$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: l/x6qHwfvFrcghC8Zv8OvCUJ858eX6iUjCZUvDMmw1s= Subject key identifier: F6:E9:B9:2F:D0:AF:8B:29:E0:64:8D:ED:58:DA:19:0F:9A:62:E3:1F Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 5B Signing time: Sun 01 Jun 2025 05:49:00 +0000 Manifest this update: Sun 01 Jun 2025 05:49:00 +0000 Manifest next update: Sun 08 Jun 2025 05:49:00 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: F1uLqrDRu22G/XzO+bpG6+eGnbUd9Ua4TUaOh2hxJ3c=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: 6QazPAViDz/vpoTr8YQep/2te+BhGM7kc2XHX85fKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Jun 1 05:49:00 2025 GMT Not After : Jun 8 05:49:00 2025 GMT Subject: CN=683be9cc-85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:57:ec:71:07:cf:11:f6:9f:a2:33:15:13: 40:40:a9:b3:65:b0:43:6a:90:1b:14:ed:27:e4:ee: bd:4d:87:72:2a:61:64:1e:ce:82:62:23:60:37:5e: 8a:be:59:a1:81:5c:44:79:3c:2c:58:8f:40:3b:75: 18:70:1f:99:68:d0:51:d3:75:06:53:fc:fb:e1:41: 7f:72:bb:29:a5:2e:ce:22:40:3b:9f:a5:95:5a:5a: bb:57:85:88:7a:09:5c:6c:af:ec:e0:29:4d:53:41: 3a:ea:90:e9:22:5d:29:4c:30:e7:9c:c7:a9:8d:da: ee:b4:30:d5:aa:c2:e0:a6:a8:74:03:a9:63:05:fd: e3:e2:18:12:24:de:c2:db:03:e4:92:1d:6e:1b:6d: fd:00:8b:ea:3a:a6:39:7b:32:e9:c8:c5:38:06:87: 9f:5a:26:76:b4:27:0e:fb:b7:9a:3a:97:36:af:68: 3b:48:13:72:07:95:0b:8f:01:47:f4:ce:fc:16:4a: ac:13:1d:bc:17:e0:37:60:2e:f3:d5:dc:9e:97:84: 7a:55:81:49:53:c2:c8:c3:68:9c:50:75:a9:7c:29: 43:67:ae:a1:1b:60:af:f4:29:4c:e5:78:67:77:c2: 5d:2c:af:2d:39:67:22:46:ad:cf:09:a9:d6:fc:b1: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E9:B9:2F:D0:AF:8B:29:E0:64:8D:ED:58:DA:19:0F:9A:62:E3:1F X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:88:be:55:4a:fb:81:6b:ba:2c:e5:fb:31:7c:d2:0e:f4:ae: ca:06:ea:ce:f0:3a:9e:23:84:05:d9:9c:b1:78:a0:8b:f0:55: 8c:f2:98:cd:b8:2f:b0:0f:6e:6a:d7:44:72:47:18:da:18:d3: 14:9e:a5:b5:67:5e:f2:26:b7:be:c3:3c:6c:ff:42:c6:44:5a: f4:5c:61:99:61:29:6a:57:40:a8:2e:46:d2:aa:cd:4c:b1:f6: dd:6f:03:d0:88:d2:cd:69:43:da:14:37:02:ce:21:e4:e1:46: 0a:01:77:7e:02:58:90:d4:01:4d:d0:7b:62:a3:5f:ee:eb:a0: f7:e6:cc:2d:5f:6e:db:43:6f:0d:73:d6:f2:a6:95:a0:d8:08: 99:72:3c:8c:0e:b4:1c:00:79:50:dc:59:b7:f7:ac:82:30:51: 32:39:33:ba:95:84:22:2f:05:c6:fe:cc:35:61:e9:c0:4d:2c: 2a:17:0c:45:2d:64:7a:51:01:cc:9b:15:3c:bb:c4:16:ec:08: ae:a5:07:ec:8a:50:52:1c:96:e8:e1:87:4d:25:6f:2e:60:e6: fa:06:44:e0:04:90:0d:dc:bc:b3:88:10:df:2d:00:17:e9:20: 2e:08:63:5f:40:65:76:e1:1b:6a:32:bf:eb:83:1d:e6:c4:db: c5:e6:b9:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNTA2MDEwNTQ5MDBaFw0yNTA2MDgwNTQ5MDBaMBgxFjAUBgNV BAMTDTY4M2JlOWNjLTg1ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAO1fscQfPEfafojMVE0BAqbNlsENqkBsU7Sfk7r1Nh3IqYWQezoJiI2A3Xoq+ WaGBXER5PCxYj0A7dRhwH5lo0FHTdQZT/PvhQX9yuymlLs4iQDufpZVaWrtXhYh6 CVxsr+zgKU1TQTrqkOkiXSlMMOecx6mN2u60MNWqwuCmqHQDqWMF/ePiGBIk3sLb A+SSHW4bbf0Ai+o6pjl7MunIxTgGh59aJna0Jw77t5o6lzavaDtIE3IHlQuPAUf0 zvwWSqwTHbwX4DdgLvPV3J6XhHpVgUlTwsjDaJxQdal8KUNnrqEbYK/0KUzleGd3 wl0sry05ZyJGrc8Jqdb8sSAtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9um5L9Cv iyngZI3tWNoZD5pi4x8wHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NjE4L0U2RjY2REQyQkVDMzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3Et bGoxaFR2aS1yeXA4bThPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+IvlVK+4Fruizl+zF80g70rsoG6s7wOp4jhAXZnLF4oIvwVYzymM24 L7APbmrXRHJHGNoY0xSepbVnXvImt77DPGz/QsZEWvRcYZlhKWpXQKguRtKqzUyx 9t1vA9CI0s1pQ9oUNwLOIeThRgoBd34CWJDUAU3Qe2KjX+7roPfmzC1fbttDbw1z 1vKmlaDYCJlyPIwOtBwAeVDcWbf3rIIwUTI5M7qVhCIvBcb+zDVh6cBNLCoXDEUt ZHpRAcybFTy7xBbsCK6lB+yKUFIclujhh00lby5g5voGROAEkA3cvLOIEN8tABfp IC4IY19AZXbhG2oyv+uDHebE28XmuV8= -----END CERTIFICATE-----Generated at Mon Jun 2 21:27:33 2025 by rpki-client