$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft File: 0WtcAvVxqLjfvUc87xSokssNAOE.mft (raw, json) Hash identifier: /QiW4JNyP4ribkchfOfZg0FgiSlEr9TVNoayQQP01ms= Subject key identifier: A7:99:66:D5:79:11:09:BA:87:12:14:67:DA:BC:56:53:B9:42:22:7B Authority key identifier: D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 Certificate issuer: /CN=A91C4102/serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft Manifest number: 11DC Signing time: Fri 30 May 2025 19:52:08 +0000 Manifest this update: Fri 30 May 2025 19:52:08 +0000 Manifest next update: Fri 06 Jun 2025 19:52:07 +0000 Files and hashes: 1: 0WtcAvVxqLjfvUc87xSokssNAOE.crl (hash: Csb+mX6HQEj+U3K8DOC2NQPSO7S4/1SstJXmGP3+yQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4102, serialNumber=D16B5C02F571A8B8DFBD473CEF14A892CB0D00E1 Validity Not Before: May 30 19:52:08 2025 GMT Not After : Jun 6 19:52:07 2025 GMT Subject: CN=683a0c68-4706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:3a:73:83:f3:97:01:19:0f:ea:97:48:2f: bd:ea:6a:8a:a3:de:7c:85:a4:ad:42:eb:b7:38:84: 6e:35:b5:ad:81:80:47:2b:d9:76:33:97:c5:45:1a: 76:7f:85:3c:5a:df:88:42:00:ea:dd:6f:87:fd:3d: 9f:1a:28:be:f9:66:8e:b7:0d:8a:f3:d6:57:9c:6e: ff:93:36:be:a6:30:f0:66:15:b2:bf:23:14:35:e0: d4:ee:ce:8e:46:06:d9:5a:71:c9:65:ca:dd:c6:6e: 23:fc:7c:dc:b7:cb:85:8f:e7:b9:c0:26:a4:b7:63: 9a:9f:3d:bd:5a:47:2d:d4:c1:f3:e4:39:18:af:c9: ba:ba:69:9b:61:7f:18:4a:ff:f3:ae:28:23:e7:b0: 72:09:87:9e:0c:13:8d:f4:31:b0:b2:7a:a6:69:00: c0:11:20:ff:42:dc:f2:60:c9:e9:71:5a:72:db:6a: 3b:ae:26:e8:3b:fa:22:ee:eb:e6:3d:e4:5c:33:d4: 94:5d:9d:aa:0a:d8:29:52:dd:07:50:68:14:03:40: 2f:e9:6f:0a:90:ce:18:9d:44:54:b5:f7:2b:5a:b9: 9c:97:3d:f8:6f:46:c0:7e:2f:6d:57:60:c7:02:22: 7b:fe:f7:3a:ef:36:fc:7d:65:64:3d:30:45:99:29: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:99:66:D5:79:11:09:BA:87:12:14:67:DA:BC:56:53:B9:42:22:7B X509v3 Authority Key Identifier: keyid:D1:6B:5C:02:F5:71:A8:B8:DF:BD:47:3C:EF:14:A8:92:CB:0D:00:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0WtcAvVxqLjfvUc87xSokssNAOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4102/B78AA7F4654D11EA86E5017FC4F9AE02/0WtcAvVxqLjfvUc87xSokssNAOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:44:a4:14:39:8e:6b:52:78:5e:dd:44:e4:c0:16:c8:c0:27: 8f:c5:c1:d9:66:74:17:81:b3:10:b8:ba:95:3e:58:33:63:8e: 12:40:a0:63:56:e3:e3:d8:48:d0:c9:47:8d:2a:c5:5f:32:11: ea:d3:66:f1:d0:30:88:3d:e8:d2:e4:01:07:d6:ec:d3:90:87: 29:02:cb:37:cf:cf:e5:b0:be:e4:99:60:af:3f:47:02:d7:7a: 71:a6:d0:ca:a4:da:62:9d:0a:40:61:6d:e4:af:b4:25:70:53: 9f:2f:0f:7b:95:a7:69:fb:20:ed:a3:50:4a:78:66:ca:7d:cb: 2f:39:03:25:d1:11:a0:54:ea:b6:41:1f:2f:6a:37:5b:b8:07: da:40:e2:5c:f8:66:f5:58:d9:0c:ed:51:fa:f9:b4:7b:5a:10: 05:75:3e:3e:ff:43:75:94:4d:ee:89:05:bf:a2:fe:2e:e2:c6: e4:71:5e:e9:30:fa:26:5d:6c:fa:62:63:69:3c:57:27:e0:19: 43:26:db:62:35:e4:3e:25:e5:44:d7:2e:13:33:bc:3e:df:b7: 2b:0f:62:c1:1c:2a:3b:b7:7d:44:1e:2f:fb:35:12:d8:02:13: cd:dd:0f:77:8e:42:c8:f4:ff:30:00:db:0a:6d:45:99:83:75: ca:1c:01:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQxMDIxMTAvBgNVBAUTKEQxNkI1QzAyRjU3MUE4QjhERkJENDczQ0VGMTRBODky Q0IwRDAwRTEwHhcNMjUwNTMwMTk1MjA4WhcNMjUwNjA2MTk1MjA3WjAYMRYwFAYD VQQDEw02ODNhMGM2OC00NzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yU6c4PzlwEZD+qXSC+96mqKo958haStQuu3OIRuNbWtgYBHK9l2M5fFRRp2 f4U8Wt+IQgDq3W+H/T2fGii++WaOtw2K89ZXnG7/kza+pjDwZhWyvyMUNeDU7s6O RgbZWnHJZcrdxm4j/Hzct8uFj+e5wCakt2Oanz29Wkct1MHz5DkYr8m6ummbYX8Y Sv/zrigj57ByCYeeDBON9DGwsnqmaQDAESD/QtzyYMnpcVpy22o7riboO/oi7uvm PeRcM9SUXZ2qCtgpUt0HUGgUA0Av6W8KkM4YnURUtfcrWrmclz34b0bAfi9tV2DH AiJ7/vc67zb8fWVkPTBFmSmW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeZZtV5 EQm6hxIUZ9q8VlO5QiJ7MB8GA1UdIwQYMBaAFNFrXAL1cai4371HPO8UqJLLDQDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDEwMi9CNzhBQTdGNDY1 NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFMamZ2VWM4N3hTb2tzc05B T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBXdGNBdlZ4cUxqZnZVYzg3eFNva3NzTkFPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDEwMi9CNzhBQTdGNDY1NEQxMUVBODZFNTAxN0ZDNEY5QUUwMi8wV3RjQXZWeHFM amZ2VWM4N3hTb2tzc05BT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpRKQUOY5rUnhe3UTkwBbIwCePxcHZZnQXgbMQuLqVPlgzY44SQKBj VuPj2EjQyUeNKsVfMhHq02bx0DCIPejS5AEH1uzTkIcpAss3z8/lsL7kmWCvP0cC 13pxptDKpNpinQpAYW3kr7QlcFOfLw97ladp+yDto1BKeGbKfcsvOQMl0RGgVOq2 QR8vajdbuAfaQOJc+Gb1WNkM7VH6+bR7WhAFdT4+/0N1lE3uiQW/ov4u4sbkcV7p MPomXWz6YmNpPFcn4BlDJttiNeQ+JeVE1y4TM7w+37crD2LBHCo7t31EHi/7NRLY AhPN3Q93jkLI9P8wANsKbUWZg3XKHAEF -----END CERTIFICATE-----Generated at Sat May 31 17:50:38 2025 by rpki-client