$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json) Hash identifier: M97QhunF+z2GsNUYUx751qcz61x0q/WZvrjX5Mlkr5A= Subject key identifier: B1:62:D4:3F:99:D5:FE:6D:8F:8E:E1:C7:0B:37:6D:67:0A:28:A0:4D Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft Manifest number: 17 Signing time: Fri 13 Jun 2025 06:50:58 +0000 Manifest this update: Fri 13 Jun 2025 06:50:57 +0000 Manifest next update: Fri 20 Jun 2025 06:50:57 +0000 Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: qGYAVPJt5Kx91TT1P8jYlll71VMKibGJAgNTllfGGdQ=) 2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=) 3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Validity Not Before: Jun 13 06:50:57 2025 GMT Not After : Jun 20 06:50:57 2025 GMT Subject: CN=684bca51-0432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:73:2b:7a:a3:69:20:46:13:04:f5:b3:93: 7c:44:c3:19:a7:70:7c:10:24:00:49:ef:f1:78:23: 4e:ba:a7:ab:42:2a:32:9a:94:1e:47:4f:5f:bd:72: 1b:96:52:a0:1d:6d:f3:23:16:01:eb:19:ef:15:88: 77:a2:9c:95:32:43:69:4a:c9:2c:7c:a7:f7:d6:9f: 51:cf:cd:7d:57:38:0d:b3:60:2c:85:5a:4e:a5:94: 46:5b:57:6e:b1:5e:6f:8b:79:60:d2:29:83:8d:f1: f1:f1:a9:32:d1:3e:2d:60:7e:b3:4c:2b:74:05:43: 02:29:d1:81:b0:6b:a9:62:c6:7c:ea:29:15:ad:7f: 23:28:60:2f:da:2a:30:94:52:1d:b9:18:55:aa:fa: e5:80:4f:7c:3b:7d:62:e2:a0:e0:84:af:d6:e4:d6: e0:ff:23:c6:03:55:f8:c1:3c:eb:56:e4:4f:5b:ae: 62:b0:d3:4a:dc:5d:41:ae:5a:80:78:3e:d5:84:a7: dc:78:33:47:b3:f7:96:b0:cd:78:bf:03:26:23:73: ab:2c:9a:39:bb:ac:78:5e:6f:14:8d:eb:e2:cf:f4: 4b:df:14:3e:36:ec:46:27:ee:f9:70:96:19:32:99: 34:f5:8a:57:cf:67:9d:71:6f:11:fc:51:87:23:f2: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:D4:3F:99:D5:FE:6D:8F:8E:E1:C7:0B:37:6D:67:0A:28:A0:4D X509v3 Authority Key Identifier: keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dd:b2:56:6d:fb:0a:ef:66:b0:b4:58:9e:6f:23:25:7f:7d: ed:1f:88:0f:10:5f:00:7b:7f:3c:c5:8d:f2:07:82:f9:79:19: a7:3a:e6:6c:4d:8a:81:f5:f2:9d:a9:a6:9e:dd:92:7a:26:64: 4a:f1:62:42:50:08:31:23:36:30:bd:f6:95:a1:3f:20:18:5b: f6:90:c4:c9:54:70:5d:71:7c:0e:27:b5:65:5d:f4:56:81:dd: ab:2c:6e:79:6f:82:8e:96:32:7f:7b:92:15:64:35:e2:72:dc: 76:4b:d2:37:3a:bd:9d:6e:f4:4a:23:16:b3:f0:38:bd:77:78: 35:55:29:71:c5:3f:bc:e3:f6:3e:99:fb:9b:a8:eb:c3:c4:07: eb:0a:4b:3d:c7:18:76:5e:bc:3d:26:fb:3b:78:1d:b0:bf:fd: 48:7e:21:be:50:a5:b3:6d:9b:1d:81:9b:a0:00:cc:2f:c0:f7: d0:2f:dc:dc:69:ea:98:51:53:5a:3c:7f:6b:9b:8d:8e:24:f2: f4:c2:2c:0d:24:65:26:28:ed:b8:19:5e:d3:70:cb:0e:8b:fa: 1a:06:44:ab:d0:4b:45:8a:57:35:93:ad:fd:4f:20:ee:c4:bb: 55:fc:5a:68:e8:e1:83:55:5c:51:d7:a1:e3:02:49:16:d5:25: 0f:55:75:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTJCQzExMC8GA1UEBRMoRDMwOTQwQ0M2RjBDMTAyNEI4NDBCQkI3RDNEODAxMjYz NjA2Q0E1OTAeFw0yNTA2MTMwNjUwNTdaFw0yNTA2MjAwNjUwNTdaMBgxFjAUBgNV BAMTDTY4NGJjYTUxLTA0MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCFnMreqNpIEYTBPWzk3xEwxmncHwQJABJ7/F4I066p6tCKjKalB5HT1+9chuW UqAdbfMjFgHrGe8ViHeinJUyQ2lKySx8p/fWn1HPzX1XOA2zYCyFWk6llEZbV26x Xm+LeWDSKYON8fHxqTLRPi1gfrNMK3QFQwIp0YGwa6lixnzqKRWtfyMoYC/aKjCU Uh25GFWq+uWAT3w7fWLioOCEr9bk1uD/I8YDVfjBPOtW5E9brmKw00rcXUGuWoB4 PtWEp9x4M0ez95awzXi/AyYjc6ssmjm7rHhebxSN6+LP9EvfFD427EYn7vlwlhky mTT1ilfPZ51xbxH8UYcj8nkxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsWLUP5nV /m2PjuHHCzdtZwoooE0wHwYDVR0jBBgwFoAU0wlAzG8MECS4QLu309gBJjYGylkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMkJDLzIxQTk1MzE0MjQ4 QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3ls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHdsQXpHOE1FQ1M0UUx1MzA5Z0JKallHeWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MkJDLzIxQTk1MzE0MjQ4QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNT NFFMdTMwOWdCSmpZR3lsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHvdslZt+wrvZrC0WJ5vIyV/fe0fiA8QXwB7fzzFjfIHgvl5Gac65mxN ioH18p2ppp7dknomZErxYkJQCDEjNjC99pWhPyAYW/aQxMlUcF1xfA4ntWVd9FaB 3assbnlvgo6WMn97khVkNeJy3HZL0jc6vZ1u9EojFrPwOL13eDVVKXHFP7zj9j6Z +5uo68PEB+sKSz3HGHZevD0m+zt4HbC//Uh+Ib5QpbNtmx2Bm6AAzC/A99Av3Nxp 6phRU1o8f2ubjY4k8vTCLA0kZSYo7bgZXtNwyw6L+hoGRKvQS0WKVzWTrf1PIO7E u1X8Wmjo4YNVXFHXoeMCSRbVJQ9VdVA= -----END CERTIFICATE-----Generated at Sat Jun 14 18:03:13 2025 by rpki-client