$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: boRbEFm/YIwSspqCZe+Qyu1KreKjJkP57REQL58AnNo= Subject key identifier: F4:DD:9B:44:09:2C:30:3F:CE:C3:B4:AF:30:89:F5:CC:A7:49:06:F7 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0B1F Signing time: Fri 30 May 2025 19:25:35 +0000 Manifest this update: Fri 30 May 2025 19:25:35 +0000 Manifest next update: Fri 06 Jun 2025 19:25:35 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: 9VHjP52NJd+zVVbjaWFOZWk5X45Nl3rXD38zNwKA9jA=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: May 30 19:25:35 2025 GMT Not After : Jun 6 19:25:35 2025 GMT Subject: CN=683a062f-f9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:19:d5:bd:96:6a:07:01:4f:cc:ad:28:74: ee:6b:1a:e0:d7:ee:ac:0e:35:95:44:c4:45:80:58: df:33:54:91:30:f6:7e:d6:8a:46:86:b3:4f:45:46: c2:a4:8d:9b:a2:8b:33:1f:cb:7d:a0:41:24:9d:21: 66:f6:dc:dd:dd:b6:cc:05:98:64:bc:d8:88:75:b7: 6e:30:20:a6:f5:18:25:3a:0c:86:31:5a:c7:35:8a: 01:69:81:04:45:d8:80:ee:cd:99:7f:7d:b2:ef:0d: 50:bd:86:cd:aa:30:2e:d7:36:fa:2e:86:e0:b2:c1: 35:45:29:9e:bb:43:f0:15:a9:17:5f:be:c6:bd:7d: 64:bd:b7:8b:6e:3c:dd:a9:d0:34:f7:73:3c:d5:e3: 55:04:b4:07:de:3b:58:99:c7:18:ff:31:6a:cc:f3: ca:a7:ee:7f:bd:bd:59:8f:86:d6:05:bf:ee:4c:da: 96:5d:9a:c4:f3:97:6a:0a:dd:b5:17:95:3b:94:88: 33:71:84:b7:3f:8b:c2:89:d3:a9:0b:3b:62:85:ac: 96:01:08:07:b0:84:0c:7b:cc:f5:f8:d6:39:bb:03: d8:29:7a:7c:4c:66:01:1c:68:60:57:8b:c1:2f:ff: ce:5a:b3:6a:41:ed:ac:26:2f:4a:05:5b:cc:36:0a: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DD:9B:44:09:2C:30:3F:CE:C3:B4:AF:30:89:F5:CC:A7:49:06:F7 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:07:9a:61:fc:83:e7:9e:46:6a:61:76:34:48:c3:03:14:67: 4e:4b:b8:8c:44:a5:f9:95:f0:38:0e:81:ed:41:8e:93:c6:b2: 5d:51:b9:8e:c7:6f:18:9a:0a:1c:ef:22:d7:3d:b7:b6:50:67: b1:0f:ad:d6:54:ef:de:6b:2c:d4:1d:ae:eb:86:37:3e:56:31: 7e:de:6f:09:7e:81:c6:ed:20:9a:5f:e2:73:db:4c:fe:77:65: 78:3a:4d:65:70:4e:4d:68:97:23:5c:97:17:b8:e6:35:c2:42: 8c:33:93:c4:b9:3e:3f:75:b6:64:5b:b8:f1:23:68:2f:ce:ec: b2:10:6c:65:82:aa:aa:b9:26:1a:10:6a:42:ba:53:99:a8:e7: f0:29:be:2e:93:92:ef:7b:51:a4:ba:2d:14:e9:3d:60:30:b6: ce:77:f4:3b:1c:89:8f:46:04:aa:4e:3b:8a:9d:b4:92:45:b3: bc:13:5a:0b:ac:74:07:6b:53:61:f7:f9:c2:ee:6b:6b:cb:37: 61:62:f9:8f:6b:db:b6:7e:0d:3d:2c:c0:24:23:39:67:cd:2d: 3a:78:35:eb:be:83:9c:6e:01:44:91:e0:4c:29:58:4e:ec:09: e6:ce:08:fd:12:38:e2:d3:4e:7f:2d:f9:e5:ea:bd:72:6d:3b: 23:24:03:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwNTMwMTkyNTM1WhcNMjUwNjA2MTkyNTM1WjAYMRYwFAYD VQQDEw02ODNhMDYyZi1mOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wYZ1b2WagcBT8ytKHTuaxrg1+6sDjWVRMRFgFjfM1SRMPZ+1opGhrNPRUbC pI2booszH8t9oEEknSFm9tzd3bbMBZhkvNiIdbduMCCm9RglOgyGMVrHNYoBaYEE RdiA7s2Zf32y7w1QvYbNqjAu1zb6LobgssE1RSmeu0PwFakXX77GvX1kvbeLbjzd qdA093M81eNVBLQH3jtYmccY/zFqzPPKp+5/vb1Zj4bWBb/uTNqWXZrE85dqCt21 F5U7lIgzcYS3P4vCidOpCztihayWAQgHsIQMe8z1+NY5uwPYKXp8TGYBHGhgV4vB L//OWrNqQe2sJi9KBVvMNgoMAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTdm0QJ LDA/zsO0rzCJ9cynSQb3MB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTB5ph/IPnnkZqYXY0SMMDFGdOS7iMRKX5lfA4DoHtQY6TxrJdUbmO x28Ymgoc7yLXPbe2UGexD63WVO/eayzUHa7rhjc+VjF+3m8JfoHG7SCaX+Jz20z+ d2V4Ok1lcE5NaJcjXJcXuOY1wkKMM5PEuT4/dbZkW7jxI2gvzuyyEGxlgqqquSYa EGpCulOZqOfwKb4uk5Lve1Gkui0U6T1gMLbOd/Q7HImPRgSqTjuKnbSSRbO8E1oL rHQHa1Nh9/nC7mtryzdhYvmPa9u2fg09LMAkIzlnzS06eDXrvoOcbgFEkeBMKVhO 7Anmzgj9Ejji005/Lfnl6r1ybTsjJAOo -----END CERTIFICATE-----Generated at Sat May 31 17:24:41 2025 by rpki-client