$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: WeUizUYgubpsbCcJxyzXWS8qBE/92XtftiRpEwhP0Z0= Subject key identifier: CD:B4:5C:61:20:55:7B:43:71:A4:93:2A:69:88:51:F4:4A:CD:C2:D7 Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: 0102 Signing time: Sat 31 May 2025 04:42:48 +0000 Manifest this update: Sat 31 May 2025 04:42:48 +0000 Manifest next update: Sat 07 Jun 2025 04:42:48 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: TT3QT9rea4XmeDnpebrnO+rZtuULDHgvAPC6DRsHGKE=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: mx+hZNnEHjoWsdsKMFKjqe1rg9GBHxL9Qf87GWS5aXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: May 31 04:42:48 2025 GMT Not After : Jun 7 04:42:48 2025 GMT Subject: CN=683a88c8-de5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:2b:5c:5a:86:11:16:75:6c:3c:da:0b:fd: 09:2d:ea:72:ab:47:fd:c6:62:78:7e:70:77:47:db: 8c:55:cc:49:62:3d:bf:27:43:6d:3a:e6:ec:57:53: e9:0e:fb:89:3a:29:77:5e:10:b3:9d:4e:27:04:70: 31:81:53:01:91:8a:9e:c6:25:ae:51:e5:fe:6c:b2: 01:de:5c:dc:c3:ea:63:81:7f:68:36:8d:1e:0a:6e: 89:a4:e0:0b:18:c8:2c:60:eb:9d:6d:04:4d:34:f7: cb:79:a8:8b:21:89:61:99:21:0a:93:a3:a7:37:db: 5b:c5:36:25:f8:6e:1e:1e:8c:1f:45:b0:39:9f:ed: 82:83:ab:b9:2e:27:aa:92:03:12:4a:d8:b7:79:49: 34:a2:4b:54:38:2e:0d:d8:6f:4a:ec:8a:57:55:9b: 30:dd:7b:95:aa:23:76:24:a0:8c:8a:2e:2f:f5:6f: 5d:15:d9:ee:7c:b6:82:ce:81:86:50:c0:11:99:0d: c0:35:ff:7b:ef:97:65:81:0b:0a:6e:eb:f5:94:2e: c1:3e:4e:7a:67:03:57:9e:0b:61:38:13:e8:d3:5d: 49:d8:d7:d0:b1:91:47:d5:fa:58:a4:51:42:7a:c0: 83:02:2c:f0:5f:e6:22:6b:29:af:94:72:b2:ed:c6: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:5C:61:20:55:7B:43:71:A4:93:2A:69:88:51:F4:4A:CD:C2:D7 X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:2a:d2:44:ec:f5:7e:c5:3f:2f:bc:c3:f2:74:2a:41:8a:5c: f7:bf:ac:4b:4f:08:53:6a:32:18:f8:87:5b:68:a2:83:ae:65: 66:5e:f6:52:4e:6b:92:ef:ac:fe:23:bc:3c:87:9b:ba:5a:11: a6:4f:62:98:be:12:7d:3b:56:7a:48:fe:79:2e:0e:ab:d8:17: 26:bc:aa:9d:1e:37:cd:d5:93:f3:bd:a8:4c:77:4e:c3:f8:a1: b3:51:ac:32:c3:23:7d:ea:97:d6:c9:4c:05:a8:a8:08:19:f5: 70:35:e9:1b:de:ed:56:2a:f8:56:fc:d5:0e:6a:ad:54:5d:c5: 65:c0:9d:e2:d7:a3:06:c7:0a:9c:8d:5b:16:26:41:a2:fc:b5: 09:6e:f1:2d:2d:44:e4:1e:6a:7f:85:f4:0b:e8:9e:fa:f7:df: e0:88:25:4c:b1:c9:5a:31:5a:2c:b0:ef:fb:e7:18:1b:0e:f0: b6:b7:04:7e:51:09:f5:98:16:0e:b0:01:75:e5:9a:55:2a:d5: 6b:e6:0c:f4:4a:6c:25:43:52:88:55:66:04:30:ee:6b:e5:60: cb:46:b7:3a:3d:f7:b0:05:05:88:5a:83:27:74:da:8a:ea:ad: 5b:d3:9d:23:66:48:0e:b3:bb:64:3b:56:39:9d:ed:98:51:8c: 25:1b:49:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjUwNTMxMDQ0MjQ4WhcNMjUwNjA3MDQ0MjQ4WjAYMRYwFAYD VQQDEw02ODNhODhjOC1kZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHIrXFqGERZ1bDzaC/0JLepyq0f9xmJ4fnB3R9uMVcxJYj2/J0NtOubsV1Pp DvuJOil3XhCznU4nBHAxgVMBkYqexiWuUeX+bLIB3lzcw+pjgX9oNo0eCm6JpOAL GMgsYOudbQRNNPfLeaiLIYlhmSEKk6OnN9tbxTYl+G4eHowfRbA5n+2Cg6u5Lieq kgMSSti3eUk0oktUOC4N2G9K7IpXVZsw3XuVqiN2JKCMii4v9W9dFdnufLaCzoGG UMARmQ3ANf9775dlgQsKbuv1lC7BPk56ZwNXngthOBPo011J2NfQsZFH1fpYpFFC esCDAizwX+YiaymvlHKy7cYgfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM20XGEg VXtDcaSTKmmIUfRKzcLXMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVKtJE7PV+xT8vvMPydCpBilz3v6xLTwhTajIY+IdbaKKDrmVmXvZS TmuS76z+I7w8h5u6WhGmT2KYvhJ9O1Z6SP55Lg6r2BcmvKqdHjfN1ZPzvahMd07D +KGzUawywyN96pfWyUwFqKgIGfVwNekb3u1WKvhW/NUOaq1UXcVlwJ3i16MGxwqc jVsWJkGi/LUJbvEtLUTkHmp/hfQL6J7699/giCVMsclaMVossO/75xgbDvC2twR+ UQn1mBYOsAF15ZpVKtVr5gz0SmwlQ1KIVWYEMO5r5WDLRrc6PfewBQWIWoMndNqK 6q1b050jZkgOs7tkO1Y5ne2YUYwlG0nk -----END CERTIFICATE-----Generated at Sat May 31 17:46:32 2025 by rpki-client