$ rpki-client -vvf rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft File: wI7HClt5dC_FX5EFNsoGXGz7fLU.mft (raw, json) Hash identifier: YxFNFROdQ5BMxFbn3MNEVoguWb1QTNbvz5hHwz73wSY= Subject key identifier: 92:2A:0B:93:2D:22:7C:A9:5B:2E:17:4E:D7:2A:66:1B:68:31:10:11 Authority key identifier: C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 Certificate issuer: /CN=A91302B0/serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Certificate serial: 262E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft Manifest number: 2608 Signing time: Fri 30 May 2025 15:52:58 +0000 Manifest this update: Fri 30 May 2025 15:52:57 +0000 Manifest next update: Fri 06 Jun 2025 15:52:57 +0000 Files and hashes: 1: wI7HClt5dC_FX5EFNsoGXGz7fLU.crl (hash: 1XIDuXscpA3JS4Gzu7QZf//b/S5sg/ZlIxSWHh/rJPg=) 2: C1B929B4682B11E9AE87C117C4F9AE02.roa (hash: Bub+bmfe4PnreQ1ZPIst7Ck9C3Kep4qMMCvN4ZXfJXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9774 (0x262e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91302B0, serialNumber=C08EC70A5B79742FC55F910536CA065C6CFB7CB5 Validity Not Before: May 30 15:52:57 2025 GMT Not After : Jun 6 15:52:57 2025 GMT Subject: CN=6839d459-ffea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:55:df:63:d4:af:d4:09:61:89:1c:b4:b2: d1:3b:fe:5b:cd:8c:9c:6b:23:dc:af:18:63:6c:b4: 74:38:f4:51:0a:28:19:49:f9:07:74:e7:be:42:73: c4:da:1e:6c:70:29:e1:8b:9b:a2:80:51:45:6a:73: 33:0b:54:2b:b3:26:cc:40:0b:06:33:68:da:db:a8: 56:93:75:5c:f3:43:6c:a3:03:c1:cc:c5:f6:eb:1c: e6:bd:97:95:fe:a8:80:58:ec:4f:de:12:83:71:06: 43:22:da:bf:34:ca:af:4c:bd:c3:82:9c:9d:5a:22: cd:9f:e0:c1:74:79:d3:69:6a:4e:30:87:54:e3:41: d9:58:1d:9a:24:56:de:57:ea:85:dc:d8:aa:6e:45: ff:ed:0b:fd:69:1d:87:60:cd:44:56:30:48:76:18: 64:37:75:90:99:46:3b:b5:5e:dd:1c:00:8d:56:3e: 34:0c:c3:a5:10:60:05:5c:a2:c1:51:46:13:32:08: 10:e5:0a:b8:d3:92:a6:8e:2a:36:97:5a:f5:17:e4: 48:6c:b5:d5:fb:0a:3e:01:cc:0b:5c:0b:17:2a:22: db:6e:1f:1b:da:1f:c6:f5:41:bc:7b:b8:98:b3:d1: 20:6b:5c:c6:a9:13:83:64:15:c1:56:da:33:fd:9c: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2A:0B:93:2D:22:7C:A9:5B:2E:17:4E:D7:2A:66:1B:68:31:10:11 X509v3 Authority Key Identifier: keyid:C0:8E:C7:0A:5B:79:74:2F:C5:5F:91:05:36:CA:06:5C:6C:FB:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wI7HClt5dC_FX5EFNsoGXGz7fLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91302B0/6572BE94FF9411E4876B945DC4F9AE02/wI7HClt5dC_FX5EFNsoGXGz7fLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a1:af:37:01:0c:71:84:5c:d0:35:b4:78:d2:1e:b2:81:0e: d3:6e:2b:7d:29:a3:bc:ca:ed:a7:d1:75:d3:f6:fd:67:17:05: ee:f9:ea:c9:c7:76:42:79:87:dd:6a:0b:35:1e:17:09:bf:a6: 08:b4:3a:0a:e7:10:bb:00:0f:82:33:1d:f3:78:0e:eb:7a:a1: 0e:4d:b1:4b:ce:61:98:83:2d:ad:bd:65:c0:b8:e4:6a:3d:05: be:29:f0:36:e0:28:ef:1b:3d:b8:54:df:8f:aa:6a:c1:e5:a6: 63:3a:f6:a4:19:b3:af:a6:f7:34:cc:77:3b:4a:e9:29:75:50: 8e:3e:6f:12:57:e4:5a:4d:0b:44:7c:f9:34:42:46:d4:af:9c: fb:64:1c:88:1f:36:60:92:21:78:f9:0b:bc:fa:f3:bf:97:3b: 48:e4:59:bd:ab:f6:fe:b6:c4:75:59:71:87:7c:e2:dc:7c:29: 2a:95:93:ea:d8:85:d7:8c:9d:13:9b:c3:a8:d4:f8:07:94:80: 63:ab:30:3e:21:2d:8a:38:81:71:99:da:11:1b:c9:ca:76:8c: 54:a3:31:0d:aa:06:7b:75:88:fc:d6:50:9c:3b:b7:30:25:db: 2a:cc:dd:b7:5a:03:37:9e:ad:2c:37:1c:a8:4a:0e:56:fe:ca: 8a:20:3d:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAyQjAxMTAvBgNVBAUTKEMwOEVDNzBBNUI3OTc0MkZDNTVGOTEwNTM2Q0EwNjVD NkNGQjdDQjUwHhcNMjUwNTMwMTU1MjU3WhcNMjUwNjA2MTU1MjU3WjAYMRYwFAYD VQQDEw02ODM5ZDQ1OS1mZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sJV32PUr9QJYYkctLLRO/5bzYycayPcrxhjbLR0OPRRCigZSfkHdOe+QnPE 2h5scCnhi5uigFFFanMzC1QrsybMQAsGM2ja26hWk3Vc80NsowPBzMX26xzmvZeV /qiAWOxP3hKDcQZDItq/NMqvTL3DgpydWiLNn+DBdHnTaWpOMIdU40HZWB2aJFbe V+qF3NiqbkX/7Qv9aR2HYM1EVjBIdhhkN3WQmUY7tV7dHACNVj40DMOlEGAFXKLB UUYTMggQ5Qq405Kmjio2l1r1F+RIbLXV+wo+AcwLXAsXKiLbbh8b2h/G9UG8e7iY s9Ega1zGqRODZBXBVtoz/ZxQtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIqC5Mt InypWy4XTtcqZhtoMRARMB8GA1UdIwQYMBaAFMCOxwpbeXQvxV+RBTbKBlxs+3y1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDJCMC82NTcyQkU5NEZG OTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRDX0ZYNUVGTnNvR1hHejdm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dJN0hDbHQ1ZENfRlg1RUZOc29HWEd6N2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDJCMC82NTcyQkU5NEZGOTQxMUU0ODc2Qjk0NURDNEY5QUUwMi93STdIQ2x0NWRD X0ZYNUVGTnNvR1hHejdmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuoa83AQxxhFzQNbR40h6ygQ7Tbit9KaO8yu2n0XXT9v1nFwXu+erJ x3ZCeYfdags1HhcJv6YItDoK5xC7AA+CMx3zeA7reqEOTbFLzmGYgy2tvWXAuORq PQW+KfA24CjvGz24VN+PqmrB5aZjOvakGbOvpvc0zHc7SukpdVCOPm8SV+RaTQtE fPk0QkbUr5z7ZByIHzZgkiF4+Qu8+vO/lztI5Fm9q/b+tsR1WXGHfOLcfCkqlZPq 2IXXjJ0Tm8Oo1PgHlIBjqzA+IS2KOIFxmdoRG8nKdoxUozENqgZ7dYj81lCcO7cw JdsqzN23WgM3nq0sNxyoSg5W/sqKID13 -----END CERTIFICATE-----Generated at Sat May 31 14:56:23 2025 by rpki-client