$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft File: wJ7fW2leBHksNRT0mPS7FEcJbvc.mft (raw, json) Hash identifier: z5sB1WJrEtZ17bdA9PLyd4NGR2G7HyAB8LyqtW/CqlY= Subject key identifier: 3E:ED:FD:DE:C8:C9:0C:65:BC:43:E3:00:48:1D:34:6D:DD:14:95:41 Authority key identifier: C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 Certificate issuer: /CN=A91D8B2B/serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft Manifest number: F1 Signing time: Tue 03 Jun 2025 05:01:20 +0000 Manifest this update: Tue 03 Jun 2025 05:01:20 +0000 Manifest next update: Tue 10 Jun 2025 05:01:20 +0000 Files and hashes: 1: wJ7fW2leBHksNRT0mPS7FEcJbvc.crl (hash: 7WLWtYQxjeurvskR5AQ4WL2cSe/Ikb1yn1sMflnnuhU=) 2: FC0907B8D45711EE93BD8B7CC4F9AE02.roa (hash: 4csKsNHVa4/05cRZpUWAlRIA5HnGFBYyOyZZA1vjUEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B, serialNumber=C09EDF5B695E04792C3514F498F4BB1447096EF7 Validity Not Before: Jun 3 05:01:20 2025 GMT Not After : Jun 10 05:01:20 2025 GMT Subject: CN=683e81a0-d643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:c3:aa:a0:4d:b8:13:8b:18:d6:a7:61:6e: 28:48:52:59:a9:a1:73:c9:3d:6a:55:b1:77:b8:f9: a5:62:5d:b7:b7:b5:22:a1:3b:ed:a9:37:54:98:d8: ee:03:e2:8d:05:72:ee:01:1a:43:47:2b:0d:b9:cb: 59:c1:aa:af:dc:d8:8e:98:4d:0f:c9:74:d5:ba:ff: 06:fc:33:8a:a9:58:39:fa:5e:60:e0:3e:ff:47:9e: 61:29:52:16:3d:ae:e2:65:7b:a9:b5:76:6e:74:13: de:3e:4b:2a:51:9f:d9:84:7a:91:72:19:d9:fe:4e: 62:95:c0:18:10:d2:65:ca:af:58:79:6f:91:7d:0d: 97:56:78:63:06:f9:0f:7f:ca:92:a0:98:74:06:a5: 1f:d4:53:99:42:e2:60:12:4e:8b:59:17:58:3f:db: 80:60:93:af:91:4b:a7:c0:f8:17:3e:1d:16:d5:e6: 3e:fd:14:63:53:bc:ff:0e:ca:05:bd:52:aa:04:64: d6:a5:4c:83:95:ff:2b:04:56:d8:7a:c5:2e:4f:fc: b6:f8:e2:9f:ac:49:f0:17:b2:ec:f2:53:c0:8f:ae: 5e:7e:b8:9d:8d:d4:2e:94:bf:76:ce:1b:1e:72:a2: 3b:f5:6e:f0:f9:a5:c2:c4:40:4c:32:8c:f5:ce:09: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:ED:FD:DE:C8:C9:0C:65:BC:43:E3:00:48:1D:34:6D:DD:14:95:41 X509v3 Authority Key Identifier: keyid:C0:9E:DF:5B:69:5E:04:79:2C:35:14:F4:98:F4:BB:14:47:09:6E:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wJ7fW2leBHksNRT0mPS7FEcJbvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/9B8206D4CF9C11EEAF34465FC4F9AE02/wJ7fW2leBHksNRT0mPS7FEcJbvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:49:30:16:e1:d7:55:2c:7b:c4:19:3a:e5:04:a8:2b:11: 90:d1:7d:ad:85:65:4e:ba:fc:ab:e2:0e:e8:92:c5:f5:f6:93: 62:7e:6c:a2:1f:f2:cd:43:55:47:58:e1:75:0d:c1:c7:37:b0: 9f:af:01:7f:70:98:7c:b5:55:8a:d1:e5:20:2f:8f:b9:55:40: 96:5d:7a:16:60:5f:58:62:6a:23:21:6c:eb:d2:19:65:dd:d4: 7e:d5:97:be:3c:49:47:e9:13:19:c3:58:64:92:22:cf:3d:4d: cd:95:4c:e4:c4:43:ac:73:0a:a4:bd:65:3c:c4:13:9a:cb:b9: 5a:32:d0:9a:88:7a:27:f3:fa:e0:18:32:67:2d:80:08:cd:d0: 27:65:3e:c5:4a:b4:92:4f:de:36:99:fd:21:1c:97:27:67:78: e3:52:8f:c3:ad:0d:ab:23:ef:b6:1b:2e:5c:e6:3a:21:2a:fa: c4:0c:33:24:27:53:30:0f:03:2d:fa:d5:02:b9:13:ec:c3:24: 95:b2:7e:a0:a5:5e:2b:8d:f0:da:d2:77:d9:65:56:81:e7:dd: cb:eb:da:90:21:45:31:1c:22:ff:bb:cd:9f:a2:f4:0c:ce:6d: be:b9:00:7c:e5:f4:59:7c:db:47:2a:44:ec:a8:40:8b:c2:24: 12:05:41:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKEMwOUVERjVCNjk1RTA0NzkyQzM1MTRGNDk4RjRCQjE0 NDcwOTZFRjcwHhcNMjUwNjAzMDUwMTIwWhcNMjUwNjEwMDUwMTIwWjAYMRYwFAYD VQQDEw02ODNlODFhMC1kNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApArDqqBNuBOLGNanYW4oSFJZqaFzyT1qVbF3uPmlYl23t7UioTvtqTdUmNju A+KNBXLuARpDRysNuctZwaqv3NiOmE0PyXTVuv8G/DOKqVg5+l5g4D7/R55hKVIW Pa7iZXuptXZudBPePksqUZ/ZhHqRchnZ/k5ilcAYENJlyq9YeW+RfQ2XVnhjBvkP f8qSoJh0BqUf1FOZQuJgEk6LWRdYP9uAYJOvkUunwPgXPh0W1eY+/RRjU7z/DsoF vVKqBGTWpUyDlf8rBFbYesUuT/y2+OKfrEnwF7Ls8lPAj65efridjdQulL92zhse cqI79W7w+aXCxEBMMoz1zgn/pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7t/d7I yQxlvEPjAEgdNG3dFJVBMB8GA1UdIwQYMBaAFMCe31tpXgR5LDUU9Jj0uxRHCW73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi85QjgyMDZENENG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJIa3NOUlQwbVBTN0ZFY0pi dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dKN2ZXMmxlQkhrc05SVDBtUFM3RkVjSmJ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi85QjgyMDZENENGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi93SjdmVzJsZUJI a3NOUlQwbVBTN0ZFY0pidmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3aEkwFuHXVSx7xBk65QSoKxGQ0X2thWVOuvyr4g7oksX19pNifmyi H/LNQ1VHWOF1DcHHN7CfrwF/cJh8tVWK0eUgL4+5VUCWXXoWYF9YYmojIWzr0hll 3dR+1Ze+PElH6RMZw1hkkiLPPU3NlUzkxEOscwqkvWU8xBOay7laMtCaiHon8/rg GDJnLYAIzdAnZT7FSrSST942mf0hHJcnZ3jjUo/DrQ2rI++2Gy5c5johKvrEDDMk J1MwDwMt+tUCuRPswySVsn6gpV4rjfDa0nfZZVaB593L69qQIUUxHCL/u82fovQM zm2+uQB85fRZfNtHKkTsqECLwiQSBUEh -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:39 2025 by rpki-client