$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: cRxVCDo4fEZw0TyMNDItMAWYkysNh0KPLktAs4+/x1A= Subject key identifier: E2:82:C6:A8:BE:57:2C:A9:35:F0:AC:BB:B3:8B:B6:EE:C0:30:51:E1 Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 64 Signing time: Thu 19 Jun 2025 05:20:43 +0000 Manifest this update: Thu 19 Jun 2025 05:20:42 +0000 Manifest next update: Thu 26 Jun 2025 05:20:42 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: r2QFBQFVWjcIcpvIdz0tDtXeUo0+Bcbps/bx0yHf0OQ=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: 6QazPAViDz/vpoTr8YQep/2te+BhGM7kc2XHX85fKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Jun 19 05:20:42 2025 GMT Not After : Jun 26 05:20:42 2025 GMT Subject: CN=68539e2b-4a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:c5:62:8f:04:d6:53:c1:b1:7c:d2:2c:2a: 75:eb:f5:1f:95:47:86:db:ae:ef:6a:2c:ec:b3:be: 80:f8:8d:83:9d:c0:65:e9:94:10:30:78:06:c7:b2: 10:c8:a3:29:0a:1f:ca:d1:96:17:e8:36:e2:2d:40: b0:45:f9:f7:2b:e5:5a:f1:30:4f:e6:7d:fc:21:75: 8d:24:21:b8:80:8f:fb:4b:b7:b4:fb:61:54:4c:8d: aa:c1:6c:73:54:7a:98:14:7b:88:7e:a1:34:6b:bf: e0:8d:9d:27:34:af:41:25:c9:67:0f:90:17:d8:28: f0:13:ec:60:c4:d1:b0:1c:01:b8:cf:7b:b9:83:2f: e1:f7:82:dd:c6:cc:95:51:7e:ad:50:e2:cb:43:fe: 98:63:3e:fc:6e:72:4c:66:7c:e6:d5:f8:83:d4:86: c7:49:a2:98:3c:9b:c0:80:70:0d:c8:c1:9f:e8:af: 3e:c4:e5:20:c1:32:ff:7c:3f:1c:66:a3:4b:79:b0: 04:e4:63:37:1a:7c:db:e8:c5:bb:c0:22:17:41:b8: 55:b8:dc:bc:8d:6d:d3:bd:72:2a:f8:78:8c:bf:51: 50:b8:ee:0d:55:a6:d0:d3:f2:20:f7:eb:7b:8c:10: 46:56:6c:55:12:df:0d:f3:77:17:5c:94:df:a4:1e: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:C6:A8:BE:57:2C:A9:35:F0:AC:BB:B3:8B:B6:EE:C0:30:51:E1 X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e6:f0:b1:64:75:c0:4f:64:1c:0f:0a:ba:78:77:f3:3a:f4: d4:b5:63:f8:5b:b0:8b:5c:8b:32:6c:51:fe:22:21:af:70:0d: a3:5a:d2:00:44:2f:13:fc:98:fe:93:af:ca:e4:99:6f:cf:12: a7:3d:98:c8:79:3f:66:ff:1b:90:29:da:02:f6:a9:6b:42:0b: 1d:b0:1b:70:10:a1:2c:45:ac:03:16:c8:09:da:00:34:fd:2e: 78:7b:7f:77:8c:0a:07:e8:b8:cb:40:22:be:23:ce:62:50:1a: 53:65:f6:bb:f8:de:07:2e:99:bd:0c:c2:57:b7:4b:a5:b4:20: 1b:cd:6e:7f:e7:88:45:dd:a1:aa:3b:e1:f9:eb:52:18:a5:c6: 5e:a6:80:d4:67:24:98:30:bc:81:a0:cd:c3:be:be:cc:53:0b: 21:6d:b4:b1:53:dc:32:97:37:c7:d9:bf:f4:da:8e:9e:e3:f1: 91:2d:85:f4:db:30:b8:3b:41:ba:3a:22:dc:36:ba:7f:62:09: c6:2c:c0:48:81:4a:67:21:f8:94:dc:72:db:84:cb:ad:8b:f5: 4d:cd:fd:6a:2f:2f:9f:2f:b3:83:7a:ba:4f:a8:d8:7f:4a:b6: ea:e6:7c:45:10:5d:bf:14:66:47:07:e0:88:dc:59:a3:54:7a: 71:77:21:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTYxODExMC8GA1UEBRMoQzEzQThBQkQ1NzA0M0FBRkE1OEY1ODUzQkUyRkFCQ0E5 RjI2RjBFRDAeFw0yNTA2MTkwNTIwNDJaFw0yNTA2MjYwNTIwNDJaMBgxFjAUBgNV BAMTDTY4NTM5ZTJiLTRhNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3u8VijwTWU8GxfNIsKnXr9R+VR4bbru9qLOyzvoD4jYOdwGXplBAweAbHshDI oykKH8rRlhfoNuItQLBF+fcr5VrxME/mffwhdY0kIbiAj/tLt7T7YVRMjarBbHNU epgUe4h+oTRrv+CNnSc0r0ElyWcPkBfYKPAT7GDE0bAcAbjPe7mDL+H3gt3GzJVR fq1Q4stD/phjPvxuckxmfObV+IPUhsdJopg8m8CAcA3IwZ/orz7E5SDBMv98Pxxm o0t5sATkYzcafNvoxbvAIhdBuFW43LyNbdO9cir4eIy/UVC47g1VptDT8iD363uM EEZWbFUS3w3zdxdclN+kHgXFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4oLGqL5X LKk18Ky7s4u27sAwUeEwHwYDVR0jBBgwFoAUwTqKvVcEOq+lj1hTvi+ryp8m8O0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNjE4L0U2RjY2REQyQkVD MzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThP MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1RxS3ZWY0VPcS1sajFoVHZpLXJ5cDhtOE8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NjE4L0U2RjY2REQyQkVDMzExRUZBRkRDMUQyOUM0RjlBRTAyL3dUcUt2VmNFT3Et bGoxaFR2aS1yeXA4bThPMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbm8LFkdcBPZBwPCrp4d/M69NS1Y/hbsItcizJsUf4iIa9wDaNa0gBE LxP8mP6Tr8rkmW/PEqc9mMh5P2b/G5Ap2gL2qWtCCx2wG3AQoSxFrAMWyAnaADT9 Lnh7f3eMCgfouMtAIr4jzmJQGlNl9rv43gcumb0Mwle3S6W0IBvNbn/niEXdoao7 4fnrUhilxl6mgNRnJJgwvIGgzcO+vsxTCyFttLFT3DKXN8fZv/Tajp7j8ZEthfTb MLg7Qbo6Itw2un9iCcYswEiBSmch+JTcctuEy62L9U3N/WovL58vs4N6uk+o2H9K turmfEUQXb8UZkcH4IjcWaNUenF3IbI= -----END CERTIFICATE-----Generated at Thu Jun 19 09:22:23 2025 by rpki-client