$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft File: wG_wBd4dXvE7qPDCYOljA0paIso.mft (raw, json) Hash identifier: s5r7HCYos5W3+cYwUCf2jHW9F+Pdrfx9BnTqFOYmj2U= Subject key identifier: 6B:95:97:57:1C:14:E7:A0:52:7D:D1:60:06:AE:EF:47:ED:9B:5F:BA Authority key identifier: C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA Certificate issuer: /CN=A91A0C5F/serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft Manifest number: 019D Signing time: Sun 15 Jun 2025 02:37:37 +0000 Manifest this update: Sun 15 Jun 2025 02:37:37 +0000 Manifest next update: Sun 22 Jun 2025 02:37:37 +0000 Files and hashes: 1: wG_wBd4dXvE7qPDCYOljA0paIso.crl (hash: V5w2ffDz3aj8biU9685xIwNM8MXc81aJR0GzadSESmA=) 2: 0D53ED80D2BA11ED8E06CC13C4F9AE02.roa (hash: 8W11lhJNXDI/B18v0915hoFQti7BAopL/ni44iL17Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0C5F, serialNumber=C06FF005DE1D5EF13BA8F0C260E963034A5A22CA Validity Not Before: Jun 15 02:37:37 2025 GMT Not After : Jun 22 02:37:37 2025 GMT Subject: CN=684e31f1-4115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cb:08:82:c0:49:67:09:60:31:ca:d8:3b:aa: 5c:a3:9f:ec:27:98:37:ef:45:90:60:fb:87:52:29: 0c:97:bf:fb:d0:3d:03:a0:ae:56:41:30:b6:9c:37: b2:f9:19:cd:75:8b:1c:53:d7:63:f2:84:a4:bf:b1: 17:ce:79:2b:20:f1:2a:0c:08:92:9a:4a:17:59:43: da:f2:04:22:16:2d:fd:84:54:3a:62:bf:b2:9e:87: 2d:81:7d:bf:35:30:21:ad:87:fa:35:b7:1f:cf:48: ac:4c:91:2a:2a:2e:83:28:65:c4:17:72:18:9c:11: f1:24:ac:ee:b7:a3:c3:d4:7b:59:88:3a:ba:a6:83: 60:93:5a:fa:77:3d:ea:98:1c:ae:a6:9f:90:7b:8e: bd:fb:9e:d0:d7:ae:46:41:c3:47:2a:7b:1c:1b:6b: 7b:e7:9b:49:1b:b2:b6:28:70:9b:6d:f2:2b:6e:e9: 4c:18:ee:d0:ee:2e:2c:6f:1b:17:64:cb:00:99:e1: 77:cf:92:95:a9:09:41:29:00:67:dc:e3:f1:2e:21: 1c:67:05:b1:ef:8b:4f:fa:e5:32:0f:06:e7:fe:ca: e9:24:c0:67:a0:59:35:9f:52:40:c0:a8:94:8b:07: b5:62:72:96:41:cb:44:65:12:3b:6d:7b:f6:60:96: 78:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:95:97:57:1C:14:E7:A0:52:7D:D1:60:06:AE:EF:47:ED:9B:5F:BA X509v3 Authority Key Identifier: keyid:C0:6F:F0:05:DE:1D:5E:F1:3B:A8:F0:C2:60:E9:63:03:4A:5A:22:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wG_wBd4dXvE7qPDCYOljA0paIso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C5F/F7455AAAD2B511EDACC74A1CC4F9AE02/wG_wBd4dXvE7qPDCYOljA0paIso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:33:b6:6b:18:b1:08:07:b0:e4:d4:60:2a:35:fe:57:b4:3a: 34:7e:4d:90:8f:82:46:c1:66:eb:95:92:19:92:e7:12:80:b7: 6d:fc:44:83:a4:9d:11:09:f5:ca:2c:9c:78:91:b9:9d:f6:db: 9b:09:3d:85:23:84:c7:13:3e:58:00:15:04:0c:3b:32:7a:c7: ce:e6:21:68:18:81:c7:6a:ca:27:e3:ba:45:f3:72:4a:56:c0: 9d:f4:a2:77:6e:56:b4:60:5f:2b:0b:c2:fc:85:c8:81:a8:fb: b6:db:bd:a0:7e:c7:a8:c5:6f:cb:d0:ca:0d:6b:dc:90:3d:6d: 6e:f9:db:c9:fa:02:dd:7d:d1:72:06:86:18:40:04:de:97:89: b4:4c:c6:d5:7f:9a:87:e0:af:8d:f6:d5:b9:fa:94:9e:73:be: cd:a7:65:44:cd:90:63:32:38:1c:46:c4:ab:04:39:c6:8a:33: 98:0c:25:39:73:94:0c:20:e7:7c:66:75:0b:66:18:05:2b:96: 61:b3:55:97:dd:60:91:67:51:c5:c8:d6:74:2b:94:e3:14:41: 48:fa:6b:ee:c0:73:54:f9:01:f8:fe:ff:c9:ec:19:06:b9:17: ab:33:04:12:86:39:f2:bf:56:ce:59:58:1b:92:30:9f:54:8f: e5:f4:04:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBDNUYxMTAvBgNVBAUTKEMwNkZGMDA1REUxRDVFRjEzQkE4RjBDMjYwRTk2MzAz NEE1QTIyQ0EwHhcNMjUwNjE1MDIzNzM3WhcNMjUwNjIyMDIzNzM3WjAYMRYwFAYD VQQDEw02ODRlMzFmMS00MTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2csIgsBJZwlgMcrYO6pco5/sJ5g370WQYPuHUikMl7/70D0DoK5WQTC2nDey +RnNdYscU9dj8oSkv7EXznkrIPEqDAiSmkoXWUPa8gQiFi39hFQ6Yr+ynoctgX2/ NTAhrYf6Nbcfz0isTJEqKi6DKGXEF3IYnBHxJKzut6PD1HtZiDq6poNgk1r6dz3q mByupp+Qe469+57Q165GQcNHKnscG2t755tJG7K2KHCbbfIrbulMGO7Q7i4sbxsX ZMsAmeF3z5KVqQlBKQBn3OPxLiEcZwWx74tP+uUyDwbn/srpJMBnoFk1n1JAwKiU iwe1YnKWQctEZRI7bXv2YJZ4CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuVl1cc FOegUn3RYAau70ftm1+6MB8GA1UdIwQYMBaAFMBv8AXeHV7xO6jwwmDpYwNKWiLK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEM1Ri9GNzQ1NUFBQUQy QjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2RTdxUERDWU9sakEwcGFJ c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dHX3dCZDRkWHZFN3FQRENZT2xqQTBwYUlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEM1Ri9GNzQ1NUFBQUQyQjUxMUVEQUNDNzRBMUNDNEY5QUUwMi93R193QmQ0ZFh2 RTdxUERDWU9sakEwcGFJc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9M7ZrGLEIB7Dk1GAqNf5XtDo0fk2Qj4JGwWbrlZIZkucSgLdt/ESD pJ0RCfXKLJx4kbmd9tubCT2FI4THEz5YABUEDDsyesfO5iFoGIHHason47pF83JK VsCd9KJ3bla0YF8rC8L8hciBqPu2272gfseoxW/L0MoNa9yQPW1u+dvJ+gLdfdFy BoYYQATel4m0TMbVf5qH4K+N9tW5+pSec77Np2VEzZBjMjgcRsSrBDnGijOYDCU5 c5QMIOd8ZnULZhgFK5Zhs1WX3WCRZ1HFyNZ0K5TjFEFI+mvuwHNU+QH4/v/J7BkG uRerMwQShjnyv1bOWVgbkjCfVI/l9ASN -----END CERTIFICATE-----Generated at Sun Jun 15 19:16:58 2025 by rpki-client