$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft File: wuC1g9pA223YMwUcBSRZnhpZAsY.mft (raw, json) Hash identifier: MdVQsK4C8LVEkS+AOe3NhzhUarmRMORNG1vyy1fbbKI= Subject key identifier: 09:76:23:44:9A:30:25:13:71:70:F1:D3:48:11:9E:65:51:B6:15:3E Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft Manifest number: 0844 Signing time: Fri 30 May 2025 21:48:59 +0000 Manifest this update: Fri 30 May 2025 21:48:59 +0000 Manifest next update: Fri 06 Jun 2025 21:48:59 +0000 Files and hashes: 1: wuC1g9pA223YMwUcBSRZnhpZAsY.crl (hash: SS/W+M0c+g5eQDAwwgRXxZT3EqyKp5sgQzhhtvJwaxU=) 2: 68EAE318D09411EA9D19403FC4F9AE02.roa (hash: zFR7H0I05Qw/TO5ZHqVPc5vZPqDppqV5WtkiH3GvXLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6 Validity Not Before: May 30 21:48:59 2025 GMT Not After : Jun 6 21:48:59 2025 GMT Subject: CN=683a27cb-c264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:69:f1:19:6c:8b:f7:b9:f2:04:3c:17:16: c9:34:29:da:3a:a7:cd:56:12:f0:89:5b:8a:9c:93: cf:6f:a4:e1:2a:6b:20:6c:7f:36:03:38:99:4d:95: aa:76:03:ff:59:bc:7b:46:fa:3b:34:79:85:c8:e6: 04:a0:b7:b1:85:be:a0:22:df:8d:1f:f4:94:ed:b7: 68:79:81:aa:df:b1:e1:1c:94:23:fd:e6:d9:c9:5d: 7e:96:0c:fd:c7:8d:e5:c9:d9:d4:dd:fd:c0:9f:4e: 14:82:f7:79:a6:0d:96:3b:78:07:a2:35:46:d0:a1: d0:ce:95:c8:6c:90:76:a0:5e:7d:19:7a:70:64:b1: 0f:c3:d0:64:c1:55:e0:e8:10:63:5c:e8:a8:00:cd: fe:d3:cc:bb:f2:c3:d0:e3:08:ee:cd:67:df:70:d1: cc:b6:96:9a:09:62:6e:01:e9:8d:8c:26:ed:fa:f3: 1c:02:77:5a:d4:9d:ee:22:b0:1c:fc:05:7f:22:82: a0:a4:1c:8a:b1:db:b9:f3:88:f7:06:50:38:4e:d1: 69:9b:62:91:9f:94:f5:7f:07:33:08:b4:16:04:66: d5:7f:bd:7a:4d:ca:dd:1c:53:e4:a6:26:be:85:3e: 28:19:2a:90:71:b5:b7:08:13:ce:8f:61:dd:5d:a1: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:23:44:9A:30:25:13:71:70:F1:D3:48:11:9E:65:51:B6:15:3E X509v3 Authority Key Identifier: keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fc:0d:aa:eb:71:9e:83:e0:3e:32:fe:37:7e:a7:47:8b:7b: cc:ce:f6:3a:fe:2d:aa:8d:6e:1a:35:2c:4b:74:6f:97:84:73: 54:c7:e9:1f:7a:2e:b0:43:3f:98:06:b1:ab:36:30:e8:db:f6: a2:0c:38:f2:94:60:f6:95:71:01:92:d0:8d:a4:e0:e4:3a:59: 12:5d:dc:d8:b8:e8:aa:62:86:cd:76:a4:7d:1e:4c:47:b9:46: 23:a9:23:b1:e5:15:87:78:92:29:98:d0:13:3a:dc:0a:3f:c9: 39:2d:23:c9:61:98:63:4b:82:24:0e:a5:c0:8f:2c:14:dc:6a: c4:7b:6e:53:50:d1:d8:9d:2b:a8:ba:fb:9c:6e:5f:12:1c:6d: 57:60:b4:9a:7a:6d:fb:a6:29:1c:86:e5:6e:1c:86:64:ac:8a: 03:70:50:5c:9f:ab:19:4e:17:e9:9d:01:32:03:a2:8e:05:0d: 19:86:e6:f1:d7:23:9d:ff:d3:23:91:72:14:b8:b3:d6:f0:a3: 7a:3a:19:f2:71:30:46:22:9c:43:ab:d5:ce:8e:de:60:13:a5: a1:45:9f:9c:b9:40:e9:df:95:86:61:91:1f:b2:08:2b:9f:d2: c8:af:27:fc:82:bc:14:45:b5:82:d3:0e:eb:dc:af:91:04:48: 02:ec:f8:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NERDMxMTAvBgNVBAUTKEMyRTBCNTgzREE0MERCNkREODMzMDUxQzA1MjQ1OTlF MUE1OTAyQzYwHhcNMjUwNTMwMjE0ODU5WhcNMjUwNjA2MjE0ODU5WjAYMRYwFAYD VQQDEw02ODNhMjdjYi1jMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aVp8Rlsi/e58gQ8FxbJNCnaOqfNVhLwiVuKnJPPb6ThKmsgbH82AziZTZWq dgP/Wbx7Rvo7NHmFyOYEoLexhb6gIt+NH/SU7bdoeYGq37HhHJQj/ebZyV1+lgz9 x43lydnU3f3An04Ugvd5pg2WO3gHojVG0KHQzpXIbJB2oF59GXpwZLEPw9BkwVXg 6BBjXOioAM3+08y78sPQ4wjuzWffcNHMtpaaCWJuAemNjCbt+vMcAnda1J3uIrAc /AV/IoKgpByKsdu584j3BlA4TtFpm2KRn5T1fwczCLQWBGbVf716TcrdHFPkpia+ hT4oGSqQcbW3CBPOj2HdXaFWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl2I0Sa MCUTcXDx00gRnmVRthU+MB8GA1UdIwQYMBaAFMLgtYPaQNtt2DMFHAUkWZ4aWQLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0REMy8wRDcxNTAzMkQw OTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIyM1lNd1VjQlNSWm5ocFpB c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d1QzFnOXBBMjIzWU13VWNCU1JabmhwWkFzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0REMy8wRDcxNTAzMkQwOTIxMUVBQTU3MTJBM0NDNEY5QUUwMi93dUMxZzlwQTIy M1lNd1VjQlNSWm5ocFpBc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9/A2q63Geg+A+Mv43fqdHi3vMzvY6/i2qjW4aNSxLdG+XhHNUx+kf ei6wQz+YBrGrNjDo2/aiDDjylGD2lXEBktCNpODkOlkSXdzYuOiqYobNdqR9HkxH uUYjqSOx5RWHeJIpmNATOtwKP8k5LSPJYZhjS4IkDqXAjywU3GrEe25TUNHYnSuo uvucbl8SHG1XYLSaem37pikchuVuHIZkrIoDcFBcn6sZThfpnQEyA6KOBQ0Zhubx 1yOd/9MjkXIUuLPW8KN6OhnycTBGIpxDq9XOjt5gE6WhRZ+cuUDp35WGYZEfsggr n9LIryf8grwURbWC0w7r3K+RBEgC7PiZ -----END CERTIFICATE-----Generated at Sat May 31 17:42:40 2025 by rpki-client