$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json) Hash identifier: X0/tkIuGrgBum/78r+79etgGAez9YyeKIYRHsdgLjRo= Subject key identifier: 22:27:02:60:F7:FB:99:15:5C:6D:FC:F5:64:60:14:01:39:54:ED:29 Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Certificate serial: 0F5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft Manifest number: 0F52 Signing time: Fri 30 May 2025 17:45:32 +0000 Manifest this update: Fri 30 May 2025 17:45:31 +0000 Manifest next update: Fri 06 Jun 2025 17:45:31 +0000 Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: 4Uy1VroHFuXL0DdDfT5fYzpvzYAiPp9Mu4pNVORCEyI=) 2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: OgNGu/mRKm6xVdHYanAV24opwQSD/lMEZY85nUgEHHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3930 (0xf5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Validity Not Before: May 30 17:45:31 2025 GMT Not After : Jun 6 17:45:31 2025 GMT Subject: CN=6839eebb-a34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e1:73:ba:e5:fe:15:c9:41:52:83:5b:13:3d: 3e:f3:c7:a5:b4:f7:a0:04:aa:53:e7:84:53:16:1e: a5:6a:2d:56:59:b8:a0:29:f5:81:7a:8f:43:b6:2d: a9:18:91:71:78:38:30:f3:4b:c3:12:d2:5c:09:10: 28:9d:d6:f7:ef:4e:60:b0:b4:20:8c:54:ad:15:4b: 63:3d:2c:08:2e:78:1a:42:58:36:1a:be:5a:6f:0c: ab:3e:6d:73:d0:d1:97:48:e4:91:b3:99:64:55:7c: 27:b4:93:5b:ab:de:97:92:da:47:77:e5:19:26:46: 16:47:e7:fd:ff:18:5c:b6:ab:00:f6:30:3f:53:42: ec:b7:c5:9c:eb:34:ec:e6:e1:05:8f:61:95:91:53: 9a:07:7d:9b:17:56:a0:11:f9:43:a4:23:4c:ab:9d: b4:9a:2e:9d:6c:10:a9:fe:d9:79:8d:af:a1:86:50: 87:5f:a8:b5:ad:ff:ca:ea:3a:32:49:c9:e8:5d:7b: 04:85:e1:78:24:f7:4f:19:e9:3b:45:b0:e0:c6:7f: 9c:ce:f8:9a:18:40:8e:8f:bb:79:0b:b0:f5:a8:e1: 10:a4:c7:94:79:ac:23:1a:4d:c8:e7:52:8b:f3:f3: 6d:49:7c:81:b9:62:45:23:3d:53:c5:23:b3:77:8e: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:27:02:60:F7:FB:99:15:5C:6D:FC:F5:64:60:14:01:39:54:ED:29 X509v3 Authority Key Identifier: keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4e:82:c9:32:de:b5:77:09:79:b2:1e:ea:59:fe:c1:c1:29: da:65:c3:88:60:3c:db:56:02:0f:69:6b:aa:9c:03:05:44:2b: 7d:11:8c:5b:12:82:ed:b9:74:1f:c0:8f:b9:eb:c3:ba:40:64: 36:87:d3:4a:5c:d7:a5:95:2e:cc:4b:dd:a9:f5:ff:ce:52:f0: 95:e0:7d:97:d7:97:d1:44:f7:f3:63:be:04:c5:05:90:b9:7f: 6c:28:2c:a9:f2:9a:7f:9e:cd:6d:59:7f:3e:2f:34:dc:37:69: 12:a5:22:7d:83:77:07:e0:15:51:3e:07:ea:df:ef:e7:b9:fb: cd:b5:8d:82:e6:8d:59:4e:d9:e6:83:75:cb:6f:db:47:77:e4: a0:c5:71:65:b0:a2:5a:cb:a2:21:6e:19:b4:e9:90:54:76:b6: 15:29:13:f7:fd:25:98:a7:47:d3:21:13:79:b9:0d:b4:45:79: cc:5d:bf:d9:09:89:12:fa:de:34:9e:7c:36:c6:d3:85:0d:e4: 1c:49:c4:17:be:4b:36:62:51:dc:7e:94:c3:67:30:3b:1e:2f: 6d:76:2d:15:92:bc:40:f2:db:97:7a:ba:d2:af:3c:a6:d3:9a: 49:2f:66:b7:8e:8d:16:62:31:a2:c7:b1:ae:82:30:9d:e5:3e: 3d:33:2a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVFMkRDOENBOUY1 QUZBRTFCNTMwHhcNMjUwNTMwMTc0NTMxWhcNMjUwNjA2MTc0NTMxWjAYMRYwFAYD VQQDEw02ODM5ZWViYi1hMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5eFzuuX+FclBUoNbEz0+88eltPegBKpT54RTFh6lai1WWbigKfWBeo9Dti2p GJFxeDgw80vDEtJcCRAondb3705gsLQgjFStFUtjPSwILngaQlg2Gr5abwyrPm1z 0NGXSOSRs5lkVXwntJNbq96XktpHd+UZJkYWR+f9/xhctqsA9jA/U0Lst8Wc6zTs 5uEFj2GVkVOaB32bF1agEflDpCNMq520mi6dbBCp/tl5ja+hhlCHX6i1rf/K6joy ScnoXXsEheF4JPdPGek7RbDgxn+czviaGECOj7t5C7D1qOEQpMeUeawjGk3I51KL 8/NtSXyBuWJFIz1TxSOzd46kLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCInAmD3 +5kVXG389WRgFAE5VO0pMB8GA1UdIwQYMBaAFFl2710L8WaI4l7F4tyMqfWvrhtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzJDNi8wQUE0RDY2NDZB NEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpvamlYc1hpM0l5cDlhLXVH MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dYYnZYUXZ4Wm9qaVhzWGkzSXlwOWEtdUcxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpv amlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXToLJMt61dwl5sh7qWf7BwSnaZcOIYDzbVgIPaWuqnAMFRCt9EYxb EoLtuXQfwI+568O6QGQ2h9NKXNellS7MS92p9f/OUvCV4H2X15fRRPfzY74ExQWQ uX9sKCyp8pp/ns1tWX8+LzTcN2kSpSJ9g3cH4BVRPgfq3+/nufvNtY2C5o1ZTtnm g3XLb9tHd+SgxXFlsKJay6Ihbhm06ZBUdrYVKRP3/SWYp0fTIRN5uQ20RXnMXb/Z CYkS+t40nnw2xtOFDeQcScQXvks2YlHcfpTDZzA7Hi9tdi0VkrxA8tuXerrSrzym 05pJL2a3jo0WYjGix7GugjCd5T49MyqQ -----END CERTIFICATE-----Generated at Sat May 31 17:30:18 2025 by rpki-client