$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: VUYE8z592BcRZISLtq32JPGbMeCROl9IvJQJ1LI6abM= Subject key identifier: 48:B5:3E:F5:BD:0B:0A:5D:87:89:0E:FB:AB:6B:1B:4B:5D:A3:71:D4 Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: 01C3 Signing time: Thu 19 Jun 2025 02:27:36 +0000 Manifest this update: Thu 19 Jun 2025 02:27:35 +0000 Manifest next update: Thu 26 Jun 2025 02:27:35 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: afmifS5JRX2+5HXaWW0Gxe213uPn8nQIUPAPx0bTcJU=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: Jun 19 02:27:35 2025 GMT Not After : Jun 26 02:27:35 2025 GMT Subject: CN=68537597-81a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:72:04:0e:14:2e:bf:19:cc:7e:18:3d:e6: 83:8c:96:d8:91:98:b8:28:72:4e:d9:de:8a:ea:21: 8b:4c:5a:ff:8f:37:43:de:f6:8f:45:6e:89:2a:79: 3c:b9:ae:c9:46:04:15:b3:17:b2:04:36:2d:22:03: b0:93:80:1e:8a:16:9d:24:f0:47:8b:8f:cf:99:d2: 7b:f5:85:d1:34:84:93:ad:9c:40:f2:32:fb:4c:4f: 63:50:df:b8:e5:ff:38:59:37:7e:e8:48:7d:eb:a6: be:95:52:28:e6:28:47:73:6a:4a:76:0e:14:67:50: 33:9a:1e:82:04:f3:f4:5a:2a:69:99:96:e2:f2:74: ee:50:87:57:74:7d:3b:11:42:07:a3:be:d9:88:2a: 30:fb:80:20:89:3d:86:d9:aa:e2:74:1b:1e:95:8b: f6:50:53:65:78:df:c4:ac:1a:9b:49:43:e5:44:65: b0:a9:2f:b9:3f:4a:05:33:39:23:a0:ba:e5:38:6a: c2:19:9e:f1:bb:72:97:06:f2:7d:a9:77:ad:20:eb: bc:57:dc:6f:64:ef:f5:7f:76:00:04:4d:f6:9e:91: 46:1b:27:10:9e:48:85:e0:21:f1:de:f9:7f:34:20: 15:a4:d5:f6:75:fd:c7:1b:a9:67:6b:da:be:22:a1: 0b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B5:3E:F5:BD:0B:0A:5D:87:89:0E:FB:AB:6B:1B:4B:5D:A3:71:D4 X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c2:c4:07:88:cc:99:4d:2f:1d:33:c9:99:4e:b4:7c:19:7e: 23:d5:cb:07:e9:a7:e2:d8:2c:d8:8e:93:56:c3:02:62:7d:33: 06:8a:d1:41:84:2a:fc:a1:8d:ef:1c:78:50:7f:8d:ee:dc:2c: b1:b2:1d:67:b4:e7:90:b5:eb:b7:24:7a:6a:9e:7b:de:ef:77: fb:da:25:13:ba:6e:d2:5d:a3:ae:ef:c5:5c:d8:6e:19:86:c8: 11:67:14:51:d0:3c:99:42:82:6b:52:a0:b7:98:3d:46:4e:c7: 50:06:ed:af:b3:04:9b:5a:53:cf:6a:52:e2:a1:5e:d4:0c:73: fd:e7:a2:6e:56:f4:79:13:23:96:e6:24:e6:9d:7d:26:8d:54: 73:16:a8:db:68:8d:aa:c5:cc:9b:aa:5e:3b:d6:f2:fc:63:09: 60:50:3a:1c:59:cf:b0:8d:30:6a:da:3c:1c:33:a7:75:80:42: 53:cc:e9:1c:e3:bb:6e:c7:2b:8e:8d:7b:d1:70:48:66:89:75: 81:e5:21:e5:4b:06:39:04:98:88:e7:2d:22:d9:fc:28:c0:12: c0:f6:2a:6e:74:5d:9d:df:b0:ce:4d:89:0f:0c:6b:8e:5c:20: 36:60:1f:04:fc:aa:05:a1:c5:0f:33:90:24:58:56:f8:8a:73: 41:65:4a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjUwNjE5MDIyNzM1WhcNMjUwNjI2MDIyNzM1WjAYMRYwFAYD VQQDEw02ODUzNzU5Ny04MWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02xyBA4ULr8ZzH4YPeaDjJbYkZi4KHJO2d6K6iGLTFr/jzdD3vaPRW6JKnk8 ua7JRgQVsxeyBDYtIgOwk4AeihadJPBHi4/PmdJ79YXRNISTrZxA8jL7TE9jUN+4 5f84WTd+6Eh966a+lVIo5ihHc2pKdg4UZ1Azmh6CBPP0WippmZbi8nTuUIdXdH07 EUIHo77ZiCow+4AgiT2G2aridBselYv2UFNleN/ErBqbSUPlRGWwqS+5P0oFMzkj oLrlOGrCGZ7xu3KXBvJ9qXetIOu8V9xvZO/1f3YABE32npFGGycQnkiF4CHx3vl/ NCAVpNX2df3HG6lna9q+IqEL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi1PvW9 Cwpdh4kO+6trG0tdo3HUMB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2wsQHiMyZTS8dM8mZTrR8GX4j1csH6afi2CzYjpNWwwJifTMGitFB hCr8oY3vHHhQf43u3Cyxsh1ntOeQteu3JHpqnnve73f72iUTum7SXaOu78Vc2G4Z hsgRZxRR0DyZQoJrUqC3mD1GTsdQBu2vswSbWlPPalLioV7UDHP956JuVvR5EyOW 5iTmnX0mjVRzFqjbaI2qxcybql471vL8YwlgUDocWc+wjTBq2jwcM6d1gEJTzOkc 47tuxyuOjXvRcEhmiXWB5SHlSwY5BJiI5y0i2fwowBLA9ipudF2d37DOTYkPDGuO XCA2YB8E/KoFocUPM5AkWFb4inNBZUrW -----END CERTIFICATE-----Generated at Thu Jun 19 17:26:14 2025 by rpki-client