$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft File: woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft (raw, json) Hash identifier: IvLPvjYbDb/Ox94S7b3zn+HcgTeI73Q0jLThU0ft0mw= Subject key identifier: 6B:DF:7D:20:49:F0:B8:B5:E3:BE:99:F8:83:BE:06:57:1D:99:8E:10 Authority key identifier: C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D Certificate issuer: /CN=A91C7B68/serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft Manifest number: 09D7 Signing time: Fri 30 May 2025 20:40:10 +0000 Manifest this update: Fri 30 May 2025 20:40:09 +0000 Manifest next update: Fri 06 Jun 2025 20:40:09 +0000 Files and hashes: 1: woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl (hash: ZQOy/vnN3Y39e8bK1ye/bnwboVWkbEeZoMz7IBMcwko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=C284BA8A88A02116BEE43410E039E909E3029D0D Validity Not Before: May 30 20:40:09 2025 GMT Not After : Jun 6 20:40:09 2025 GMT Subject: CN=683a17aa-371e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f6:83:08:ff:2a:2d:05:0b:db:dc:30:39:4a: 38:29:af:28:5d:2d:b3:91:5b:3b:a0:c1:60:3a:dd: 6e:8a:75:0a:4e:d9:a6:e9:fb:eb:d8:60:6b:2c:38: 7d:7a:fb:c6:9f:cd:eb:dc:54:1f:5f:a7:73:28:76: 62:6e:0e:74:72:cb:be:df:da:d4:fd:71:e8:01:10: 35:82:b8:a9:81:8d:4d:1d:f2:2a:b2:b0:63:da:32: 4a:53:3e:ea:13:65:9f:bb:88:ca:42:ea:c9:b1:96: 46:8d:8a:6e:ca:2c:76:5d:2a:c8:69:ec:94:3c:fc: 50:47:81:39:44:e3:48:c0:94:d2:1a:ed:2b:81:3c: ef:33:85:37:7a:e8:17:79:b8:5b:e6:23:01:35:3e: 0d:c0:c0:48:e2:0a:0e:35:c1:ab:bb:42:e6:68:76: 1a:43:b5:62:71:a5:65:ce:47:00:96:32:07:dd:40: 3c:11:d6:bb:5d:34:27:44:44:82:6c:3e:e0:b9:cf: 10:11:96:ac:05:76:a0:3e:f7:2e:81:e3:6f:7e:3a: 25:eb:26:f7:cf:05:54:c3:f0:b7:90:96:1c:cf:d9: 0d:f9:6f:05:4d:eb:1e:a5:a6:25:2b:b1:7f:02:91: d9:9a:6e:4b:39:c7:e3:c5:a6:1c:13:93:7d:67:8f: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DF:7D:20:49:F0:B8:B5:E3:BE:99:F8:83:BE:06:57:1D:99:8E:10 X509v3 Authority Key Identifier: keyid:C2:84:BA:8A:88:A0:21:16:BE:E4:34:10:E0:39:E9:09:E3:02:9D:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woS6ioigIRa-5DQQ4DnpCeMCnQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/woS6ioigIRa-5DQQ4DnpCeMCnQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dd:bf:bd:bb:ad:c7:2b:b9:9a:c2:b1:05:5e:89:42:be:e2: 93:70:4a:0d:b8:a4:f9:d1:b1:50:d3:c9:32:8c:55:00:67:b8: 24:bb:46:18:7c:48:a4:be:69:27:9b:b8:6f:84:a4:dc:27:f0: 57:30:9f:99:09:ed:10:ea:28:5d:4f:58:a3:c5:4f:f8:6b:c1: 31:b5:5c:bc:9e:d2:70:91:b4:a1:0d:0e:56:ea:36:96:7f:62: 77:88:89:d3:dc:f1:d7:b9:95:bf:52:16:60:03:6b:6c:2d:57: 24:ab:56:dd:5f:d5:1b:01:49:cf:d7:53:c9:cd:e7:ff:8d:d5: d0:3e:d8:90:6a:69:11:ca:dc:07:6a:f7:87:72:56:5c:e1:66: 17:32:68:aa:a3:4f:41:30:54:dc:ed:93:f4:62:4c:7b:af:7a: c5:25:36:9a:7e:ef:56:71:3e:52:ff:55:fd:c3:b9:2d:88:a1: 84:39:d2:bb:dd:eb:ff:94:f0:2a:66:c6:e6:64:06:e8:aa:3b: 5e:fe:3b:a1:64:d9:b0:81:8c:c9:3c:a8:c9:7e:8d:b6:90:fb: 3c:1f:06:a1:06:38:e4:f7:30:bb:35:54:1c:6d:52:b8:5b:fb: ab:03:44:28:52:15:2d:d8:a9:e6:cc:63:46:a9:92:04:a0:ac: 28:17:0a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKEMyODRCQThBODhBMDIxMTZCRUU0MzQxMEUwMzlFOTA5 RTMwMjlEMEQwHhcNMjUwNTMwMjA0MDA5WhcNMjUwNjA2MjA0MDA5WjAYMRYwFAYD VQQDEw02ODNhMTdhYS0zNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vaDCP8qLQUL29wwOUo4Ka8oXS2zkVs7oMFgOt1uinUKTtmm6fvr2GBrLDh9 evvGn83r3FQfX6dzKHZibg50csu+39rU/XHoARA1gripgY1NHfIqsrBj2jJKUz7q E2Wfu4jKQurJsZZGjYpuyix2XSrIaeyUPPxQR4E5RONIwJTSGu0rgTzvM4U3eugX ebhb5iMBNT4NwMBI4goONcGru0LmaHYaQ7VicaVlzkcAljIH3UA8Eda7XTQnRESC bD7guc8QEZasBXagPvcugeNvfjol6yb3zwVUw/C3kJYcz9kN+W8FTesepaYlK7F/ ApHZmm5LOcfjxaYcE5N9Z4+lIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvffSBJ 8Li1476Z+IO+BlcdmY4QMB8GA1UdIwQYMBaAFMKEuoqIoCEWvuQ0EOA56QnjAp0N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lSYS01RFFRNERucENlTUNu UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvUzZpb2lnSVJhLTVEUVE0RG5wQ2VNQ25RMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi93b1M2aW9pZ0lS YS01RFFRNERucENlTUNuUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK3b+9u63HK7mawrEFXolCvuKTcEoNuKT50bFQ08kyjFUAZ7gku0YY fEikvmknm7hvhKTcJ/BXMJ+ZCe0Q6ihdT1ijxU/4a8ExtVy8ntJwkbShDQ5W6jaW f2J3iInT3PHXuZW/UhZgA2tsLVckq1bdX9UbAUnP11PJzef/jdXQPtiQamkRytwH aveHclZc4WYXMmiqo09BMFTc7ZP0Ykx7r3rFJTaafu9WcT5S/1X9w7ktiKGEOdK7 3ev/lPAqZsbmZAboqjte/juhZNmwgYzJPKjJfo22kPs8HwahBjjk9zC7NVQcbVK4 W/urA0QoUhUt2KnmzGNGqZIEoKwoFwpq -----END CERTIFICATE-----Generated at Sat May 31 16:43:51 2025 by rpki-client