$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json) Hash identifier: 5sZBTVYAzsWZ0gV0mq3zAU3lJLO3IJBAUX5XkBag/nQ= Subject key identifier: BF:7A:50:B3:02:A5:09:8F:E7:60:51:13:96:E3:F3:19:B5:E5:02:8A Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft Manifest number: 08 Signing time: Sat 31 May 2025 07:43:00 +0000 Manifest this update: Sat 31 May 2025 07:42:59 +0000 Manifest next update: Sat 07 Jun 2025 07:42:59 +0000 Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: BIwDwnHcjKIxohc0GpZakFq5OfR45lNwhujeahkb9Cc=) 2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Validity Not Before: May 31 07:42:59 2025 GMT Not After : Jun 7 07:42:59 2025 GMT Subject: CN=683ab303-bd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:91:a0:b0:bc:59:87:53:a8:68:1b:e3:06:88: cf:71:07:1d:ba:b4:2b:8e:bd:c3:fc:24:e8:66:6b: 94:4a:e4:4d:72:fd:1a:da:24:96:a9:32:c9:c0:ec: a8:43:38:62:97:0c:7d:19:16:0c:06:7e:55:b5:23: c9:12:a7:3c:90:b6:e7:31:f0:29:8f:0a:35:2a:65: 5a:1d:d7:74:ec:56:95:6b:d4:51:c8:81:30:31:eb: b1:44:b9:ee:c2:a1:49:69:6f:18:b4:c0:9a:dd:8c: 39:54:d9:e5:ae:cc:9b:19:ee:c3:6d:66:59:65:86: 45:a0:2a:69:7c:1e:de:33:6c:f3:26:a7:ec:12:bc: e1:e8:52:10:6c:25:f3:7f:96:bf:b7:f7:2e:80:5d: ac:45:14:cc:93:a8:c3:23:d8:0f:05:d2:7d:12:6e: f7:48:0e:c9:4d:1e:6c:f3:f0:3b:eb:8c:57:46:da: 38:c2:07:63:1e:25:bc:57:88:05:5f:13:82:9c:34: 68:cb:5f:bb:8c:b5:22:aa:e8:52:1b:6b:c4:fc:89: 1d:39:ea:59:f4:9a:d2:50:32:b0:23:ba:01:48:a3: 81:8c:8a:30:1d:19:fe:eb:27:88:8e:1e:35:5a:a1: c4:9d:45:2b:f0:db:57:7b:50:59:f3:73:eb:6f:d1: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7A:50:B3:02:A5:09:8F:E7:60:51:13:96:E3:F3:19:B5:E5:02:8A X509v3 Authority Key Identifier: keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:11:61:6e:22:8b:36:a4:5f:68:c7:0c:b3:ef:12:c2:fd:ff: b6:18:df:02:bd:21:17:8e:2f:52:5b:5e:08:54:6d:39:a9:27: 19:5c:26:c5:87:6c:77:1c:78:fc:e8:85:3a:a2:81:e2:fe:e5: 17:83:9b:c4:ef:90:93:32:d1:70:dd:39:38:c4:85:fd:6a:19: 35:bf:78:d0:d8:b8:85:68:d8:91:2a:35:3f:a0:82:a3:4e:86: bb:59:7d:72:46:fd:12:97:f2:cf:37:f3:92:c0:f2:18:ed:53: 5a:e3:67:e5:99:71:e1:e9:ca:fb:b9:f2:4d:d0:b7:72:67:1d: f1:1f:d6:79:8d:b4:96:ab:70:37:1e:31:43:06:31:df:4d:7e: 0b:98:9a:c4:58:8b:2f:28:fb:dd:a6:9d:b5:84:2f:4f:d9:9e: 20:f5:f5:98:76:8f:ad:1f:5e:9c:2e:41:8d:e6:3a:28:4b:a1: 99:fe:6e:bf:c7:7e:e7:18:0a:27:44:53:1d:58:cd:26:1f:6b: 92:b1:ba:2c:80:2e:57:32:92:0d:99:0e:95:97:e8:c0:78:0a: bd:72:15:31:65:0f:87:2b:d4:a9:b2:64:0f:c0:54:c2:01:88: 33:c1:10:0a:05:bc:22:56:90:7f:ea:f2:44:ee:d2:88:40:0b: d8:f1:ca:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC NzQwRDJDRDAeFw0yNTA1MzEwNzQyNTlaFw0yNTA2MDcwNzQyNTlaMBgxFjAUBgNV BAMTDTY4M2FiMzAzLWJkM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwkaCwvFmHU6hoG+MGiM9xBx26tCuOvcP8JOhma5RK5E1y/RraJJapMsnA7KhD OGKXDH0ZFgwGflW1I8kSpzyQtucx8CmPCjUqZVod13TsVpVr1FHIgTAx67FEue7C oUlpbxi0wJrdjDlU2eWuzJsZ7sNtZlllhkWgKml8Ht4zbPMmp+wSvOHoUhBsJfN/ lr+39y6AXaxFFMyTqMMj2A8F0n0SbvdIDslNHmzz8DvrjFdG2jjCB2MeJbxXiAVf E4KcNGjLX7uMtSKq6FIba8T8iR056ln0mtJQMrAjugFIo4GMijAdGf7rJ4iOHjVa ocSdRSvw21d7UFnzc+tv0dvPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv3pQswKl CY/nYFETluPzGbXlAoowHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2 ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEERYW4iizakX2jHDLPvEsL9/7YY3wK9IReOL1JbXghUbTmpJxlcJsWH bHccePzohTqigeL+5ReDm8TvkJMy0XDdOTjEhf1qGTW/eNDYuIVo2JEqNT+ggqNO hrtZfXJG/RKX8s8385LA8hjtU1rjZ+WZceHpyvu58k3Qt3JnHfEf1nmNtJarcDce MUMGMd9NfguYmsRYiy8o+92mnbWEL0/ZniD19Zh2j60fXpwuQY3mOihLoZn+br/H fucYCidEUx1YzSYfa5KxuiyALlcykg2ZDpWX6MB4Cr1yFTFlD4cr1KmyZA/AVMIB iDPBEAoFvCJWkH/q8kTu0ohAC9jxygM= -----END CERTIFICATE-----Generated at Sat May 31 16:31:26 2025 by rpki-client