$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: tep/W6qI97ZHTfdY/4iCt3dxSTvHlMWo4DStXl42Ti8= Subject key identifier: 27:9A:DB:B3:0D:EF:1F:E8:F6:72:9E:A3:20:FF:8E:C2:31:05:29:22 Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: 017E Signing time: Fri 13 Jun 2025 02:40:09 +0000 Manifest this update: Fri 13 Jun 2025 02:40:08 +0000 Manifest next update: Fri 20 Jun 2025 02:40:08 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: jVHj3rkvKCtIpHaeYMZ01+X2mKZMFLU0YQw+DLZetq8=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: Jun 13 02:40:08 2025 GMT Not After : Jun 20 02:40:08 2025 GMT Subject: CN=684b8f88-9bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9c:d2:c3:76:c2:69:51:60:a1:fb:03:d2:9e: ab:66:08:42:aa:e7:43:64:9c:15:0c:d6:4c:d2:9d: 36:05:f0:8a:df:d6:9f:c9:e5:e1:a0:d7:58:9a:cf: 44:5e:33:50:a4:92:48:26:64:e8:b9:ca:d5:fe:12: 56:01:17:14:9a:ad:a8:15:33:e6:c8:67:25:5f:47: a6:bf:fc:64:d9:68:6e:72:fd:e5:a4:9d:df:e8:fe: 17:b5:c4:1e:c7:7a:19:62:18:42:39:db:59:7e:07: 6e:b9:a2:45:c7:66:8b:c3:ad:b2:12:01:ff:f5:34: d4:05:27:a5:2f:23:4a:7a:f3:e7:3a:e9:72:66:a4: 3f:6e:6c:5e:50:5b:fa:dd:85:4f:c7:a4:88:25:7c: 47:1f:2c:17:46:e5:57:10:0f:f3:3c:d5:49:8b:b3: 85:15:01:10:3c:ca:f0:1d:89:fe:24:4b:29:0c:14: f5:bd:79:cf:e1:fe:3e:f3:d4:1b:ae:6d:1e:a7:04: cc:26:d6:18:64:9f:a5:c4:9a:8c:45:60:f3:14:0d: 80:69:03:a9:09:d8:a3:c5:31:76:21:ff:93:de:ac: 58:91:24:cc:08:70:cd:91:ca:3a:92:90:07:d1:10: b8:c3:e8:29:e6:d6:a2:49:9c:b7:52:c2:cb:d5:fa: 53:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9A:DB:B3:0D:EF:1F:E8:F6:72:9E:A3:20:FF:8E:C2:31:05:29:22 X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:08:3a:55:96:a6:ec:d4:f5:33:d7:ff:8e:d5:a5:bf:c0:11: 0b:f8:3c:ce:80:af:7e:ab:1e:be:4d:33:1f:7a:d6:ae:d2:a6: cb:9c:bc:15:b7:80:d8:66:4d:bf:29:2f:c4:12:e5:02:ee:99: b8:32:e2:eb:b0:1a:e7:6b:ad:41:a3:0f:56:71:c1:43:2c:0c: b6:09:41:13:c3:ae:92:76:53:31:a5:18:20:02:66:87:f9:87: 8f:88:a7:ed:b9:e3:66:ce:d8:ca:37:5d:30:98:b1:3d:70:15: 09:4e:42:9c:d6:7a:ef:c8:33:e9:79:3f:58:e1:60:ac:04:11: 7b:bc:84:ef:cc:ec:bc:81:a8:12:e1:df:18:26:82:57:d0:64: 5a:40:11:ce:6c:70:9f:99:fa:b9:53:5a:8e:20:34:ce:09:0e: 79:7f:e0:a1:07:2c:f2:c8:c7:2b:d8:02:96:d5:1a:f2:8c:6e: de:6d:b7:e0:ca:3a:bf:78:6b:a7:c7:3c:8e:b6:29:57:e5:e3: 55:c2:69:d3:50:a6:37:aa:0e:75:aa:13:5d:f7:70:35:cb:83: fa:9c:e4:c3:5c:31:58:6f:57:c3:c5:59:9e:2a:b7:42:2a:d6: c6:8d:0a:4e:1a:1d:d6:2d:8c:89:3e:50:ad:30:c6:db:65:fc: 3e:13:cd:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjUwNjEzMDI0MDA4WhcNMjUwNjIwMDI0MDA4WjAYMRYwFAYD VQQDEw02ODRiOGY4OC05YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pzSw3bCaVFgofsD0p6rZghCqudDZJwVDNZM0p02BfCK39afyeXhoNdYms9E XjNQpJJIJmToucrV/hJWARcUmq2oFTPmyGclX0emv/xk2Whucv3lpJ3f6P4XtcQe x3oZYhhCOdtZfgduuaJFx2aLw62yEgH/9TTUBSelLyNKevPnOulyZqQ/bmxeUFv6 3YVPx6SIJXxHHywXRuVXEA/zPNVJi7OFFQEQPMrwHYn+JEspDBT1vXnP4f4+89Qb rm0epwTMJtYYZJ+lxJqMRWDzFA2AaQOpCdijxTF2If+T3qxYkSTMCHDNkco6kpAH 0RC4w+gp5taiSZy3UsLL1fpTxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCea27MN 7x/o9nKeoyD/jsIxBSkiMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBCDpVlqbs1PUz1/+O1aW/wBEL+DzOgK9+qx6+TTMfetau0qbLnLwV t4DYZk2/KS/EEuUC7pm4MuLrsBrna61Bow9WccFDLAy2CUETw66SdlMxpRggAmaH +YePiKftueNmztjKN10wmLE9cBUJTkKc1nrvyDPpeT9Y4WCsBBF7vITvzOy8gagS 4d8YJoJX0GRaQBHObHCfmfq5U1qOIDTOCQ55f+ChByzyyMcr2AKW1RryjG7ebbfg yjq/eGunxzyOtilX5eNVwmnTUKY3qg51qhNd93A1y4P6nOTDXDFYb1fDxVmeKrdC KtbGjQpOGh3WLYyJPlCtMMbbZfw+E83V -----END CERTIFICATE-----Generated at Sun Jun 15 04:44:46 2025 by rpki-client