$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: 88fSDdViYBrmMTprZaa8jBTITL5dfyqd3gw253H1Z/0= Subject key identifier: 51:68:D8:BE:7B:6F:27:A1:98:DC:FE:63:FC:70:B9:BE:59:3E:E2:08 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1B6D Signing time: Fri 30 May 2025 16:46:54 +0000 Manifest this update: Fri 30 May 2025 16:46:53 +0000 Manifest next update: Fri 06 Jun 2025 16:46:53 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: vOIvJ3yu23dVETusLMvG2ZjKep5euN/Llg+pQ+xmYvo=) 2: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: eXJjjkwH5jRXforBrF78HYiKBo92Atf+IpNaNde3A4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: May 30 16:46:53 2025 GMT Not After : Jun 6 16:46:53 2025 GMT Subject: CN=6839e0fd-2839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:32:42:f7:fc:39:82:0b:7b:80:b4:b7:a2: 1a:b9:1d:90:ce:50:0e:c1:31:6d:10:70:64:6b:2b: 36:03:b1:6c:12:0d:5a:3a:6e:99:1d:38:c0:19:c7: 10:95:68:3c:74:28:60:26:5e:fe:d1:e9:58:0f:a2: 1f:dd:09:e0:92:c0:f1:04:59:0b:a9:d3:19:e8:50: 43:74:0e:e9:f2:1d:35:47:bf:0d:3b:68:29:55:96: 66:40:af:94:53:80:8b:ac:5e:ce:2c:94:9b:67:f8: 4d:66:f7:7c:22:2b:31:da:6b:16:e2:24:aa:51:f6: b0:b0:a2:d3:db:b3:eb:ff:14:d2:a9:a8:77:5a:d9: 16:93:cf:9b:74:ed:1b:25:f0:0d:ae:5b:02:40:ea: 2a:b2:56:e6:24:b4:3f:e8:92:db:27:8f:05:0a:92: 23:d6:8a:e7:fe:5b:4f:79:c9:5c:a7:f3:5a:b0:97: 84:e4:a8:a5:1a:05:58:9e:c0:c0:48:39:c3:f5:d1: f0:9b:a2:3a:7e:71:56:75:5e:91:aa:d1:94:a3:d3: 0f:8b:6c:ae:e0:56:73:d6:1d:35:b7:17:ac:d3:a6: e2:01:1e:f4:ea:b0:96:55:88:d2:11:1c:0e:ec:cd: 75:1d:85:b6:ce:37:3f:56:8f:f0:73:5c:d6:43:a9: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:D8:BE:7B:6F:27:A1:98:DC:FE:63:FC:70:B9:BE:59:3E:E2:08 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e7:a6:a5:d5:fc:78:58:4e:08:82:b3:e2:01:45:69:28:07: cb:57:c4:b5:d6:78:23:03:78:0e:f8:29:62:37:64:bb:7a:1e: 80:09:fa:90:e9:de:f9:f6:11:a4:dc:1f:9f:d6:3c:f5:8e:5d: 61:26:52:67:7d:c7:c8:b4:e4:c4:a3:03:5b:4c:60:2c:58:9e: 7b:85:6a:e1:af:70:76:44:02:ec:f3:77:31:d3:28:6a:ab:73: 32:77:b4:ee:7e:3a:1b:20:d7:f0:16:48:74:5d:93:b1:51:a2: 94:30:f1:4a:15:9d:8a:bc:de:2f:21:98:0e:64:0b:b9:66:1d: d1:cc:b6:e7:ba:b8:2e:28:41:a8:52:d1:7c:ba:31:0b:a8:29: 60:d9:03:9b:57:57:d2:14:47:be:92:0a:80:31:8e:0e:2f:92: bc:63:67:7d:8c:f1:d4:3f:eb:22:4c:4c:27:6d:ba:7c:d1:ce: 77:23:5b:c7:26:6d:fe:69:21:6b:fe:3a:07:74:20:4f:ab:96: 1c:c6:58:37:39:eb:65:d5:21:7e:61:61:b5:76:81:73:56:f1: 77:0f:a9:f0:86:44:51:b3:e4:45:b2:07:d2:53:4e:95:9b:08: 13:7c:2c:9a:0e:47:ae:49:85:04:77:5e:5d:69:68:56:0c:c2: c5:ed:29:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwNTMwMTY0NjUzWhcNMjUwNjA2MTY0NjUzWjAYMRYwFAYD VQQDEw02ODM5ZTBmZC0yODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdIyQvf8OYILe4C0t6IauR2QzlAOwTFtEHBkays2A7FsEg1aOm6ZHTjAGccQ lWg8dChgJl7+0elYD6If3QngksDxBFkLqdMZ6FBDdA7p8h01R78NO2gpVZZmQK+U U4CLrF7OLJSbZ/hNZvd8Iisx2msW4iSqUfawsKLT27Pr/xTSqah3WtkWk8+bdO0b JfANrlsCQOoqslbmJLQ/6JLbJ48FCpIj1orn/ltPeclcp/NasJeE5KilGgVYnsDA SDnD9dHwm6I6fnFWdV6RqtGUo9MPi2yu4FZz1h01txes06biAR706rCWVYjSERwO 7M11HYW2zjc/Vo/wc1zWQ6lDGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFo2L57 byehmNz+Y/xwub5ZPuIIMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV56al1fx4WE4IgrPiAUVpKAfLV8S11ngjA3gO+CliN2S7eh6ACfqQ 6d759hGk3B+f1jz1jl1hJlJnfcfItOTEowNbTGAsWJ57hWrhr3B2RALs83cx0yhq q3Myd7TufjobINfwFkh0XZOxUaKUMPFKFZ2KvN4vIZgOZAu5Zh3RzLbnurguKEGo UtF8ujELqClg2QObV1fSFEe+kgqAMY4OL5K8Y2d9jPHUP+siTEwnbbp80c53I1vH Jm3+aSFr/joHdCBPq5Ycxlg3Oetl1SF+YWG1doFzVvF3D6nwhkRRs+RFsgfSU06V mwgTfCyaDkeuSYUEd15daWhWDMLF7SlS -----END CERTIFICATE-----Generated at Sat May 31 16:47:51 2025 by rpki-client