$ rpki-client -vvf rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft File: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft (raw, json) Hash identifier: CWmgSt8OHmaXEjn+ImC7R330MTWDgne4RTJ64shjRyU= Subject key identifier: A3:90:5F:CF:4A:5A:47:43:8F:6C:A7:71:0B:47:B6:BA:17:56:EB:45 Authority key identifier: 59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 Certificate issuer: /CN=A91376D4/serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Certificate serial: 06FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft Manifest number: 06F5 Signing time: Mon 30 Jun 2025 22:14:22 +0000 Manifest this update: Mon 30 Jun 2025 22:14:22 +0000 Manifest next update: Mon 07 Jul 2025 22:14:22 +0000 Files and hashes: 1: WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl (hash: 9+T7Qy7m8hCPiSDU+VTSA9khHr2Zp/8gG+cQnJS9mhU=) 2: ACD87DA66C4811EBB9A7CF73C4F9AE02.roa (hash: 4SDVk60SWQl2vTJ1K6rzs+mQCqAItGWRRGu4kfUeRwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1789 (0x6fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376D4, serialNumber=590D2785F306E8914A1DFE9B27D57C6B89FCDA93 Validity Not Before: Jun 30 22:14:22 2025 GMT Not After : Jul 7 22:14:22 2025 GMT Subject: CN=68630c3e-808e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:22:0a:ee:f3:a3:cf:e8:64:23:cb:5e:65: 89:33:7d:31:2f:a8:f3:b2:dc:76:e6:a5:ce:43:71: 4e:67:a3:32:42:28:b9:f0:15:b9:42:01:12:9d:a5: b6:b3:57:f8:5a:9d:b5:10:98:03:eb:78:74:c1:67: 99:7b:a0:e5:65:97:5a:97:df:89:f8:81:32:56:20: 75:a1:38:24:af:2a:99:59:ce:fb:7c:79:cb:d5:da: 0e:57:5c:a1:a4:cd:80:46:ab:db:d7:62:49:a8:8a: 36:c0:01:bf:7c:52:1e:d7:90:81:91:d7:fb:93:b2: c0:69:8b:cd:a0:92:00:95:3c:a2:d9:07:85:5b:d4: ef:8e:bc:54:0c:b8:ae:08:8d:b3:3e:a4:10:17:cf: bd:12:3f:6e:8d:bd:9b:09:aa:b6:bb:d1:59:c7:16: 02:89:ba:39:53:5f:63:85:78:0a:3e:da:26:87:79: 7a:35:f9:f5:0e:80:7f:29:da:93:c7:7f:03:d2:31: 36:51:43:3b:7b:7a:e0:ac:19:29:0c:04:86:ca:22: 68:56:72:da:8c:2b:5c:d4:56:dd:96:de:b1:bb:c0: 57:97:ce:6e:e1:fa:34:7e:b9:0b:99:ae:70:aa:f4: 70:9b:33:ce:2c:d7:4c:96:71:12:8c:09:54:cb:ba: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:90:5F:CF:4A:5A:47:43:8F:6C:A7:71:0B:47:B6:BA:17:56:EB:45 X509v3 Authority Key Identifier: keyid:59:0D:27:85:F3:06:E8:91:4A:1D:FE:9B:27:D5:7C:6B:89:FC:DA:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376D4/8E32683A4F3311EBBF49E357C4F9AE02/WQ0nhfMG6JFKHf6bJ9V8a4n82pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7a:79:f7:61:65:23:bb:15:9a:46:bb:a8:68:ae:a7:4d:26: de:05:01:88:bf:67:9a:6a:ef:a0:ad:12:fb:26:4c:56:5f:15: 23:21:06:59:c6:56:a9:d7:30:58:eb:16:3d:3e:57:3b:62:6a: 21:bf:5d:81:0f:5a:e2:6e:4b:4c:20:82:37:9a:20:fa:b9:d6: c3:41:31:63:7a:e2:b8:86:4e:58:af:72:54:6b:77:fe:d6:e3: e8:8b:16:52:7c:a0:80:44:b0:54:bb:d1:5f:ce:f4:b5:00:f3: 13:22:43:e3:54:29:a5:b0:cf:9b:d2:76:2a:8f:cf:02:fc:b1: f0:c5:cc:77:0a:9e:80:ae:7e:0d:72:c9:93:f3:aa:01:9a:43: 07:a4:62:ff:7b:7d:41:87:e4:9e:92:2d:5c:7e:5a:d4:5b:29: 30:2f:8f:df:31:7d:51:2d:f4:d0:a7:ed:76:9f:25:c2:60:a1: 19:6b:01:c4:98:19:19:9a:59:bd:a0:21:be:c3:36:31:f0:e6: 12:ad:70:c7:5f:a3:24:f1:38:9b:3d:22:6f:01:05:fc:af:c8: 1f:bd:74:c2:0b:8f:ef:66:91:92:f4:9c:47:8f:52:e9:06:f9: 1f:54:6c:47:e7:ca:9e:40:b7:c8:84:56:46:a3:9e:2c:86:ee: 6e:b1:48:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RDQxMTAvBgNVBAUTKDU5MEQyNzg1RjMwNkU4OTE0QTFERkU5QjI3RDU3QzZC ODlGQ0RBOTMwHhcNMjUwNjMwMjIxNDIyWhcNMjUwNzA3MjIxNDIyWjAYMRYwFAYD VQQDEw02ODYzMGMzZS04MDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugkiCu7zo8/oZCPLXmWJM30xL6jzstx25qXOQ3FOZ6MyQii58BW5QgESnaW2 s1f4Wp21EJgD63h0wWeZe6DlZZdal9+J+IEyViB1oTgkryqZWc77fHnL1doOV1yh pM2ARqvb12JJqIo2wAG/fFIe15CBkdf7k7LAaYvNoJIAlTyi2QeFW9TvjrxUDLiu CI2zPqQQF8+9Ej9ujb2bCaq2u9FZxxYCibo5U19jhXgKPtomh3l6Nfn1DoB/KdqT x38D0jE2UUM7e3rgrBkpDASGyiJoVnLajCtc1Fbdlt6xu8BXl85u4fo0frkLma5w qvRwmzPOLNdMlnESjAlUy7qEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOQX89K WkdDj2yncQtHtroXVutFMB8GA1UdIwQYMBaAFFkNJ4XzBuiRSh3+myfVfGuJ/NqT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZENC84RTMyNjgzQTRG MzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZKRktIZjZiSjlWOGE0bjgy cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRMG5oZk1HNkpGS0hmNmJKOVY4YTRuODJwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZENC84RTMyNjgzQTRGMzMxMUVCQkY0OUUzNTdDNEY5QUUwMi9XUTBuaGZNRzZK RktIZjZiSjlWOGE0bjgycE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXenn3YWUjuxWaRruoaK6nTSbeBQGIv2eaau+grRL7JkxWXxUjIQZZ xlap1zBY6xY9Plc7Ymohv12BD1ribktMIII3miD6udbDQTFjeuK4hk5Yr3JUa3f+ 1uPoixZSfKCARLBUu9FfzvS1APMTIkPjVCmlsM+b0nYqj88C/LHwxcx3Cp6Arn4N csmT86oBmkMHpGL/e31Bh+Seki1cflrUWykwL4/fMX1RLfTQp+12nyXCYKEZawHE mBkZmlm9oCG+wzYx8OYSrXDHX6Mk8TibPSJvAQX8r8gfvXTCC4/vZpGS9JxHj1Lp BvkfVGxH58qeQLfIhFZGo54shu5usUhw -----END CERTIFICATE-----Generated at Wed Jul 2 05:36:34 2025 by rpki-client