$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: 4zHwc4Rdtp6JY25ksLsYHgGxC+sk3YVX1p0ryS3M5J4= Subject key identifier: C9:75:26:4C:80:A3:E7:C7:15:6C:56:08:86:60:F0:CE:29:30:26:9A Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 05C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 05C1 Signing time: Wed 02 Jul 2025 23:23:30 +0000 Manifest this update: Wed 02 Jul 2025 23:23:29 +0000 Manifest next update: Wed 09 Jul 2025 23:23:29 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: sogrDV4sp3qrSR+GVsjV4tDKWCIJdqCGpsUg0cyzjOk=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Jul 2 23:23:29 2025 GMT Not After : Jul 9 23:23:29 2025 GMT Subject: CN=6865bf71-7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:d6:ca:9d:5a:8d:d1:e1:71:d2:5c:4f:e9: 21:6f:4a:b5:6a:d4:2a:17:d9:5a:80:20:3b:ba:87: 25:b4:c2:51:31:51:18:07:3c:c1:82:15:e1:8e:aa: 87:7b:50:65:7e:dc:07:ce:94:1e:17:13:f6:ce:ea: 40:e7:ea:a2:73:61:bb:79:bf:2d:bb:5d:cd:1a:cf: 38:05:f3:55:2d:93:c5:ac:fc:9f:a2:22:fc:96:f2: 5a:ab:c8:ce:97:c0:87:75:9e:cc:87:79:22:cd:4e: 64:e7:6e:47:51:1e:d7:f2:95:68:e6:9c:0d:23:d8: 6e:6c:5d:16:b7:d4:18:97:b7:00:ee:05:0f:f0:b5: 34:a0:b3:8e:4e:20:68:c0:3c:e8:4e:af:68:1b:04: 17:3d:2e:f8:ce:bc:c1:8c:23:69:05:09:96:29:d8: 32:e4:b5:76:73:c1:a1:98:6d:35:ff:55:13:80:53: 84:c7:b2:58:3e:8b:b6:40:24:80:aa:41:09:21:d8: 89:1a:f7:83:4b:70:0e:ad:aa:2c:64:a5:3b:f4:f7: 09:5c:64:e7:0e:55:dc:20:3b:ae:53:ae:28:d0:73: 00:23:ba:d0:93:35:e2:6b:e6:12:ab:bd:91:26:04: c5:d0:0b:35:65:15:32:61:44:2d:bb:e2:08:ec:1c: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:26:4C:80:A3:E7:C7:15:6C:56:08:86:60:F0:CE:29:30:26:9A X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e5:cf:82:0e:0c:44:e5:e0:10:87:6e:2a:9e:89:54:52:62: 58:a5:69:8b:87:6a:da:c4:ab:79:cd:32:70:5b:29:77:17:92: 33:9a:94:52:c4:d4:c7:8e:af:30:81:c8:33:51:13:ac:05:db: 12:bc:1f:3f:c1:c7:db:cf:ba:b3:95:29:ef:74:d6:d4:eb:ba: 2f:97:68:ba:ca:e8:d4:ef:2f:50:31:3a:7c:82:86:54:2a:54: 1d:6d:12:ae:c0:c5:2b:57:f5:ad:5d:57:65:c6:25:5f:d7:8f: 72:a5:6c:5a:dd:9e:86:38:51:a8:cd:af:51:c2:af:54:46:b1: 7f:5c:e6:de:91:a0:7c:6a:64:0b:c8:4e:9f:e8:02:63:2d:f7: b6:76:a4:ab:9d:9c:5f:60:ac:cf:63:5d:2e:98:6e:e6:43:96: 33:f0:8d:13:05:e8:e8:c8:0e:3f:6e:05:37:d9:d5:a4:4c:6e: 46:6d:68:a4:41:2c:bd:32:c8:e5:1f:cf:2f:5d:28:cd:9a:ce: 1a:be:fc:d5:44:12:10:db:c7:a1:36:4a:81:ee:18:92:e5:43: 7d:12:a9:19:f3:e9:c5:46:80:38:8d:b2:36:f9:05:15:4d:3d: 73:ce:81:4d:29:02:25:53:22:ed:81:6a:36:dc:b7:c5:25:36: a1:09:e3:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUwNzAyMjMyMzI5WhcNMjUwNzA5MjMyMzI5WjAYMRYwFAYD VQQDEw02ODY1YmY3MS03ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSzWyp1ajdHhcdJcT+khb0q1atQqF9lagCA7uocltMJRMVEYBzzBghXhjqqH e1BlftwHzpQeFxP2zupA5+qic2G7eb8tu13NGs84BfNVLZPFrPyfoiL8lvJaq8jO l8CHdZ7Mh3kizU5k525HUR7X8pVo5pwNI9hubF0Wt9QYl7cA7gUP8LU0oLOOTiBo wDzoTq9oGwQXPS74zrzBjCNpBQmWKdgy5LV2c8GhmG01/1UTgFOEx7JYPou2QCSA qkEJIdiJGveDS3AOraosZKU79PcJXGTnDlXcIDuuU64o0HMAI7rQkzXia+YSq72R JgTF0As1ZRUyYUQtu+II7Bz5DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl1JkyA o+fHFWxWCIZg8M4pMCaaMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC55c+CDgxE5eAQh24qnolUUmJYpWmLh2raxKt5zTJwWyl3F5IzmpRS xNTHjq8wgcgzUROsBdsSvB8/wcfbz7qzlSnvdNbU67ovl2i6yujU7y9QMTp8goZU KlQdbRKuwMUrV/WtXVdlxiVf149ypWxa3Z6GOFGoza9Rwq9URrF/XObekaB8amQL yE6f6AJjLfe2dqSrnZxfYKzPY10umG7mQ5Yz8I0TBejoyA4/bgU32dWkTG5GbWik QSy9MsjlH88vXSjNms4avvzVRBIQ28ehNkqB7hiS5UN9EqkZ8+nFRoA4jbI2+QUV TT1zzoFNKQIlUyLtgWo23LfFJTahCeOu -----END CERTIFICATE-----Generated at Thu Jul 3 07:12:31 2025 by rpki-client