$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: IHfYqKXflVMq7z21LfR1haCU3S64YMCaSSyrp+lkswU= Subject key identifier: DC:FF:9A:B7:FC:D4:1B:10:09:3F:EE:66:E3:46:DF:9C:E8:80:63:5C Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 0269 Signing time: Tue 17 Jun 2025 01:19:11 +0000 Manifest this update: Tue 17 Jun 2025 01:19:10 +0000 Manifest next update: Tue 24 Jun 2025 01:19:10 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: jIi/gO5zpy/iFFpftCuAAx3aEH5cww8iHiV7jqBSNlw=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Jun 17 01:19:10 2025 GMT Not After : Jun 24 01:19:10 2025 GMT Subject: CN=6850c28f-571c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:fd:83:82:ae:61:fa:da:7f:8f:0e:ca:bc: d6:95:25:12:f5:71:ed:02:86:57:30:09:8f:bc:e0: 28:28:8c:e7:c3:1e:9d:58:2b:d1:19:dc:35:6f:c2: 0c:e2:a4:e1:55:d9:59:0c:d9:94:f2:2e:9c:d2:ca: cb:f6:d8:3d:6f:4d:34:c7:59:59:c0:7e:3a:ca:14: 7c:0e:11:65:27:3f:8a:fb:2c:b0:8a:61:62:12:7a: 58:ab:bf:77:69:19:0a:7e:62:4a:56:04:0c:71:7a: 0b:38:73:e2:ad:76:9d:da:9f:a4:bb:a7:b9:d5:7e: 5c:11:2d:f6:fd:47:37:d9:9c:09:d4:e3:7f:84:21: af:ef:97:d4:4b:93:1a:41:19:94:e4:8b:3b:b3:7e: ce:17:a1:9f:a3:81:3f:04:46:49:e0:78:1c:46:58: e0:85:16:a7:fd:8e:9c:dd:8e:cd:de:15:5a:ce:af: 94:fe:c2:9e:46:4b:21:dd:89:3d:df:f3:55:eb:64: 3b:1b:c9:a7:5c:64:1c:59:17:00:a7:6d:be:fd:c3: 40:1e:6c:35:4a:86:bf:2c:f2:ce:b3:ed:74:07:be: f7:7f:01:a3:a2:72:f2:46:d6:01:0e:b1:cc:ae:a5: 86:c6:03:2d:2f:56:66:49:35:b5:67:e0:81:99:5a: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FF:9A:B7:FC:D4:1B:10:09:3F:EE:66:E3:46:DF:9C:E8:80:63:5C X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cf:a9:c4:ba:90:1a:38:ad:25:7c:3e:4b:8a:f1:e4:99:30: e8:2b:12:64:9e:e0:d3:99:35:d8:54:ee:6d:09:d7:33:2a:2c: e5:8b:53:f0:c0:83:6b:b6:2f:d3:5f:b9:2f:04:1f:5e:51:b3: 9d:e7:ec:10:03:af:6c:1b:00:f3:cb:c4:48:18:b4:b9:f3:32: bf:fc:34:81:33:93:54:2f:aa:86:56:87:63:55:cb:dc:c6:0e: 1f:15:6c:89:5f:41:72:7a:a3:61:3d:d7:77:44:22:ca:cd:03: 95:40:72:3a:10:6b:62:ba:78:61:46:d6:08:8e:f7:af:09:31: 8e:67:c7:db:ed:6d:df:c3:dd:a9:25:c3:3c:17:06:61:76:b8: 88:3b:e3:93:e8:13:a0:36:53:d4:ac:df:a8:00:1d:79:cc:b8: 58:98:e7:b3:2b:c0:fe:81:3b:56:17:e9:3c:e5:00:93:0d:49: dc:6c:1f:68:95:31:e2:00:6f:a6:7b:4b:cc:12:24:1d:3d:33: 48:4a:0a:ba:91:46:e9:18:92:34:ca:e1:bc:36:14:d7:57:ae: 52:a8:03:e8:d6:0a:c5:d9:d0:56:95:9b:33:dd:3c:ac:e6:12: a3:56:51:ac:48:2d:c8:44:a4:ed:1c:48:b0:57:2d:84:42:93: 31:65:f7:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjUwNjE3MDExOTEwWhcNMjUwNjI0MDExOTEwWjAYMRYwFAYD VQQDEw02ODUwYzI4Zi01NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl39g4KuYfraf48OyrzWlSUS9XHtAoZXMAmPvOAoKIznwx6dWCvRGdw1b8IM 4qThVdlZDNmU8i6c0srL9tg9b000x1lZwH46yhR8DhFlJz+K+yywimFiEnpYq793 aRkKfmJKVgQMcXoLOHPirXad2p+ku6e51X5cES32/Uc32ZwJ1ON/hCGv75fUS5Ma QRmU5Is7s37OF6Gfo4E/BEZJ4HgcRljghRan/Y6c3Y7N3hVazq+U/sKeRksh3Yk9 3/NV62Q7G8mnXGQcWRcAp22+/cNAHmw1Soa/LPLOs+10B773fwGjonLyRtYBDrHM rqWGxgMtL1ZmSTW1Z+CBmVrYVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz/mrf8 1BsQCT/uZuNG35zogGNcMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6z6nEupAaOK0lfD5LivHkmTDoKxJknuDTmTXYVO5tCdczKizli1Pw wINrti/TX7kvBB9eUbOd5+wQA69sGwDzy8RIGLS58zK//DSBM5NUL6qGVodjVcvc xg4fFWyJX0FyeqNhPdd3RCLKzQOVQHI6EGtiunhhRtYIjvevCTGOZ8fb7W3fw92p JcM8FwZhdriIO+OT6BOgNlPUrN+oAB15zLhYmOezK8D+gTtWF+k85QCTDUncbB9o lTHiAG+me0vMEiQdPTNISgq6kUbpGJI0yuG8NhTXV65SqAPo1grF2dBWlZsz3Tys 5hKjVlGsSC3IRKTtHEiwVy2EQpMxZfcc -----END CERTIFICATE-----Generated at Wed Jun 18 16:05:30 2025 by rpki-client