$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft File: wN0sVYV6kv_nzcuilJmD1IpCudg.mft (raw, json) Hash identifier: Q4xh6BtrlMC6Iq/dUJFDkmgyuoqiTP25ObZ3pofq7DY= Subject key identifier: A0:F5:8C:EC:68:B9:78:01:0A:7E:6B:41:31:19:8F:55:01:A9:9C:10 Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft Manifest number: 9C Signing time: Sat 21 Jun 2025 05:21:32 +0000 Manifest this update: Sat 21 Jun 2025 05:21:32 +0000 Manifest next update: Sat 28 Jun 2025 05:21:32 +0000 Files and hashes: 1: wN0sVYV6kv_nzcuilJmD1IpCudg.crl (hash: K2813VWeWu4EQfbsyWHFt0ut7NO38MECarh7hGvl/U4=) 2: 002622285F8F11EF9D02A046C4F9AE02.roa (hash: 1n7jLRYTaVw5u2mwQ6NatrZ/xHlr3ZhbJEnbXC5Rplo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 05:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: Jun 21 05:21:32 2025 GMT Not After : Jun 28 05:21:32 2025 GMT Subject: CN=6856415c-4f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7c:f1:75:aa:ce:cb:bd:a9:05:bd:0c:1f:fa: 1a:8c:87:f4:5b:04:66:5b:65:76:ee:e3:62:02:27: 8e:9d:c9:e2:a4:9f:3d:66:cf:d2:49:6b:60:3d:ac: df:56:70:a1:b0:bc:e0:5c:0d:bd:ea:de:18:a6:76: bd:bf:40:05:10:7b:56:51:a0:e4:ec:f6:85:83:b3: c2:dc:98:b7:4c:5a:63:d8:67:53:b7:ea:e2:77:b0: 7d:f3:20:d1:be:b0:bd:ce:c7:68:a0:ea:09:e0:9d: bd:90:a0:06:ea:96:3d:40:79:8f:8b:fc:99:76:51: 9a:01:e6:cd:25:8e:2e:c8:d2:ba:15:dd:8c:34:75: 59:91:1b:20:b8:d1:c2:69:09:af:bd:9e:de:01:63: 5b:43:44:52:ed:1d:6a:f1:5f:d4:51:a8:a4:2f:d5: 03:2c:c9:29:b1:85:54:67:a7:1c:54:2c:83:5c:fc: 3a:10:c8:e4:3a:b9:a4:22:d3:a8:b8:27:f7:72:71: 00:7c:80:c4:41:69:1c:e0:8d:1e:a0:c4:b0:62:fa: f8:c5:d6:58:6e:4f:58:2c:26:91:5f:16:27:09:13: 37:78:90:77:68:37:43:7a:af:2e:2f:55:3a:ef:77: 4d:1c:02:c2:60:76:33:ba:9b:a8:09:f0:27:69:43: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F5:8C:EC:68:B9:78:01:0A:7E:6B:41:31:19:8F:55:01:A9:9C:10 X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:c0:df:8f:c3:5d:56:aa:cf:f8:36:db:34:52:0b:f7:b9: c5:3f:34:15:37:fb:2f:19:d2:b0:98:79:4e:62:72:64:df:a8: 6c:66:c8:0c:bd:0f:76:01:5e:c6:c8:3e:b9:af:f1:ed:e1:6a: 80:ad:90:fa:d7:ed:bd:f0:b3:e5:26:a6:35:ca:6b:fe:30:8e: cd:59:07:96:a0:42:7b:7b:e9:5a:77:db:40:df:91:f7:34:72: 16:27:fd:61:71:6e:ad:b7:69:d3:31:d3:47:e3:20:10:90:df: ee:0e:69:f5:c7:49:23:8a:94:3e:b4:30:ca:3c:7c:87:a8:68: e3:d4:6e:2f:68:48:37:80:8b:72:b0:0b:7f:0d:4b:ed:b8:ad: a3:1d:41:e5:0d:f7:15:78:ca:69:64:bd:af:f3:84:64:6b:e6: 68:bc:ec:83:52:8b:d8:e5:68:0c:e7:12:ea:e6:e3:6d:e7:83: 23:f0:77:bb:95:48:10:44:53:8c:33:9c:fc:47:b3:ce:0a:63: 06:c6:b4:9d:98:65:96:e9:4d:a2:47:44:5a:99:5d:7c:40:ba: fc:ce:c8:79:f1:8c:19:7f:90:14:06:86:7a:8a:c0:d0:40:90: 18:0f:3c:e9:1d:4d:09:86:ab:49:00:a2:6c:dc:f9:3d:8c:88: f2:24:a5:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEMwREQyQzU1ODU3QTkyRkZFN0NEQ0JBMjk0OTk4M0Q0 OEE0MkI5RDgwHhcNMjUwNjIxMDUyMTMyWhcNMjUwNjI4MDUyMTMyWjAYMRYwFAYD VQQDEw02ODU2NDE1Yy00ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nzxdarOy72pBb0MH/oajIf0WwRmW2V27uNiAieOncnipJ89Zs/SSWtgPazf VnChsLzgXA296t4Ypna9v0AFEHtWUaDk7PaFg7PC3Ji3TFpj2GdTt+rid7B98yDR vrC9zsdooOoJ4J29kKAG6pY9QHmPi/yZdlGaAebNJY4uyNK6Fd2MNHVZkRsguNHC aQmvvZ7eAWNbQ0RS7R1q8V/UUaikL9UDLMkpsYVUZ6ccVCyDXPw6EMjkOrmkItOo uCf3cnEAfIDEQWkc4I0eoMSwYvr4xdZYbk9YLCaRXxYnCRM3eJB3aDdDeq8uL1U6 73dNHALCYHYzupuoCfAnaUMPUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD1jOxo uXgBCn5rQTEZj1UBqZwQMB8GA1UdIwQYMBaAFMDdLFWFepL/583LopSZg9SKQrnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85NDEwNEI0QTVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2X256Y3VpbEptRDFJcEN1 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3VkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZGRi85NDEwNEI0QTVGOEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2 X256Y3VpbEptRDFJcEN1ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtOMDfj8NdVqrP+DbbNFIL97nFPzQVN/svGdKwmHlOYnJk36hsZsgM vQ92AV7GyD65r/Ht4WqArZD61+298LPlJqY1ymv+MI7NWQeWoEJ7e+lad9tA35H3 NHIWJ/1hcW6tt2nTMdNH4yAQkN/uDmn1x0kjipQ+tDDKPHyHqGjj1G4vaEg3gIty sAt/DUvtuK2jHUHlDfcVeMppZL2v84Rka+ZovOyDUovY5WgM5xLq5uNt54Mj8He7 lUgQRFOMM5z8R7POCmMGxrSdmGWW6U2iR0RamV18QLr8zsh58YwZf5AUBoZ6isDQ QJAYDzzpHU0JhqtJAKJs3Pk9jIjyJKV2 -----END CERTIFICATE-----Generated at Sun Jun 22 06:05:57 2025 by rpki-client