$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: o3Bi0T8P0et3O4qYR2oEfcxt11e/mSScNUQw0nK82Og= Subject key identifier: 48:6F:47:A2:6E:B6:50:FC:10:ED:8B:84:02:48:E9:06:FE:B4:FE:2A Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 34AD Signing time: Mon 16 Jun 2025 15:15:37 +0000 Manifest this update: Mon 16 Jun 2025 15:15:36 +0000 Manifest next update: Mon 23 Jun 2025 15:15:36 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: Ek4qXhGQ//lFJINl1m3jNRPugCti09FqtEowSgy7VNs=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13509 (0x34c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Jun 16 15:15:36 2025 GMT Not After : Jun 23 15:15:36 2025 GMT Subject: CN=68503519-38c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:ac:67:43:af:03:aa:f1:3a:0a:84:1d:37: 8f:9a:86:fa:a5:71:95:a6:df:23:62:6c:e8:9c:a3: e2:35:dd:f4:f5:9a:69:f5:2f:6a:b8:17:32:d3:7e: 8c:dd:d0:15:3a:a6:e1:c2:d7:5f:66:bc:c6:37:dc: 03:8f:e7:c3:c6:a9:90:11:22:1b:d3:3f:b2:13:ad: d9:8f:47:7a:45:d5:f8:d9:08:60:62:00:e2:39:38: 9a:9c:dd:71:68:88:84:40:4e:20:8a:97:46:e7:e2: 76:f3:86:56:20:68:13:6d:5b:36:86:e1:f9:43:22: d4:88:49:dc:8a:76:f5:2c:0a:42:10:6f:47:b2:7d: 81:7a:27:f5:80:41:1a:dc:73:f7:5d:b5:41:16:96: 1b:ae:a8:f5:ee:19:b6:8a:c9:5d:c9:20:f3:07:de: a2:2b:0e:10:40:7a:57:67:cf:d6:57:1c:02:ee:11: a0:53:97:9f:75:40:ac:b0:0f:28:d2:22:fa:a3:dd: 37:b8:b3:37:4c:a8:bd:47:04:b6:50:14:f0:89:94: 86:c0:e3:76:8b:71:41:9c:10:70:e8:0e:c0:fd:6d: 28:88:10:e7:c0:58:be:00:45:71:f8:99:7e:7a:b2: fa:ef:e5:1b:7b:7c:a2:12:43:d6:6b:c8:d7:ce:72: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6F:47:A2:6E:B6:50:FC:10:ED:8B:84:02:48:E9:06:FE:B4:FE:2A X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0f:5a:80:48:8f:bb:d5:ac:43:2d:f4:9d:1d:2b:ff:3a:2b: 51:22:bd:c9:fb:57:9d:4c:ab:a6:65:fa:f0:46:54:29:f8:a4: 4e:90:21:09:8c:21:ea:6c:35:c6:f7:e0:e4:2e:f0:8e:7f:c4: 83:b3:f5:27:df:97:9e:1f:39:a7:73:8a:3d:a0:db:c8:e7:5d: a2:56:a1:72:f4:7b:ac:af:02:99:d1:bc:b6:f5:fa:16:1c:b7: 19:60:bd:5a:c8:42:8b:2e:1d:cd:6e:56:43:72:e2:df:69:c7: b0:e2:c3:16:c7:16:f3:08:95:35:70:4b:e9:23:3b:4e:2c:ab: f6:dd:f4:f5:79:51:69:42:7f:89:ea:34:7a:80:ae:2b:71:fe: 4c:11:94:69:14:9a:76:bb:66:0b:45:2d:cc:e1:f0:9d:44:f6: b0:aa:54:cb:4c:64:bf:08:25:9c:0c:a0:04:51:df:98:ae:91: 2a:bc:da:74:d3:ce:76:39:88:b3:a6:45:f8:24:38:77:fb:51: 6c:fb:ea:2c:48:5b:f2:0a:01:c2:42:d1:df:f3:85:26:8f:91: bf:fa:0f:7e:ea:2d:27:76:6c:4c:5b:a4:93:86:47:d7:9d:83: c7:03:27:f9:62:45:f6:24:d7:1a:98:64:b5:67:da:f5:58:2e: a2:0d:4b:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwNjE2MTUxNTM2WhcNMjUwNjIzMTUxNTM2WjAYMRYwFAYD VQQDEw02ODUwMzUxOS0zOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumusZ0OvA6rxOgqEHTePmob6pXGVpt8jYmzonKPiNd309Zpp9S9quBcy036M 3dAVOqbhwtdfZrzGN9wDj+fDxqmQESIb0z+yE63Zj0d6RdX42QhgYgDiOTianN1x aIiEQE4gipdG5+J284ZWIGgTbVs2huH5QyLUiEncinb1LApCEG9Hsn2Beif1gEEa 3HP3XbVBFpYbrqj17hm2isldySDzB96iKw4QQHpXZ8/WVxwC7hGgU5efdUCssA8o 0iL6o903uLM3TKi9RwS2UBTwiZSGwON2i3FBnBBw6A7A/W0oiBDnwFi+AEVx+Jl+ erL67+Ube3yiEkPWa8jXznLvdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhvR6Ju tlD8EO2LhAJI6Qb+tP4qMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQD1qASI+71axDLfSdHSv/OitRIr3J+1edTKumZfrwRlQp+KROkCEJ jCHqbDXG9+DkLvCOf8SDs/Un35eeHzmnc4o9oNvI512iVqFy9HusrwKZ0by29foW HLcZYL1ayEKLLh3NblZDcuLfacew4sMWxxbzCJU1cEvpIztOLKv23fT1eVFpQn+J 6jR6gK4rcf5MEZRpFJp2u2YLRS3M4fCdRPawqlTLTGS/CCWcDKAEUd+YrpEqvNp0 0852OYizpkX4JDh3+1Fs++osSFvyCgHCQtHf84Umj5G/+g9+6i0ndmxMW6SThkfX nYPHAyf5YkX2JNcamGS1Z9r1WC6iDUvr -----END CERTIFICATE-----Generated at Tue Jun 17 01:24:01 2025 by rpki-client