$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft File: Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json) Hash identifier: 4FuV88Luu+mZ2QnVBZaA0on/VAYwY2RmIY2hBm7icw0= Subject key identifier: F1:80:6B:14:0F:ED:D6:6A:F4:A1:EE:0C:00:A8:56:D2:4F:8E:B0:AE Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C Certificate issuer: /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft Manifest number: 068F Signing time: Fri 30 May 2025 22:26:55 +0000 Manifest this update: Fri 30 May 2025 22:26:54 +0000 Manifest next update: Fri 06 Jun 2025 22:26:54 +0000 Files and hashes: 1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: s6jnWweC1R09iAwuuCdTmsJQOUFrgSuByLAcL5qKEKw=) 2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89AF, serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Validity Not Before: May 30 22:26:54 2025 GMT Not After : Jun 6 22:26:54 2025 GMT Subject: CN=683a30ae-743f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:96:a8:e1:d4:21:b2:2a:53:1e:a1:b6:0d: d2:b6:77:69:21:cf:ea:df:92:36:8a:3a:a4:f4:8a: f3:ff:9e:1e:94:98:3a:f3:ca:9f:1e:7a:ec:33:9f: d9:cc:64:d2:c8:de:33:28:e0:cc:73:ef:a8:81:3a: 26:06:76:6e:d1:fc:5b:51:1d:fb:a2:63:a2:44:95: 54:38:73:4a:c8:8d:3d:2c:1f:76:6a:aa:f8:e7:42: be:30:29:eb:03:ae:56:59:74:38:79:7c:74:a4:cf: 10:5f:e6:8e:f7:ac:60:03:8c:0c:c5:b3:f1:10:7e: 4c:6f:b9:cb:78:52:1f:a7:cd:2e:a5:60:84:b0:4a: df:02:d0:5f:4a:40:4d:e1:76:3f:52:18:32:37:22: eb:c9:54:06:e6:3f:88:29:f8:93:06:9a:3e:41:12: 70:7e:e5:99:ab:0c:50:af:f9:75:b1:b1:8a:ad:05: 9a:64:c8:07:dd:4b:70:a1:22:93:11:29:9e:f8:e6: 8a:f5:db:e0:64:2d:08:fe:fe:14:27:a5:14:22:58: 86:de:c4:49:bb:ec:2a:d6:d1:7b:02:25:ce:91:30: 74:ec:e5:19:d3:2d:72:cd:12:4a:d7:a7:87:12:44: 6a:60:24:91:bf:aa:d5:ca:c9:69:9c:6e:7e:b2:a6: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:6B:14:0F:ED:D6:6A:F4:A1:EE:0C:00:A8:56:D2:4F:8E:B0:AE X509v3 Authority Key Identifier: keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a7:28:5c:54:54:f5:e5:f4:bf:33:a0:58:73:65:41:14:f2: 6c:cf:df:05:8a:01:05:37:83:8c:c4:f6:b5:94:06:15:26:a7: 54:7f:52:86:ec:4d:c9:02:71:a2:41:d4:3f:c4:87:b3:73:2b: 23:72:e1:32:c6:25:d1:d2:22:a5:55:f2:fc:0c:c9:85:f8:ca: d6:be:cd:82:d3:8e:4d:1f:68:05:af:f8:45:ed:30:09:51:81: 0f:f9:ef:78:04:23:2d:3e:14:05:22:29:c7:21:39:e2:54:3b: 8b:cc:78:2d:28:b1:e8:bf:6e:46:c8:0a:24:f6:99:13:69:de: 2c:62:5b:96:57:42:b1:b4:3e:90:2e:7e:bb:30:92:a7:c2:de: c8:70:a2:7a:91:33:9a:a8:a8:b9:30:4e:28:9e:e9:c8:df:77: e5:b4:65:b0:46:77:52:f7:85:db:bb:2d:73:89:a4:97:82:bd: 5f:39:81:88:fd:be:7f:39:4f:58:c1:fb:dd:e4:a8:c5:af:33: a5:6a:3f:01:8c:4a:89:b5:a5:28:af:c0:e4:fd:c6:3d:67:f2: 84:a8:1f:e5:d2:32:f2:f6:31:d9:69:c2:4b:d3:01:04:9b:cd: 85:bc:71:88:89:1f:ee:1a:7e:c9:7b:d0:76:15:f8:60:5b:da: 9d:53:0a:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5QUYxMTAvBgNVBAUTKDVBN0EyRERFQTYyQzg5MEU5MDFGMURDRDQwNDZGQ0Q3 OENDMEI0MUMwHhcNMjUwNTMwMjIyNjU0WhcNMjUwNjA2MjIyNjU0WjAYMRYwFAYD VQQDEw02ODNhMzBhZS03NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS2WqOHUIbIqUx6htg3StndpIc/q35I2ijqk9Irz/54elJg688qfHnrsM5/Z zGTSyN4zKODMc++ogTomBnZu0fxbUR37omOiRJVUOHNKyI09LB92aqr450K+MCnr A65WWXQ4eXx0pM8QX+aO96xgA4wMxbPxEH5Mb7nLeFIfp80upWCEsErfAtBfSkBN 4XY/UhgyNyLryVQG5j+IKfiTBpo+QRJwfuWZqwxQr/l1sbGKrQWaZMgH3UtwoSKT ESme+OaK9dvgZC0I/v4UJ6UUIliG3sRJu+wq1tF7AiXOkTB07OUZ0y1yzRJK16eH EkRqYCSRv6rVyslpnG5+sqbNuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGAaxQP 7dZq9KHuDACoVtJPjrCuMB8GA1UdIwQYMBaAFFp6Ld6mLIkOkB8dzUBG/NeMwLQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlBRi8xODYwQ0ExQTZG RjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lRNlFIeDNOUUViODE0ekF0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dub3QzcVlzaVE2UUh4M05RRWI4MTR6QXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlBRi8xODYwQ0ExQTZGRjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lR NlFIeDNOUUViODE0ekF0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzpyhcVFT15fS/M6BYc2VBFPJsz98FigEFN4OMxPa1lAYVJqdUf1KG 7E3JAnGiQdQ/xIezcysjcuEyxiXR0iKlVfL8DMmF+MrWvs2C045NH2gFr/hF7TAJ UYEP+e94BCMtPhQFIinHITniVDuLzHgtKLHov25GyAok9pkTad4sYluWV0KxtD6Q Ln67MJKnwt7IcKJ6kTOaqKi5ME4onunI33fltGWwRndS94Xbuy1ziaSXgr1fOYGI /b5/OU9Ywfvd5KjFrzOlaj8BjEqJtaUor8Dk/cY9Z/KEqB/l0jLy9jHZacJL0wEE m82FvHGIiR/uGn7Je9B2FfhgW9qdUwoJ -----END CERTIFICATE-----Generated at Sat May 31 16:40:41 2025 by rpki-client