$ rpki-client -vvf rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft File: wrYFvbTytu0rBR3EKy6AP7YHjk0.mft (raw, json) Hash identifier: pG6yRimJxC8J+QmCw4JdafwZxCPV6E9DLI/MM1e+BNA= Subject key identifier: 73:26:15:33:B5:29:34:CF:20:30:89:05:1C:E6:EE:CF:26:91:B7:7F Authority key identifier: C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D Certificate issuer: /CN=A91F692A/serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft Manifest number: 0241 Signing time: Sat 31 May 2025 02:02:42 +0000 Manifest this update: Sat 31 May 2025 02:02:42 +0000 Manifest next update: Sat 07 Jun 2025 02:02:42 +0000 Files and hashes: 1: wrYFvbTytu0rBR3EKy6AP7YHjk0.crl (hash: h7A0Rd5vVuKLC6P1RUtOqDS8AkqccvVNImoCUgbpuFk=) 2: 11AA6C3E22A111ED848DF584C4F9AE02.roa (hash: uqzxT9Bkkkw/d9KeeEuTKcCxRKlVwtLIu+mRX+pqh+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F692A, serialNumber=C2B605BDB4F2B6ED2B051DC42B2E803FB6078E4D Validity Not Before: May 31 02:02:42 2025 GMT Not After : Jun 7 02:02:42 2025 GMT Subject: CN=683a6342-6ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:58:63:df:bf:4f:cb:59:69:a0:64:b6:2e:e2: 52:76:53:02:85:4d:eb:5c:15:17:f0:9b:93:be:17: 69:a0:cc:02:6b:d3:00:1d:f6:c9:2d:6d:a6:c4:37: 55:98:72:f6:5a:6e:69:62:0a:8c:1e:97:92:ef:ef: 7f:47:f2:7b:7b:94:d7:83:28:ef:bc:e5:3b:9f:56: bb:7c:78:84:f3:e2:45:b9:46:59:9d:70:9d:ff:40: b4:28:4b:01:cd:90:eb:30:71:a4:69:0f:dc:cf:97: f2:1c:63:4a:f7:59:d1:9d:6e:a1:65:dc:18:1a:39: ed:29:40:9f:d3:10:be:c5:8d:81:b9:4f:c7:d7:e2: e4:38:94:af:a2:45:99:15:d4:e1:9a:27:ad:ca:0c: b8:cf:3c:6c:fa:61:d3:ca:93:6d:d0:40:88:af:3b: b2:1b:f8:9d:3b:c6:3c:d3:c3:50:25:59:d6:69:b6: 44:46:00:01:ec:30:de:67:ab:a5:36:ee:ff:12:86: f5:0d:37:07:16:09:99:ea:94:84:2c:bd:8f:01:e7: 16:f2:00:32:a0:a1:f7:24:75:54:93:f5:4a:fb:d3: 44:f3:3d:5a:c9:2c:8d:01:e2:a5:4a:36:a0:9a:ab: 4c:41:19:92:09:00:99:3d:43:08:17:4a:33:6c:80: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:26:15:33:B5:29:34:CF:20:30:89:05:1C:E6:EE:CF:26:91:B7:7F X509v3 Authority Key Identifier: keyid:C2:B6:05:BD:B4:F2:B6:ED:2B:05:1D:C4:2B:2E:80:3F:B6:07:8E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrYFvbTytu0rBR3EKy6AP7YHjk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F692A/489E0F0C229C11ED9A213568C4F9AE02/wrYFvbTytu0rBR3EKy6AP7YHjk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:62:76:56:e6:98:36:31:af:1f:58:d6:53:92:a9:23:7e:94: e0:4c:44:5d:f3:6b:fc:48:3d:fa:4d:94:52:2a:33:2a:17:d4: 17:b4:fd:2c:23:cd:7c:19:63:fa:9f:48:f4:4e:34:f7:cf:d8: fd:cb:ea:b8:96:67:2d:65:18:66:4b:65:2e:3d:ad:78:c2:7b: 5d:b7:3b:9a:4b:e1:b5:4f:54:05:e9:02:e4:56:7e:9e:aa:9d: 10:4d:44:19:21:bc:f7:02:1b:8d:97:50:19:35:65:d3:64:92: 0b:5c:ab:e3:24:f6:a7:be:44:62:31:80:9f:13:15:0c:97:8b: d6:99:f4:da:6b:d2:8c:19:50:66:a3:32:32:49:df:b2:28:16: 5e:59:6b:c4:91:ff:c0:dc:b1:c5:44:d5:25:12:3b:ba:41:04: 0e:39:0c:5f:c8:53:51:15:c9:1e:04:8d:a2:66:40:0f:bc:6e: 21:3b:41:9a:7e:f3:9c:8d:20:ab:de:7b:c6:75:5e:de:9e:2e: 26:1d:de:7d:9b:77:aa:5b:98:f4:dd:4a:2d:eb:91:1d:88:fe: 70:87:6c:9b:d7:38:e8:92:b7:10:7f:3e:1c:54:64:07:36:18: e2:a7:df:a3:63:1c:ce:81:03:0d:93:ed:16:8c:87:5a:d5:d6: b8:76:9f:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5MkExMTAvBgNVBAUTKEMyQjYwNUJEQjRGMkI2RUQyQjA1MURDNDJCMkU4MDNG QjYwNzhFNEQwHhcNMjUwNTMxMDIwMjQyWhcNMjUwNjA3MDIwMjQyWjAYMRYwFAYD VQQDEw02ODNhNjM0Mi02Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1hj379Py1lpoGS2LuJSdlMChU3rXBUX8JuTvhdpoMwCa9MAHfbJLW2mxDdV mHL2Wm5pYgqMHpeS7+9/R/J7e5TXgyjvvOU7n1a7fHiE8+JFuUZZnXCd/0C0KEsB zZDrMHGkaQ/cz5fyHGNK91nRnW6hZdwYGjntKUCf0xC+xY2BuU/H1+LkOJSvokWZ FdThmietygy4zzxs+mHTypNt0ECIrzuyG/idO8Y808NQJVnWabZERgAB7DDeZ6ul Nu7/Eob1DTcHFgmZ6pSELL2PAecW8gAyoKH3JHVUk/VK+9NE8z1aySyNAeKlSjag mqtMQRmSCQCZPUMIF0ozbIB/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMmFTO1 KTTPIDCJBRzm7s8mkbd/MB8GA1UdIwQYMBaAFMK2Bb208rbtKwUdxCsugD+2B45N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjkyQS80ODlFMEYwQzIy OUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1MHJCUjNFS3k2QVA3WUhq azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dyWUZ2YlR5dHUwckJSM0VLeTZBUDdZSGprMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjkyQS80ODlFMEYwQzIyOUMxMUVEOUEyMTM1NjhDNEY5QUUwMi93cllGdmJUeXR1 MHJCUjNFS3k2QVA3WUhqazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpYnZW5pg2Ma8fWNZTkqkjfpTgTERd82v8SD36TZRSKjMqF9QXtP0s I818GWP6n0j0TjT3z9j9y+q4lmctZRhmS2UuPa14wntdtzuaS+G1T1QF6QLkVn6e qp0QTUQZIbz3AhuNl1AZNWXTZJILXKvjJPanvkRiMYCfExUMl4vWmfTaa9KMGVBm ozIySd+yKBZeWWvEkf/A3LHFRNUlEju6QQQOOQxfyFNRFckeBI2iZkAPvG4hO0Ga fvOcjSCr3nvGdV7eni4mHd59m3eqW5j03Uot65EdiP5wh2yb1zjokrcQfz4cVGQH Nhjip9+jYxzOgQMNk+0WjIda1da4dp+D -----END CERTIFICATE-----Generated at Sat May 31 16:29:42 2025 by rpki-client