4=) 2: 11AA6C3E22A111ED848DF584C4F9AE02.roa (hash: uqzxT9Bkkkw/d9KeeEuTKcCxRKlVwtLIu+mRX+pqh+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F692A, serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Validity Not Before: Jun 29 01:20:41 2025 GMT Not After : Jul 6 01:20:41 2025 GMT Subject: CN=686094ea-2100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:a1:6b:42:72:63:0a:5a:72:4b:0a:8f:27: af:42:66:d5:d5:fc:e2:54:9d:48:9d:5f:03:46:50: 21:6e:01:9c:b6:cc:4a:72:b5:83:20:51:bf:1c:cd: 17:49:c4:16:ae:9c:47:e0:62:63:3e:25:f2:87:ea: 0b:d0:eb:13:d5:20:ef:38:67:97:19:51:54:e7:4f: fd:28:c9:f2:57:a3:f4:3b:8d:79:75:ee:14:cf:89: a7:06:19:b4:c0:6c:85:5c:94:3a:ae:21:83:f6:38: 4e:12:8b:33:c1:f4:e9:27:0f:4a:54:c9:d6:de:8c: d2:f6:e5:00:6b:2d:bb:f2:d1:3a:5f:b4:a3:33:9e: 9a:8d:7f:ca:de:2d:84:13:0a:e1:8c:c0:60:0c:37: db:77:0c:6d:5d:2d:c3:35:bb:b7:26:4b:88:3a:76: e4:e7:26:40:44:55:26:ae:3f:48:13:71:43:16:0b: ba:32:e5:87:87:c9:5c:d9:9e:c3:e7:80:57:c5:75: fa:c6:69:e1:f0:96:d4:1b:33:64:0b:3e:83:6f:f2: fe:c1:c4:6d:8d:d3:ac:d1:d0:dd:6c:ee:7e:0d:c9: 87:12:17:ea:83:6a:7f:b3:b0:92:8b:6c:f1:25:0a: 69:92:18:35:b2:c7:b0:2b:a7:21:09:7f:0e:49:35: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:79:9D:A4:F6:52:CA:7A:67:27:83:F5:CC:36:91:C1:31:AD:8B X509v3 Authority Key Identifier: keyid:C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:cc:59:3e:ad:6d:1e:e1:a9:b3:48:2a:a4:e0:e8:a5:a0:4b: 09:f9:32:1b:93:05:5a:c6:ba:3a:36:73:7e:59:20:0e:ef:75: d8:ba:1b:4f:1b:c7:46:4e:6f:04:87:d8:fb:09:9c:1b:52:7c: 24:16:fe:aa:d1:c9:19:15:e7:ef:22:0d:16:63:8a:6a:d5:51: a3:40:dc:d7:4d:8a:0a:c9:b9:96:0d:eb:5d:be:27:f4:3f:82: 55:0f:7a:06:67:cb:c9:15:2b:81:00:6f:18:63:f6:cc:34:60: 89:01:79:80:12:25:c9:34:2e:8d:27:51:64:76:34:77:87:15: 3e:a9:c4:ba:61:da:d8:26:ac:00:40:1f:e1:10:65:13:ca:45: 57:c8:d0:63:3a:31:bf:7f:69:2a:29:c8:7b:fa:8f:7f:0e:2b: 3e:16:f7:f0:7a:fc:91:29:b0:39:ce:ff:88:e9:99:ff:dd:46: fc:0d:02:46:bd:5e:a0:f7:84:dc:c7:e8:73:20:71:c1:f3:19: b2:e3:f6:05:c2:6e:99:f2:b7:c6:40:56:b5:2b:74:7d:52:c7: e4:73:5d:7a:2a:88:64:38:97:85:92:31:e6:49:80:8b:2a:03: 13:b0:0d:d6:2e:f5:63:85:92:39:44:d4:c0:82:5e:eb:56:7b: 12:f0:fc:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5MkExMTAvBgNVBAUTKEMyQjYwNUJEQjRGMkI2RUQyQjA1MURDNDJCMkU4MDNG QjYwNzhFNEQwHhcNMjUwNjI5MDEyMDQxWhcNMjUwNzA2MDEyMDQxWjAYMRYwFAYD VQQDEw02ODYwOTRlYS0yMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzuha0JyYwpacksKjyevQmbV1fziVJ1InV8DRlAhbgGctsxKcrWDIFG/HM0X ScQWrpxH4GJjPiXyh+oL0OsT1SDvOGeXGVFU50/9KMnyV6P0O415de4Uz4mnBhm0 wGyFXJQ6riGD9jhOEoszwfTpJw9KVMnW3ozS9uUAay278tE6X7SjM56ajX/K3i2E EwrhjMBgDDfbdwxtXS3DNbu3JkuIOnbk5yZARFUmrj9IE3FDFgu6MuWHh8lc2Z7D 54BXxXX6xmnh8JbUGzNkCz6Db/L+wcRtjdOs0dDdbO5+DcmHEhfqg2p/s7CSi2zx JQppkhg1ssewK6chCX8OSTXvtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFXeZ2k 9lLKemcng/XMNpHBMa2LMB8GA1UdIwQYMBaAFMK2Bb208rbtKwUdxCsugD+2B45N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjkyQS80ODlFMEYwQzIy OUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1MHJCUjNFS3k2QVA3WUhq azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyWUZ2YlR5dHUwckJSM0VLeTZBUDdZSGprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjkyQS80ODlFMEYwQzIyOUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1 MHJCUjNFS3k2QVA3WUhqazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCzFk+rW0e4amzSCqk4OiloEsJ+TIbkwVaxro6NnN+WSAO73XYuhtP G8dGTm8Eh9j7CZwbUnwkFv6q0ckZFefvIg0WY4pq1VGjQNzXTYoKybmWDetdvif0 P4JVD3oGZ8vJFSuBAG8YY/bMNGCJAXmAEiXJNC6NJ1FkdjR3hxU+qcS6YdrYJqwA QB/hEGUTykVXyNBjOjG/f2kqKch7+o9/Dis+FvfwevyRKbA5zv+I6Zn/3Ub8DQJG vV6g94Tcx+hzIHHB8xmy4/YFwm6Z8rfGQFa1K3R9Usfkc116KohkOJeFkjHmSYCL KgMTsA3WLvVjhZI5RNTAgl7rVnsS8PxS -----END CERTIFICATE-----Generated at Sun Jun 29 17:10:35 2025 by rpki-client