$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: 1+DEEgc1dYpCUb9o3rGcgKHsmTI5WA8U4uA0o9l2Tng= Subject key identifier: 90:47:3D:55:4F:A9:5C:ED:9C:F1:D0:93:03:77:DB:EF:61:58:C5:AF Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 0897 Signing time: Wed 04 Jun 2025 20:30:23 +0000 Manifest this update: Wed 04 Jun 2025 20:30:23 +0000 Manifest next update: Wed 11 Jun 2025 20:30:23 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: kfNO//gOEVyypKvVxzVI98aZ0Y7305+ehveSvlEHn0I=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Jun 4 20:30:23 2025 GMT Not After : Jun 11 20:30:23 2025 GMT Subject: CN=6840acdf-e42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:44:d6:d4:30:0b:ad:0d:a2:16:52:7c:a9: 14:ad:9c:1d:e0:18:ce:f7:4f:d0:23:fd:1a:52:b7: 74:6a:ee:e1:2d:bb:44:a7:6b:cf:2f:bb:c9:83:9a: 15:7a:1d:da:35:ba:e5:41:f7:a4:25:03:e4:0a:f4: 73:63:d2:82:b8:2b:f4:84:8b:87:25:58:16:1d:07: 41:a8:d8:48:9b:e2:c7:e1:0d:cd:f6:e9:e7:3b:5e: ec:ef:fd:ae:38:1e:97:d1:08:22:11:45:8c:56:70: 53:48:3b:ba:9d:72:e8:8c:88:8c:7b:32:2f:1a:92: 15:1e:71:30:a3:11:9d:54:62:33:b8:ec:40:46:f0: c5:86:76:96:68:8e:ee:60:cf:13:09:5f:b1:9d:d5: 12:a7:29:26:8f:fb:ef:e7:28:b9:70:7f:9c:ac:96: ff:86:fe:2c:4c:ad:66:35:ef:57:84:ad:71:e3:b6: 08:63:e8:bb:2f:24:62:68:2b:05:35:f3:8a:f4:0a: 51:97:4e:38:d0:b4:bf:e3:12:76:de:31:4c:3c:59: 4d:a5:e1:ec:23:fc:f1:a5:66:bd:6b:ca:b2:6f:d5: 69:f8:64:ff:fc:51:e2:10:20:c8:6a:a7:53:03:cd: d1:38:ec:4e:cd:bc:83:7b:6a:77:9f:a7:a1:94:b5: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:3D:55:4F:A9:5C:ED:9C:F1:D0:93:03:77:DB:EF:61:58:C5:AF X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:52:d4:4f:88:ed:31:7f:c0:aa:0d:86:b2:a0:35:59:18:93: 3c:ea:0f:74:a2:96:c4:bd:a9:65:92:38:40:2e:97:d1:cf:76: cd:ea:5a:49:14:4b:be:90:a2:9c:c1:c2:54:2a:10:79:21:b0: 80:35:ac:e7:2c:37:1f:42:37:b6:2a:7f:12:66:45:a4:58:2f: 80:99:d7:10:2e:ea:bf:d2:9c:52:de:14:74:c6:1b:3f:d6:0f: d7:10:6c:ef:9f:a2:44:cf:0c:8b:0c:85:df:90:f4:16:c7:bc: f2:af:22:53:32:bf:b7:e4:1e:d7:1c:33:63:e9:15:78:7f:41: ee:ef:1d:06:69:0c:53:13:f6:c1:d3:3b:ec:98:85:fa:45:31: cb:31:27:84:a3:39:d1:0f:b8:0d:8e:2f:98:84:ac:04:0f:13: ce:e6:be:cb:11:70:68:12:c8:20:bb:0e:f7:e5:eb:48:85:85: 3a:53:b4:3d:b2:53:48:d5:c3:2c:c6:4a:e7:85:42:c0:6f:fd: 42:17:bd:b8:f7:f1:be:01:16:a7:9f:68:b8:62:89:d1:88:ef: 99:a1:d4:12:87:e2:da:ae:a4:a7:e9:dd:be:32:c3:db:78:84: 67:af:ea:b3:65:98:b9:58:bd:70:ff:12:b4:f5:b0:63:ae:54: 79:34:18:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwNjA0MjAzMDIzWhcNMjUwNjExMjAzMDIzWjAYMRYwFAYD VQQDEw02ODQwYWNkZi1lNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMZE1tQwC60NohZSfKkUrZwd4BjO90/QI/0aUrd0au7hLbtEp2vPL7vJg5oV eh3aNbrlQfekJQPkCvRzY9KCuCv0hIuHJVgWHQdBqNhIm+LH4Q3N9unnO17s7/2u OB6X0QgiEUWMVnBTSDu6nXLojIiMezIvGpIVHnEwoxGdVGIzuOxARvDFhnaWaI7u YM8TCV+xndUSpykmj/vv5yi5cH+crJb/hv4sTK1mNe9XhK1x47YIY+i7LyRiaCsF NfOK9ApRl0440LS/4xJ23jFMPFlNpeHsI/zxpWa9a8qyb9Vp+GT//FHiECDIaqdT A83ROOxOzbyDe2p3n6ehlLWWmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBHPVVP qVztnPHQkwN32+9hWMWvMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/UtRPiO0xf8CqDYayoDVZGJM86g90opbEvallkjhALpfRz3bN6lpJ FEu+kKKcwcJUKhB5IbCANaznLDcfQje2Kn8SZkWkWC+AmdcQLuq/0pxS3hR0xhs/ 1g/XEGzvn6JEzwyLDIXfkPQWx7zyryJTMr+35B7XHDNj6RV4f0Hu7x0GaQxTE/bB 0zvsmIX6RTHLMSeEoznRD7gNji+YhKwEDxPO5r7LEXBoEsgguw735etIhYU6U7Q9 slNI1cMsxkrnhULAb/1CF7249/G+ARann2i4YonRiO+ZodQSh+LarqSn6d2+MsPb eIRnr+qzZZi5WL1w/xK09bBjrlR5NBjQ -----END CERTIFICATE-----Generated at Thu Jun 5 20:03:29 2025 by rpki-client