$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: MWQ3V6DbRp0F66GjFNgU2L9ZEnMYMOKZGafDFbApHDM= Subject key identifier: CA:6E:0E:12:9A:C2:A6:42:18:CA:22:B3:49:B4:78:C7:F7:4A:D3:EE Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 0391 Signing time: Sat 31 May 2025 00:59:49 +0000 Manifest this update: Sat 31 May 2025 00:59:49 +0000 Manifest next update: Sat 07 Jun 2025 00:59:49 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: ga3kIxiIGKXoNCNNKBz/hD/HVr0+Lt7wAqy0pAuX08k=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: May 31 00:59:49 2025 GMT Not After : Jun 7 00:59:49 2025 GMT Subject: CN=683a5485-acb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:c0:c3:fe:ff:dc:61:75:c0:2d:d9:b9:da: db:60:ef:3d:be:ac:c2:4b:1e:1a:6d:dc:77:e0:06: 37:bd:a9:61:d9:2b:82:f9:45:7a:32:e4:06:5b:4f: 80:b0:47:39:e8:9a:cf:49:ac:43:54:39:d6:a4:bd: 3a:38:07:c9:45:15:87:f9:fe:70:36:2a:ed:fc:5c: 62:ff:55:25:d1:17:13:14:02:32:63:e3:4d:77:e6: 69:a7:0e:e3:33:f7:30:ce:8e:84:1f:16:d8:1a:38: 6c:c3:ac:d4:a7:fb:4e:88:56:91:48:1e:ac:83:85: 74:0f:20:4e:81:76:59:4b:b7:91:b8:a6:ae:2d:de: 6b:92:d4:4c:d9:78:d8:5a:ff:b9:b4:ad:79:ef:88: 9e:9b:7c:53:e9:f2:e0:61:a8:f5:ec:23:78:5c:65: 2a:38:cc:16:e1:bc:6b:a9:a7:c4:b5:5d:40:56:a1: 99:52:70:0e:22:33:bd:0a:d9:17:03:16:a9:96:d9: 7c:37:58:91:7d:72:8a:eb:58:15:0a:2b:77:44:5a: d4:1f:70:a2:4d:f3:0a:17:31:94:6d:71:c6:4a:ac: f7:3c:7d:95:83:25:82:00:71:ae:69:d0:80:41:d3: 81:3f:7a:49:83:14:24:31:7d:20:3c:f1:3d:39:79: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:0E:12:9A:C2:A6:42:18:CA:22:B3:49:B4:78:C7:F7:4A:D3:EE X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a2:26:76:62:18:58:3e:55:c7:25:53:35:5d:5e:ad:20:60: 30:30:b3:f1:01:ca:f3:a7:68:a9:f6:9c:c1:6b:ea:b1:46:28: 29:5e:b7:d0:66:05:e9:5e:cd:e9:16:ee:c4:b7:38:b0:53:7b: 56:cf:fa:a1:ad:b7:bd:86:7b:8b:8d:6a:bc:0f:4f:2f:22:1c: b4:a4:68:dc:fc:12:59:33:f6:00:36:e0:c7:31:34:55:1b:5a: dd:04:de:b2:cf:2f:37:93:0e:bc:10:8b:6a:91:fc:8c:97:89: 47:58:95:db:49:91:a9:96:05:c7:15:7b:2d:f9:5f:3c:7d:98: 80:5f:13:18:91:ef:13:a1:70:7f:04:2a:28:87:71:67:ee:4a: 65:af:e4:7b:4a:f7:91:da:91:b4:ee:4d:82:1d:3a:6e:bf:76: 9c:04:4c:3f:9f:08:9e:e2:a6:3c:1f:a4:6c:8b:31:64:39:3c: 4a:63:54:cb:fb:58:0d:1e:d2:5c:9c:2f:00:a4:1b:92:ca:52: 84:f3:ab:05:62:32:bc:d9:ad:46:bc:3c:99:4d:26:c0:dd:d0: cc:c9:c3:4b:6c:9e:17:f1:da:b7:c3:93:b1:41:b6:ec:fc:85: 25:31:e1:98:52:73:18:de:c6:7c:63:24:fa:e9:12:fe:5e:cc: b6:c3:8b:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUwNTMxMDA1OTQ5WhcNMjUwNjA3MDA1OTQ5WjAYMRYwFAYD VQQDEw02ODNhNTQ4NS1hY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAvAw/7/3GF1wC3ZudrbYO89vqzCSx4abdx34AY3valh2SuC+UV6MuQGW0+A sEc56JrPSaxDVDnWpL06OAfJRRWH+f5wNirt/Fxi/1Ul0RcTFAIyY+NNd+Zppw7j M/cwzo6EHxbYGjhsw6zUp/tOiFaRSB6sg4V0DyBOgXZZS7eRuKauLd5rktRM2XjY Wv+5tK1574iem3xT6fLgYaj17CN4XGUqOMwW4bxrqafEtV1AVqGZUnAOIjO9CtkX Axapltl8N1iRfXKK61gVCit3RFrUH3CiTfMKFzGUbXHGSqz3PH2VgyWCAHGuadCA QdOBP3pJgxQkMX0gPPE9OXmZAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpuDhKa wqZCGMois0m0eMf3StPuMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXoiZ2YhhYPlXHJVM1XV6tIGAwMLPxAcrzp2ip9pzBa+qxRigpXrfQ ZgXpXs3pFu7EtziwU3tWz/qhrbe9hnuLjWq8D08vIhy0pGjc/BJZM/YANuDHMTRV G1rdBN6yzy83kw68EItqkfyMl4lHWJXbSZGplgXHFXst+V88fZiAXxMYke8ToXB/ BCooh3Fn7kplr+R7SveR2pG07k2CHTpuv3acBEw/nwie4qY8H6RsizFkOTxKY1TL +1gNHtJcnC8ApBuSylKE86sFYjK82a1GvDyZTSbA3dDMycNLbJ4X8dq3w5OxQbbs /IUlMeGYUnMY3sZ8YyT66RL+Xsy2w4ux -----END CERTIFICATE-----Generated at Sat May 31 17:36:01 2025 by rpki-client