$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: IhPUdJHDzoAIznN6XXGqsw5BCpfiKriq+mg6REgi6GI= Subject key identifier: 2A:BF:5F:78:2E:A9:4F:11:34:D2:22:20:C2:76:B0:ED:DC:39:03:3B Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 012E Signing time: Thu 03 Jul 2025 04:53:38 +0000 Manifest this update: Thu 03 Jul 2025 04:53:37 +0000 Manifest next update: Thu 10 Jul 2025 04:53:37 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: i8znt8Nr9ZsH94DSRV9aGO846tvkHI/3we4OknXsgv8=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: bPMBzJr4bTR5Bhy4yYB9L04MYvX8u/mjmsw/KhMBj+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Jul 3 04:53:37 2025 GMT Not After : Jul 10 04:53:37 2025 GMT Subject: CN=68660cd1-9f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:7b:d5:e9:90:cb:a1:8d:b3:42:45:35:c5: dc:83:2d:d2:51:26:17:1c:28:0d:41:e4:47:ef:4b: d9:6c:89:09:d6:b3:e6:f3:39:e8:e0:ef:ae:37:70: d4:da:f8:bd:8b:cb:bc:64:92:bb:e0:14:66:d4:9a: ef:62:1c:02:3f:51:51:59:d4:5a:f3:33:14:bb:23: 05:66:f0:a9:99:35:69:57:a4:8d:b8:c5:9f:5b:df: d5:50:de:1b:a6:f7:b3:dc:59:4d:6c:05:be:ed:f7: 55:aa:22:f0:37:3d:7a:37:33:1e:5d:a2:9d:3d:21: e0:02:f2:3c:3a:fc:8e:84:98:0c:d1:a5:9d:38:e1: 6a:23:13:3b:dd:34:82:c7:9c:c2:73:48:bd:99:d3: f3:3c:25:d9:83:f7:b2:d9:be:bf:13:a8:b8:8a:11: bf:b2:68:cf:96:ab:c2:36:0f:24:60:44:08:66:4c: bb:6a:8d:d0:8d:61:83:b8:9b:83:0d:d5:a9:c1:db: 43:90:5c:76:b1:a2:7b:70:bb:64:ae:39:69:7e:4d: 9b:7e:52:93:9e:bc:53:60:05:59:72:db:fb:0a:cd: 47:e8:a7:ec:83:23:aa:46:7a:44:c8:29:6d:88:42: 10:d4:b5:be:dd:9f:6d:20:ec:bf:7f:f0:d5:c2:50: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BF:5F:78:2E:A9:4F:11:34:D2:22:20:C2:76:B0:ED:DC:39:03:3B X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:41:14:e0:3d:28:bd:9d:ad:68:8a:f5:c7:44:bd:7b:6e:5c: 21:fd:8d:9c:be:04:fb:df:2a:5f:2d:a0:0a:3b:c7:0a:b0:59: 11:84:cc:fa:9e:7d:36:3f:8a:4a:4a:86:bd:a2:ed:7e:69:57: 5b:51:30:44:ae:3e:6d:cc:e7:1e:ee:93:58:3f:7c:9d:49:1e: 0d:f1:18:93:87:7e:8f:57:dd:28:d4:fc:ef:4c:2b:d5:3e:27: d8:8a:a4:9e:3b:9c:65:6d:6c:e2:1b:a0:55:c8:57:0c:ff:9f: 21:b7:33:a0:b7:5d:1e:b4:74:5d:7c:8c:e4:f8:00:e8:71:c1: 4a:80:13:c2:f6:0f:55:44:12:07:66:4b:cc:c1:98:63:53:a9: 55:d0:07:b9:40:3c:70:6d:e6:e9:77:03:c3:3f:50:a6:5e:2c: b5:e9:77:ce:a9:0b:3f:5e:57:c8:25:c6:0c:2c:45:fe:9f:4f: ee:39:0f:10:7c:a5:b2:e1:8a:4a:6e:bd:56:00:c6:1a:91:ba: 17:51:3b:67:0f:29:81:92:5f:1d:48:31:63:64:f0:b2:48:87: 49:e1:ff:f7:0b:95:73:28:5e:73:95:2d:9a:87:c8:07:19:27: e7:33:9b:53:b2:89:21:b5:b8:76:75:04:a1:7c:23:b8:f0:ef: 61:09:1f:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwNzAzMDQ1MzM3WhcNMjUwNzEwMDQ1MzM3WjAYMRYwFAYD VQQDEw02ODY2MGNkMS05ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGB71emQy6GNs0JFNcXcgy3SUSYXHCgNQeRH70vZbIkJ1rPm8zno4O+uN3DU 2vi9i8u8ZJK74BRm1JrvYhwCP1FRWdRa8zMUuyMFZvCpmTVpV6SNuMWfW9/VUN4b pvez3FlNbAW+7fdVqiLwNz16NzMeXaKdPSHgAvI8OvyOhJgM0aWdOOFqIxM73TSC x5zCc0i9mdPzPCXZg/ey2b6/E6i4ihG/smjPlqvCNg8kYEQIZky7ao3QjWGDuJuD DdWpwdtDkFx2saJ7cLtkrjlpfk2bflKTnrxTYAVZctv7Cs1H6KfsgyOqRnpEyClt iEIQ1LW+3Z9tIOy/f/DVwlDE8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq/X3gu qU8RNNIiIMJ2sO3cOQM7MB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrQRTgPSi9na1oivXHRL17blwh/Y2cvgT73ypfLaAKO8cKsFkRhMz6 nn02P4pKSoa9ou1+aVdbUTBErj5tzOce7pNYP3ydSR4N8RiTh36PV90o1PzvTCvV PifYiqSeO5xlbWziG6BVyFcM/58htzOgt10etHRdfIzk+ADoccFKgBPC9g9VRBIH ZkvMwZhjU6lV0Ae5QDxwbebpdwPDP1CmXiy16XfOqQs/XlfIJcYMLEX+n0/uOQ8Q fKWy4YpKbr1WAMYakboXUTtnDymBkl8dSDFjZPCySIdJ4f/3C5VzKF5zlS2ah8gH GSfnM5tTsokhtbh2dQShfCO48O9hCR+A -----END CERTIFICATE-----Generated at Thu Jul 3 23:08:02 2025 by rpki-client