$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: AXpPafcIMUXHjLbQYTRmLqIx9etS317Q8mHDJpSgr/0= Subject key identifier: 0A:21:93:BB:C1:4D:23:8C:9C:A6:D5:1D:4B:91:3B:5A:0F:99:35:BB Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0B27 Signing time: Sat 14 Jun 2025 19:03:45 +0000 Manifest this update: Sat 14 Jun 2025 19:03:45 +0000 Manifest next update: Sat 21 Jun 2025 19:03:45 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: VUyRkzgFMEjlO+zHFvxZ0iKdBdlkTM6oajAUyCKMKP8=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: Jun 14 19:03:45 2025 GMT Not After : Jun 21 19:03:45 2025 GMT Subject: CN=684dc791-0fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:37:f9:e2:14:e8:1d:cc:38:91:c5:95:ab: 04:43:93:0b:6a:a8:07:37:f4:ca:c9:f2:cc:3e:2b: fe:3e:0b:30:97:02:69:1b:b1:15:80:c3:5b:db:2e: 8b:a6:9d:a7:fc:df:df:5a:30:17:14:15:4c:52:fc: ce:bd:66:29:37:b5:73:c2:51:02:16:6d:5d:8e:38: 2c:c6:de:0a:10:55:ba:62:5a:d8:93:94:a9:18:67: 1b:1d:f2:6a:ac:19:22:3d:28:91:14:2c:7a:68:bc: c6:64:85:50:99:b4:5b:5a:f4:1f:59:d6:b2:b0:ac: 04:64:3b:60:a7:2c:19:d0:09:8f:f2:ce:86:48:7d: 1e:ec:7d:f5:8c:89:3f:c0:1c:2f:d4:5e:9e:cf:1c: 43:ec:81:d7:ed:17:c7:5f:2e:f7:18:f1:90:bf:1b: b6:f0:03:9c:b4:ea:ba:58:79:a2:01:15:a8:0f:8b: ca:09:1a:04:4e:f8:0e:4c:bc:13:0f:06:0b:de:16: 36:94:db:40:8e:79:a7:10:89:c2:e4:69:4d:da:ac: 19:5e:09:ec:a3:60:56:de:a8:ad:47:15:59:d6:0b: ee:9f:68:a6:ae:d4:64:04:a6:59:a2:f2:2d:76:42: f7:9f:aa:8e:96:99:8e:e4:3f:78:eb:89:d5:e3:ab: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:21:93:BB:C1:4D:23:8C:9C:A6:D5:1D:4B:91:3B:5A:0F:99:35:BB X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b7:8c:67:6f:91:da:11:18:b1:56:68:50:92:9d:fc:6c:8a: 58:e7:99:41:5e:f9:52:39:f2:ca:4c:df:e8:9a:5a:17:0f:e5: 55:c2:d4:33:a2:19:7d:af:cd:7a:21:de:a5:2b:ef:75:9e:0d: ef:85:b1:dc:f3:04:fa:8b:69:0a:01:b0:2d:5c:4b:e0:a1:a9: ee:a0:93:a4:59:7e:3c:f5:2d:42:45:94:b1:4e:6f:5c:74:70: bb:46:80:00:a3:28:9a:25:57:25:c1:33:ea:6a:a0:4d:36:ae: c6:ce:9b:42:db:7e:dc:4d:7c:91:25:2d:24:0e:d6:ae:46:bd: 01:5e:6f:8b:b8:de:a7:78:47:63:9a:48:b3:c6:d1:30:39:0a: af:e9:5d:ec:59:44:23:9d:b8:d3:44:41:e8:7f:71:e1:b6:c9: 55:c5:15:cb:8b:6b:f4:5c:4e:b0:74:fc:15:3d:a8:cc:21:f3: 7f:75:2d:16:4d:de:fc:b1:fa:a3:54:fa:06:b4:68:6a:39:81: 50:a2:c8:3d:44:31:eb:1f:e0:0f:66:10:81:4e:33:e6:b6:38: c9:49:a7:29:ea:15:1b:f6:02:a5:c8:0e:9f:72:b4:99:77:a8: 88:ea:5e:fa:7c:89:a2:ff:fa:3a:37:2a:91:ce:48:e1:3d:7e: 39:4e:42:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwNjE0MTkwMzQ1WhcNMjUwNjIxMTkwMzQ1WjAYMRYwFAYD VQQDEw02ODRkYzc5MS0wZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlA3+eIU6B3MOJHFlasEQ5MLaqgHN/TKyfLMPiv+PgswlwJpG7EVgMNb2y6L pp2n/N/fWjAXFBVMUvzOvWYpN7VzwlECFm1djjgsxt4KEFW6YlrYk5SpGGcbHfJq rBkiPSiRFCx6aLzGZIVQmbRbWvQfWdaysKwEZDtgpywZ0AmP8s6GSH0e7H31jIk/ wBwv1F6ezxxD7IHX7RfHXy73GPGQvxu28AOctOq6WHmiARWoD4vKCRoETvgOTLwT DwYL3hY2lNtAjnmnEInC5GlN2qwZXgnso2BW3qitRxVZ1gvun2imrtRkBKZZovIt dkL3n6qOlpmO5D9464nV46t+oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAohk7vB TSOMnKbVHUuRO1oPmTW7MB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgt4xnb5HaERixVmhQkp38bIpY55lBXvlSOfLKTN/omloXD+VVwtQz ohl9r816Id6lK+91ng3vhbHc8wT6i2kKAbAtXEvgoanuoJOkWX489S1CRZSxTm9c dHC7RoAAoyiaJVclwTPqaqBNNq7GzptC237cTXyRJS0kDtauRr0BXm+LuN6neEdj mkizxtEwOQqv6V3sWUQjnbjTREHof3HhtslVxRXLi2v0XE6wdPwVPajMIfN/dS0W Td78sfqjVPoGtGhqOYFQosg9RDHrH+APZhCBTjPmtjjJSacp6hUb9gKlyA6fcrSZ d6iI6l76fImi//o6NyqRzkjhPX45TkKD -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:39 2025 by rpki-client