$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft File: Wr7NjqrTfqV665OfLAsUKXSEH4o.mft (raw, json) Hash identifier: UUQl1ucws9OPvM8x7oP6H3gGYCnR/oOyQdDyyA300Bo= Subject key identifier: 35:C7:50:6C:2F:FC:F4:41:84:C7:F5:BC:1C:8B:11:9A:79:59:3D:E4 Authority key identifier: 5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A Certificate issuer: /CN=A91A5A82/serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft Manifest number: 2A Signing time: Fri 13 Jun 2025 06:39:55 +0000 Manifest this update: Fri 13 Jun 2025 06:39:55 +0000 Manifest next update: Fri 20 Jun 2025 06:39:55 +0000 Files and hashes: 1: Wr7NjqrTfqV665OfLAsUKXSEH4o.crl (hash: TAZhiL+Z6zZgSS1gjT1xddzkdH9QZYGhCPZAX42TArU=) 2: D0B32912090911F0A5348F26C4F9AE02.roa (hash: uW1VF7Kvr3qqb0xY8fd0nDeotf3CK4ccwfdt9+YehUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A82, serialNumber=5ABECD8EAAD37EA57AEB939F2C0B142974841F8A Validity Not Before: Jun 13 06:39:55 2025 GMT Not After : Jun 20 06:39:55 2025 GMT Subject: CN=684bc7bb-63cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:04:8d:d0:26:05:c8:ad:93:6e:6e:69:51: 84:96:e3:38:bc:42:05:ca:ae:01:20:1d:8f:41:72: 64:28:d7:f1:31:3a:2f:6f:d8:86:fd:1c:aa:9f:18: 46:e6:e9:38:c3:6f:74:94:86:c1:84:28:3c:78:40: c0:2c:26:b7:22:50:e7:2a:7d:87:c3:94:c0:6e:28: b9:42:e7:31:f8:ba:6e:4f:94:ba:39:04:96:69:ac: 75:4b:3d:62:61:9a:ab:e0:ef:c5:ae:42:37:e0:6c: 60:79:1a:f4:33:f8:79:70:bb:da:59:8b:dc:29:5c: 93:50:09:9b:d7:67:a8:91:ca:40:3d:4f:63:19:ea: f9:34:01:2d:c2:7a:b6:85:8e:ed:8f:7e:5f:67:ff: a4:c5:8e:78:90:7f:da:cb:0c:67:39:2e:e1:9d:e0: 6f:9e:0b:fc:3c:1c:61:69:2a:84:20:6d:60:6d:86: 44:8a:6a:49:bf:ca:a3:0e:6d:c5:74:d2:29:45:fd: c2:c7:9f:ae:8e:3d:bc:5d:2f:bb:2b:fe:d8:ae:dd: ac:0f:8e:95:a9:93:18:0c:a9:3a:c5:2e:23:f4:15: d0:3d:cf:4f:8d:40:a6:a4:b9:2e:14:18:58:46:c7: aa:38:6a:b6:59:ac:d7:28:56:f8:24:86:24:cb:18: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C7:50:6C:2F:FC:F4:41:84:C7:F5:BC:1C:8B:11:9A:79:59:3D:E4 X509v3 Authority Key Identifier: keyid:5A:BE:CD:8E:AA:D3:7E:A5:7A:EB:93:9F:2C:0B:14:29:74:84:1F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr7NjqrTfqV665OfLAsUKXSEH4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A82/BB98A45E090811F0A493E922C4F9AE02/Wr7NjqrTfqV665OfLAsUKXSEH4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:19:cd:ff:97:a4:a1:94:c8:2f:27:45:c2:07:26:db:33:fe: 56:bf:4d:12:37:db:72:5b:8b:72:80:e9:69:ab:86:5b:1b:74: 86:e8:d7:6a:d4:00:56:9c:35:c6:45:08:31:13:f2:2a:63:3f: a7:15:0a:6f:de:6d:85:bb:6f:4d:a8:7d:81:9f:14:54:0e:95: 4c:32:b9:c0:7a:07:9f:e3:d9:98:29:08:d8:e0:de:14:73:a2: 77:8a:4d:b6:e8:7d:85:db:9f:8e:9c:6f:9c:38:c5:71:1b:13: 2a:f0:78:ed:0b:a7:33:78:cb:db:6e:39:31:82:b2:a5:54:a7: fb:6e:f1:85:75:fc:f1:f7:ad:a4:a8:53:ef:7c:5c:9e:3d:ff: dc:09:a4:f1:c6:a5:00:97:19:0e:bd:be:c7:6f:bc:5f:a6:21: 42:2d:8a:a0:2c:99:05:cc:c9:30:29:3a:2d:c6:0a:08:9a:92: 60:63:82:a6:1c:8b:3c:c5:08:28:46:d0:80:cb:f9:d5:4e:58: df:06:5b:7d:30:7e:a0:4b:8b:45:77:35:72:3c:f4:56:4e:45: 60:d5:15:78:d4:73:0a:7b:1a:42:78:93:3f:e2:cb:c8:5e:9b: f0:90:36:c1:ca:55:33:50:3e:ab:22:a4:6e:f8:2c:d4:9c:39: e0:3b:30:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUE4MjExMC8GA1UEBRMoNUFCRUNEOEVBQUQzN0VBNTdBRUI5MzlGMkMwQjE0Mjk3 NDg0MUY4QTAeFw0yNTA2MTMwNjM5NTVaFw0yNTA2MjAwNjM5NTVaMBgxFjAUBgNV BAMTDTY4NGJjN2JiLTYzY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj/QSN0CYFyK2Tbm5pUYSW4zi8QgXKrgEgHY9BcmQo1/ExOi9v2Ib9HKqfGEbm 6TjDb3SUhsGEKDx4QMAsJrciUOcqfYfDlMBuKLlC5zH4um5PlLo5BJZprHVLPWJh mqvg78WuQjfgbGB5GvQz+Hlwu9pZi9wpXJNQCZvXZ6iRykA9T2MZ6vk0AS3CeraF ju2Pfl9n/6TFjniQf9rLDGc5LuGd4G+eC/w8HGFpKoQgbWBthkSKakm/yqMObcV0 0ilF/cLHn66OPbxdL7sr/tiu3awPjpWpkxgMqTrFLiP0FdA9z0+NQKakuS4UGFhG x6o4arZZrNcoVvgkhiTLGGDxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNcdQbC/8 9EGEx/W8HIsRmnlZPeQwHwYDVR0jBBgwFoAUWr7NjqrTfqV665OfLAsUKXSEH4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1QTgyL0JCOThBNDVFMDkw ODExRjBBNDkzRTkyMkM0RjlBRTAyL1dyN05qcXJUZnFWNjY1T2ZMQXNVS1hTRUg0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3I3TmpxclRmcVY2NjVPZkxBc1VLWFNFSDRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 QTgyL0JCOThBNDVFMDkwODExRjBBNDkzRTkyMkM0RjlBRTAyL1dyN05qcXJUZnFW NjY1T2ZMQXNVS1hTRUg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFUZzf+XpKGUyC8nRcIHJtsz/la/TRI323Jbi3KA6WmrhlsbdIbo12rU AFacNcZFCDET8ipjP6cVCm/ebYW7b02ofYGfFFQOlUwyucB6B5/j2ZgpCNjg3hRz oneKTbbofYXbn46cb5w4xXEbEyrweO0LpzN4y9tuOTGCsqVUp/tu8YV1/PH3raSo U+98XJ49/9wJpPHGpQCXGQ69vsdvvF+mIUItiqAsmQXMyTApOi3GCgiakmBjgqYc izzFCChG0IDL+dVOWN8GW30wfqBLi0V3NXI89FZORWDVFXjUcwp7GkJ4kz/iy8he m/CQNsHKVTNQPqsipG74LNScOeA7MG0= -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:39 2025 by rpki-client