$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: TUhMXzVyppi2S2uDscFPaRYImVmwYlRPZ57whig4Kfw= Subject key identifier: 23:C2:F4:79:6B:09:9C:ED:5B:31:14:ED:0D:80:7E:CE:8A:8C:BC:F7 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 011F Signing time: Tue 03 Jun 2025 04:37:47 +0000 Manifest this update: Tue 03 Jun 2025 04:37:46 +0000 Manifest next update: Tue 10 Jun 2025 04:37:46 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: 6r9icvd19rPLI8ZXpBl0f4xHXo4ayJsg+XWKrPLmF4c=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: bPMBzJr4bTR5Bhy4yYB9L04MYvX8u/mjmsw/KhMBj+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Jun 3 04:37:46 2025 GMT Not After : Jun 10 04:37:46 2025 GMT Subject: CN=683e7c1b-15dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:82:8e:6e:9b:52:76:96:a1:76:47:99:37: df:1d:92:91:47:3c:2b:9a:28:fb:0a:3b:a8:de:76: 5a:69:28:0e:58:4b:7c:31:67:ef:f5:21:bf:22:18: d4:ba:ac:0c:1a:55:36:90:41:b3:ae:6b:d1:43:c5: 91:e1:73:74:2c:9a:a9:19:24:84:57:83:24:26:95: 72:3e:52:3c:6a:cc:69:d5:e4:1f:f3:91:f1:6d:ad: b6:42:c5:5c:af:6a:80:cb:05:7b:2d:e8:9d:6f:93: 82:66:1f:0b:45:45:26:a3:80:92:f3:94:57:d9:92: 8c:b9:58:9a:f0:92:d6:36:22:ae:fb:ac:83:38:ef: 7e:02:cf:b9:0a:26:3a:8a:60:3a:8d:a3:41:23:26: e7:33:c6:b5:49:0e:80:3c:6b:9b:0d:e5:89:3a:93: e5:f4:87:8c:7b:45:e2:b7:51:f1:d4:65:f9:d7:4e: 93:e7:60:58:67:b3:99:fa:a1:99:5a:a1:51:f2:02: 01:25:57:4e:af:1c:6a:03:1e:e0:e8:44:56:6e:ef: 73:3b:d6:0d:44:da:ab:a3:96:9e:d6:01:af:f4:69: 50:34:d9:88:22:0e:6c:b1:ac:62:a8:0f:6b:4f:81: d9:7f:d1:62:49:c1:d2:44:72:cd:d6:3a:06:fd:34: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C2:F4:79:6B:09:9C:ED:5B:31:14:ED:0D:80:7E:CE:8A:8C:BC:F7 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9f:fe:8b:a2:c1:cd:f0:72:b7:66:f8:fe:45:39:21:01:01: fd:e7:99:23:57:9a:5c:2b:7d:81:52:f9:f4:ac:cc:55:de:36: b5:c5:c3:df:b3:a4:b2:f8:bf:7c:08:3a:b9:d8:2d:8c:67:2c: 54:aa:d2:5f:58:f9:d6:8c:37:21:77:06:3b:eb:6e:52:cc:a0: bd:01:1a:c1:3d:30:60:5f:56:48:8a:e9:2c:d9:4c:52:a1:36: 6c:6a:1a:f0:1b:aa:bf:94:d6:37:65:3d:a3:1a:a4:ce:81:43: da:7c:4a:73:70:50:b8:c4:6f:75:60:0d:d3:db:8e:3d:8f:52: 13:83:35:8f:35:44:25:0e:c1:92:1d:be:d0:05:d2:e2:d9:a7: 0d:32:e2:b2:69:b5:6e:70:76:5e:3a:33:3d:38:8b:41:5e:02: 25:67:bc:1f:0f:a8:f7:d5:a6:e8:2b:7a:29:fb:c6:90:7c:7e: dc:a6:91:8f:23:bb:c0:98:60:05:5c:1d:1f:dc:a3:ee:72:20: 5a:5c:9a:25:98:a5:5a:2b:9d:2f:6d:75:9e:05:39:64:e3:6f: b6:49:78:25:e8:0f:93:89:5e:83:0d:34:b6:6f:a1:ee:d5:44: 96:ff:94:cc:4e:f0:f8:ab:23:02:c2:1f:33:16:53:19:19:93: df:7c:a0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwNjAzMDQzNzQ2WhcNMjUwNjEwMDQzNzQ2WjAYMRYwFAYD VQQDEw02ODNlN2MxYi0xNWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnp2Cjm6bUnaWoXZHmTffHZKRRzwrmij7Cjuo3nZaaSgOWEt8MWfv9SG/IhjU uqwMGlU2kEGzrmvRQ8WR4XN0LJqpGSSEV4MkJpVyPlI8asxp1eQf85Hxba22QsVc r2qAywV7Leidb5OCZh8LRUUmo4CS85RX2ZKMuVia8JLWNiKu+6yDOO9+As+5CiY6 imA6jaNBIybnM8a1SQ6APGubDeWJOpPl9IeMe0Xit1Hx1GX5106T52BYZ7OZ+qGZ WqFR8gIBJVdOrxxqAx7g6ERWbu9zO9YNRNqro5ae1gGv9GlQNNmIIg5ssaxiqA9r T4HZf9FiScHSRHLN1joG/TTCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPC9Hlr CZztWzEU7Q2Afs6KjLz3MB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcn/6LosHN8HK3Zvj+RTkhAQH955kjV5pcK32BUvn0rMxV3ja1xcPf s6Sy+L98CDq52C2MZyxUqtJfWPnWjDchdwY7625SzKC9ARrBPTBgX1ZIiuks2UxS oTZsahrwG6q/lNY3ZT2jGqTOgUPafEpzcFC4xG91YA3T2449j1ITgzWPNUQlDsGS Hb7QBdLi2acNMuKyabVucHZeOjM9OItBXgIlZ7wfD6j31aboK3op+8aQfH7cppGP I7vAmGAFXB0f3KPuciBaXJolmKVaK50vbXWeBTlk42+2SXgl6A+TiV6DDTS2b6Hu 1USW/5TMTvD4qyMCwh8zFlMZGZPffKAD -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:31 2025 by rpki-client