$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: QcJPgvukBviU55a757VgqUhrsBGUS98h7JbZ4FQh52g= Subject key identifier: 3B:1F:85:67:FD:41:E0:0C:68:E7:15:46:D9:6F:C4:2B:C8:23:BA:B0 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 0844 Signing time: Fri 30 May 2025 20:58:51 +0000 Manifest this update: Fri 30 May 2025 20:58:51 +0000 Manifest next update: Fri 06 Jun 2025 20:58:51 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: ao9EP1oyPOES2ywinnS2c6seRxAI5pRxs/j6q/fXxMs=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: May 30 20:58:51 2025 GMT Not After : Jun 6 20:58:51 2025 GMT Subject: CN=683a1c0b-42e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:a8:43:41:0c:65:72:09:7b:85:35:ba:d4: cb:1a:45:a7:f2:10:6e:6f:ed:58:e7:a7:d3:e3:83: 87:b9:cd:20:98:9e:ce:40:d7:da:16:72:75:10:b3: 4b:22:b0:40:c9:d9:c7:33:59:5e:c1:29:7d:dd:73: 46:41:f9:9b:53:3c:07:87:6d:7d:2e:29:80:d7:c0: 4d:47:78:6b:77:ee:3f:8c:ec:cb:e6:fe:16:ac:35: 4f:9b:8d:47:9b:c7:ae:4f:c8:51:1b:45:df:77:58: 72:cb:f7:7a:2a:52:f5:d0:ee:8b:01:a6:8b:77:9c: 38:aa:aa:b9:e1:11:10:9d:5a:86:5d:63:44:0d:86: d2:d3:9a:6c:a4:28:ee:ba:a3:7c:c7:b1:fd:06:47: c2:40:1e:2f:4d:fb:76:c1:03:3b:af:40:5c:2c:5a: 89:2d:da:04:ca:d8:9e:06:92:c3:84:98:d4:0a:06: e5:e7:32:ed:33:b6:c4:dc:c9:a9:a4:10:4d:13:a0: c6:36:f8:c1:ad:fe:84:c2:a2:ca:1c:4b:ce:e3:82: 31:7e:a4:97:5e:ba:03:75:9d:15:0e:20:0f:f3:ca: c5:05:14:b7:35:96:60:e0:2e:83:16:fd:ed:dd:e2: 44:31:3e:c8:4a:1a:b4:2d:27:7e:9d:3c:9f:a3:5e: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1F:85:67:FD:41:E0:0C:68:E7:15:46:D9:6F:C4:2B:C8:23:BA:B0 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:69:ca:05:4b:d4:e2:7d:08:90:df:81:d0:4a:47:b7:88:cf: 78:5e:b7:a1:46:1c:85:33:79:d6:ed:14:f9:fb:33:5a:47:73: 39:ee:ae:d3:16:49:1b:72:fa:22:83:8d:7b:12:34:84:1b:14: 19:ef:44:bd:c8:1c:e3:fd:e3:6c:54:c8:71:9f:c2:65:4f:c7: 94:ca:b6:f1:84:92:3f:a4:10:46:4e:42:3d:bf:2b:c5:63:c1: 49:ef:b5:60:12:36:77:74:bc:9c:25:50:dd:60:0a:6c:d1:8b: 64:f8:d2:6d:1c:5b:3c:be:c7:cb:55:52:09:1f:d8:cb:41:d2: d2:c4:c2:fc:27:9f:5e:be:f4:57:d5:08:30:27:71:a8:55:2e: 75:e9:f9:95:65:14:40:6f:06:42:1b:16:c5:2e:68:b3:ce:9a: 25:bf:9f:ce:aa:4e:12:a1:50:63:6f:d3:fb:91:4a:9b:8b:70: 96:ec:0a:33:a6:08:ec:b9:17:59:42:05:a8:d7:77:29:18:2b: 56:f3:f2:4a:ae:c8:2e:32:f0:61:25:f6:8c:d6:28:e9:30:d3: 90:d5:52:b8:16:a9:64:4f:cb:ae:58:bf:5a:da:f7:f2:dd:ae: ab:47:7a:7d:ff:21:78:0f:65:8f:9e:00:7b:70:ab:79:1e:bd: c4:30:6e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwNTMwMjA1ODUxWhcNMjUwNjA2MjA1ODUxWjAYMRYwFAYD VQQDEw02ODNhMWMwYi00MmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLGoQ0EMZXIJe4U1utTLGkWn8hBub+1Y56fT44OHuc0gmJ7OQNfaFnJ1ELNL IrBAydnHM1lewSl93XNGQfmbUzwHh219LimA18BNR3hrd+4/jOzL5v4WrDVPm41H m8euT8hRG0Xfd1hyy/d6KlL10O6LAaaLd5w4qqq54REQnVqGXWNEDYbS05pspCju uqN8x7H9BkfCQB4vTft2wQM7r0BcLFqJLdoEytieBpLDhJjUCgbl5zLtM7bE3Mmp pBBNE6DGNvjBrf6EwqLKHEvO44IxfqSXXroDdZ0VDiAP88rFBRS3NZZg4C6DFv3t 3eJEMT7IShq0LSd+nTyfo15kHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsfhWf9 QeAMaOcVRtlvxCvII7qwMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRacoFS9TifQiQ34HQSke3iM94XrehRhyFM3nW7RT5+zNaR3M57q7T Fkkbcvoig417EjSEGxQZ70S9yBzj/eNsVMhxn8JlT8eUyrbxhJI/pBBGTkI9vyvF Y8FJ77VgEjZ3dLycJVDdYAps0Ytk+NJtHFs8vsfLVVIJH9jLQdLSxML8J59evvRX 1QgwJ3GoVS516fmVZRRAbwZCGxbFLmizzpolv5/Oqk4SoVBjb9P7kUqbi3CW7Aoz pgjsuRdZQgWo13cpGCtW8/JKrsguMvBhJfaM1ijpMNOQ1VK4FqlkT8uuWL9a2vfy 3a6rR3p9/yF4D2WPngB7cKt5Hr3EMG7s -----END CERTIFICATE-----Generated at Sat May 31 16:40:42 2025 by rpki-client