$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: 8XJTLp/Tw7sM6X4PLBGLV0+z6Iz84GIMzA611QsHz7g= Subject key identifier: 0E:82:49:7F:C2:7D:39:47:CD:31:F5:CA:6F:6F:5A:F9:B1:1C:6B:DB Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 05B0 Signing time: Fri 30 May 2025 23:20:47 +0000 Manifest this update: Fri 30 May 2025 23:20:46 +0000 Manifest next update: Fri 06 Jun 2025 23:20:46 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: 5WAWg6mRaHobsmAQbgNE8K1AA92Jq8x3E/1vnWs0IeM=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: May 30 23:20:46 2025 GMT Not After : Jun 6 23:20:46 2025 GMT Subject: CN=683a3d4f-ab87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:09:62:14:11:e4:7c:cd:bc:5a:c5:93:5c:29: ca:10:db:fa:c9:55:17:26:a7:40:4c:a6:49:a5:bf: f2:3b:5e:ac:c4:b6:a6:72:0f:84:e0:cc:69:be:98: 9d:dd:d3:aa:fb:b2:51:4f:32:0d:f9:7b:09:df:9f: 01:84:b4:4c:3c:12:35:98:55:1f:f0:cd:c6:9a:d0: dc:e1:08:e3:27:30:11:99:4a:fb:a8:6f:94:09:a9: bb:76:e3:a9:f5:d0:9d:68:e9:3e:13:36:44:b9:86: 9a:9c:6f:d2:12:34:b8:06:55:f4:26:7d:e5:5c:97: ed:56:95:e5:8f:26:d3:98:9d:5d:8c:5f:55:a8:2d: 17:bd:05:7a:66:e6:4c:1d:e2:d4:1b:01:f1:2a:e5: 30:2b:36:6c:b7:0e:d5:16:4b:5e:80:e1:8a:0b:86: 4c:f6:bd:3e:9f:1f:5c:66:24:03:ce:9b:a9:eb:c8: 3b:1c:cb:e4:c2:13:50:dd:6e:82:eb:84:ab:17:08: a1:48:a3:9e:65:41:cf:c6:48:5c:10:ae:5d:3b:17: db:ae:ec:22:1b:55:f1:d0:04:aa:72:be:21:82:26: 49:a3:81:4d:cb:64:31:f5:29:ff:58:e8:07:84:d1: 36:6a:a9:02:55:16:07:74:e8:b8:89:e4:9c:26:c4: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:82:49:7F:C2:7D:39:47:CD:31:F5:CA:6F:6F:5A:F9:B1:1C:6B:DB X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:35:a8:db:fb:2a:09:13:44:cd:7d:ac:e2:de:7f:41:2c:7f: 74:ba:b5:63:8e:72:c0:8a:b0:e0:64:2b:83:11:bf:e8:8e:f4: d3:d2:3a:ec:f2:93:89:55:02:e0:7b:fb:9e:ba:bc:7f:80:29: e9:1e:34:7c:69:fc:63:c5:9c:89:62:32:93:2b:fb:e5:2e:1c: 10:62:bf:65:42:ec:67:40:01:f9:0e:45:9a:08:57:ef:d0:a0: 5a:10:9d:60:eb:3e:a5:55:32:14:47:b1:0f:33:11:23:51:c7: 7f:b2:99:dd:1c:22:5b:03:71:8b:9b:0c:2e:5d:d2:c0:4f:86: e9:a9:13:7e:99:73:f0:51:28:5a:f4:48:53:b2:b4:94:9c:48: 53:76:7f:42:05:1d:60:36:9f:e8:ae:57:d2:5b:78:d2:83:23: 58:01:d8:66:66:b7:8f:f7:8e:ec:b8:4f:49:06:2b:6e:ce:64: ad:7a:8d:83:6e:2d:15:cd:73:ac:c3:4b:65:f2:2a:7a:3a:50: 8e:9a:9d:97:9f:6d:d9:11:10:b5:06:09:74:49:7b:35:b4:9a: 3c:17:e0:27:87:95:2a:01:3e:3c:0e:9e:88:21:02:9c:78:e4: a6:ad:a4:7a:46:18:f7:56:f2:51:7e:c9:cd:c7:19:86:bb:8c: 97:58:8b:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjUwNTMwMjMyMDQ2WhcNMjUwNjA2MjMyMDQ2WjAYMRYwFAYD VQQDEw02ODNhM2Q0Zi1hYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AliFBHkfM28WsWTXCnKENv6yVUXJqdATKZJpb/yO16sxLamcg+E4Mxpvpid 3dOq+7JRTzIN+XsJ358BhLRMPBI1mFUf8M3GmtDc4QjjJzARmUr7qG+UCam7duOp 9dCdaOk+EzZEuYaanG/SEjS4BlX0Jn3lXJftVpXljybTmJ1djF9VqC0XvQV6ZuZM HeLUGwHxKuUwKzZstw7VFktegOGKC4ZM9r0+nx9cZiQDzpup68g7HMvkwhNQ3W6C 64SrFwihSKOeZUHPxkhcEK5dOxfbruwiG1Xx0ASqcr4hgiZJo4FNy2Qx9Sn/WOgH hNE2aqkCVRYHdOi4ieScJsQHQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6CSX/C fTlHzTH1ym9vWvmxHGvbMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVNajb+yoJE0TNfazi3n9BLH90urVjjnLAirDgZCuDEb/ojvTT0jrs 8pOJVQLge/ueurx/gCnpHjR8afxjxZyJYjKTK/vlLhwQYr9lQuxnQAH5DkWaCFfv 0KBaEJ1g6z6lVTIUR7EPMxEjUcd/spndHCJbA3GLmwwuXdLAT4bpqRN+mXPwUSha 9EhTsrSUnEhTdn9CBR1gNp/orlfSW3jSgyNYAdhmZreP947suE9JBituzmSteo2D bi0VzXOsw0tl8ip6OlCOmp2Xn23ZERC1Bgl0SXs1tJo8F+Anh5UqAT48Dp6IIQKc eOSmraR6Rhj3VvJRfsnNxxmGu4yXWIu+ -----END CERTIFICATE-----Generated at Sat May 31 17:03:26 2025 by rpki-client