$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json) Hash identifier: BFZbD5X815wuVIhgES5rqiDio7aRQ+d+N/nn31qPFus= Subject key identifier: 23:E2:D0:60:CC:1A:09:49:F9:E1:85:17:83:DC:63:82:B8:8B:81:9D Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft Manifest number: 01EC Signing time: Sun 01 Jun 2025 02:23:51 +0000 Manifest this update: Sun 01 Jun 2025 02:23:51 +0000 Manifest next update: Sun 08 Jun 2025 02:23:51 +0000 Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: 1NUSxxlwQ5IqY9TzWqp6y/eumxcR27RHyz/8c+/zyqY=) 2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Validity Not Before: Jun 1 02:23:51 2025 GMT Not After : Jun 8 02:23:51 2025 GMT Subject: CN=683bb9b7-82c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:9c:a9:34:c6:e8:2c:93:78:1e:63:83:c2: f4:60:93:33:b6:e5:53:b9:c9:d8:de:19:5d:16:7d: 05:a7:18:b6:7c:5b:14:a2:00:66:53:cb:f2:9b:46: bd:9f:ce:a2:3c:ae:9b:e0:ac:b5:93:1b:7e:2e:50: cc:2c:2d:a2:52:56:23:1e:1d:71:7c:3a:c7:0b:c8: 44:30:b2:41:c8:f8:4a:c3:df:74:fa:fc:bd:65:09: 2e:18:99:73:65:e1:14:f8:b7:73:66:6f:17:f5:bd: 18:61:e1:27:d2:22:18:d0:5f:e1:e1:2f:e0:b8:85: 74:3c:d4:e4:c7:09:44:98:a0:81:3e:1e:81:21:13: ec:3f:79:63:a8:e7:fe:4d:e0:b2:c7:03:33:99:0e: 89:71:19:93:49:98:b0:a1:7c:82:c6:ac:e5:f2:9a: b5:18:c3:9b:28:eb:30:ba:cb:85:c3:35:33:2f:94: a4:3d:85:84:c6:9c:8b:c8:f0:00:96:c4:60:c5:86: 9c:11:8b:0b:d3:d9:f6:d5:bb:75:35:de:fb:eb:f9: 75:24:53:9e:5a:25:9a:7c:d4:ef:12:6c:07:c5:a6: 43:fe:7f:4f:82:f5:bc:75:38:fd:8f:69:53:41:46: ee:f4:fb:85:04:15:aa:a6:25:1e:d0:82:3b:e3:36: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:D0:60:CC:1A:09:49:F9:E1:85:17:83:DC:63:82:B8:8B:81:9D X509v3 Authority Key Identifier: keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:15:8c:f8:ba:2f:c9:84:c1:c6:e2:6c:3b:af:17:49:54:ad: c0:78:ea:c7:13:8c:93:c7:72:84:58:f1:69:88:42:08:de:15: 41:dc:6a:f8:c4:20:22:07:a7:99:31:5a:f4:aa:08:14:40:23: 4d:fb:66:dc:b8:1c:cd:17:6d:e0:e3:d6:cc:ea:d3:3d:f1:96: d7:df:80:74:dc:41:49:7b:3a:37:f4:ff:ee:df:1a:15:f4:60: c4:fe:03:a4:e7:df:1f:c7:ff:0f:65:ef:ca:0b:5c:f2:45:f5: 6a:f6:94:03:9d:cc:12:79:87:6f:ad:8f:83:e1:06:6f:0b:a1: eb:59:06:f8:f7:be:61:bd:b1:de:7c:c0:2d:a4:ef:e0:2e:e7: c2:71:bf:2b:f2:0f:78:db:cb:49:cf:99:90:0d:4c:69:e8:dd: cd:e7:60:91:45:be:ee:e0:66:83:ce:ea:6a:ca:a4:c8:34:0b: 99:16:84:4c:d8:5a:0a:16:fc:7e:89:47:c1:a5:80:01:8a:46: 74:ff:e0:a8:09:6c:2c:53:ca:88:ba:42:10:bd:cd:b6:44:6a: 43:66:fd:5e:67:fd:fa:6b:95:8a:7e:5a:bf:c6:db:ff:bc:21: a4:1a:5a:83:de:ba:5a:0b:70:e6:62:48:62:7f:25:76:f9:3d: e7:27:2d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF NEU3MTYzNkMwHhcNMjUwNjAxMDIyMzUxWhcNMjUwNjA4MDIyMzUxWjAYMRYwFAYD VQQDEw02ODNiYjliNy04MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySWcqTTG6CyTeB5jg8L0YJMztuVTucnY3hldFn0Fpxi2fFsUogBmU8vym0a9 n86iPK6b4Ky1kxt+LlDMLC2iUlYjHh1xfDrHC8hEMLJByPhKw990+vy9ZQkuGJlz ZeEU+LdzZm8X9b0YYeEn0iIY0F/h4S/guIV0PNTkxwlEmKCBPh6BIRPsP3ljqOf+ TeCyxwMzmQ6JcRmTSZiwoXyCxqzl8pq1GMObKOswusuFwzUzL5SkPYWExpyLyPAA lsRgxYacEYsL09n21bt1Nd776/l1JFOeWiWafNTvEmwHxaZD/n9PgvW8dTj9j2lT QUbu9PuFBBWqpiUe0II74za9FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPi0GDM GglJ+eGFF4PcY4K4i4GdMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC T0doSHpvbGpsal9rNXhZMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhFYz4ui/JhMHG4mw7rxdJVK3AeOrHE4yTx3KEWPFpiEII3hVB3Gr4 xCAiB6eZMVr0qggUQCNN+2bcuBzNF23g49bM6tM98ZbX34B03EFJezo39P/u3xoV 9GDE/gOk598fx/8PZe/KC1zyRfVq9pQDncwSeYdvrY+D4QZvC6HrWQb4975hvbHe fMAtpO/gLufCcb8r8g9428tJz5mQDUxp6N3N52CRRb7u4GaDzupqyqTINAuZFoRM 2FoKFvx+iUfBpYABikZ0/+CoCWwsU8qIukIQvc22RGpDZv1eZ/36a5WKflq/xtv/ vCGkGlqD3rpaC3DmYkhifyV2+T3nJy2G -----END CERTIFICATE-----Generated at Mon Jun 2 20:24:35 2025 by rpki-client