$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: xZG0gFHEEB5W6xLLrxtTqW4pnHgpIrsZx23pQsRgNq8= Subject key identifier: CA:BC:8A:6C:C7:51:37:05:CB:DD:CE:40:EE:24:4B:6E:41:32:A6:61 Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 0398 Signing time: Fri 13 Jun 2025 00:20:16 +0000 Manifest this update: Fri 13 Jun 2025 00:20:16 +0000 Manifest next update: Fri 20 Jun 2025 00:20:16 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: 7xptdAPR5j0nq9HHz4F4l0ME3EDIwHaxCMtHz55bh0c=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Jun 13 00:20:16 2025 GMT Not After : Jun 20 00:20:16 2025 GMT Subject: CN=684b6ec0-34a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:5c:84:cf:39:43:d6:b9:d6:68:11:ed:5e: c1:1d:3a:34:5d:07:74:27:da:b1:4f:c2:a6:ea:64: 3b:0b:2b:14:29:8e:6e:da:70:36:a1:90:89:13:fb: 76:23:2f:bf:dc:71:c3:b0:98:e1:e3:7f:3d:6e:5e: b0:99:52:f8:c0:34:3d:3e:95:8c:73:2d:36:18:f1: 4f:81:f1:93:8d:ec:fc:ff:6b:4e:87:8c:a5:72:82: f3:9f:af:a6:2d:4d:fe:db:94:2a:98:5d:78:b6:c2: 2f:9c:32:77:36:70:90:3c:7b:39:3d:8c:90:3e:28: 1f:96:06:d9:21:45:6c:67:03:ef:53:68:24:c8:04: 71:0f:36:79:57:9e:0e:0c:77:86:3b:5c:8b:85:cc: 57:4c:47:4e:e2:a9:c1:59:24:e6:bf:8a:a7:6e:a6: 0a:87:3d:e1:64:15:12:35:a8:66:86:73:61:00:15: 62:2d:4b:09:51:27:e6:fe:35:a6:f8:3f:67:e6:78: ed:b0:69:17:7a:36:0d:a6:5a:96:05:ff:ca:e0:74: 0f:d8:4a:b3:8a:42:71:4f:b1:6c:db:a7:75:67:1e: 5a:f9:34:d6:37:af:8f:dc:cc:e6:e2:e1:24:54:f1: 47:47:ac:55:92:3a:6f:27:87:14:d7:79:ec:34:0f: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BC:8A:6C:C7:51:37:05:CB:DD:CE:40:EE:24:4B:6E:41:32:A6:61 X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8a:50:f6:9d:8e:d6:a3:dc:17:14:40:df:57:9b:b6:b5:67: 09:9d:da:25:8f:04:fc:6d:bc:9f:6f:27:3f:e8:38:59:00:fe: ec:25:5b:6b:36:5a:b2:2b:1c:20:65:8a:f4:61:b2:4a:2e:93: a3:52:2c:f9:6f:7a:36:93:0d:91:e8:7f:01:b3:d6:32:7b:d3: c8:d0:bd:41:98:25:55:d2:7b:30:c4:cb:1f:7b:36:5a:ab:f8: d9:63:41:67:41:44:27:48:4a:23:d5:67:04:ca:56:a5:ac:76: e9:6d:74:79:5a:f7:83:ab:c1:04:47:81:0b:d7:4c:ca:2d:a1: 06:c2:19:a5:bc:92:1c:80:51:51:d7:f5:73:c2:6c:58:9f:48: b0:15:9c:89:f5:c8:a5:fd:59:38:12:2e:42:e9:22:54:43:f6: 04:88:d2:94:2e:a2:fc:89:02:c3:f7:c4:4c:b6:a2:d8:bd:91: fa:93:b5:dd:44:ea:99:49:6a:0d:97:df:31:5d:32:e6:47:2b: 2f:ed:fd:2a:b7:a3:03:6d:9c:5c:8c:cd:49:37:c9:4e:37:11: b5:c3:10:7e:dd:68:5d:f9:e5:84:0d:1f:ed:3a:a4:8a:73:7f: d4:1a:eb:26:60:eb:05:66:5e:6e:e7:4c:c1:24:11:31:53:4a: af:53:8a:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUwNjEzMDAyMDE2WhcNMjUwNjIwMDAyMDE2WjAYMRYwFAYD VQQDEw02ODRiNmVjMC0zNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz89chM85Q9a51mgR7V7BHTo0XQd0J9qxT8Km6mQ7CysUKY5u2nA2oZCJE/t2 Iy+/3HHDsJjh4389bl6wmVL4wDQ9PpWMcy02GPFPgfGTjez8/2tOh4ylcoLzn6+m LU3+25QqmF14tsIvnDJ3NnCQPHs5PYyQPigflgbZIUVsZwPvU2gkyARxDzZ5V54O DHeGO1yLhcxXTEdO4qnBWSTmv4qnbqYKhz3hZBUSNahmhnNhABViLUsJUSfm/jWm +D9n5njtsGkXejYNplqWBf/K4HQP2EqzikJxT7Fs26d1Zx5a+TTWN6+P3Mzm4uEk VPFHR6xVkjpvJ4cU13nsNA9DWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMq8imzH UTcFy93OQO4kS25BMqZhMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUilD2nY7Wo9wXFEDfV5u2tWcJndoljwT8bbyfbyc/6DhZAP7sJVtr NlqyKxwgZYr0YbJKLpOjUiz5b3o2kw2R6H8Bs9Yye9PI0L1BmCVV0nswxMsfezZa q/jZY0FnQUQnSEoj1WcEylalrHbpbXR5WveDq8EER4EL10zKLaEGwhmlvJIcgFFR 1/VzwmxYn0iwFZyJ9cil/Vk4Ei5C6SJUQ/YEiNKULqL8iQLD98RMtqLYvZH6k7Xd ROqZSWoNl98xXTLmRysv7f0qt6MDbZxcjM1JN8lONxG1wxB+3Whd+eWEDR/tOqSK c3/UGusmYOsFZl5u50zBJBExU0qvU4o7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:11 2025 by rpki-client