$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: AJuKxnI6TUTiEDmVo/5xqeLmmH8gxNJ1glC1rXWW30E= Subject key identifier: 37:3E:27:34:42:5D:6A:90:5D:86:00:CB:29:CB:62:47:2F:D5:66:9F Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C54 Signing time: Fri 30 May 2025 16:22:00 +0000 Manifest this update: Fri 30 May 2025 16:21:59 +0000 Manifest next update: Fri 06 Jun 2025 16:21:59 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: Pr5qK9EOVlK7JEQX+SI2DdPOowwtJqiTlp3RyyxUF3U=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7266 (0x1c62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: May 30 16:21:59 2025 GMT Not After : Jun 6 16:21:59 2025 GMT Subject: CN=6839db27-2b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:fc:92:20:12:a9:40:c4:39:2c:ad:d4:32: c7:03:7f:a3:e7:28:50:cc:37:84:52:e3:2e:70:fc: 65:8c:6e:c1:99:87:53:0e:ee:b4:5a:3a:ac:e0:fd: a7:0c:8c:8a:61:df:56:60:b5:f5:d8:34:ea:3a:26: 85:6b:46:79:57:fc:4d:b4:d1:ed:b1:bd:69:d5:00: b7:9b:a3:99:d9:2f:0b:65:51:0c:67:37:12:4f:9d: 58:a2:fc:b9:7c:b1:71:ee:e6:36:a3:78:8b:e8:52: d2:15:61:c5:85:91:5a:34:84:6c:ff:a7:e7:e2:a0: 93:d1:fd:ca:cc:b5:3c:2c:9e:8d:e1:29:85:20:0d: ac:36:2d:0a:ec:c6:11:04:e2:de:f2:67:f0:80:5e: 18:ff:4b:d9:76:30:26:49:23:34:98:b4:fc:00:08: 3e:eb:e7:69:d2:98:d8:f7:b1:79:8d:36:3b:7e:0e: 22:4a:24:fb:9c:28:fa:92:45:f3:30:6e:de:27:1c: 6a:4e:f7:4f:f0:be:9c:2a:cf:01:17:ad:a1:73:5d: e3:3a:0b:9a:34:11:ef:e0:ee:df:61:89:ab:33:fd: 79:12:8c:de:81:00:2c:a6:08:6e:eb:90:ca:08:42: c9:83:53:c3:b7:84:ac:1e:65:07:d1:29:22:2c:dc: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3E:27:34:42:5D:6A:90:5D:86:00:CB:29:CB:62:47:2F:D5:66:9F X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:12:f4:55:e0:c7:32:35:26:e6:45:dc:e7:27:8f:46:cc:f1: 74:4e:a6:38:6d:e0:f3:28:83:a3:10:40:dc:f2:d1:d7:5f:eb: f5:0d:ce:f7:95:e9:a6:a3:fc:1c:44:e1:58:4b:5a:33:dd:c6: bd:de:b0:ae:79:08:5e:a8:20:22:bb:44:a7:94:e3:89:ef:90: f3:14:d4:c7:9b:82:68:f3:04:cc:fd:e3:e3:37:18:07:cf:db: 5c:60:25:19:dd:3f:49:9f:2b:15:1e:eb:f0:01:1f:84:b2:8b: 5a:5a:07:15:d8:46:40:36:18:59:44:19:35:29:75:64:25:af: 12:5f:11:3e:ff:2b:91:f6:4e:02:2c:79:86:51:70:9c:17:c2: 90:3e:b8:f9:84:aa:91:69:8a:cf:f7:06:7b:ed:f6:ae:ba:43: 9e:c9:9f:f4:d2:11:5b:66:5f:49:f8:0c:44:65:90:43:64:1c: 29:5c:4d:03:c4:e6:f9:9d:ba:a5:18:38:d6:53:12:31:6b:f6: 11:be:ca:04:5f:c1:74:20:bd:56:02:c1:f7:54:56:cc:4d:ca: 88:c8:e0:4f:5c:16:ac:50:21:5e:01:82:8e:85:80:7e:74:a7: 1f:9f:76:a5:97:a6:93:ac:64:de:39:54:0b:54:4a:c6:a1:b1: 22:6a:66:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwNTMwMTYyMTU5WhcNMjUwNjA2MTYyMTU5WjAYMRYwFAYD VQQDEw02ODM5ZGIyNy0yYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mD8kiASqUDEOSyt1DLHA3+j5yhQzDeEUuMucPxljG7BmYdTDu60Wjqs4P2n DIyKYd9WYLX12DTqOiaFa0Z5V/xNtNHtsb1p1QC3m6OZ2S8LZVEMZzcST51Yovy5 fLFx7uY2o3iL6FLSFWHFhZFaNIRs/6fn4qCT0f3KzLU8LJ6N4SmFIA2sNi0K7MYR BOLe8mfwgF4Y/0vZdjAmSSM0mLT8AAg+6+dp0pjY97F5jTY7fg4iSiT7nCj6kkXz MG7eJxxqTvdP8L6cKs8BF62hc13jOguaNBHv4O7fYYmrM/15EozegQAspghu65DK CELJg1PDt4SsHmUH0SkiLNzI8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc+JzRC XWqQXYYAyynLYkcv1WafMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjEvRV4McyNSbmRdznJ49GzPF0TqY4beDzKIOjEEDc8tHXX+v1Dc73 lemmo/wcROFYS1oz3ca93rCueQheqCAiu0SnlOOJ75DzFNTHm4Jo8wTM/ePjNxgH z9tcYCUZ3T9JnysVHuvwAR+EsotaWgcV2EZANhhZRBk1KXVkJa8SXxE+/yuR9k4C LHmGUXCcF8KQPrj5hKqRaYrP9wZ77fauukOeyZ/00hFbZl9J+AxEZZBDZBwpXE0D xOb5nbqlGDjWUxIxa/YRvsoEX8F0IL1WAsH3VFbMTcqIyOBPXBasUCFeAYKOhYB+ dKcfn3all6aTrGTeOVQLVErGobEiambK -----END CERTIFICATE-----Generated at Sat May 31 16:59:24 2025 by rpki-client