$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json) Hash identifier: klfjNWGhrYLoRIUIzwUtjEvvprxMnB7Z3RokxOnnZ6A= Subject key identifier: E5:96:AB:53:22:3E:4C:9A:41:E0:F3:4A:2B:B7:80:6F:B8:86:30:69 Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft Manifest number: 94 Signing time: Thu 05 Jun 2025 05:45:44 +0000 Manifest this update: Thu 05 Jun 2025 05:45:43 +0000 Manifest next update: Thu 12 Jun 2025 05:45:43 +0000 Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: dpTwHtm+MRV6gE/eNbKgAMMNkGqx5c+5AMg3O8gFarM=) 2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: Jun 5 05:45:43 2025 GMT Not After : Jun 12 05:45:43 2025 GMT Subject: CN=68412f08-646b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:37:1e:6c:53:ed:89:9d:2b:ec:a0:41:95: ce:0c:d5:09:bf:42:14:fb:5f:7e:6f:fd:65:a6:d9: c4:30:d4:e1:89:25:7f:40:8e:8d:ab:ed:d3:b9:16: ed:35:74:c9:40:6a:e2:e4:91:24:4e:3c:0a:a6:8e: ad:f0:7c:79:4d:0c:24:ea:b1:b4:16:6a:f6:a2:c0: 02:33:42:4f:a1:8a:e2:cb:fd:a2:10:d2:bb:01:93: d4:8b:25:57:8b:36:ab:be:d8:3f:44:4e:16:49:ed: d5:65:de:b4:53:b6:b2:c3:dc:48:02:73:15:be:5e: bd:1f:e5:b6:d3:a9:a5:ab:30:57:63:4b:5b:97:ed: 71:b6:51:5a:6a:81:e4:3d:b6:4c:87:c7:66:3e:a0: c6:c4:42:93:7f:f8:97:c7:ac:22:ed:f2:f6:12:8d: 4d:99:99:d4:b7:cc:cd:2d:4d:99:77:80:62:52:bf: 1e:43:58:d1:e3:61:e0:01:b3:c1:69:52:90:e0:d6: f4:2f:36:3d:42:e4:93:d7:d1:1d:21:a6:ee:8a:f6: ec:31:13:0f:db:fc:43:e4:b2:cd:3c:78:05:60:3b: b1:cc:12:d3:bd:b2:76:80:8d:24:f9:8a:5c:b0:8b: 03:b1:bd:08:f5:4f:74:f7:6d:40:bd:ac:9c:6f:03: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:AB:53:22:3E:4C:9A:41:E0:F3:4A:2B:B7:80:6F:B8:86:30:69 X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:41:8f:3f:c7:26:42:84:6b:85:f1:e9:12:1a:f9:35:b9:9e: bc:3e:3d:c1:22:ba:8d:22:d0:8a:61:17:84:25:07:95:d8:02: 4c:71:3b:72:9a:0b:de:13:91:61:80:59:7f:d3:74:28:a9:d8: 71:2d:89:10:1f:ab:3c:25:62:fd:b6:25:a5:83:ec:f3:95:71: 0b:b9:67:66:24:ef:11:d3:c3:66:2d:6c:17:a1:7d:be:8e:78: 48:45:5d:b4:85:55:38:4f:7a:20:57:52:94:64:b2:03:4c:3b: 7b:bb:24:23:d3:3c:2a:52:a8:f1:d2:d1:52:d8:9b:24:d6:4e: 08:55:a0:95:b9:ea:7c:fc:04:2c:9a:af:fe:18:84:a7:34:83: 72:d2:7c:3e:59:d4:34:47:66:af:6c:2e:89:a4:ab:c8:54:c8: 59:f8:4b:5f:76:04:13:89:a6:16:51:40:79:7c:62:6b:50:68: 02:25:c5:62:ef:8f:fb:d5:c4:76:bf:54:9f:ae:d3:97:ee:f9: 5d:e4:16:61:fc:27:98:72:3f:ce:71:b5:f5:63:3d:b5:f9:b0: 9a:1e:0f:30:43:d7:19:80:25:9c:d4:04:26:fe:c0:13:67:f8: 3b:58:fa:15:36:1c:45:e1:ef:58:0b:b2:27:08:92:f2:50:5f: a1:b9:8f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEMwREQyQzU1ODU3QTkyRkZFN0NEQ0JBMjk0OTk4M0Q0 OEE0MkI5RDgwHhcNMjUwNjA1MDU0NTQzWhcNMjUwNjEyMDU0NTQzWjAYMRYwFAYD VQQDEw02ODQxMmYwOC02NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2c3HmxT7YmdK+ygQZXODNUJv0IU+19+b/1lptnEMNThiSV/QI6Nq+3TuRbt NXTJQGri5JEkTjwKpo6t8Hx5TQwk6rG0Fmr2osACM0JPoYriy/2iENK7AZPUiyVX izarvtg/RE4WSe3VZd60U7ayw9xIAnMVvl69H+W206mlqzBXY0tbl+1xtlFaaoHk PbZMh8dmPqDGxEKTf/iXx6wi7fL2Eo1NmZnUt8zNLU2Zd4BiUr8eQ1jR42HgAbPB aVKQ4Nb0LzY9QuST19EdIabuivbsMRMP2/xD5LLNPHgFYDuxzBLTvbJ2gI0k+Ypc sIsDsb0I9U90921AvaycbwNTCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWWq1Mi PkyaQeDzSiu3gG+4hjBpMB8GA1UdIwQYMBaAFMDdLFWFepL/583LopSZg9SKQrnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85NDEwNEI0QTVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2X256Y3VpbEptRDFJcEN1 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3VkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85NDEwNEI0QTVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2 X256Y3VpbEptRDFJcEN1ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2QY8/xyZChGuF8ekSGvk1uZ68Pj3BIrqNItCKYReEJQeV2AJMcTty mgveE5FhgFl/03QoqdhxLYkQH6s8JWL9tiWlg+zzlXELuWdmJO8R08NmLWwXoX2+ jnhIRV20hVU4T3ogV1KUZLIDTDt7uyQj0zwqUqjx0tFS2Jsk1k4IVaCVuep8/AQs mq/+GISnNINy0nw+WdQ0R2avbC6JpKvIVMhZ+EtfdgQTiaYWUUB5fGJrUGgCJcVi 74/71cR2v1SfrtOX7vld5BZh/CeYcj/OcbX1Yz21+bCaHg8wQ9cZgCWc1AQm/sAT Z/g7WPoVNhxF4e9YC7InCJLyUF+huY/0 -----END CERTIFICATE-----Generated at Sat Jun 7 07:04:34 2025 by rpki-client