$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: M3h5ET7DhrocV+5E8iKl/sYK8IPVR2/06EPUk9dcKP8= Subject key identifier: 2B:10:D7:40:9E:E0:14:3A:0B:76:B1:95:FB:5A:00:F6:1B:44:8A:25 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 099C Signing time: Fri 30 May 2025 20:18:09 +0000 Manifest this update: Fri 30 May 2025 20:18:08 +0000 Manifest next update: Fri 06 Jun 2025 20:18:08 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: HeJDLBUCfN6wlfm3n6roxX6LHFKI8I819c8YmzoZ/3g=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2484 (0x9b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: May 30 20:18:08 2025 GMT Not After : Jun 6 20:18:08 2025 GMT Subject: CN=683a1280-163b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:20:f6:c7:ae:5b:ff:cf:9c:c3:cf:bf:42: 80:f9:b1:91:4a:9a:5c:06:bd:02:70:ad:ce:d3:95: 6c:23:06:d1:6b:ba:79:49:d3:fe:24:c6:d3:d4:f3: 90:47:b2:b8:72:2e:ea:7a:9a:2d:8b:3c:c6:b2:74: 32:25:37:2a:51:c8:0a:07:d0:7a:2a:82:fc:b3:a1: 79:1c:44:b0:51:a9:17:dc:57:f9:f7:73:02:51:68: 80:d6:1e:df:79:cb:b1:ef:59:c7:37:98:3f:41:f5: 29:26:cb:c6:04:ed:89:6f:91:f7:0c:9d:7c:4f:74: 35:b9:a3:38:63:37:fc:c9:f1:8d:f4:a2:69:c9:fd: ca:35:b8:82:f2:7c:19:cf:82:3a:f8:d3:ab:40:a4: 4c:f5:30:e3:4c:3e:c7:64:fb:20:3e:5f:5b:a2:55: e0:44:9b:ed:5d:c5:ef:19:53:d9:38:6e:ea:ae:16: 34:51:a2:3c:5b:bd:94:f1:fc:3d:9a:fa:c9:94:1d: a0:64:da:82:e0:2d:2a:9b:62:f7:29:74:ab:c7:e7: 50:1d:21:3c:f5:e0:ce:e4:1a:ba:e8:12:e7:71:5d: 8e:0c:d9:91:fc:92:09:ef:56:25:08:3e:92:a0:64: b6:f2:93:e4:e1:29:64:7f:5d:f1:c4:b8:2d:e8:84: 96:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:D7:40:9E:E0:14:3A:0B:76:B1:95:FB:5A:00:F6:1B:44:8A:25 X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:cc:b8:64:a5:52:f2:44:16:c6:ee:ff:2e:62:55:0f:b9:d7: 36:de:e9:6d:3b:13:c2:57:2c:e4:43:9a:df:36:d1:fe:4e:47: 2b:4b:80:55:d2:6c:0d:9d:b4:5c:b7:58:eb:5f:5b:4e:56:c9: bf:9c:f3:0a:bc:7f:e0:78:4c:8f:21:00:7d:ca:e6:ce:6b:ae: e0:da:70:cf:28:6d:b5:b7:77:20:9e:45:bb:e4:d3:94:da:3c: 8c:a1:0a:16:8f:38:9a:5e:e0:98:1a:cf:cc:47:14:1e:c6:b9: 2a:26:df:26:e7:2f:83:7d:34:65:fd:9c:12:94:52:9b:1c:26: 3c:13:bf:1b:57:5c:89:73:6a:9e:93:df:3f:9b:2a:16:60:c4: a3:b5:78:93:8d:35:0a:5d:a7:df:c6:57:91:36:b6:aa:35:ac: 8d:90:b8:86:f5:14:cc:6d:d7:a6:b6:3a:a5:32:09:1a:03:b0: 9c:a6:0e:39:cd:db:bf:06:fc:56:b1:74:8c:6b:27:48:cf:74: 36:f5:92:c3:03:61:71:84:ec:b6:37:21:cf:5e:79:84:99:d4: ea:8d:57:00:31:5e:b2:0c:d1:95:eb:1a:4d:b7:78:cd:2e:90: 12:02:b7:73:86:e4:35:08:3b:f1:e8:2c:3c:84:03:46:6b:67: 7a:f0:8d:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwNTMwMjAxODA4WhcNMjUwNjA2MjAxODA4WjAYMRYwFAYD VQQDEw02ODNhMTI4MC0xNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIAg9seuW//PnMPPv0KA+bGRSppcBr0CcK3O05VsIwbRa7p5SdP+JMbT1POQ R7K4ci7qepotizzGsnQyJTcqUcgKB9B6KoL8s6F5HESwUakX3Ff593MCUWiA1h7f ecux71nHN5g/QfUpJsvGBO2Jb5H3DJ18T3Q1uaM4Yzf8yfGN9KJpyf3KNbiC8nwZ z4I6+NOrQKRM9TDjTD7HZPsgPl9bolXgRJvtXcXvGVPZOG7qrhY0UaI8W72U8fw9 mvrJlB2gZNqC4C0qm2L3KXSrx+dQHSE89eDO5Bq66BLncV2ODNmR/JIJ71YlCD6S oGS28pPk4Slkf13xxLgt6ISWCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsQ10Ce 4BQ6C3axlftaAPYbRIolMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5zLhkpVLyRBbG7v8uYlUPudc23ultOxPCVyzkQ5rfNtH+TkcrS4BV 0mwNnbRct1jrX1tOVsm/nPMKvH/geEyPIQB9yubOa67g2nDPKG21t3cgnkW75NOU 2jyMoQoWjziaXuCYGs/MRxQexrkqJt8m5y+DfTRl/ZwSlFKbHCY8E78bV1yJc2qe k98/myoWYMSjtXiTjTUKXaffxleRNraqNayNkLiG9RTMbdemtjqlMgkaA7Ccpg45 zdu/BvxWsXSMaydIz3Q29ZLDA2FxhOy2NyHPXnmEmdTqjVcAMV6yDNGV6xpNt3jN LpASArdzhuQ1CDvx6Cw8hANGa2d68I0M -----END CERTIFICATE-----Generated at Sat May 31 17:34:20 2025 by rpki-client